Bot P2Pool Mini / Nano older chains (that did not upgrade to P2Pool v4.16) have been exploited by an unknown attacker targeting the vulnerability patched. Main is probably having the attacker wait to mine a share. Upgrade as soon as possible github.com/SChernykh/p2pool/releases/tag/v4.16

Upgrading will correct the issue and get you to the right chain. See the security advisory github.com/SChernykh/p2pool/security/advisories/GHSA-fm6j-gf38-p925

<rbrunner7> My PR (monero-project/monero #10765) to implement Polyseed in the Monero core software inherits an important design / UX decision from @tobtoht:monero.social 's original patch:

<rbrunner7> To store any eventual (seed offset) passphrase together with the Polyseed, and return it again in info queries, and display it in the CLI wallet app together with the Polyseed.

<rbrunner7> Several important third-party wallet apps currently do it this way.

<rbrunner7> This review comment (monero-project/monero #10765#discussion_r3410572998) from @jeffro256:monero.social shows me that this may be controversial and worthy of broader discussion.

<rbrunner7> I intend to submit it for discussion in today's Monero tech meeting; place and time see here: monero-project/meta #1403

DataHoarder are you still tracking the very old p2pools which surprisingly have hashrate still? the ones that have no updated ever for year(s)?

Yes

Those are not affected in this case

They have a wild variety of other issues, but not this specific one

lol nice. and is there currently one payout address for the attacker? or do they have competition

AFAIK it's just 4BApi3BqzwV6vtGBk7HMY3YKpuw4B1rdDhjwtnN2ibPH52TewXK81B5Thzqta9xnZZ74SAJ18qKzf5DdmoNLmSjq6fdxyLG and it was made for this occasion

<stylus1063:matrix.org> Is there a way to see or estimate how much they've stolen?

We are tracking the other sidechain and you can see this directly if any Monero blocks were found during that time

They seem to not have founds so far on nano or mini

Once most people are updated I can gather any payouts and see how much relative share they got. Don't need to help them with more details yet

what is happening with this? ccs.getmonero.org/proposals/anon-10302025.html

the spam stopped to get it merged and we had peace

no update on public channels that im aware of, selsta ,maybe heard anything? i suggested getting involved with hackerone repo.getmonero.org/monero-project/c…als/-/merge_requests/621#note_35533

jberman is also mentioned in the comments as requesting help from anon for stressnet

no info from me

the spam to get it merged has stopped though so its doing its job

wonder if jberman is getting any help from him

if the CCS is not used I am looking forward to receiving some of the funds just because

<ofrnxmr:xmr.mx> Last i heard from him was his comments in mrl a couple weeks back