Decred said its mainnet was hit by an inflation vulnerability between Aug. 16 and Aug. 17, resulting in the creation of about 2,078 additional DCR. The issue had been submitted through its bug bounty program on Aug. 12 and was exploited roughly 72 hours after disclosure. The vulnerability had existed in the consensus code since the network launched in 2016 and involved an unhandled edge case in the interaction between the regular transaction tree and the ticket transaction tree. Decred released emergency patch 2.1.6 on Aug. 18 to fix the bug without rolling back the chain, and said most ecosystem participants updated within about 24 hours. The project said the extra issuance does not affect DCR's 21 million hard cap and added that it has developed a double-spend monitoring service as an additional protection layer.