Snapshot: Public Validation 22.09.2017
As previously announced, today we are conducting another snapshot in IOTA which is intended to finalize the Curl to Kerl upgrade and introduce a newly improved IRI release to the community.
Because this snapshot is more complex, we are giving the community more time to independently validate the snapshot. If at least 3 people have independently validated the snapshot and no serious concerns are raised, we will be releasing the new IRI version at 10AM UTC and relaunch the Coordinator at Milestone: 217000
What you have to do
The majority of users don’t have to do anything. For those who are interested and tech savvy enough, please participate in the independent validation of this snapshot. We need at least a handful of people from within the community that are going to share their results here. This ensures that the entire community will come to an agreement of the new snapshot and we can swiftly get the network to upgrade.
The Snapshot
The proposed snapshot for 22.09.2017 looks as follows (signed by Paul Handy, IOTA Core Developer):
This snapshot was created in a 4 step process.
- We traversed the Tangle at
latestSolidSubtangleMilestoneIndex: 216223 to get final state of address -> value key map
- We have sent the funds which were not yet transitioned from Curl, to an IOTA Foundation controlled address, giving the claimants an automated way to get their tokens
- We have sent funds from addresses which were reused more than twice to an IOTA Foundation controlled address, giving the claimants an automated way to get their tokens.
- A user transitioned manually wrong and send funds from Curl -> Curl. As the software would still allow for spending of Curl addresses, we make it possible for the user to move the funds automatically without any software changes to IRI. The user provided full proof of the funds by giving us his/her seed for verification.
How to validate
Make sure that your node is at latestSolidSubtangleMilestoneIndex: 216223 and that you are using NodeJS version >7*.
-
Get IXI: Download the IXI module from https://github.com/iotaledger/Snapshot.ixi and place it in your IXI folder.
-
Get Validation Script:
git clone https://github.com/alon-e/snapshot-validation -b validation and run npm install
-
Run and Validate: Run with
node run snapshot-validate.js and then post your results.
1.1. Curl to Kerl Upgrade finalization: Transfer of tokens to IOTA Foundation controlled address
In order to completely finalize the Curl to Kerl upgrade, we are going to transfer the funds which were not transitioned yet, to an IOTA Foundation controlled multi-signature wallet. This includes a total of 301620340961913 tokens.
The address for this is FFUIAREGAAAHNTPJRGRFCNCNOTKTKPWJEGUDWQHZVVO9MTAXZIDMXBMWJXTLUBHNFNKYCCTQUXOUYFKX99MUZJEPYD
The list all the addresses with their balances which are going to be transferred to our address are tagged as CURL_UNUSED
1.2. Key reuse security measure: Transfer of tokens to IOTA Foundation controlled address
During the previous weeks we have noticed that users have continuously reused their addresses up to a point where a sophisticated hacker was able to steal funds from users. Currently we are still completely assessing the situation, but have taken several precautionary measures (such as a hotfix to certain IRI nodes) to ensure that user funds are safe.
An extra step that we are taking now is that affected addresses with balances that were reused more than twice are going to be transferred to an IOTA Foundation controlled multi-signature address, giving the holders of these addresses an automated way to recover their funds via a claim process. This claim process is going to be implemented and published in the next IRI release.
This address is FFUIAREGAAAHNTPJRGRFCNCNOTKTKPWJEGUDWQHZVVO9MTAXZIDMXBMWJXTLUBHNFNKYCCTQUXOUYFKX99MUZJEPYD
The list all the addresses with their balances which are going to be transferred to our address are tagged as KEY_REUSE
1.3. Manual Transition Recovery
On the 5th of September a user who had coded their own transition script reached out to us claiming that they had a bug in their script (not updating to the latest iota.lib.js, which use Kerl at the time), leading to an automated transition from Curl to Curl. Because the user has access to the seed and was able to provide full proof, and because recovering these funds would be a simple IRI software update (allowing the spending from Curl addresses), we propose to simply move these funds from the current Curl addresses, to the users Kerl addresses.
4115709782263 on QGYKGMGSDAKRVRPJAMXDBYSREZIEASSZZKFRPRJDSNMMZBITTTZUQZYTONJVDBBACWYHOWRJHKEPYKRBS
newAddress=CLYICQNTDXMVOMRIMCAL9XGIACQIIAALZQCAHRATFLEPXQKIYFCSDNTYZWJAWHPCNAUWVKPZFEYQJGJT9HZMZMXPRW
30770000000 on KGUYGYFKSHCXPSJAMYBZKRM9EXGBL9ZKYXJITVRLQFYZKEFPXOCDVTLE9ODVAHNSUZNVSJADRHDMPWQRU
newAddress=FM9TXYBQMDBABOBGGDCSGWLCJIHSWRZSFLNJXUGZRJOFWKYAUBDNQBQBEA9KHHBIWXURCDSQOVOJSRYMBHVLFMHYCB
What you have to do after the snapshot
As previously mentioned, the coordinator will go back online at 10AM UTC. After the public validation period, we are going to release a new IRI release, as well as a new GUI wallet. This is a mandatory upgrade for the entire community.
In order to regenerate your full balance, you are going to have to generate addresses. We are currently working hard to release the new GUI wallet to the community which will be stateful and completely automate these processes.
