Decred said an inflation bug on its mainnet was exploited between Aug. 16 and Aug. 17, resulting in the creation of about 2,077.97 DCR. The L1 blockchain said the flaw had been present in its consensus code since the mainnet launch in February 2016. According to the project, the issue stemmed from improper handling of an edge case involving interactions between the regular transaction tree and the stake transaction tree, which allowed double-spent inputs.
Decred said the bug was submitted through its bounty program on Aug. 12, but it was exploited before a fix was deployed. The team decided not to roll back the chain in order to reduce the impact on users. It also said the roughly 2,000 newly minted DCR do not affect the network’s 21 million hard cap and remain far below more than 215,000 DCR in subsidies that were historically not issued because of missed votes and other reasons.
The team has since developed an additional double-spend monitoring service and said it plans to improve its emergency upgrade signaling mechanism.
Decred said its mainnet inflation bug was exploited between Aug. 16 and Aug. 17, leading to the creation of about 2,077.97 DCR.
The L1 blockchain said the flaw had existed in its consensus code since the mainnet went live in February 2016. It traced the issue to improper handling of an edge case in interactions between the regular transaction tree and the stake transaction tree, which made double-spent inputs possible.
Bug report came before the exploit
According to Decred, the vulnerability was submitted through its bounty program on Aug. 12, but it was exploited before the fix was in place.
Decred will not roll back the chain
The project said it has decided not to roll back, citing a desire to reduce the impact on users. It added that the roughly 2,000 DCR created through the exploit do not affect the 21 million hard cap. Decred also said the amount is well below the more than 215,000 DCR in subsidies that were historically not issued because of missed votes and other reasons.
Next steps
The team said it has developed an additional double-spend monitoring service and plans to improve its emergency upgrade signaling mechanism.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
