paritytech — Vulnerabilities & Security Advisories 9

ParityTech develops blockchain infrastructure and wallet solutions, primarily for the Polkadot ecosystem. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with 9 CVEs documented. Notable security incidents include the 2017 $30 million ether theft from their multi-sig wallet due to a flawed reentrancy check, and a 2021 vulnerability in their Substrate framework that allowed potential privilege escalation. The organization has since implemented formal security processes and bug bounty programs to address these concerns.