Signum Node
Monthly
Integer overflow in Signum Node's block processing engine prior to v3.9.9 allows a malicious miner to receive an arbitrarily inflated block reward by crafting a block with a negative totalFeeCashBackNqt value. The flaw exists in BlockServiceImpl.applyBlock() and was introduced when the SMART_FEES hardfork (at block ~1,029,000) added fee cash-back and burn accounting logic without overflow guards. No public exploit code has been identified at time of analysis, but the attack is technically feasible for any active network participant with mining capability.
Integer overflow in Signum Node's block processing engine prior to v3.9.9 allows a malicious miner to receive an arbitrarily inflated block reward by crafting a block with a negative totalFeeCashBackNqt value. The flaw exists in BlockServiceImpl.applyBlock() and was introduced when the SMART_FEES hardfork (at block ~1,029,000) added fee cash-back and burn accounting logic without overflow guards. No public exploit code has been identified at time of analysis, but the attack is technically feasible for any active network participant with mining capability.