{"id":19001,"date":"2024-04-29T10:00:47","date_gmt":"2024-04-29T10:00:47","guid":{"rendered":"https:\/\/coinengineer.io\/blog\/?p=19001"},"modified":"2024-04-29T07:18:58","modified_gmt":"2024-04-29T07:18:58","slug":"io-net-faces-cyberattack-security-breach-impacts-gpu-network","status":"publish","type":"post","link":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/","title":{"rendered":"Io.net Faces Cyberattack: Security Breach Impacts GPU Network"},"content":{"rendered":"

The security of the decentralized physical infrastructure network (DePIN)<\/a>, Io.net<\/strong>, was recently violated by a cyberattack. Malicious users performed an SQL injection attack by exploiting the exposed user ID tokens. The outcome was the modification of device metadata in the GPU<\/a> network was illegal.<\/p>\n

The CISO of Io.net<\/strong>, Husky.io responded immediately by locking down the network with patches and improvements. Due to the powerful permission layers of their GPUs, the real hardware of the GPUs survived the attack.\"\"<\/p>\n

Between 07:27:43 and 07:29:05 AM PST on April 25, write operations increased within the GPU metadata API to trigger the breach detection and the alarm activation.<\/p>\n

The security measures included making it more complex to inject SQL queries into the APIs and helping to document illegal attempts better. To complement the problems of universal authorization tokens, a user-specific authentication solution was promptly deployed using Auth0 with OKTA.<\/p>\n

Furthermore, the anticipated reduction in supply force participants was aggravated by the fact that this security patch update happened at the time when one of the reward program snapshots occurred. As legitimate GPUs did not restart and update, they were unable to use the uptime API, resulting in a drastic drop in the number of active GPU connections from 600,000 to 10,000.<\/p>\n

In response to these issues, we initiated Ignition Rewards Season 2 in May to stimulate the participation of the supply side. The supply chain collaboration regarding device upgrades, reboots, and reconnections is a continuous process.<\/p>\n

Io.net API Vulnerability Exposed<\/h2>\n

The problem with the intruder was flaws in the proof-of-work (PoW) method used to detect fake GPUs. Attacking tactics intensified as a result of all aggressive security measures that were applied even before the incident, thus proving the need for continuous security research and advancement.<\/p>\n

To present the content in input\/output Explorer, the attackers exploited a vulnerability in an API. Therefore, in the process, user IDs were exposed upon device ID searches. Data had been dumped into the database by some malicious attackers a few weeks before the incident.<\/p>\n

The attackers managed to get into the \u2018worker-API,\u2019 which allowed them to alter device metadata without needing user-level authentication by using a valid universal authentication token.<\/p>\n

For early threat detection and neutralization, Husky.io emphasized continuous full assessment and penetration testing of public endpoints. Despite hurdles, we continue to rebuild network connectivity and stimulate supply-side participation in order for the platform to remain operational and deliver hundreds of thousands of compute hours per month.<\/p>\n

Io.net<\/strong> wanted to integrate Apple silicon chip technology in March to enhance its AI and ML offerings.<\/p>\n","protected":false},"excerpt":{"rendered":"

The security of the decentralized physical infrastructure network (DePIN), Io.net, was recently violated by a cyberattack. Malicious users performed an SQL injection attack by exploiting the exposed user ID tokens. The outcome was the modification of device metadata in the GPU network was illegal. The CISO of Io.net, Husky.io responded immediately by locking down the<\/p>\n","protected":false},"author":6,"featured_media":19003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5716,5715,5714],"class_list":["post-19001","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-cyber-attack","tag-gpu","tag-io-net"],"yoast_head":"\nIo.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer<\/title>\n<meta name=\"description\" content=\"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Io.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer\" \/>\n<meta property=\"og:description\" content=\"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/\" \/>\n<meta property=\"og:site_name\" content=\"Coin Engineer\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-29T10:00:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T07:18:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1400\" \/>\n\t<meta property=\"og:image:height\" content=\"467\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tanju Akb\u0131y\u0131k\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tanju Akb\u0131y\u0131k\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/\",\"url\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/\",\"name\":\"Io.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer\",\"isPartOf\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg\",\"datePublished\":\"2024-04-29T10:00:47+00:00\",\"dateModified\":\"2024-04-29T07:18:58+00:00\",\"author\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546\"},\"description\":\"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.\",\"breadcrumb\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage\",\"url\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg\",\"contentUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg\",\"width\":1400,\"height\":467,\"caption\":\"Io.net\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/coinengineer.net\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Io.net Faces Cyberattack: Security Breach Impacts GPU Network\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\",\"url\":\"https:\/\/coinengineer.net\/blog\/\",\"name\":\"Coin Engineer\",\"description\":\"Btc, Coins, Pre-Sale, DeFi, NFT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/coinengineer.net\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546\",\"name\":\"Tanju Akb\u0131y\u0131k\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g\",\"caption\":\"Tanju Akb\u0131y\u0131k\"},\"url\":\"https:\/\/coinengineer.net\/blog\/author\/cetanju\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Io.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer","description":"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/","og_locale":"en_US","og_type":"article","og_title":"Io.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer","og_description":"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.","og_url":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/","og_site_name":"Coin Engineer","article_published_time":"2024-04-29T10:00:47+00:00","article_modified_time":"2024-04-29T07:18:58+00:00","og_image":[{"width":1400,"height":467,"url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg","type":"image\/jpeg"}],"author":"Tanju Akb\u0131y\u0131k","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Tanju Akb\u0131y\u0131k","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/","url":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/","name":"Io.net Faces Cyberattack: Security Breach Impacts GPU Network - Coin Engineer","isPartOf":{"@id":"https:\/\/coinengineer.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage"},"image":{"@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage"},"thumbnailUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg","datePublished":"2024-04-29T10:00:47+00:00","dateModified":"2024-04-29T07:18:58+00:00","author":{"@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546"},"description":"Discover the recent cyberattack on Io.net and how the security measures taken by Husky.io prevented further damage.","breadcrumb":{"@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#primaryimage","url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg","contentUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/04\/1_LLrpqYWMhxj1IRX86TLeCQ.jpg","width":1400,"height":467,"caption":"Io.net"},{"@type":"BreadcrumbList","@id":"https:\/\/coinengineer.net\/blog\/io-net-faces-cyberattack-security-breach-impacts-gpu-network\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/coinengineer.net\/blog\/"},{"@type":"ListItem","position":2,"name":"Io.net Faces Cyberattack: Security Breach Impacts GPU Network"}]},{"@type":"WebSite","@id":"https:\/\/coinengineer.net\/blog\/#website","url":"https:\/\/coinengineer.net\/blog\/","name":"Coin Engineer","description":"Btc, Coins, Pre-Sale, DeFi, NFT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/coinengineer.net\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546","name":"Tanju Akb\u0131y\u0131k","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g","caption":"Tanju Akb\u0131y\u0131k"},"url":"https:\/\/coinengineer.net\/blog\/author\/cetanju\/"}]}},"_links":{"self":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/19001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/comments?post=19001"}],"version-history":[{"count":2,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/19001\/revisions"}],"predecessor-version":[{"id":19005,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/19001\/revisions\/19005"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media\/19003"}],"wp:attachment":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media?parent=19001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/categories?post=19001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/tags?post=19001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}