November 13, 2018
About two hours ago, a Github user ‘Kauchy’ have found a bug in the Cosmos SDK code. (https://github.com/cosmos/cosmos-sdk/issues/2772)
It appears that the issue was within the AnteHandler module, and may have been critical if left unfixed.
The attacker could send multiple transactions to the mempool without paying a transaction fee. New ‘transaction fees’ were minted and refunded to the attacker’s account.
In short, ‘Kauchy’ found a way to create new coins in the system. He decided to submit the bug, instead of misusing it.
We appreciate and highly regard his commitment to creating a secure Cosmos ecosystem. We would like to present 300 Atoms upon release as a sign of gratitude.
Once again, thank you Kauchy for your amazing work.