View Single Post
Old 04-23-2018, 11:36 AM  
Bladewire
StraightBro
 
Bladewire's Avatar
 
Industry Role:
Join Date: Aug 2003
Location: Monarch Beach, CA USA
Posts: 56,232
Verge 3 weeks ago

"Anonymity-focused cryptocurrency Verge (XVG) lost 25% of its value April 4 as news surfaced of an apparent hack which developers ‘resolved’ by accidentally initiating a hard fork.

According to various press and social media sources, including Verge developer known as Sunerok, a bug allowed manipulation of block mining timestamps. This created the potential for illegitimate coins to appear from nowhere.

“There's currently a >51% attack going on on XVG which exploits a bug in retargeting in the XVG code,” Suprnova mining pool’s OCminer reported on Bitcointalk.

Due to several bugs in the XVG code, you can exploit this feature by mining blocks with a spoofed timestamp. When you submit a mined block (as a malicious miner or pool) you simply set a false timestamp to this block one hour ago and XVG will then “think” the last block mined on that algo was one hour ago.

The debacle comes just three weeks after John McAfee-endorsed Verge lost control of its Twitter account to hackers, with funds reportedly not being at risk.

Following the fresh bug reports, however, Sunerok appeared to adopt a laissez faire attitude to fixing them, pushing through an accidental hard fork.

“You guys are aware that the ‘fix’ you pushed actually IS a hardfork? So your blockchain snapshot is not valid anymore, the wallet’s won’t sync up from scratch anymore and the current chain is simply not usable anymore with that new ‘fix’?” OCminer continued."

https://cointelegraph.com/news/crypt...ntal-hard-fork
Bladewire is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote