Security alert [11/24/2016]: Consensus bug in geth v1.4.19 and v1.5.2

Safety Alert

Affected configurations: Geth

Severity: Excessive

Abstract:  A difficulty has been recognized with Geth’s journaling mechanism. This induced a community fork at block #2686351 (Nov-24-2016 14:12:07 UTC). The brand new Geth launch 1.5.3 fixes the journaling concern and repairs the fork.

Particulars: Geth was failing to revert empty account deletions when the transaction inflicting the deletions of empty accounts ended with an an out-of-gas exception. An extra concern was present in Parity, the place the Parity consumer incorrectly did not revert empty account deletions in a extra restricted set of contexts involving out-of-gas calls to precompiled contracts; the brand new Geth habits matches Parity’s, and empty accounts will stop to be a supply of concern generally in about one week as soon as the state clearing course of finishes.

The chain that was created from block #2686351 by the outdated Geth consumer, which each Parity and the brand new Geth launch think about invalid, appears to have been largely deserted round block #2686516, that means that ~165 blocks had been mined on the now deserted chain. Transactions are broadcast throughout the community so most transactions are probably current on each the outdated Geth chain and the present chain, though mining rewards and transaction charges on the outdated Geth chain are misplaced. No transactions or blocks on the chain that each shoppers will now settle for might be reverted.

The newest geth launch will replace the blockchain from the purpose of the fork, even when it has synced previous the purpose of the fork.

Answer: Geth 1.5.3 was launched.

If you’re utilizing Geth: Obtain the newest consumer right here: https://github.com/ethereum/go-ethereum/releases/tag/v1.5.3

If you’re utilizing Mist: Restart Mist and the auto-update characteristic will immediate you to replace the Geth consumer that Mist makes use of to geth 1.5.3.

If you don’t replace, please remember you’ll be on an invalid chain that’s not supported.

We proceed to advocate that exchanges and different high-value customers run a number of shoppers and robotically halt operations or in any other case enter secure mode in the event that they exit of sync by greater than ~10 blocks.

Ethereum web sites and cell purposes that help you retailer ether and/or make transactions are run by third celebration net primarily based or cell Ethereum suppliers (“Third Social gathering Suppliers”). Third Social gathering Suppliers run their very own Ethereum consumer infrastructure to facilitate their providers. Typically, you do not want to do something should you use a Third Social gathering Supplier reminiscent of MetaMask, Jaxx, and MyEtherWallet. Nonetheless, they could have directions for you. You must examine together with your Ethereum Third Social gathering Supplier to see what actions, if any, they’re recommending for his or her customers.

—————————–

DISCLAIMER
That is an emergent and evolving extremely technical house. If you happen to select to take part, it’s best to know there are various dangers concerned together with however not restricted to dangers like surprising bugs and different technical problems that might lead to lack of ether and different penalties. As well as, if you don’t replace to Geth 1.5.3, you’ll be on an unsupported community. By selecting to make use of the Ethereum platform, you assume the dangers of this emergent platform.