Decred Consensus Vulnerability: Post-Incident Report

Decred Consensus Vulnerability: Post-Incident Report

Between 12:20 UTC on Sunday August 16th, 2026 and 19:44 UTC on Monday August 17th, 2026, an inflation bug was exploited on Decred mainnet that generated a total of 2,077.96933695 DCR. Upon review, it was found that the bug being exploited was the same as one submitted via the bug bounty program at 03:12 UTC on Wednesday August 12th, 2026, 4 days prior.

The inflation bug exploited consensus code that had been present in the Decred codebase since its launch in February 2016. This bug allowed double spending of inputs due to an unhandled edge case when dealing with the interaction of the regular and stake transaction trees.

Read More

Bison Relay: The Sovereign Internet

Bison Relay: The Sovereign Internet

Introduction

Today I am releasing a new Decred-based communications tool, Bison Relay, that enables free speech, free association, and can act as a fully independent alternative stack to the web, whose substantial problems were outlined in my prior article. Bison Relay is an asynchronous client-server protocol that makes heavy use of the Decred Lightning Network (“LN”), where every message sent is encrypted, metadata-minimized, and paid for via LN micropayment. The Bison Relay server is accountless and every message is handled individually, where it is both paid for prior to being sent and then received. Bison Relay tightly integrates payments, messaging, and social media, and this initial release implements a peer-to-peer …

Read More

Trapped in the Web

Trapped in the Web

The web is the world’s largest software platform and is, correspondingly, a central pillar of modern society. Large public corporations have built their fortunes by creating web-based businesses, investors in those corporations have reaped huge profits, and the web has become a ubiquitous concept in day-to-day life. However, over the past 33 years since the web was invented in 1989 by Tim Berners-Lee, its initial role as a means to educate and liberate has evolved into a means to oppress, manipulate and indoctrinate. This darker side of the web emerging is due to increasingly aggressive efforts of governments and large corporations working in tandem to control public opinion. While many are keen to attribute these dark patterns gaining …

Read More

What is wrong with Decred?

What is wrong with Decred?

Decred has been in production for nearly 7 years, generates a reliable stream of useful, new, non-trivial technology, and has a dedicated core set of developers and users, but it has struggled to gain wider recognition and corresponding adoption. Many people in the cryptocurrency space have heard of or held Decred and have a positive opinion of it. Despite this nominal awareness and Decred’s solid technological underpinnings, it would seem that recognition and adoption are hard to come by. Critics often suggest we “market harder”, ignoring that we have already made substantive efforts over a number of years to pursue conventional marketing, spent a few million USD doing it, and done so under the direction of several marketing leads – all …

Read More

Treasury Expenditure Policy Bug

Treasury Expenditure Policy Bug

Payments from the new decentralized treasury infrastructure are currently blocked and will be delayed until a new consensus vote takes place to implement a change to the consensus rules. Contractor payouts will continue via the legacy treasury until the changes are deployed and activated.

No funds from either the decentralized treasury or from the legacy treasury are at risk of being lost.

The only practical consequences of this issue are some inconvenience for operators of the Contractors Management System (CMS), the need for a new consensus vote to happen, and some delay for the new treasury to effectively start working. All funds in the network (including, but not limited to the treasury) are safe.

Read More