Quote from: webster22 on January 17, 2018, 12:32:26 AM

Idea is promising. Homepage sells well. Web wallet isnt loading. Anyone try the pc clients?

It's kinda strange, but it's actually loading if you are patient.

The browser doesn't show that it's loading, but it is, and I think it's like that only the first time. The desktop app loads fine for me.

Quote from: 616westwarmoth on January 17, 2018, 03:03:57 AM

Yeah, hopefully it will be quiet for a while. This round of updates was spawned by a bug that I presume wasn't apparent since the code is based on DASH and our coin volume is much higher (so the bug would never appear in their environment since it was based on 10M Insta-Send, which is 2.5M more than the current circulation of DASH). Then since the exchanges were down, it was a great time to try and tame what is suspected to be a huge bot-net that is likely working against the coin.

Barring any other bugs the Dev said things should stay quiet with a lot of testing in Testnet until hopefully summer.

Actually, it isn't related to the number of coins, but the number of masternodes controlled by a single entity. Since Instant Send goes through 6 masternodes for confirmations, someone who has 6 or more masternodes could do something to improve their chances of being selected for a transaction. Then they could send themselves some coins, then double spend it and also confirm the second tx with their masternodes, even though that second transaction would be invalid otherwise.

Before this BiblePay update, I was researching about Dash Instant Send and found about that bug, which was fixed by Dash at the time, but BiblePay was forked from Dash just before the version in which that was fixed. So I notified Rob about my findings, and he was very quick to issue a patch. He said 10M BBP just because that's the rough amount when you multiply the amount of coins needed for 6+ masternodes. So for Dash it would be "just" 6000+ coins. I presume he said it like that to not expose how it's done until it's patched. Now that more than 90% of nodes are on 1.0.8.1, I guess it's fine to share for learning purposes?

Read more about the vulnerability here:
https://themerkle.com/dash-developers-disable-instantsend-on-the-network/
There's also a forum link in the article which goes into more depth.