Zerocoin implementation bug

#1

Post by marksamman » Fri, Feb 17, 2017, 10:05 PM UTC

Re: Zerocoin implementation bug

#2

Post by wmf » Fri, Feb 17, 2017, 10:24 PM UTC

What's better that stealing magic Internet money? Creating anonymous magic Internet money out of thin air, then selling it. Brilliant.

But seriously, I'm not sure which is worse: Watching your stolen money move around the blockchain knowing you are helpless to do anything about it, or being provably unable to even tell the difference between "real" and "counterfeit" coins.

Re: Zerocoin implementation bug

#3

Post by hueving » Fri, Feb 17, 2017, 10:25 PM UTC

>trading will resume once pools and exchanges have had time to update their code. A new release will be pushed out pretty soon.

Does this imply this company has the power to stop all trading on the currency? If so, why would anyone ever want to use this?

Re: Zerocoin implementation bug

#4

Post by aftbit » Fri, Feb 17, 2017, 10:30 PM UTC

Hmm, I know about Zcash and Monero, but I haven't read much about Zerocoin. I'll be staying away, especially after a 410 BTC hack. They even cited the ability to detect hacks like this as a key advantage over Zcash.

http://blog.zcoin.tech/zcoin-and-zcash/

Re: Zerocoin implementation bug

#5

Post by jordz » Fri, Feb 17, 2017, 10:33 PM UTC

wmf wrote: post #2

What's better that stealing magic Internet money? Creating anonymous magic Internet money out of thin air, then selling it. Brilliant. But seriously, I'm not sure which is worse: Watching your stolen money move around the blockchain knowing you are helpless to do anything about it, or being provably unable to even tell the difference between "real" and "counterfeit" coins.

Welcome to the world of 2017, where dreams really can come true!

Re: Zerocoin implementation bug

#6

Post by tlrobinson » Fri, Feb 17, 2017, 10:33 PM UTC

hueving wrote: post #3

>trading will resume once pools and exchanges have had time to update their code. A new release will be pushed out pretty soon. Does this imply this company has the power to stop all trading on the currency? If so, why would anyone ever want to use this?

No, it implies they can nicely ask the exchanges to stop all trading, and the exchanges can make that decision or not.

Re: Zerocoin implementation bug

#7

Post by qeternity » Fri, Feb 17, 2017, 10:35 PM UTC

hueving wrote: post #3

>trading will resume once pools and exchanges have had time to update their code. A new release will be pushed out pretty soon. Does this imply this company has the power to stop all trading on the currency? If so, why would anyone ever want to use this?

> Prior to this announcement we had disclosed the hack to the exchanges for them to assist in our investigations.

No, but it does sound like they disclosed the vuln to exchanges before announcing so that trading could be halted and patches applied.

Re: Zerocoin implementation bug

#8

Post by arez » Fri, Feb 17, 2017, 10:37 PM UTC

all these blockchain currencies seem to have really good bug bounty programs, this one gave out almost half a million dollars (410BTC)

Re: Zerocoin implementation bug

#9

Post by ng12 » Fri, Feb 17, 2017, 10:46 PM UTC

> A typographical error on a single additional character in code

Really wonder what this was.

Re: Zerocoin implementation bug

#10

Post by desdiv » Fri, Feb 17, 2017, 10:48 PM UTC

Anyone know which line of code they're talking about?

I took a glance at their Github bug tracker and couldn't find any references to this bug.

[0] https://github.com/zcoinofficial/zcoin/issues?q=is%3Aissue+i...