Liquid Network Releases Emergency Fix for Proof Verification Cache Vulnerability

icon MarsBit
Share
AI summary iconSummary
The Liquid Network has deployed an emergency network upgrade, Elements v23.3.4, to address a vulnerability related to the Proof verification cache. Node operators are urged to upgrade immediately, as functional nodes have already begun the process. The recovery plan consists of three stages: resuming block production while pausing Peg operations, replaying validated transactions, and restarting Peg operations after full confirmation. The first two stages are undergoing parallel testing, with each phase proceeding only after passing security reviews. Elements v23.3.4 has been reviewed by multiple teams, including the Bitcoin Red Team and Alpen Labs. Users are advised to avoid phishing attempts and rely solely on official sources for updates.

According to Huoxing Finance, Liquid Network has announced its latest update: the emergency Elements v23.3.4 is now live. Functionary nodes have immediately begun upgrading, and all Liquid node operators are advised to synchronize and update accordingly. This release addresses a previously identified vulnerability in the Proof verification cache by strengthening the cache keys used for Range Proofs. Regarding network recovery, Blockstream states that a recovery plan is still being developed and is expected to proceed in three phases: restoring block production while continuing to pause Peg operations; replaying verified valid transactions; and resuming Peg operations only after full network state recovery and confirmation of fund restitution. The first two phases are currently being tested in parallel, and no phase will proceed until its safety is confirmed. Liquid Network notes that Elements v23.3.4 has undergone multiple rounds of internal and external review by teams including Bitcoin Red Team and Alpen Labs. Additionally, Liquid Network warns users to be vigilant against phishing websites impersonating official upgrade channels in connection with this incident. Users should obtain information exclusively through official Liquid Network and Blockstream channels and never send funds to strangers or disclose private keys or seed phrases.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.