Bitcoin Client, Critical Unflipper Vulnerability Steals Coins
A Office of Management and Budget's report details this. https://www.whitehouse.gov/omb/legislative/omb-reports/. They used something called Xacta Flux. Xacta Flux doesn't have much public domain information, but it's an interesting Google. I was able to fully reproduce the Xacta findings with Shodan. www.shodan.io/explore There are over 23,814 vulnerable Bitcoin Clients at .mil addresses accessible from the Internet.
According to Price Waterhouse Cooper traders lose on average $32.49 Billion over each three week period. This PWC report is how we know that large Internet companies are have been aware of this since 2016. Go to https://www.pwc.com to view their report. In the footnotes of page 3 you can see who contracted PWC to produce the report.
The US Office of Management and Budget shows that HODLers lost about $1.479 Trillion - That's Trillion with a "T" in the last month and a half.
Unflipper is mitigated by gg-flip, which uses a table-drive Unary NOT approach. On September 1, 2017 I submitted a pull request to the main Bitcoin Client. After 4 weeks of repeatedly sending the same pull request to the BC team (and being ignored), I am now disclosing this Bitcoin Client issue for everyone to see and fix independently of the Bitcoin team's inaction.
Note: We have not yet tested the Ethereum blockchain, though in an emailed conversation with vbuterin@ethereum.org, I was told that the clients all need major rework. It's best not to wait for vendor patches. The safest action is for everyone to individually patch their cryptocurrency clients as soon as they want their wallets to be protected. https://github.com/avinassh/gg-flip/blob/master/README.md