Decred said its mandatory patch version v2.1.6 is now available, with updates that fix a critical consensus-related security issue, prevent potential periodic de-anonymization mixing attacks, address multiple possible network-related denial-of-service issues, and improve the expiration time for mixing sessions. According to Foresight News, the project urged users to upgrade as soon as possible and said the Windows version of Decrediton has not yet been released, with a launch expected the next day.

According to Foresight News, Decred said on August 18 that it had found a security vulnerability and recommended suspending voting and mining.