Buyer beware - I am posting this publicly only because of the severity of the issue. In the process of reviewing WoC for listing yesterday a major exploit was uncovered in the code.
WarOfCoins has what appears to be an exploit within it that allows for a block to be mined with any amount of coins desired. This means that anyone else can mine a block with say 100,000 coins in it, rather than just 5 coins as it should be.
You can check the code here: https://github.com/warofcoins/warofcoins/blob/master/src/main.cpp#L1623
The PoW "amount of coins" check is commented out and thus blocks will not actually be checked.
I can't speak for the intention of the code, but only for its existence. C-Cex was notified last night of the discovery.
thanks,
richie@bittrex
WarOfCoins has what appears to be an exploit within it that allows for a block to be mined with any amount of coins desired. This means that anyone else can mine a block with say 100,000 coins in it, rather than just 5 coins as it should be.
You can check the code here: https://github.com/warofcoins/warofcoins/blob/master/src/main.cpp#L1623
The PoW "amount of coins" check is commented out and thus blocks will not actually be checked.
I can't speak for the intention of the code, but only for its existence. C-Cex was notified last night of the discovery.
thanks,
richie@bittrex
Now that dev has fixed the issue, does it mean that it will be on Bittrex
