Security alert [11/24/2016]: Consensus bug in geth v1.4.19 and v1.5.2

Security Alert

Affected configurations: Geth

Severity: Excessive

Abstract:  A difficulty has been recognized with Geth’s journaling mechanism. This triggered a community fork at block #2686351 (Nov-24-2016 14:12:07 UTC). The brand new Geth launch 1.5.3 fixes the journaling situation and repairs the fork.

Particulars: Geth was failing to revert empty account deletions when the transaction inflicting the deletions of empty accounts ended with an an out-of-gas exception. An extra situation was discovered in Parity, the place the Parity consumer incorrectly did not revert empty account deletions in a extra restricted set of contexts involving out-of-gas calls to precompiled contracts; the brand new Geth conduct matches Parity’s, and empty accounts will stop to be a supply of concern in basic in about one week as soon as the state clearing course of finishes.

The chain that was created from block #2686351 by the previous Geth consumer, which each Parity and the brand new Geth launch take into account invalid, appears to have been largely deserted round block #2686516, that means that ~165 blocks had been mined on the now deserted chain. Transactions are broadcast throughout the community so most transactions are possible current on each the previous Geth chain and the present chain, though mining rewards and transaction charges on the previous Geth chain are misplaced. No transactions or blocks on the chain that each purchasers will now settle for will likely be reverted.

The newest geth launch will replace the blockchain from the purpose of the fork, even when it has synced previous the purpose of the fork.

Answer: Geth 1.5.3 was launched.

If you’re utilizing Geth: Obtain the most recent consumer right here:

If you’re utilizing Mist: Restart Mist and the auto-update characteristic will immediate you to replace the Geth consumer that Mist makes use of to geth 1.5.3.

If you don’t replace, please remember you may be on an invalid chain that’s not supported.

We proceed to advocate that exchanges and different high-value customers run a number of purchasers and robotically halt operations or in any other case enter secure mode in the event that they exit of sync by greater than ~10 blocks.

Ethereum web sites and cellular purposes that permit you to retailer ether and/or make transactions are run by third social gathering internet primarily based or cellular Ethereum suppliers (“Third Party Providers”). Third Occasion Suppliers run their very own Ethereum consumer infrastructure to facilitate their companies. Usually, you do not want to do something for those who use a Third Occasion Supplier similar to MetaMask, Jaxx, and MyEtherWallet. Nevertheless, they could have directions for you. It is best to test along with your Ethereum Third Occasion Supplier to see what actions, if any, they’re recommending for his or her customers.


That is an emergent and evolving extremely technical area. When you select to take part, it’s best to know there are numerous dangers concerned together with however not restricted to dangers like sudden bugs and different technical problems that might consequence in lack of ether and different penalties. As well as, if you don’t replace to Geth 1.5.3, you may be on an unsupported community. By selecting to make use of the Ethereum platform, you assume the dangers of this emergent platform.

DailyBlockchain.News Admin

Our Mission is to bridge the knowledge gap and foster an informed blockchain community by presenting clear, concise, and reliable information every single day. Join us on this exciting journey into the future of finance, technology, and beyond. Whether you’re a blockchain novice or an enthusiast, is here for you.
Back to top button