Liquid Network Releases Elements v23.3.4 Emergency Update to Fix Proof Verification Cache Vulnerability

iconKuCoinFlash
Share
AI summary iconSummary
The Liquid Network announced a network upgrade with the release of Elements v23.3.4 on September 9 (UTC+8) to address a proof verification cache vulnerability. The update enhances cache keys for range proofs and has been reviewed by teams including Bitcoin Red Team and Alpen Labs. As part of the recovery plan, the network will restart block production and temporarily pause anchoring, later re-executing verified transactions. Full anchoring will resume only after the network stabilizes and funds are returned. Blockstream is testing the first two steps in parallel. Users are warned of phishing attempts and urged not to share private keys with unknown parties. This vulnerability underscores the importance of continuous security improvements.

ME News reports that on September 9 (UTC+8), the Liquid Network released an emergency update, Elements v23.3.4. Functional nodes are immediately upgrading, and all Liquid node operators are advised to synchronize the update. This version fixes a vulnerability in the proof verification cache by strengthening the cache keys used for range proofs and has undergone multiple rounds of internal and external review by teams including Bitcoin Red Team and Alpen Labs. The Liquid Network has also published a preliminary recovery plan: first, resume block production while keeping peg-in/out operations suspended; then, reprocess transactions that have been validated as valid; finally, resume peg-in/out operations after the network state is fully restored and funds have been returned. Blockstream is concurrently testing the first two phases, and the sequence and implementation may be adjusted based on test results. The Liquid Network also warns that scammers have already created fake update websites. Users should refer exclusively to official Liquid Network and Blockstream channels and never transfer funds to unknown parties or disclose private keys or seed phrases. (Source: BlockBeats)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.