Also covers SecurityAave restricts new tBTC exposure. Repayments and withdrawals continue.Security ·
Iron Fish ends support. Its patch is not a repair of the existing chain.

Iron Fish has announced the end of its remaining network support after an inflation-bug investigation. Its published technical findings make an important distinction: the released fix is intended for a new chain, not a compatible upgrade to the existing mainnet's history.
Reports of the team's 30 October statement describe abnormal activity involving wrapped IRON and the ChainPort bridge. The team attributed the underlying fault to Iron Fish itself. That attribution should not be turned into an allegation that the bridge introduced the vulnerability.
The official postmortem explains how one owned note could be spent again without the duplicate-spend check recognising it. It traces the problematic tree-padding design to a February 2019 prototype. The finding concerns repeated spending of an attacker's own note; it does not establish an ability to spend any other user's note.
The document labels its conclusions draft technical findings and says historical transaction attribution remains open. Reproducing a code flaw does not, by itself, identify every affected transaction or quantify the loss. We are not attaching a speculative loss total to it.
Because the correction changes the chain's consensus roots, the document says it requires a new genesis. Existing balances are not thereby migrated or restored. Ending the team's support also does not prove that every independently operated node has stopped.
A repair kit designed for a new building is not reassurance about the one people are standing in. This is a moment for precise instructions, not a royal flourish.
The receipts
Worth passing round?
Send the story to a friend, or take Bumpy’s illustrated verdict with you.

Have a question about this?
Take this story into our Telegram community. Bring a source, a question or a well-placed eyebrow.
Opens the community invite. Paste the story link into the conversation; nothing is sent automatically.This is the 31 October 2026 edition. Facts may have developed since publication. Read the latest briefing →

