Decred Consensus Vulnerability: Post-Incident Report

Decred Consensus Vulnerability: Post-Incident Report

Between 12:20 UTC on Sunday August 16th, 2026 and 19:44 UTC on Monday August 17th, 2026, an inflation bug was exploited on Decred mainnet that generated a total of 2,077.96933695 DCR. Upon review, it was found that the bug being exploited was the same as one submitted via the bug bounty program at 03:12 UTC on Wednesday August 12th, 2026, 4 days prior.

The inflation bug exploited consensus code that had been present in the Decred codebase since its launch in February 2016. This bug allowed double spending of inputs due to an unhandled edge case when dealing with the interaction of the regular and stake transaction trees.

Read More

Upgrading Consensus

Upgrading Consensus

Over the next few releases, Decred will enable Proof-of-Stake (“PoS”) miners to vote on proposed consensus changes. This voting will allow Decred users to exercise sovereignty over whether or not to accept hard fork changes, in addition to making other important decisions. Enabling this decision making requires versioning several subsystems: block headers, vote transactions and transaction scripts. Versioning these subsystems allows for reliable and relatively smooth hard forking on an ongoing basis, meaning Decred can continuously upgrade its consensus code provided the PoS miners agree with each of the changes. Further, we have added a series of full-block consensus tests that are automatically run on every pull request to the …

Read More

Clearing the Route

Clearing the Route

The most difficult groundwork required to clear the route to distributed decision making via Proof-of-Stake (“PoS”) in Decred is nearing completion. While many users and interested outsiders are understandably keen to see a steady stream of new features, we decided to instead focus on making important structural upgrades before beginning work on the more substantive features that make use of Decred’s hybrid PoW/PoS consensus system. The major hurdle of upgrading Decred’s chain database format and related code is almost behind us, and it is accompanied by a substantial performance increase when both doing the initial chain sync (roughly 5x faster, depending on hardware) and handling many concurrent RPCs to the chain daemon. …

Read More

Current Projects

Current Projects

Welcome to the Decred Blog!

This is a status update on our projects currently in progress. We are working on several projects within Decred and want to keep users and other interested parties informed of what is going on. Recently, we’ve been pretty quiet on the communication front and have been focusing on getting development work done.

Currently, the major projects underway are

  • Paymetheus, a native Windows GUI for dcrwallet
  • gominer, a cross-platform PoW mining client
  • Web Wallet, a fork of BitPay’s Copay stack
  • Synchronizing the btcd database rewrite to dcrd
  • Adding support for more gRPC API calls to dcrwallet

A short section describing the status and progress on each of these current projects can be found below.

Read More