V4.8.0
This is the latest version of Ravencoin core. All node operators should upgrade to this.
This is the same code which was released last week by 2miners. Note that the commit hash in the name of the binaries matches the v4.8.0 tag in the source code.
Full source code is included here as the debug branch.
Compared to v4.6.1, two major bugs are patched in v4.8.0 as well as two minor bugs
-
The asset transfer qty overflow bug
-this lets a malicious actor who has at least qty 1 of an asset create 2^64-qty copies of the asset for himself
-the raven-4.7.0-0b91b62a2 binaries released June 13th also had the patch for this bug
-however, v4.7.0 never activated on mainnet because BIP9 voting did not complete befor v4.8.0 became necessary
-the source code has been released in this repository as PR #1287 -
On Aug 7th a self-titled "security researcher" exploited a mining bug on mainnet, "disclosing" only after his own attack was copied by another attacker
-the bug makes it possible for the miner to bypass the DAG/GPU requirements to easily mine a block
-a side-effect of the bug is that nodes can no longer sync or restart
-the source code has been released in this repository as PR #1289 -
and 4) RPC calls sendmany and sendtoaddress now work properly