Earlier this week, it became apparent to the Bitcoin Core development project that there has been a critical bug found in the consensus code of their Bitcoin implementation. The bug would have allowed certain miners to DDoS and crash Bitcoin full nodes.
Earlier this week, it became apparent to the Bitcoin Core development project that there has been a critical bug found in the consensus code of their Bitcoin implementation. The bug would have allowed certain miners to DDoS and crash Bitcoin full nodes. However, the miner (attacker) would have to burn a 12.5BTC block reward (~$80k) to initiate the attack and then it would only be able to take down connected nodes. Our friend StopAndDecrypt broke it down like this:
The bug has been in Bitcoin Core clients since v0.14.0 and has been patched with the release of v0.16.3. If you're running a node and haven't done so yet, go download v0.16.3 ASAP. Patches for older versions should be rolled out soon as well.
It doesn't seem like it would have been anywhere near fatal if the bug was executed and it really wouldn't make sense for a miner to engage in this type of attack (they'd be killing their golden goose that is the block reward and the overall confidence in the Bitcoin Network), but this is certainly not a good look. Let this serve as a reminder that no team of devs is infallible and that vigilance and code review should be a top priority for any development team, but especially one working on a system that secures $100B+.
Luckily, it seems like we're going to avoid any negative repercussions from this bug since it was discovered and patched before being exploited. Though, again, this is never ideal and should be a call to action for more code reviewers and testers for the Bitcoin Core repository.
Presented without comment other than you should read the post and SJWs are the weakest warriors this planet has ever housed.
Was never a big soccer fan growing up. Went to one practice when I was 6 and never hit the pitch again in my life. Think I could have crushed it if I stuck with it.