Privacy-focused public blockchain Iron Fish announced it is terminating all support for its network after discovering a critical inflation vulnerability in its core code. The team detected unusual activity involving wIRON and the ChainPort cross-chain bridge, which led to an investigation confirming the root cause lay within the Iron Fish blockchain itself.
The vulnerability traces back to a 2019 commit in the Merkle tree implementation, where a subtle flaw in how note nullifiers were calculated allowed attackers to reuse the same note multiple times. Despite being within the scope of both internal and external audits, the bug went undetected until exploited through the ChainPort bridge. Iron Fish has submitted a fix patch along with a detailed post-mortem report before archiving the codebase.
In its statement, the team warned that software unable to be upgraded instantly remains extremely vulnerable as the ability to find and exploit complex code vulnerabilities becomes increasingly commoditized across the crypto industry.
Iron Fish Shuts Down Privacy Blockchain After Merkle Tree Vulnerability Exploited via ChainPort Bridge
Disclaimer: The content provided on Phemex News is for informational purposes only. We do not guarantee the quality, accuracy, or completeness of the information sourced from third-party articles. The content on this page does not constitute financial or investment advice. We strongly encourage you to conduct you own research and consult with a qualified financial advisor before making any investment decisions.
