Security alert [11/24/2016]: Consensus bug in geth v1.4.19 and v1.5.2

Safety Alert

Affected configurations: Geth

Severity: Excessive

Abstract:  A problem has been recognized with Geth’s journaling mechanism. This induced a community fork at block #2686351 (Nov-24-2016 14:12:07 UTC). The brand new Geth launch 1.5.3 fixes the journaling subject and repairs the fork.

Particulars: Geth was failing to revert empty account deletions when the transaction inflicting the deletions of empty accounts ended with an an out-of-gas exception. A further subject was present in Parity, the place the Parity shopper incorrectly did not revert empty account deletions in a extra restricted set of contexts involving out-of-gas calls to precompiled contracts; the brand new Geth habits matches Parity’s, and empty accounts will stop to be a supply of concern normally in about one week as soon as the state clearing course of finishes.

The chain that was created from block #2686351 by the previous Geth shopper, which each Parity and the brand new Geth launch take into account invalid, appears to have been principally deserted round block #2686516, that means that ~165 blocks have been mined on the now deserted chain. Transactions are broadcast throughout the community so most transactions are probably current on each the previous Geth chain and the present chain, though mining rewards and transaction charges on the previous Geth chain are misplaced. No transactions or blocks on the chain that each purchasers will now settle for shall be reverted.

The newest geth launch will replace the blockchain from the purpose of the fork, even when it has synced previous the purpose of the fork.

Resolution: Geth 1.5.3 was launched.

In case you are utilizing Geth: Obtain the most recent shopper right here: https://github.com/ethereum/go-ethereum/releases/tag/v1.5.3

In case you are utilizing Mist: Restart Mist and the auto-update characteristic will immediate you to replace the Geth shopper that Mist makes use of to geth 1.5.3.

If you don’t replace, please bear in mind you can be on an invalid chain that’s not supported.

We proceed to advocate that exchanges and different high-value customers run a number of purchasers and mechanically halt operations or in any other case enter protected mode in the event that they exit of sync by greater than ~10 blocks.

Ethereum web sites and cellular purposes that help you retailer ether and/or make transactions are run by third social gathering net primarily based or cellular Ethereum suppliers (“Third Occasion Suppliers”). Third Occasion Suppliers run their very own Ethereum shopper infrastructure to facilitate their providers. Usually, you don’t want to do something for those who use a Third Occasion Supplier reminiscent of MetaMask, Jaxx, and MyEtherWallet. Nevertheless, they might have directions for you. You need to examine along with your Ethereum Third Occasion Supplier to see what actions, if any, they’re recommending for his or her customers.

—————————–

DISCLAIMER
That is an emergent and evolving extremely technical house. When you select to take part, it is best to know there are numerous dangers concerned together with however not restricted to dangers like surprising bugs and different technical issues that would end in lack of ether and different penalties. As well as, if you don’t replace to Geth 1.5.3, you can be on an unsupported community. By selecting to make use of the Ethereum platform, you assume the dangers of this emergent platform.