Share this article
New Vulnerability May Prevent Ethereum Soft Fork
One possible solution to the attack that led to the draining of funds from The DAO is now believed to include an exploit of its own.
Updated Sep 11, 2021, 12:21 p.m. Published Jun 28, 2016, 9:00 p.m.
Make us preferred on Google
The number of options available to the ethereum development community as it searches for a way to recover investor funds lost when The DAO was compromised is dwindling with news that a vulnerability in one of the more prominent solutions has been discovered.
As it turns out, a soft fork that would have sought to blacklist the ether address that holds the confiscated funds, preventing it from conducting any transactions, actually exposes a previously undetected attack vector.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
In a post on the Ethereum Foundation blog, developer Felix Lange explains that the exploit would slow down mining and prevent the completion of legitimate transactions.
Lange wrote:
"Available options are being considered. The community can avoid any negative consequences of the soft fork by voting against it until a better solution has been found."
Launched earlier this year, The DAO was the first large-scale distributed autonomous organization (DAO) designed with a leaderless governance structure and with the intent to distribute ether donated by contributors to new ethereum projects.
After raising more than $150m worth of ether, a flaw in the software was exploited, letting a malicious member move a portion of the funds into another DAO under their control.
Due to the way The DAO was coded, it is widely believed that the siphoned funds won’t be accessible to the perpetrator until 14th July. But in Lange’s post today, he added that "there is no immediate urgency to block transactions while further proposals are being worked out".
The development comes as ethereum miners, or those validating transactions and competing to create blocks on the platform, have until this Thursday to vote for the soft fork patch, thus implementing the soft fork.
The fork in the road
While Lange proposed two temporary workarounds to the vulernabilty, lead distributed application developer at ethereum, Fabian Vogelsteller, was less optimistic on Twitter.
Vogelsteller wrote:
"With the soft fork being vulnerable there are two options left: a hardfork only affecting The DAOs, or doing nothing."
The hard fork option, which would essentially roll back the ethereum blockchain to erase the transactions, has been controversial to some members of the community who worry it might undermine future faith in the reliability of the network.
Doing nothing has also been controversial, as it would give the person who used The DAO’s code to move funds to a separate account the ability to profit at the expense of the 23,000 token-holding members of the organization.
Bent fork image via Shutterstock
Correction: This article has been updated to correct a misspelled surname.
More For You
Pudgy Penguins is building a multi-vertical consumer IP platform — combining phygital products, games, NFTs and PENGU to monetize culture at scale.
What to know:
Pudgy Penguins is emerging as one of the strongest NFT-native brands of this cycle, shifting from speculative “digital luxury goods” into a multi-vertical consumer IP platform. Its strategy is to acquire users through mainstream channels first; toys, retail partnerships and viral media, then onboard them into Web3 through games, NFTs and the PENGU token.
The ecosystem now spans phygital products (> $13M retail sales and >1M units sold), games and experiences (Pudgy Party surpassed 500k downloads in two weeks), and a widely distributed token (airdropped to 6M+ wallets). While the market is currently pricing Pudgy at a premium relative to traditional IP peers, sustained success depends on execution across retail expansion, gaming adoption and deeper token utility.
More For You
Anthony Scaramucci-linked AVAX One tumbles 32% on uncertainty around shareholder sales
The firm, which holds AVAX tokens and related Avalanche ecosystem assets, registered roughly 74 million shares held by insiders.
What to know:
- Shares of AVAX One, a digital asset treasury firm advised by Anthony Scaramucci, fell more than 30% after the company filed to register up to nearly 74 million shares held by insiders as available for sale.
- The registration, which enables early investors to resell previously restricted stock, stoked fears of dilution.
- AVAX One's move reflects broader pressures on crypto-native public firms whose stocks trade at steep discounts to the value of their token holdings, though it remains unclear if or when the registered shares will be sold.
Top Stories
