Iron Fish Plans to End Network Support After Inflation Bug

Iron Fish plans to end all remaining network support for its privacy-focused blockchain after an inflation flaw was linked to abnormal activity involving wIRON and the ChainPort bridge.

The team said the activity surfaced several days ago, and a joint investigation traced its cause to Iron Fish's own blockchain rather than the bridge. The defect can let an attacker spend the same privacy note more than once, then move assets through ChainPort.

The flaw traces to code committed in early 2019, when Iron Fish implemented its Merkle tree. The affected logic calculates a nullifier, a marker used to prevent a note from being spent twice. The team said the code had been included in internal and external audits, but the vulnerability was not found.

Iron Fish has submitted a patch and attached a detailed postmortem to the related pull request. The team plans to close and archive its code repository after that work.