Besu披露CertiK发现的五个漏洞，最新安全更新已修复

TheNewsCryptoPublished on 2026-08-21Last updated on 2026-08-21

Abstract

以太坊客户端Besu披露了由区块链安全公司CertiK发现的五个安全漏洞，这些漏洞均已在7月27日发布的26.7.1版本中修复。漏洞严重程度从“轻微”到“严重”不等，涉及区块公告处理、未来高度共识提案缓冲、WebSocket订阅和JSON-RPC过滤器创建。在特定配置下，这些问题可能耗尽节点内存或线程资源，影响节点可用性或共识处理。 Besu在8月14日公开技术细节前已修复漏洞，并敦促节点运营商升级到已打补丁的版本。CertiK通过其Chain Scan对抗性测试方法在私有多节点网络上进行了独立研究，评估了可用性和资源耗尽风险。 26.7.1版本针对其中两个受影响领域新增了控制措施，包括可配置的JSON-RPC过滤器最大数量与超时时间，以及对活跃WebSocket订阅的限制。Besu的安全公告现已向操作者和开发者公开了这五个发现及其修复详情。

以太坊客户端Besu披露了区块链安全公司CertiK发现的五个安全漏洞的详细信息，所有漏洞均在7月27日发布的26.7.1版本中得以修复。Besu是一款用于公共和私有网络的开源以太坊执行客户端。

这些问题的严重程度从轻微到严重不等，其技术细节在8月14日公开之前已得到处理。Besu敦促节点运营商升级到已打补丁的版本，让他们在漏洞披露之前有时间更新系统。

Besu发布了四份安全公告，涵盖了这五项发现。这些漏洞涉及区块公告处理、未来高度共识提案缓冲、WebSocket订阅和JSON-RPC过滤器创建。在某些配置下，这些问题可能会耗尽节点内存或线程容量，可能影响节点可用性或共识处理。

Besu在版本26.7.1中新增控制项

这些漏洞是通过CertiK使用其Chain Scan对抗性测试方法进行的独立研究发现的。研究人员在一个私有的多节点网络上测试了Besu，并在对等网络、HTTP RPC、WebSocket RPC和面向共识的接口上引入了受控故障，同时评估了可用性和资源耗尽风险。

26.7.1版本针对两个受影响领域引入了新的控制措施。Besu为活动的JSON-RPC过滤器添加了可配置的最大数量限制和可配置的过滤器超时设置，同时对活动的WebSocket订阅数量也进行了限制。发布说明中还感谢了CertiK和EF Security的负责任披露。

Besu的公告现在为运营商和开发者提供了这五项发现及其修复措施的公开详细信息。对于CertiK发现的这些漏洞，版本26.7.1仍然是已打补丁的发行版本。

标签CertiK以太坊安全

Trending Cryptos

ctr
CitreaCTR
wstusdt
wrapped stUSDTWSTUSDT
apr
CapricornAPR
ctx
Cryptex FinanceCTX
audio
AudiusAUDIO
comp
CompoundCOMP
mantra
MantraMANTRA
waxl
AxelarWAXL
bill
Billions NetworkBILL
pyth
PYTH (Pyth)PYTH
rune
THORChainRUNE
brev
BrevisBREV
zrx
ZRX（0X）ZRX
cake
PancakeSwapCAKE
dos
DAPPOSDOS

Related Questions

QBesu修复的这五个安全漏洞是由哪个公司发现的？

A这五个安全漏洞是由区块链安全公司CertiK发现的。

QBesu在哪个版本中修复了这些漏洞？

A这些漏洞在Besu于7月27日发布的版本26.7.1中得到了修复。

Q这些安全漏洞的严重程度如何？

A这些漏洞的严重程度从“次要”到“严重”不等。

Q这些漏洞主要影响了Besu节点的哪些方面？

A这些漏洞在特定配置下，可能会耗尽节点的内存或线程容量，从而可能影响节点的可用性或共识处理。

QBesu 26.7.1版本针对漏洞引入了哪些新的控制措施？

A26.7.1版本为两个受影响的领域引入了新的控制措施，包括：为活跃的JSON-RPC过滤器增加了可配置的最大数量限制和可配置的超时时间，并对活跃的WebSocket订阅进行了数量限制。

Related Reads

Attention: Large-Scale Token Unlocks Expected in 16 Altcoins! Here is the Daily and Hourly List

The cryptocurrency market experienced a significant rally last week, with Bitcoin rising 22%, Ethereum 30%, and XRP 51%. This growth was primarily driven by the US Treasury's decision to increase bond buybacks to ease upward pressure on interest rates. However, the market faces a wave of substantial token unlocks across 16 altcoins this week (all times UTC+3). Notable unlocks include: * **August 25:** Unlocks for Plaasma (XPL), Humanity (H), ChainOpera AI (COAI), Perle Labs (PRL), Iris (IRYS), and OVERTAKE (TAKE). The largest by percentage of market cap is Humanity (H) at 14.71%. * **August 26:** Major unlocks for GateToken (GT) worth $51.8M and Huma Finance (HUMA) representing 26.47% of its market cap. * **August 27:** AEON (AEON) unlock worth 26.11% of its market cap. * **August 28:** Unlocks for Grass, Corn, and Sign. Sign's unlock is notable at 13.02% of its market cap. * **August 29:** Unlocks for Falcon Finance (FF) and Midnight (NIGHT). * **August 30:** Unlock for BSquared Network (B2). Investors are advised to monitor these events as the release of large token volumes can impact market prices. This is not investment advice.

