Categories: CryptoNews

QueenAnt Exploit Lets Hackers Change The Antminer Bitcoin Payout Address

Antminer is one of the most popular Bitcoin hardware manufacturers in the world. The company has built up a solid reputation through their line of Antminer devices, and customers have shown their support for the company throughout the years. But one Australian researcher notices how it is possible to hijack an Antminer through a software flaw in the open source mining software.

Is It Feasible To Hijack an Antminer?

The Antminer devices are primarily configured to be used with the CGminer open source software. Tim Noise, an Australian security researcher, mentions how there is a vulnerability in the configuration of this software that can be exploited. As a result, hackers could take control of any Antminer actively mining Bitcoin.

To be more precise, the device itself would continue its operations as it always has. However, the rewards from mining can be sluiced to a different Bitcoin address. QueenAnt, as this exploit is dubbed, can be found on

GitHub. Although this may appear to be an issue with CGMiner itself, the cause lies much deeper.



Noise explains how the vulnerability can be exploited. CGMiner accepts incoming TCP connections through an RPC interface. Every Antminer runs the OpenWRT OS, which includes CGMiner for all of the mining procedures. On top of all this is an OpenWRT LuCi web interface, collecting statistics from the RPC interface without requiring a username or password.

Related Post

This would allow hackers to inject their Bitcoin address to receive funds, rather than the one belonging to the miner. Luckily, it is relatively easy to bypass this exploit, by updating the cgminer.conf and cgminer.sh, files. Antminer users can change the system password, adding an extra layer of protection.

Another course of action would be to take the Antminers offline entirely, a tactic deployed by bigger mining farms already. For the time being, it appears the Antminer S5 is rather vulnerable to these attacks. At the date of writing, it was unclear if these issues were fixed when the Antminer S7 was produced.

Image credit 1

If you liked this article follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin and altcoin price analysis and the latest cryptocurrency news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

Cheems Surge On BSC Network: A Rising Star With Growing Market Value

The Cheems token on the Binance Smart Chain (BSC) is gaining significant momentum, surging by…

3 hours ago

Lester Token Crashes 40% Following Official Announcement

The value of $LESTER plummeted by 40% in the past 24 hours, leaving its market…

3 hours ago

From $30K To Millions: The Wild Journey Of $Quant And Xiaohaige’s Memecoin Stunts

In a bizarre turn of events, a young live-streamer known as Xiaohaige created the memecoin…

3 hours ago

Whale “convexcuck.eth” Makes Bold $CVX Move, Nets Significant Profit Amid Price Surge

The crypto whale known as "convexcuck.eth" has made waves in the DeFi world, spending $2…

3 hours ago

$ELIZA Token Launch Marred By Insider Trading Allegations

The launch of $ELIZA, a token introduced by Andreessen Horowitz (a16z) partner @shawmakesmagic, has sparked…

3 hours ago

Cardano’s Rally Highlights Diverging Moves Among Investors

Cardano ($ADA) has been making waves in the crypto market, breaking away from the altcoin…

3 hours ago