Between 12:20 UTC on Sunday August 16th, 2026 and 19:44 UTC on Monday August 17th, 2026, an inflation bug was exploited on Decred mainnet that generated a total of 2,077.96933695 DCR. Upon review, it was found that the bug being exploited was the same as one submitted via the bug bounty program at 03:12 UTC on Wednesday August 12th, 2026, 4 days prior.

The inflation bug exploited consensus code that had been present in the Decred codebase since its launch in February 2016. This bug allowed double spending of inputs due to an unhandled edge case when dealing with the interaction of the regular and stake transaction trees.

Read More

We recently observed the Monero hack in which an attacker compromised getmonero[.]org and replaced one of the binaries with a malicious coinstealer.

The Monero team has good reliability when it comes to security and all indicators seem to show that the attack was sophisticated. Point being no matter what your security posture, this could happen to anyone.

Read More

Recently Google disclosed a new class of vulnerabilities known as Spectre and Meltdown. Folks in the Decred community have been asking questions about the implications of these bugs for Decred. This post delineates implications of these exploits and possible countermeasures. These bugs are akin to traders issuing cancels without back pressure to manipulate the market.

TL;DR

Run your wallet on physical hardware you control and DON’T share with others and DO NOT run a web browser on the same machine. Hardware wallets do not seem to be affected by these bugs but great care should be taken where they are accessed.

Read More