Gridcoin - The Bad
In this post we will show why Gridcoin is insecure and probably will never achieve better security. Therefore, we are going to explain two critical implementation vulnerabilities and our experience with the core developer in the process of the responsible disclosure. In our last blog post we described the Gridcoin architecture and the design vulnerability we found and fixed ( the good ). Now we come to the process of responsibly disclosing our findings and try to fix the two implementation vulnerabilities ( the bad). Update (15.08.2017): After the talk at WOOT'17 serveral other developers of Gridcoin quickly reached out to us and told us that there was a change in responsibility internally in the Gridcoin-Dev team. Thus, we are going to wait for their response and then change this blog post accordingly. So stay tuned :) Update (16.08.2017): We are currently in touch with the whole dev team of Gridcoin and it seems that they are going to fix the vulnerabilities with ...