ME News reports that on October 31 (UTC+8), the privacy-focused blockchain Iron Fish announced it will terminate all remaining support for its network. Several days ago, the team detected anomalous activity involving the wIRON and ChainPort cross-chain bridge. After a joint investigation, they confirmed the root cause was an inflation vulnerability within the Iron Fish blockchain itself, not the cross-chain bridge. The vulnerability traces back to a Merkle tree implementation commit from early 2019, which affected the calculation logic of nullifiers—identifiers used to prevent double-spending—in privacy notes, allowing attackers to spend the same note multiple times and withdraw assets via the ChainPort bridge. The team stated that the affected code had previously undergone both internal and external audits, yet the vulnerability went undetected. Iron Fish has now submitted a patch fix, along with a detailed post-mortem in the related pull request; the team will subsequently shut down and archive the code repository. (Source: ODAILY)
Iron Fish Confirms Inflation Vulnerability in Blockchain, Ends Network Support
KuCoinFlashShare
Summary
The privacy blockchain Iron Fish has confirmed an inflation vulnerability in its network, leading to the decision to terminate all network support. The flaw, originating from a 2019 Merkle tree code commit, enabled attackers to exploit nullifier logic in privacy notes and siphon assets through the ChainPort bridge. Despite internal and external audits, the issue remained undetected. The team has submitted a patch and published a post-mortem in the associated pull request. Network upgrade efforts have been finalized, with the code repository now closed and archived. Inflation data from the incident will be analyzed in future reports.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.