GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
October 09, 2026
1 min read
3 views
cybersecurity
threats
news
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over.
Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.
Was this article helpful?
0 found this helpful