Decred says mainnet inflation bug was exploited, minting about 2,077.97 DCR
Decred said an inflation bug on its mainnet was exploited between Aug. 16 and Aug. 17, resulting in the creation of about 2,077.97 DCR. The L1 blockchain said the flaw had been present in its consensus code since the mainnet launch in February 2016. According to the project, the issue stemmed from improper handling of an edge case involving interactions between the regular transaction tree and the stake transaction tree, which allowed double-spent inputs. Decred said the bug was submitted through its bounty program on Aug. 12, but it was exploited before a fix was deployed. The team decided not to roll back the chain in order to reduce the impact on users. It also said the roughly 2,000 newly minted DCR do not affect the network’s 21 million hard cap and remain far below more than 215,000 DCR in subsidies that were historically not issued because of missed votes and other reasons. The team has since developed an additional double-spend monitoring service and said it plans to improve its emergency upgrade signaling mechanism.



