Pirate Chain developers reported that a validation flaw let unauthorized tokens be created, involving approximately 39.8 million ARRR. Developers blamed implementation errors, not broken cryptography, but the privacy features make the affected funds hard to trace.
Pirate Chain developers reported that unauthorized tokens had been created through a validation flaw. The incident, discussed publicly in mid-October, involved approximately 39.8 million ARRR, an amount the source calls substantial relative to the currency's existing supply.
The project is a privacy coin. Its privacy features made it difficult to follow the affected funds once they entered shielded transaction pools.
Developers blame validation errors, not the cryptography
However, developers attributed the issue to implementation and validation errors rather than showing that the underlying zero-knowledge cryptography had been defeated. A blockchain can use sophisticated privacy technology and still contain flaws in the rules that determine which transactions are accepted.
Meanwhile, exchanges and network participants responded with precautionary restrictions while the team investigated. Because shielded funds do not reveal the same public transaction information as ordinary transparent transfers, outsiders cannot easily determine every movement involving the unauthorized tokens.
A patch does not settle the tokens already created
A normal software patch can prevent a flaw from being exploited again, but it does not automatically settle questions about tokens already created. The project must consider the impact on legitimate holders, exchange trading and the integrity of its recorded supply.
Recovery measures can also be controversial in decentralised networks, especially if they change how previously confirmed activity is treated. For Pirate Chain, the immediate task is technical repair, while the longer-term challenge is persuading investors that the network can provide dependable monetary rules alongside transaction privacy.
Source: Bitcoinist.com
Trading involves risk.
Risk Disclaimer
