More than half of Monero’s P2Pool network got hijacked

More than half of Monero’s P2Pool network got hijacked

Monero’s P2Pool is a decentralized mining pool used to mine Monero blocks and distribute block awards among participants. A vulnerability was discovered that allowed an attacker to “trick” p2pool nodes into mining towards an attacker instead of the actual p2pool network, enabling the attacker to steal nearly all of the block rewards.

An emergency update was released on June 13th, but as of today, more than half of the network still hasn’t updated to it. As a result, more than half of p2pool’s hash rate is going to a single unknown attacker.

reddit.com
u/EmperorBale — 22 days ago
▲ 138 r/MoneroMining+3 crossposts

P2Pool vulnerability is being actively exploited, update to v4.16 NOW

Update: P2Pool-main has been attacked too, today (June 16th) at 00:02:46 UTC - see the log https://p2pool.io/p2pool_main_attack.log.xz All P2Pool miners, you must update to v4.16 immediately if you don't want to mine to the attacker's wallet! Update here: https://github.com/SChernykh/p2pool/releases/latest

Update 2: Me and DataHoarder are currently running a counter-attack by mining malformed blocks ourselves - to hijack the payouts from the attacker and redistribute them to miners later. Currently doing it on p2pool-mini. We will ask the community for more hashrate later, once everything is set up properly.

Both P2Pool Mini / Nano older chains (that did not upgrade to P2Pool v4.16) have been exploited by an unknown attacker targeting the vulnerability patched: https://github.com/SChernykh/p2pool/security/advisories/GHSA-fm6j-gf38-p925

P2Pool Main is probably having the attacker wait to mine a share.

Upgrade as soon as possible https://github.com/SChernykh/p2pool/releases/tag/v4.16

More than half of P2Pool Mini/Nano are still not updated, so their hashrate was lost to the attacker:

https://preview.redd.it/ofujl1orzd7h1.png?width=1613&format=png&auto=webp&s=3c863342a427fb0022fadb8a707faffc9dfc4484

reddit.com
u/EmperorBale — 22 days ago

Warning to anyone mining on nano p2pool

I just noticed that the recent security issue that was fixed today was used against the nano chain, and there are basically 2 sidechains running, one of which has a decent amount of shares controlled by a single node. There are 2 sidechains because the attacker controlled one gets rejected by any nodes running the patched version released today, but there are still significant amount of nodes that are unpatched (not sure how much, hopefully someone else can analyze it better than me).

You can see that nano was impacted because on the p2pool observer, every recent share listed is from a v4.16 node, because it is observing only the patched sidechain. You can compare it to mini and regular p2pool to see the difference.

Anyway, make sure to update.

UPDATE: P2Pool mini was also just attacked

reddit.com
u/EmperorBale — 24 days ago
▲ 16 r/Monero

Warning to anyone mining on nano p2pool

I just noticed that the recent security issue that was fixed today was used against the nano chain, and there are basically 2 sidechains running, one of which has a decent amount of shares controlled by a single node. There are 2 sidechains because the attacker controlled one gets rejected by any nodes running the patched version released today, but there are still significant amount of nodes that are unpatched (not sure how much, hopefully someone else can analyze it better than me).

You can see that nano was impacted because on the p2pool observer, every recent share listed is from a v4.16 node, because it is observing only the patched sidechain. You can compare it to mini and regular p2pool to see the difference.

Anyway, make sure to update.

reddit.com
u/EmperorBale — 24 days ago

Possible hereditary pancreatitis?

I am a 22 year old male in college. I have been underweight pretty much my whole life and have been having episodes of sharp epigastric pain since I was 11. I never went to the doctor about these episodes since they usually went away on their own and was never too severe. Recently, I went to see a dietitian at my college, who recommended that I get bloodwork done to make sure there was nothing preventing me from gaining weight. By pure coincidence, I had an episode of that mild sharp epigastric pain the day before I got my blood drawn, and they just so happened to check my lipase for one of the tests. Keep in mind, I didn’t even mention the pain since it happens so frequently for me, and i’m not even sure why they wanted to check my lipase since we didn’t even suspect anything wrong with my pancreas (not sure if checking lipase is standard for blood draws).

My lipase was 249 and the upper limit on this test was 53, which puts me at about 4.7x the upper limit, hence pancreatitis was suspected for me since its above 3x. I am aware that in acute pancreatitis the lipase is typically much higher than that, but regardless we began suspecting a problem with my pancreas. Also, the pain I experienced the day before the blood test was no different than the pain I had always experienced, which is why I am suspecting those sharp epigastric pain episodes have actually been my pancreas this whole time.

I should also mention that my grandpa had necrotizing pancreatitis and had to get multiple pancreatic surgeries because of it, but nobody else in my family has had issues with their pancreas. Also funny enough, I managed to get the same GI doctor that operated on my grandpa which is nice.

So anyway, I did a MRI + MRCP and it was completely normal. Then recently I did an EUS and the findings were: “the parenchyma of the pancreas had extensive fine echogenic strands. The main pancreatic duct was uneven in caliber, with a small segment of prominent duct in the body, lined by echogenic duct wall.”

According to google, these findings don’t necessarily indicate pancreatitis, however due to me being severely underweight (BMI 15.8) + episodes of epigastric pain since 11 + the lipase blood test, the doctor concluded that I likely have early chronic pancreatitis. The doctor also took a duodenal biopsy and I did a pancreatitis genetic test, but both tests are still pending.

I have started taking creon with all my meals, which is super annoying to do, but my poop is looking much better now (it used to be yellow and watery nearly every time, havnt seen any yellow poop since starting the creon).

So I am curious if anyone else has hereditary pancreatitis, i’m also curious if this could be anything else, as I know lipase can be elevated for reasons other than pancreatitis

reddit.com
u/EmperorBale — 2 months ago