Share this article

CoinDesk Fixes CMS Exploit That Leaked Headlines Before Publication

The vulnerability appears to have allowed someone accessing an API to trade on nonpublic information ahead of the publication of at least one article.

(Rawpixel, modified by CoinDesk)
(Rawpixel, modified by CoinDesk)

CoinDesk has fixed an issue that exposed the headlines of articles saved as drafts in the crypto news publication’s content management system (CMS).

The exploit, which was brought to CoinDesk’s attention by a white-hat hacker, may have allowed unidentified actors to profit from nonpublic information by making trades ahead of the publication of at least one article.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

The issue is now fixed and added safeguards have been put in place.

We regret this unintended deviation from our commitment to level playing fields in crypto markets.

Michael J. Casey, chief content officer

Kevin Worth, CEO

Michael J. Casey

Michael J. Casey is Chairman of The Decentralized AI Society, former Chief Content Officer at CoinDesk and co-author of Our Biggest Fight: Reclaiming Liberty, Humanity, and Dignity in the Digital Age. Previously, Casey was the CEO of Streambed Media, a company he cofounded to develop provenance data for digital content. He was also a senior advisor at MIT Media Labs's Digital Currency Initiative and a senior lecturer at MIT Sloan School of Management. Prior to joining MIT, Casey spent 18 years at The Wall Street Journal, where his last position was as a senior columnist covering global economic affairs. Casey has authored five books, including "The Age of Cryptocurrency: How Bitcoin and Digital Money are Challenging the Global Economic Order" and "The Truth Machine: The Blockchain and the Future of Everything," both co-authored with Paul Vigna. Upon joining CoinDesk full time, Casey resigned from a variety of paid advisory positions. He maintains unpaid posts as an advisor to not-for-profit organizations, including MIT Media Lab's Digital Currency Initiative and The Deep Trust Alliance. He is a shareholder and non-executive chairman of Streambed Media. Casey owns bitcoin.

Michael J. Casey
Picture of CoinDesk author Kevin Worth