Frozen Parity funds: new info

According to the new statement of well-known Ethereum wallet, the amount of funds blocked on wallets is estimated at $164M
14 November   332

According to a new statement of Parity technologies, they are working hard to solve $160 million worth "issue" and release people's ethers.

As a result of the activation of the vulnerability on November 6, funds were blocked on 587 wallets for a total of 513774.16 ETH.

As of November 14, the amount of funds blocked on Parity wallets is estimated at $164M.

We deeply regret the impact this situation is causing among our users and within the community. We do ask that people get in touch with us if they have any uncertainties and to not believe the speculation circulating the media. We are endeavouring to find a solution as soon as possible and we would like to thank everyone for the support we’ve experienced so far.
 

Jutta Steiner

Founder, Parity Technologies

According to official blog, "the team is working on a broadly accepted solution that will unblock the funds."

It is worth reminding that one of the most possible solutions for this situation is new Ethereum's hardfork. Also, it is not the first “issue” of Parity wallet. In July 2017, hackers were able to stole $30M from Parity

Parity replied to Cisco's vulnerability report

According to the representatives of Parity, vulnerabilities are fixed
12 January   67

Parity Technologies said that the vulnerabilities found by the Cisco Systems Inc. have been fixed in new versions of the Ethereum client software.

As stated in the developers' statement, the JSON-RPC interface, which supports the function of cross-domain requests, could really provide attackers with public information about an account to create an application for "undesirable transactions" and provide these transactions for signature to the user.

However, the company emphasizes, a potential leak of information could not contain confidential information, including private keys. All problems associated with the JSON-RPC interface have been fixed in the latest Parity software updates.

In addition, developers have changed the basic settings of the function of cross-domain requests in order to avoid information leakage. Now users must manually add secure domains to the whitelist in order to allow Parity software to interact with them.

Parity wallet is well known in cryptocurrency world. In July, hackers stole millions of dollars thru the vulnerability, which was fixed in few lines or code. In November, 513774.16 ETH got "froze".