Bitcoinjs-lib patches two bugs that understated Bitcoin transaction fees
- —Fixes shipped in versions 5.2.2, 6.1.9 and 7.0.4 for the matching release lines
- —A demo on 7.0.1 showed a real 900 million satoshi fee reported as 200 satoshi
- —Second flaw counts missing input-value records as zero: 91,000 vs 1,000 satoshi
- —Loss requires an authorized, valid transaction to be broadcast and accepted
Why it matters: Wallets and services built on bitcoinjs-lib must upgrade or verify input values independently, or excess funds will be paid to miners.
Source: CryptoSlate