Odaily Planet Daily reports: The privacy blockchain Iron Fish has announced it will terminate all remaining support for its network. Several days ago, the team discovered unusual activity involving the wIRON and ChainPort cross-chain bridge. After a joint investigation, it was confirmed that the root cause was an inflation vulnerability within the Iron Fish blockchain itself, not the cross-chain bridge. The vulnerability traces back to a Merkle tree implementation commit from early 2019, which affected the calculation logic of nullifiers—identifiers used to prevent double-spending—in privacy notes, allowing attackers to spend the same note multiple times and withdraw assets via the ChainPort cross-chain bridge. The team stated that the affected code had previously been included in both internal and external audits, yet the vulnerability went undetected. Iron Fish has now submitted a patch fix, along with a detailed post-mortem in the related pull request; the team will subsequently shut down and archive the code repository.
Privacy Chain Iron Fish Confirms Inflation Vulnerability Traced to 2019 Code Commit
KuCoinFlashShare
Summary
Privacy Chain Iron Fish Confirms Inflation Vulnerability Traced to 2019 Code Commit. The project will terminate all network support after detecting unusual wIRON and ChainPort activity. A joint investigation revealed the flaw originated from a 2019 Merkle tree code commit, affecting nullifier calculations and enabling asset reuse. Despite prior audits, the vulnerability remained undetected. A patch has been submitted, with a post-mortem detailed in the related pull request. The code repository will be closed and archived. This incident adds to recent vulnerability reports and underscores the risks associated with inflation data in blockchain systems.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.