Liquid Network Releases Emergency Fix: Elements v23.3.4 Patches Proof Verification Cache Vulnerability
Odaily News: Liquid Network announced that the emergency version Elements v23.3.4 is now available, and Functionary nodes have begun upgrading immediately. All Liquid node operators are advised to update accordingly. This version fixes the previously discovered Proof verification cache vulnerability and strengthens the cache keys used for Range Proofs.
Regarding network recovery, Blockstream stated that a recovery plan is still being formulated, expected to proceed in three phases: **resume block production but continue to suspend Peg operations; replay verified valid transactions; resume Peg operations after the network state is fully restored and fund returns are confirmed.** Currently, the first two phases are being tested in parallel, and any phase will only proceed after it is confirmed safe.
Liquid Network stated that Elements v23.3.4 has undergone multiple rounds of internal and external reviews, with participants including Bitcoin Red Team, Alpen Labs, and other teams. Meanwhile, Liquid Network reminds users to be wary of fake upgrade websites that may exploit this incident for scams. Users should only obtain information through official Liquid Network and Blockstream channels, and never send funds to strangers or disclose private keys or mnemonic phrases.