RED TEAM COMES TO BITCOIN MINING: 256 FOUNDATION AUDITS MINING FIRMWARE, FINDS THIRD-PARTY RISKS
@256FOUNDATION has launched the 256 Red Team, a security program auditing ASIC mining firmware through reverse engineering, live traffic capture and share-level reconciliation.
The team says it has filed 41 findings across stock Bitmain firmware and third-party alternatives including LuxOS, VNISH and Braiins OS.
Among the issues found: unauthenticated factory APIs, paths to root access, default credentials, embedded vendor SSH keys and updates that fail to verify what they install.
But the biggest surprise came from Bitmain.
After decompiling its miner daemons and examining live connections, researchers say they found no evidence of hashrate skimming, remote kill switches or covert beacons in stock Bitmain firmware.
Instead, the team says concerning hidden behavior was concentrated in third-party “optimized” firmware.
Three responsible disclosures have already been submitted to VNISH, Luxor and Braiins, with researchers giving each 30 days to respond before publication.
MicroBT, Canaan, Auradine, Bitdeer and ePIC are next on the bench.
~90% of ASICs run one vendor's closed-source firmware. Almost nobody has audited it.
We at
@256FOUNDATION do.
Introducing the 256 Red Team 🧵 — the 256 Foundation's firmware security program. On hardware we own, in an isolated lab, under coordinated disclosure.