Iron Fish Ends Network Support, Confirms Vulnerability Originates from Inflation Issue

Privacy blockchain Iron Fish has announced that it will terminate all remaining support for its network. The team discovered abnormal activity involving wIRON and the ChainPort cross-chain bridge, and after investigation, confirmed that the issue originated from an inflation vulnerability within the Iron Fish blockchain itself, rather than the cross-chain bridge. This vulnerability can be traced back to a Merkle tree implementation code submission in early 2019, which involved the calculation logic of the nullifier in privacy tokens, allowing attackers to double-spend the same token and transfer assets out through the ChainPort cross-chain bridge. The relevant code had been included in both internal and external audits, but the vulnerability went undetected. Iron Fish has now submitted a patch for the fix and attached a detailed review in the related PR. The team will subsequently close and archive the code repository.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.