Decentralized Domain Name Server Project Developers (DNS) Handshake recently fixed a bug, which could lead to an increase in the supply of cryptoasset HNS.
According to the article on the developers of Handshake, The project team eliminated an error in the code protocol. The error has never been used by attackers, but the domain data were not compromised.
“A mistake was discovered in the Handshake protocol, which could lead to an unintentional increase in the total number of HNS in excess of the established limits ", - The article says. “A user with an application for a reserved name could accidentally get a small amount of additional HNS when making changes to his wallet. In the worst case, a malicious miner could generate an almost unlimited amount of additional HNS in each block. The error has never been used by attackers and is now fixed ".
The project team advises the miners and operators of the nodes as soon as possible to execute the update to the latest version. Handshake is a decentralized domain name service, in which users can purchase Handshake names - an alternative to DNS identifiers, traditionally used for access to websites (Handshake users pay for them in HNS). According to the article on the blog, A mistake would give users, who presented the rights to the Handshake names, the opportunity to accidentally create additional HNS.
Former Bitgo developer Matthew Zipkin (Matthew Zipkin) warned the Handshake team about vulnerability 24 Martha. Handshake developer and architect Lightning Network Joseph Poon (Joseph Poon) And his colleague, Handshake developer Christopher Jeffrey (Christopher Jeffrey) Cooked corrections, which were first deployed in HNS mining pools. The project team first turned to F2Pool pools and POOLIN, because the error demanded a review of the Handshake code.
“This is a problem - not just an error of implementation, which can be eliminated using software correction. This is a problem with the design of the Handshake Protocol, and it affects each user and all full nodes. The only way to solve this problem is to use a software, which adds new rules to the protocol and is used by miners ", - said the developers of the protocol.
The Handshake team performed an emergency software, because “vulnerability could not be disclosed until then, until the new protocol rules have been introduced, supported by the maximum hash ".
Recall, that in February, the developer of Bitcoin Core revealed information about vulnerability in earlier versions of a software client. The error was eliminated in the Bitcoin Core release 0.19.
