L1 Blockchain $DCR Decred reveals a consensus vulnerability that has existed for nearly 10 years and has been exploited by hackers to mint approximately 2077.97 DCR.
The flaw stems from improper handling of edge cases when conventional transaction trees interact with the stake transaction tree, allowing double-spend inputs. It has been present since the mainnet went live in February 2016. Although the vulnerability was submitted via a bounty program on August 12, it was still exploited by hackers before the fix was completed.
Interestingly, the Decred team ultimately decided not to roll back, aiming to reduce the impact on ordinary users. However, the team also emphasized that the extra 2,000-plus DCR minted this time will not change the 21 million hard cap on total supply. Historically, subsidies that were not issued due to issues such as mis-voting have exceeded 215,000 coins; this minting effectively fills that gap.
At present, the Decred team has developed an additional double-spend monitoring service and plans to improve the emergency upgrade signaling mechanism to prevent similar incidents from happening again.
#区块链 #Decred #Security Incident
The flaw stems from improper handling of edge cases when conventional transaction trees interact with the stake transaction tree, allowing double-spend inputs. It has been present since the mainnet went live in February 2016. Although the vulnerability was submitted via a bounty program on August 12, it was still exploited by hackers before the fix was completed.
Interestingly, the Decred team ultimately decided not to roll back, aiming to reduce the impact on ordinary users. However, the team also emphasized that the extra 2,000-plus DCR minted this time will not change the 21 million hard cap on total supply. Historically, subsidies that were not issued due to issues such as mis-voting have exceeded 215,000 coins; this minting effectively fills that gap.
At present, the Decred team has developed an additional double-spend monitoring service and plans to improve the emergency upgrade signaling mechanism to prevent similar incidents from happening again.
#区块链 #Decred #Security Incident