Bitcoin Siphoning Malware Infects Event-Stream

Bitcoin Siphoning Malware Infects Event-Stream

Malicious code was found in open-source Copay and BitPay. Now fixed, but stayed unnoticed for a while

Node.js is a widely used JavaScript backend framework for web applications. Node's functionality can be extended by adding various modules and libraries.

EventStream is one of the libraries that adds a lot of useful functions to Node.js. It has 2 million downloads and is used by Fortune 500 companies and many startups, with Copay and BitPay wallets being two of those companies.

EventStream is an open source code library and for a long time has been maintained by github user dominictarr.

At one point Dominic got tired and passed the publish rights to a random person who emailed him and asked him to give him the rights.

The person updated the library to include more modules that contained malware. The malware was designed to target cryptocurrency wallets that would include it into their production code. This backdoor would allow the person to siphon crypto out of user wallets.

The vulnerability went undetected for several weeks. Fortunately, no funds were stolen and the backdoor was eliminated.

For those interested in more details regarding the incident, you can access the comprehensive article entitled 'Widely used open source software contained bitcoin-stealing backdoor.'

Related news

Bitcoin Contributes 95% Of BitPay’s Business, CEO Confirms

Bitcoin payment processor BitPay conducts almost all its business using Bitcoin (BTC), its CEO has revealed in a marked U-turn on previous claims. BitPay Drops Bitcoin Bashing Speaking during a recent panel, Stephen Pair discussed the recent hard fork activity around the Bitcoin blockchain as a result of the Bitcoin Cash (BCH) split last November. “95 percent of our payments are done in Bitcoin,” he said quoted on social media by commentator StopAndDecrypt. While the figure itself is unsurprisingly, Pair’s advocacy contrasts dramatically with comments he made just two years ago. As StopAndDecrypt noted uploading videos of two appearances, at the Consensus conference in May 2017, BitPay appeared to want to abandon Bitcoin altogether. At the time, the likely alternative was already on the horizon; Bitcoin Cash launched two months later. “At BitPay, the Bitcoin blockchain has stopped working for us,” Pair said. …We have a couple of options: one is we start using a fork of Bitcoin, the second option is we start using a fork of Bitcoin and the third option is we start using a fork of Bitcoin. Big change from 2 years ago: "I don't really see this as a question of forcing a minority to do something they don't want to do, it's more allowing people the option to go off on a fork. At Bitpay the Bitcoin (BTC) blockchain has stopped working for us." 95% of payments in BTC. — StopAndDecrypt (@StopAndDecrypt) February 19, 2019 Easy Come, Easy Go? Pair added that BitPay’s “bread and butter” two years ago was payments between $5000 and $20,000. As Bitcoinist has reported, fees for the Bitcoin network have decreased dramatically since the advent of BCH, leading to the suggestion from StopAndDecrypt that Pair’s aversion to the BTC network was due to its then higher transaction cost. Fast forward to this year, however, and the company is actively discouraging alternative cryptocurrencies from asking for its support. Pair continued: Over the years the Dogecoin fanatics… the Litecoin fanatics came after us; they all tried to bend social media to create this perception that their coin is the one and… is going to beat Bitcoin, and therefore you should accept it. On the top of BCH, he said BitPay would continue to support the legacy fork, Bitcoin ABC, over Bitcoin SV. “That’s not changing,” he commented. In January, major Bitcoin SV proponent Calvin Ayre publicly said he had stopped his businesses from using BitPay. BitPay has faced an increasing backlash over its business practices over the last year, with rival developers intent on putting it out of business using open source alternatives for businesses wishing to accept Bitcoin. 2018 became the company’s highest grossing year despite the Bitcoin price market, with revenue reaching $1 billion. What do you think about Stephen Pair’s comments on Bitcoin? Let us know in the comments below! Images courtesy of Shutterstock The post Bitcoin Contributes 95% Of BitPay’s Business, CEO Confirms appeared first on

Hot news

By continuing to browse, you agree to the use of cookies. Read Privacy Policy to know more or withdraw your consent.