Decred patches critical flaw that could enable mixing deanonymization attack

Decred has released a mandatory software patch v2.1.6 to fix a critical consensus vulnerability, a potential periodic mixing deanonymization attack, and several network denial-of-service risks. Summary Decred has released mandatory v2.1.6 to fix a critical consensus security vulnerability. The patch prevents a potential periodic deanonymization attack involving Decred’s transaction mixing system. Several potential network denial of service attack routes and SPV validation issues have also been addressed. Users running older versions have been urged to upgrade to avoid operating on a different network fork. Decred said in an Aug. 19 post on X that users should upgrade to the new release as soon as possible because the patch contains security changes affecting consensus, transaction mixing, and network operations. The project also said the update improves how mixing sessions expire. A mandatory patch release for Decred is now available with the following changes:– Critical consensus-related security fix– Prevents a potential periodic deanonymization mixing attack– Several fixes for potential network-related denial-of-service (DoS) attacks– Improved…— Decred (DCR) (@decredproject) Aug...