Overview
- A malformed delegation transaction on Nov. 21 exploited a 2022 deserialization bug, causing the Cardano blockchain to diverge into two parallel chains.
- An individual using the X handle Homer J acknowledged submitting the transaction and apologized, while Charles Hoskinson alleged a premeditated, personal attack by a disgruntled stake pool operator.
- Intersect reported that the exploit had been exercised on testnet the day before mainnet, a detail it said heightened suspicions of intent.
- Major exchanges paused ADA deposits and withdrawals as they monitored consensus, with Coinbase halting the longest period, while DeFi apps and explorers briefly showed conflicting states and transaction times lengthened.
- Developers issued hotfixes and coordinated a resynchronization to converge on a single chain, and Hoskinson said law enforcement, including the FBI, has been notified as investigations continue.