Decentralized physical infrastructure network Io.net faced a cybersecurity breach due to malicious attackers exploiting vulnerabilities in user identity disclosures to execute a SQL attack on the GPU network. Io.net's security chief, Husky, swiftly responded by implementing security upgrades and corrective measures to safeguard the network. Fortunately, the strong permission layers in place prevented harm to the actual hardware of the GPUs. The breach was detected during increased write operations on the GPU's metadata APIs and was resolved the following day, following triggered alerts.
In the aftermath, Io.net bolstered security measures by incorporating SQL checks on APIs and enhancing unauthorized attempt logging. Furthermore, they rapidly implemented a user-specific authentication solution using OKTA and Auth0 to address security vulnerabilities related to universal authorization processes.
The breach stemmed from vulnerabilities identified during the implementation of a Proof of Work mechanism to detect counterfeit GPUs. Prior security patches had been applied, necessitating ongoing reviews and enhancements due to evolving attack strategies. Attackers exploited an API flaw to reveal content in the entry and exit navigator, inadvertently exposing user identities linked to device identifiers, which were compiled into a database weeks before the breach.
Key considerations include the importance of robust permission layers to mitigate hardware damage during cyber incidents, the swift deployment of tailored authentication solutions post-breach, and the critical need for continuous security reviews and vulnerability patches to adapt to advancing cybersecurity risks.
Despite the challenges, Io.net remains committed to encouraging supply-side involvement, restoring network connectivity, preserving platform integrity, and providing computational services. Husky stressed the significance of regular comprehensive reviews and penetration tests at public access points to identify and neutralize threats promptly. This update was originally posted on BH NEWS.
