
More than half of Monero’s P2Pool network got hijacked
Monero’s P2Pool is a decentralized mining pool used to mine Monero blocks and distribute block awards among participants. A vulnerability was discovered that allowed an attacker to “trick” p2pool nodes into mining towards an attacker instead of the actual p2pool network, enabling the attacker to steal nearly all of the block rewards.
An emergency update was released on June 13th, but as of today, more than half of the network still hasn’t updated to it. As a result, more than half of p2pool’s hash rate is going to a single unknown attacker.