News for hackers. Stuff that matters.

A comment on Zerocoin implementation bug. Parent comment

Re:Zerocoin implementation bug by ballenf on Friday February 17, 2017 @10:52PM (#13673513)
Any idea why they would describe the code error as "a single additional character in code"? It looks like about 10 characters or so based on your link. There are also some other code changes associated with that commit
[ Parent | on HN ]
Re:Zerocoin implementation bug by taspeotis on Friday February 17, 2017 @11:26PM (#13673608)
I think the single character fix is this [1], GP seems to be describing [2].

[1] https://github.com/zcoinofficial/zcoin/commit/b20c177032de3c...

[2] https://github.com/zcoinofficial/zcoin/commit/33796c839f7d4d...

[ Parent | on HN ]
Re:Zerocoin implementation bug by ianmiers on Friday February 17, 2017 @11:50PM (#13673655)
That is a one character change. And it is labeled "urgent fix". So it's certainly possible.

But that change appears to do exactly what the variable name suggests setting it to zero would to : stop zcoin tx's from being included in a block.

That strongly suggests someone attempted to fix the issue by simply disabled all private transactions.

[ Parent | on HN ]
Re:Zerocoin implementation bug by ianmiers on Friday February 17, 2017 @11:00PM (#13673535)
I have no idea. If you can find a single character edit in the commit history, I will look at it.

But this certainly is a bug. And it would allow you to steal funds.

[ Parent | on HN ]