Erroneous Proof of Work calculation in geth
Moderate severity
GitHub Reviewed
Published
Nov 24, 2020
in
ethereum/go-ethereum
•
Updated Oct 2, 2023
Description
Reviewed
May 21, 2021
Published to the GitHub Advisory Database
Jun 29, 2021
Last updated
Oct 2, 2023
Credits
-
slavikus Analyst
Impact
An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected.
Specific Go Packages Affected
github.com/ethereum/go-ethereum/consensus
Patches
This issue is also fixed as of 1.9.24. Thanks to @slavikus for bringing the issue to our attention and writing the fix.
For more information
If you have any questions or comments about this advisory:
References