Ethereum client Parity hacked leaving $150m of coins in limbo
A bug in cryptocurrency Ethereum’s second-most popular client, Parity, has frozen coins valued at $150m and left the initial coin offering of blockchain tech firm Polkadot in limbo. The glitch was triggered after a security hole was found in the technology that backs the cryptocurrency. Ethereum may have to be forked to release the funds, the second time such a measure has been taken in as many years after the currency's largest smart contract was hacked in 2016.

Severity: Critical

Product affected: Parity Wallet

Affected implementations: Parity 1.5 or later

Summary: A vulnerability in Parity Wallet's variant of the standard multi-sig contract has been found.

Affected users: Any user with assets in a multi-sig wallet created in Parity Wallet prior to 19/07/17 23:14:56 CEST.

Mitigation steps: Immediately move assets contained in the multi-sig wallet to a secure address.

UPDATE (20/07/17, 00:26 CEST): Multi-sig wallets created in Parity Wallet after 19/07/17 23:14:56 CEST are secure. (Fix in the code is https://github.com/paritytech/parity/pull/6103 and the newly registered code is https://etherscan.io/tx/0x5f0846ccef8946d47f85715b7eea8fb69d3a9b9ef2d2b8abcf83983fb8d94f5f).