Skip to content

Security Alert (11/24/2016): consensus bug in geth v1.4.19 and v1.5.2

safety warning

Affected configuration: Geth

Severity: Excessive

Abstract: An issue has been recognized with Geth’s journaling mechanism. This induced the community to fork at block #2686351 (Nov-24-2016 14:12:07 UTC). The brand new Geth launch 1.5.3 fixes the journaling subject and repairs the fork.

Description: Geth was failing to roll again empty account deletions when a transaction deleting empty accounts ended with an out-of-gas exception. Fastened an extra subject in Parity the place the Parity consumer incorrectly did not revert empty account deletions in a extra restricted set of contexts related to out-of-gas calls to pre-compiled contracts; The brand new geth conduct matches parity, and empty accounts will usually cease being a supply of concern in a few week after the state clearing course of ends.

The chain created by the previous Geth consumer from block #2686351, which is taken into account invalid by each Parity and the brand new Geth launch, appears to have been principally discarded round block #2686516, which means ~165 blocks are actually on the discarded chain had been mined. Transactions are broadcast all through the community, so most transactions in all probability exist on each the previous Geth chain and the present chain, though mining rewards and transaction charges are misplaced on the previous Geth chain. Any transaction or block on chain that each purchasers will now settle for is not going to be returned.

The newest geth launch will replace the blockchain from the purpose of fork, even when it synced earlier than the purpose of fork.

Resolution: Geth 1.5.3 was launched.

If you’re utilizing Geth: obtain the most recent consumer from: https://github.com/etherum/go-etherum/releases/tag/v1.5.3

In the event you’re utilizing Mist: restart Mist and the auto-update function will immediate you to replace the Geth consumer that Mist makes use of to get 1.5.3.

If you don’t replace, please bear in mind that you can be on an invalid chain that’s not supported.

We proceed to suggest that exchanges and different high-value customers run a number of purchasers and robotically cease operations or in any other case enter secure mode in the event that they turn into out of sync by greater than ~10 blocks.

The Ethereum web sites and cell functions that assist you to retailer and/or transact Ether are operated by third celebration net based mostly or cell Ethereum suppliers (“Third Celebration Suppliers”). Third celebration suppliers run their very own Ethereum consumer infrastructure to facilitate their companies. Typically, you need not do something when you use a 3rd celebration supplier like MetaMask, Jaxx and MyEtherWallet. Nevertheless, they could have directions for you. You must test together with your Ethereum third celebration supplier what plan of action, if any, they’re recommending for his or her customers.

,

disclaimer
It’s an rising and growing excessive tech area. In the event you select to take part, you ought to be conscious that there are lots of dangers concerned, together with, however not restricted to, dangers comparable to unexpected bugs and different technical issues that will consequence within the lack of Ether and different penalties. Additionally, when you do not replace to Geth 1.5.3, you can be on an unsupported community. By selecting to make use of the Ethereum platform, you settle for the dangers of this rising platform.

Ready to get a best solution for your business?