SXsxde·Jun 10, 2026Submission
Patch for critical vulnerability in p2pool (Monero) to be released on 2026-06-13
63 points · Open discussionSChernykh
p2pool
C++2022–2026
SChernykh / p2pool
p2pool
Decentralized pool for Monero mining
2Distinct people
3Mentions
0Explicit recommenders
1.5KGitHub stars
What to know before exploring
What it is
Decentralized pool for Monero mining
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year3 dated mentions
Observed mentions: 2022-08-18 00:43:11 UTC to 2026-06-10 22:16:08 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 2 | 1 | 1 |
What Hacker News says
3 sourcesFrom link:
PSA: Critical P2Pool security update
A critical vulnerability has been discovered in all currently released P2Pool versions.
This is a P2Pool consensus bug that can allow an attacker to affect the calculated payouts of miners - up to the whole block reward going to the attacker.
To avoid facilitating exploitation, no technical details will be published at this time. The vulnerability does not enable RCE (remote code execution), node crashes, or resource-exhaustion attacks. However, affected nodes remain financially vulnerable until updated.
A patched P2Pool release will be published on 2026-06-13 (this Saturday) at 15:00 UTC. All users must update as soon as the release becomes available.
Anyone continuing to run an older version after that time risks losing mining payouts if the vulnerability is exploited. Note that mining pay
Read the rest
outs which are already in your wallet are safe. Updating is strongly recommended even if your node appears to be operating normally.
Source code, signed binaries, checksums, and upgrade instructions will be published through the official P2Pool release channels only - https://github.com/SChernykh/p2pool/releases
Download releases only from the official page and verify all downloaded files before installation.
Because P2Pool is open source, the fix will become visible once published. A capable attacker may be able to develop an exploit within hours, leaving miners who have not updated exposed.
It is essential that you are available to update promptly at the time of the release, or have a carefully tested automatic update process that downloads, verifies, and installs the official release.
Further technical details will be disclosed after sufficient adoption of the patched release.
We are continuously monitoring the network and have reviewed the available historical logs. We have found no evidence that this vulnerability has been exploited.
Those are protocols, not necessarily cryptocurrencies[0][1]. They were originally designed as improvements to the bitcoin network, but that never came into fruition due to stubborn bitcoiners like you who refuse to improve the network.
The Cryptonote[2] and Zerocoin[3] whitepapers were published back in 2013/2014 and made some pretty important security improvements to the bitcoin network. I suggest giving them a read. Many of the systems that were once designed for Bitcoin, such as P2Pool now work on projects like cryptonote[4]. We have also designed a proof-of-work system that is completely CPU-bound (you can mine it on your home computer as satoshi intended)[5].
Also, the cryptonote/zerocoin-derived cryptocurrencies are hardly shitcoins seeing as they have effectively displaced Bitcoin's original use-case as of this year.
[0] https://en