Introducing FumbleChain – A Purposefully Vulnerable Blockchain

Hello everyone, today we are happy to announce FumbleChain, a purposefully vulnerable blockchain implementation. This project has been a labor of love for the Research team here at Kudelski Security since late last year. We will be unveiling this project at the Arsenal at Black Hat USA in Las Vegas in August.

Visit our FumbleChain microsite at fumblechain.io for more information.

Origins

The idea for the project first came out of a discussion the team had before the announcement of our Kudelski Blockchain launch last year at Black Hat Europe. It was mentioned we should do a crypto challenge to promote the launch, but being that time was limited, we thought it best to focus on something larger and more community oriented. This birthed the idea of a vulnerable blockchain implementation. Obviously, since Black Hat Europe was in December of 2018, it’s clear we had a few setbacks.

Early on, we stumbled with the departure of a team member, who had been working on the initial prototype. His departure caused us to miss the Q1 deadline, but gave us some buffer time to re-evaluate what we wanted the project to be and where we wanted to take it.

Goals

FumbleChain is meant to educate on both blockchain and blockchain security and is applicable to developers and security professionals alike. The project provides the following goals in a fun and CTF like manner.

  • Learn more about blockchain and blockchain security
  • Provide a playground for messing with blockchain systems
  • Practice skills attacking blockchain ecosystems

Our hope is that people play with the code base and contribute back to the project making it a larger platform for knowledge on blockchain security. So, please use it for presentations and workshops.

There are several challenges included in the initial release, but we have more development planned for FumbleChain in the future – so stay tuned.

Team Effort

At some point, everyone on the Research team here at Kudelski Security had input into shaping the project, but a majority of the work on the current version was completed by Nils Amiet with additional assistance from Nicolas Oberli.

We hope you will join our team and shape the future of the project. Check out the page for the project and contribute to the development.

Thank you.

-Nathan Hamiel and Nils Amiet

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s