Researchers find security flaws in IOTA cryptocurrency

7 Sep 2017

Researchers at the Massachusetts Institute of Technology (MIT) and Boston University have released a report outlining security flaws in IOTA, a cryptocurrency that supports Internet of Things transactions. Currently the eighth largest cryptocurrency by market cap, IOTA worths over a billion dollars, and is working with entities like Microsoft, University College of London, and Cisco. Researchers explained that they were able to break the hash function used by IOTA as part of its digital signature scheme (which is used to ensure that funds can only be spent by rightful owners). They demonstrated how an attacker could forge a digital signature to steal users’ funds. The vulnerability was reported to the IOTA team in July, and a patch was issued in August. While the vulnerability is no longer present in IOTA, researchers have published their findings to draw attention on the fact that organisations need to vet technologies before they partner with them.

Explore the issues

The Internet of Things (IoT) includes a wide range of Internet-connected devices, from highly digitalised cars, home appliances (e.g. fridges), and smart watches, to digitalised clothes that can monitor health. IoT devices are often connected in wide-systems, typically described as 'smart houses' or 'smart cities'.

The digital currencies story is a continuation of the long-running saga of economics, markets, and commodity exchange in human society. With the constant rise of the global network, we have witnessed many global services becoming widely accepted and in a way changing (by adding to) our experience of mutual interaction.


The GIP Digital Watch observatory is provided by

in partnership with

and members of the GIP Steering Committee


GIP Digital Watch is operated by

Scroll to Top