Privacy-focused public blockchain Iron Fish announced it is terminating all support for its network after discovering a critical inflation vulnerability in its core code. The team detected unusual activity involving wIRON and the ChainPort cross-chain bridge, which led to an investigation confirming the root cause lay within the Iron Fish blockchain itself.
The vulnerability traces back to a 2019 commit in the Merkle tree implementation, where a subtle flaw in how note nullifiers were calculated allowed attackers to reuse the same note multiple times. Despite being within the scope of both internal and external audits, the bug went undetected until exploited through the ChainPort bridge. Iron Fish has submitted a fix patch along with a detailed post-mortem report before archiving the codebase.
In its statement, the team warned that software unable to be upgraded instantly remains extremely vulnerable as the ability to find and exploit complex code vulnerabilities becomes increasingly commoditized across the crypto industry.
Iron Fish Shuts Down Privacy Blockchain After Merkle Tree Vulnerability Exploited via ChainPort Bridge
면책 조항: Phemex 뉴스에서 제공하는 콘텐츠는 정보 제공 목적으로만 제공됩니다. 제3자 기사에서 출처를 얻은 정보의 품질, 정확성 또는 완전성을 보장하지 않습니다.이 페이지의 콘텐츠는 재무 또는 투자 조언이 아닙니다.투자 결정을 내리기 전에 반드시 스스로 조사하고 자격을 갖춘 재무 전문가와 상담하시기 바랍니다.
