<loop.ster:matrix.org> A critical vuln was found in Beam's Bulletproof implementation. They wrote their own impl, so Monero is presumably unaffected but interesting nonetheless beam.mw/blog/news/hardfork-six

<rbrunner7> From the blog entry: "This was a very difficult vulnerability to discover, and it is worth noting that before the release of its mainnet in 2019, Beam code underwent security audits by several companies, which did not identify it:"

<rbrunner7> Also note how at least two LLMs failed to find the bug when they let them loose on the code after the bug became known.

<rbrunner7> If I hear such things, it seems easy to despair ...

The next steps is more interesting, where they are forcing disclosing amounts

<rbrunner7> Oh yes. Did not notice this yet. That sounds drastic, doesn't it? Although it sounds as if it's not yet decided whether they really pull that through.

it's like the PQ turnstile, but without that benefit

> Attempts to violate this would be prevented and flagged.

except if it had happened, someone can pass enough one way and now everyone else is locked behind :)

.merge+ 10808

Added

.merges

10808 10818

.merge+ 10843 10844 10853

Added

New binaries v0.18.5.1 are now available at www.getmonero.org