108: Critical vulnerability fixed ⛑
Jul 20-26 2020
tl;dr
critical vulnerability fixed in Grin 4.0.0
large donation received from Nervos
node patched to v4.0.2
funding request by @paouky
News
Disclosure of CVE-2020-15899, a critical PoW vulnerability that was successfully patched as part of Grin v4.0.0 and the hard fork that happened this month.
Nervos announced a 10 BTC donation to the Grin General fund as part of kicking off an effort to introduce Mimblewimble support on the Nervos blockchain. Contributors are welcome.
Niffler wallet v0.6.0 was released, adds support for slatepack.
Grin++ v1.1.0 was released, post hard fork 3 compatibility and support for slatepack.
Dev
There are 88 open issues in /grin, and 45 open issues in /grin-wallet.
Merged PRs: 3 in /grin | 2 in /grin-wallet | 2 unique contributors
The Grin node was patched to v4.0.2 to fix an API bug.
@yeastplume weekly update.
Postman collection of all Grin API calls, by @quentinlesceller.
The last dev meeting covered many topics at a high level, including replay attacks & mitigation, 1-sided txs, duplicate outputs, NRD, expiring kernels, coinbase outputs, and Bulletproofs+.
The next bi-weekly developer meeting is scheduled for Tue Aug 04 @ 15:00 UTC in grincoin#dev on Keybase. You can add topics to the agenda.
Governance
Community member @paouky submitted a funding request to work full time on introduction and documentation resources for three months. This request will be discussed in tomorrow’s governance meeting.
The next bi-weekly governance meeting is scheduled for Tue Jul 28 @ 15:00 UTC in grincoin#general on Keybase. You can add topics to the agenda.
Research
@kurt wrote a paper on unique kernels and his proposed solution without transaction expiry.
@phyro on proving output attachment to anchor graph.
RFCs
Draft
Parallel IBD [node-dev]
Open
QA Team [core]
Deprecate HTTP(S) Transactions [wallet-dev]
Final Comment Period
-
Accepted
-
Closed
-
“Abstract Grin Heart” Artwork in this edition is by @LovelyGrin.
This newsletter is curated by Daniel Lehnberg. Any views expressed are personal and do not represent an official position of the Grin project.
Got news or articles you would like to include? Any feedback or other suggestions? drop me a line on daniel.lehnberg-at-protonmail.com or find me on Keybase.