Post
Topic
Re: [BBR] Boolberry: Privacy and Security - Guaranteed Since 2014
by
sowle
on 16/07/2018, 22:47:36 UTC
I'd like to clarify that Boolberry is not affected by recently discovered "Monero double counting bug" [1] [2] [3].

The bug was discovered in wallet's incoming tx handler [1]: incoming coins were counted as many times per transaction as tx pub keys were put to the extra (in most cases it should be one). It seems the bug was introduced with the implementation of sub addresses.

Unlike Monero, Boolberry wallet gets tx pub key only once per transaction.
Moreover, for a BBR tx it is explicitly prohibited to have duplicate TX_EXTRA_TAG_PUBKEY entry in its extra.

I consider this bug to be very Monero-specific, so only Monero forks may be affected.

[1] https://github.com/monero-project/monero/pull/3985
[2] https://www.reddit.com/r/Monero/comments/8wl12t/is_this_an_exploit_that_was_fixed_or_what_exactly/
[3] https://medium.com/@graftnetwork/graft-wallets-are-safe-and-not-affected-by-double-counting-bug-5d81d2d44cb8