Join Nostr
2026-09-06 23:30:46 UTC

/dev/fd0 on Nostr: Root Cause Analysis of the security incident done by Kimi K3: ...

Root Cause Analysis of the security incident done by Kimi K3: https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e
So they were caching range proofs and it's a caching bug? Like in that they bypass verification of the rangeproof on a cache hit? That's what I'm seeing now. If so, that's... terrible?

This patch seems to be the fix: https://github.com/ElementsProject/elements/commit/c26d719c29a40da280a825b25657e9c3d8bc7d99