Decred (DCR), a long-established PoW blockchain project, released a post-incident report regarding a consensu…

Decred (DCR), a long-established PoW blockchain project, released a post-incident report regarding a consensus vulnerability. The report stated that an inflation vulnerability was exploited on the mainnet between August 16th and 17th, resulting in the abnormal generation of 2,077.97 DCR. This vulnerability, which has existed since Decred's launch in 2016, allows for double-spending by exploiting boundary conditions in the interaction between the normal transaction tree and the staking transaction tree. Notably, the same vulnerability was submitted through a bug bounty program four days before the mainnet attack. Decred released an emergency patch (v2.1.6) on August 18th and decided not to roll back the blockchain. The team stated that this abnormal issuance would not exceed the supply limit of 21 million DCR.