I've read of several vulnerabilties w.r.t. blockchain technology, e.g., Bitcoin, that allowed hackers to steal currency tokens.

From my understanding all these "hacks" have resulted from either spoofing or websites being compromised.

Have there been found any vulnerabilities deep within the EVM or the Ethereum Protocol that allowed hackers to take over accounts and resulted in hotfixes?


There were many yelling articles about Ethereum hacks. But so far they were all because of the vulnerabilities in 3-d party created contracts or unsecure currency exchanger websites.
So, I can assume the answer is no. Or not yet.

List of "Ethereum" hacks

last update: 21.12.2017

  • So, there haven't been any "hotfixes" to the EVM or Ethereum Protocol that addressed security issues? – Shuzheng Dec 20 '17 at 14:03
  • 1
    I think to complete the answer you should reference which 3rd party contracts you're referring to and how it was at the contract level and not EVM level. – ʰᵈˑ Dec 20 '17 at 14:03
  • 1
    @Shuzheng last few hotfixes I've found were made in the fall 2016, "hotfix release to mitigate last weeks DoS attacks" go-ethereum – Roman Frolov Dec 20 '17 at 14:19
  • But these are fixes to the client implementation itself. Has it been necessary to change the specification of the EVM or the Ethereum Protocol due to “bugs” (mistakes)? – Shuzheng Dec 20 '17 at 19:29
  • 1
    EIP150 was a change of protocol to fix the gas price of some opcodes. There were DoS attacks that used cheap opcodes that caused lot of IO access, slowing down generation of new blocks and verification of transactions. – Ismael Dec 22 '17 at 1:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.