GRAFT WALLETS ARE SAFE AND NOT AFFECTED BY DOUBLE COUNTING BUG
As you probably know, most exchanges recently took offline all CryptoNote wallets (including Monero) due to Double Counting Bug. We tried to reproduce an exploit of the double counting bug with GRAFT master (current GRAFT version) to prove that GRAFT is not affected. In order to do that, we have prepared a special testing branch with the exploit https://github.com/graft-project/GraftNetwork/tree/double-accounting-exploit, where we duplicated the “add_tx_pub_key_to_extra” call inside “construct_tx_and_get_tx_key(…)” method in cryptonote_core/cryptonote_tx_utils.cpp.
The destination wallet with the bug was supposed to show the wrong (doubled) balance after the transfer from the exploited source wallet.
Now, we are transferring 10 GRFT from the exploited source wallet (private testnet), trying to “trick” the destination wallet:
The destination wallet after the transfer shows the correct amount (30 GRFT):
Here is the destination wallet log:
So this case is already handled in current Graft version (1.2.1), which is based on Monero v11, and the bug seems to be introduced in Monero v12, where subaddress functionality was implemented.
Therefore, current GRAFT wallets are safe for all users including exchanges.
Congratulations @graft! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :
Click on the badge to view your Board of Honor.
If you no longer want to receive notifications, reply to this comment with the word
STOPTo support your work, I also upvoted your post!
Do not miss the last post from @steemitboard:
SteemitBoard World Cup Contest - Russia vs Croatia
Participate in the SteemitBoard World Cup Contest!
Collect World Cup badges and win free SBD
Support the Gold Sponsors of the contest: @good-karma and @lukestokes
Hi, I have read on your website that Graft is open source. Do you have Github repo for this?