订阅时事通讯

Blog

Post / 2021-05-27 / Mina Foundation

Mina JavaScript Client SDK New Release

Users of Mina JavaScript client-sdk should upgrade to the 1.0.1 release of the client-sdk urgently.

Summary: Users of Mina JavaScript client-sdk should upgrade to the 1.0.1 release of the client-sdk urgently. Out of an abundance of caution, users who generated private keys using the getKeys() function of the prior releases of the client-sdk should also immediately move any funds to an address that was generated by an alternative method, or by the new 1.0.1 release.

O(1) Labs – our ecosystem partner – recently discovered a vulnerability in the Mina JavaScript client-sdk where private key generation in some situations depends on poor entropy. This means that private keys generated under these situations are vulnerable to attacks by malicious actors, and with low probability, funds can be stolen. This has been patched and fixed in the 1.0.1 release of the client-sdk.

Developers and users who use the client-sdk should immediately upgrade to the new 1.0.1 release to fix this vulnerability. Users who have used either the client-sdk directly, or a product that depends on the client-sdk, should also immediately move their funds to an address that was generated by an alternative method, or the new 1.0.1 release.

More from our Blog

BLOG / 2021-09-30 / Mina Foundation
New Community Programs: Grants, Community Spark Leaderboard, Mina Academy, and Mina Achievements Program
The Mina Foundation announces new community programs, including grants and an upcoming leaderboard, to support community members in their participation within Mina’s ecosystem.
Read more
BLOG / 2021-09-29
9/14 Devnet Bug Hotfix Retro
Read more
BLOG / 2021-09-28
Least Authority Concludes Security Audit on StakingPower Wallet
Read more
BLOG / 2021-09-22
Update on Mina’s Supercharged Rewards Schedule
Read more

About the Tech

AboutTechCta

Mina uses advanced cryptography and recursive zk-SNARKs to deliver true decentralization at scale.

Get Started

GetStartedCta

Mina makes it simple to run a node, build and join the community.