An Attack has been identified and exploited involving the daoThe attacker is presently attempting to siphon the ether from the DAO into a new DAO. This attack is a Vulnerability to recursive calls, where the assailant calls the “split” function and then calls it again inside the split, gathering the ether multiple times in one transaction.
The Leaked ether is located in a DAO-child https://etherchain.org/account/0x304a554a310c7e546dfe434669c62820b7d83490The attacker cannot withdraw any ether until at least 27 days after the creation window for the secondary DAO.. This particular issue only affects DAO Ethereum It is completely safe..
A software fork is currently being considered. (NO ROLLBACK; transactions and blocks will not be reversed. “rolled back”) To enable you to invalidate any transaction that entails calls/calling code/delegated calls or reduces the balance of your account with code hash 0x7278d050619a624f84f51987149ddb439cdaadfba5966f7cfaea7ad44340a4ba (i.e. The DAO and children lead to the transaction (not only the call but the transaction) being invalid at block 1760000 (precise number subject to change until code is released). To prevent the perpetrator from withdrawing their ether after the 27-day windowThis We will have enough time to discuss future steps and provide token holders the opportunity to reclaim their Ethereum.
Miners The pools and banks should resume normal transactions, wait for soft fork codes, and be ready to download and run the code if they agree to proceed in this manner. Ethereum ecosystem. DAO token holders should be composed and ethereum customers should remain steady. Exchanges Should feel confident in resuming ETH trades
Contract Autors should be cautious about (1) recursive calling bugs and (2) listening to the opinions of others. Ethereum The contract programming community will likely be released next Wednesday on mitigating these bugs and (2) avoid creating contracts with more than $10million of value. Sub-token contracts and systems whose value are defined by social consensus, outside of the consortium, will not be included. Ethereum platform and which can easily be “forked” If a bug (e.g. MKR) is to be used until the community has more experience in bug mitigation and/or better tools.
DevelopersComputer scientists, cryptographers, as well as cryptographers should be aware that any high-level tool (including IDEs and formal verification debuggers token execution) that facilitates writing secure smart contracts must be noted. Ethereum are prime candidates for Developer Grants, Blockchain Labs Grants Y String Self Funding Grants.
This This post will be kept updated.
