Post
Topic
Board Announcements (Altcoins)
Re: [ANN][SPR] SpreadCoin | True Decentralization (No Pools)
by
MyFarm
on 14/12/2014, 19:39:54 UTC
Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes.
DarkCoin wallet checks the following things for each new block:  
1) There is a payment to master node.
2) There is a payment with the same amount as a payment to master node should be (30%).
But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network just fine but I haven't tested it on testnet to be 100% sure.
Awesome! (if the vulnerability works) We can be the first coin to have the masternode vulnerability fixed!
While I understand your perspective, it my opinion, it would be wrong not to notify the Darkcoin dev of any potential vulnerabilities.