360 blockchain Yan

The explosive blockchain gives people unlimited fantasy. When many people think about the benefits of blockchain, one of its problems has aroused people's concern, that is, security. Some time ago, 360 discovered a high-risk vulnerability in the blockchain, which can control all the nodes on the EOS. We all know that 51% of the nodes in the blockchain can tamper with the data, let alone 100%. Let's see what's going on

Original title: China's blockchain instry market status and development trend analysis in 2019, widely used to accelerate the construction of Digital China. Basically, a relatively mature instrial chain has been formed. With the promotion of national policies and the increasing demand of downstream application fields, the market scale of China's blockchain instry is constantly developing, the regional concentration is high, and the instrial cluster effect is obvious. With the increasing maturity of blockchain technology, the blockchain instry is entering the 3.0 stage as a whole. It has a good performance in finance, logistics, right protection and other fields, and has made great contributions to promoting China's digital construction and accelerating the process of Digital China

instrial chain analysis of blockchain instry: there are many downstream application fields with huge development potential

from the perspective of instrial chain, China's blockchain instry includes upstream hardware, technology and infrastructure; Midstream blockchain application and technical services

application fields of downstream blockchain. The upstream hardware, technology and infrastructure mainly provide the necessary hardware, technology and infrastructure support for blockchain application. The hardware equipment includes mining machinery, ore pool, chip manufacturer, etc; General technologies include distributed storage, decentralized transaction, data service, distributed computing and other related technologies

the downstream application fields include the combination of application blockchain technology and existing instries, mainly including financial instry, logistics instry, right protection, medical health, instrial energy and many other fields. As an emerging technology, blockchain has many downstream application fields and great development potential

the application and service of midstream blockchain includes the construction of infrastructure platform and the provision of technical service support. The construction of infrastructure platform is divided into general infrastructure chain and vertical domain infrastructure chain; Technical service support includes technical support and service support. Similar to upstream technology, technical support is responsible for providing buyers with a series of technical support based on blockchain procts, such as blockchain security protection; Service support includes a series of services such as digital asset trading place, digital asset storage, media community, etc

instry chain analysis of blockchain instry Most of 360 and other enterprises use their own financial companies to apply blockchain technology to launch a new mode of blockchain + finance and broaden the application scenarios of blockchain technology

With the continuous development of China's blockchain technology and the continuous expansion of blockchain application fields, China's blockchain instry will become the forefront of global technology development and open up a new international competition track in the future

2. Blockchain has become a new hot spot for innovation and entrepreneurship, and technology integration will expand new application space

3. Blockchain will be widely implemented in the real economy in the next three years and become an important support for the construction of Digital China

4. Blockchain creates a new platform economy and opens a new era of sharing economy

5. Blockchain accelerates the process of "credible digitization" and drives finance to "move from virtual to real" to serve the real economy

The blockchain supervision and standard system will be further improved, and the instrial development foundation will continue to be consolidated

Recently, Vulcan team of 360 company found a series of high-risk security vulnerabilities in EOS, a blockchain platform. It is verified that some of the vulnerabilities can remotely execute arbitrary code on EOS nodes, that is, they can directly control and take over all nodes running on EOS through remote attacks

EOS super node attack: the virtual currency transaction is completely controlled

in the attack, the attacker will construct and publish a smart contract containing malicious code, and the EOS super node will execute the malicious contract and trigger the security vulnerability. The attacker then uses the super node to pack the malicious contract into a new block, resulting in the remote control of all nodes in the network (alternative super node, exchange recharge withdrawal node, digital currency wallet server node, etc.)

because the system of the node has been completely controlled, the attacker can "do whatever he wants", such as stealing the key of the EOS super node and controlling the virtual currency transaction of the EOS network; Obtain other financial and privacy data in the participating node system of EOS network, such as digital currency in the exchange, user key stored in the wallet, key user information and privacy data, etc

What's more, an attacker can turn a node in the EOS network into a member of a botnet, launch a network attack, or become a free "miner" to extract other digital currency

source: Science and Technology News