cryptonews.ru2h ago

Attention: Large-Scale Token Unlocks Expected in 16 Altcoins! Here is the Daily and Hourly List

cryptonews.ru2h ago

The Countdown Has Begun for the BNB Chain Network Update Named Pasteur

The countdown has begun for the BNB Chain's upcoming hard fork, named "Pasteur," scheduled for the mainnet on August 25, 2026. Unlike previous updates focused on speed, Pasteur aims for comprehensive enhancements centered on security and network efficiency. It incorporates three key proposals under BEP-673: BEP-682 strengthens bridge validation, BEP-695 ensures proper validator key rotation to prevent undue power concentration, and BEP-675 increases block size while maintaining speed, allowing blocks to hold more transactions. These improvements are designed to enhance the security of the bridge, staking, and governance, while also boosting network capacity. The hard fork is currently active on the BSC testnet, and node operators are urged to upgrade to version 1.7.7 before the mainnet activation. This update aligns with BNB Chain's goal to double mainnet throughput and achieve a tenfold performance improvement in the latter half of the year.

cryptonews.ru2h ago

The Countdown Has Begun for the BNB Chain Network Update Named Pasteur

cryptonews.ru2h ago

Why Crypto Farms in Georgia Have Become a Subject of Dispute Over the Energy System

Former National Bank president and opposition politician Roman Gotsiridze claims cryptocurrency mining farms in Georgia are straining the national energy system while contributing almost nothing to the state budget, operating on tax and electricity tariff privileges. He states the farms consume about 6% of domestically generated electricity, or roughly 1 billion kilowatt-hours annually—equivalent to the consumption of Batumi—maintaining a constant load on the grid linked to frequent infrastructure failures. While not advocating a blanket ban, Gotsiridze argues mining should operate under general business conditions, competing and paying taxes. He alleges the largest farm is linked to Bidzina Ivanishvili's ruling party clan and benefits from unjustified preferential treatment. His core demand is an immediate ban on cryptocurrency mining in free industrial zones, removing its privileged status, as the sector consumes vast energy with minimal fiscal return for Georgia.

cryptonews.ru2h ago

Why Crypto Farms in Georgia Have Become a Subject of Dispute Over the Energy System

cryptonews.ru2h ago

Fed Research: Crypto Investors Driven by Beliefs, Returns Change Their Decisions

A new working paper from the Federal Reserve Bank of Cleveland provides a novel explanation for cryptocurrency's divergence from traditional financial assets. It finds that American crypto investors are distinguished not by demographics or risk tolerance alone, but by their radically different beliefs about future returns. This divergence in expectations better explains who owns crypto than factors like age or income, a reversal of the pattern seen with stocks or bonds. The research, based on surveys of up to 25,000 US households, shows crypto owners expected an average 22% annual return, compared to just 7% for non-owners. A one-percentage-point increase in an individual's expected return was linked to a 0.8-point rise in ownership likelihood. A randomized experiment revealed that simply showing information about Bitcoin's past 12-month performance increased respondents' desired crypto portfolio share by about 47% and spurred subsequent purchases, primarily among those who previously felt uninformed. The study suggests this dynamic—where past gains attract new buyers, pushing prices higher and reinforcing bullish beliefs—could fuel speculative bubbles. It also indicates crypto wealth gains are treated more like "gambling winnings" than permanent income, boosting purchases of durable goods but not everyday spending. The broader conclusion is that crypto volatility stems partly from investor disagreement and learning, not just market fundamentals. With widespread misunderstanding and shifting expectations driven by performance data, price swings are likely to remain a defining feature of the asset class. Future retail demand may depend not just on Bitcoin's price, but on what information investors receive about its past performance.

cryptonews.ru2h ago

Fed Research: Crypto Investors Driven by Beliefs, Returns Change Their Decisions

cryptonews.ru2h ago

Bitcoin Fork ECX, Created by Paul Sztorc, Surpasses 25,000 Blocks in Just 13 Hours

The ECX Bitcoin fork, created by Drivechain developer Paul Sztorc, launched its alpha phase at Bitcoin block height 963,648. Remarkably, the network surpassed 25,000 blocks in just 13 hours due to its initial difficulty being set to 1, mirroring Bitcoin's 2009 launch. By Sunday morning, August 23, the difficulty had already skyrocketed to 16.78 million after several adjustments, with miners contributing a hashrate of 3.53 PH/s to the chain. This level of support from multiple mining pools starkly contrasts with the failed BIP-110 event earlier in the month, which lacked miner backing. While ECX has attracted real mining power and has a small number of wallets, the ecash (ECX) token currently has no established market value and is not yet listed on exchanges. Its economic viability will face a significant test after the initial mining surge subsides and block rewards diminish, especially during the long wait until the network's final phase is scheduled for launch on October 31, 2026. The early activity demonstrates technical feasibility, but sustained growth will depend on whether it can maintain miner interest and attract listings from wallets and exchanges in the absence of a tradable price.

cryptonews.ru2h ago

Bitcoin Fork ECX, Created by Paul Sztorc, Surpasses 25,000 Blocks in Just 13 Hours

cryptonews.ru2h ago

Trading

Spot

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of ETH (ETH) are presented below.

活动图片

Top Questions