/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Bitcoin developer describes how he found a critical blockchain splitting vulnerability, now fixed, in competing Bitcoin Cash cryptocurrency

My experience disclosing a critical Bitcoin Cash vulnerability  —  On April 25, 2018, I anonymously and privately disclosed a critical vulnerability …

Cory Fields

Context & Ripple Effects

Cory Fields' writeup documents how he found and then anonymously disclosed a critical Bitcoin Cash vulnerability that could have split its blockchain — fixed before any attacker exploited it. The anonymous route mattered: a public announcement mid-disclosure could have crashed the price of a coin whose entire value rests on chain integrity.

The disclosure lands in a stretch where consensus-level bugs kept surfacing across major cryptocurrencies: weeks later Bitcoin Core patched a flaw that let attackers mint coins above the 21M cap (the inflation bug), on the heels of a separate Core fix for a cheap network-shutdown vector, and months later Zcash disclosed an in-house-found counterfeiting flaw. Fields' story is the template case for how these get handled quietly.

First-order effects

  • Bitcoin Cash operators — miners, exchanges, full-node runners — had to patch immediately or risk accepting blocks from a divergent chain, the failure mode that permanently forks a cryptocurrency.
  • Fields' choice to disclose anonymously and privately meant Bitcoin Cash avoided the market panic that a public 'critical bug live now' headline would have triggered while the fix propagated.

Second-order effects

  • The episode put every client team under scrutiny: when Bitcoin Core itself was later shown to carry an inflation-class bug, it became clear no single implementation — even the most-audited one — could be treated as a trust anchor by exchanges and custodians.
  • Wallet and infrastructure providers absorbed the lesson downstream, a pattern that resurfaced when researchers exposed double-spending flaws in Ledger Live, Edge, and Breadwallet.

Third-order effects

  • If this cadence holds, coordinated private disclosure becomes the de facto standard for consensus bugs, with developers like Fields effectively performing unpaid, unattributed red-teaming of rival chains — a security commons that spans competing cryptocurrencies.
  • Structurally, repeated near-misses push the ecosystem toward client diversity and formal methods such as proof-carrying security reports, because each incident demonstrates that a single exploitable consensus flaw is an existential, not incremental, risk.

The trend: Major cryptocurrencies are converging on quiet, developer-to-developer disclosure of consensus-breaking bugs as the norm, treating chain-splitting flaws as existential risks managed outside public view.