Critical GoAhead TLS Bug & Solflare Validator Security Incident
A typo in GoAhead's TLS config reduces a 2048-bit DH key to a single non-prime byte, a severe cryptographic vulnerability. Separately, Solflare's staking provider suffered a key compromise, halting validator rewards.
What we know
An account on X flags a critical bug in goahead's TLS implementation: passing `sizeof(dhm_g)` instead of `sizeof(dhm_p)` collapses a 2048-bit Diffie-Hellman modulus to 1 byte (value 255 — not prime, factoring as 3×5×17). The reaction tweet 'That is one hell of a typo' went viral with 23 RTs. On the crypto side, another account on X RTs Solflare's disclosure that its staking provider was hit by a security incident affecting validator keys; the validator is not producing rewards but user SOL is stated as safe.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.