Lisk v0.3.4 — Release Announcement

https://cdn-images-1.medium.com/max/800/1*EGhtq2BHV13MZKxqyLU3jA.jpeg

The latest Lisk client v0.3.4 has been released, and is now available for download via our downloads server. This version is a mandatory update, and is being released due to a critical transaction signature malleability issue found in the ed25519 implementation previously used by Lisk. Please note, in order to protect the network, all active delegates were patched prior to this release.

The implementation previously used: https://github.com/dazoe/ed25519, is based upon the default Ref10 specification, which does not check S
An explanation of the issue is given here: http://crypto.stackexchange.com/questions/14712/non-standard-signature-security-definition-conforming-ed25519-malleability/14719#14719


Read the complete blog post here!