05:06:27 Bot P2Pool Mini / Nano older chains (that did not upgrade to P2Pool v4.16) have been exploited by an unknown attacker targeting the vulnerability patched. Main is probably having the attacker wait to mine a share. Upgrade as soon as possible https://github.com/SChernykh/p2pool/releases/tag/v4.16 05:06:27 Upgrading will correct the issue and get you to the right chain. See the security advisory https://github.com/SChernykh/p2pool/security/advisories/GHSA-fm6j-gf38-p925 06:03:50 My PR (https://github.com/monero-project/monero/pull/10765) to implement Polyseed in the Monero core software inherits an important design / UX decision from @tobtoht:monero.social 's original patch: 06:04:01 To store any eventual (seed offset) passphrase together with the Polyseed, and return it again in info queries, and display it in the CLI wallet app together with the Polyseed. 06:04:20 Several important third-party wallet apps currently do it this way. 06:04:32 This review comment (https://github.com/monero-project/monero/pull/10765#discussion_r3410572998) from @jeffro256:monero.social shows me that this may be controversial and worthy of broader discussion. 06:04:53 I intend to submit it for discussion in today's Monero tech meeting; place and time see here: https://github.com/monero-project/meta/issues/1403 06:08:39 https://www.reddit.com/r/Monero/comments/1u683ow/p2pool_vulnerability_is_being_actively_exploited/ 06:41:57 DataHoarder are you still tracking the very old p2pools which surprisingly have hashrate still? the ones that have no updated ever for year(s)? 06:42:16 Yes 06:42:30 Those are not affected in this case 06:42:46 They have a wild variety of other issues, but not this specific one 06:44:02 lol nice. and is there currently one payout address for the attacker? or do they have competition 06:50:47 AFAIK it's just 4BApi3BqzwV6vtGBk7HMY3YKpuw4B1rdDhjwtnN2ibPH52TewXK81B5Thzqta9xnZZ74SAJ18qKzf5DdmoNLmSjq6fdxyLG and it was made for this occasion 06:51:47 Is there a way to see or estimate how much they've stolen? 06:52:17 We are tracking the other sidechain and you can see this directly if any Monero blocks were found during that time 06:52:42 They seem to not have founds so far on nano or mini 06:54:49 Once most people are updated I can gather any payouts and see how much relative share they got. Don't need to help them with more details yet 16:09:05 what is happening with this? https://ccs.getmonero.org/proposals/anon-10302025.html 16:15:53 the spam stopped to get it merged and we had peace 16:17:33 no update on public channels that im aware of, selsta ,maybe heard anything? i suggested getting involved with hackerone https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/621#note_35533 16:18:43 jberman is also mentioned in the comments as requesting help from anon for stressnet 16:19:25 no info from me 16:20:21 the spam to get it merged has stopped though so its doing its job 16:21:44 wonder if jberman is getting any help from him 16:23:14 if the CCS is not used I am looking forward to receiving some of the funds just because 17:19:56 Last i heard from him was his comments in mrl a couple weeks back