The privacy-focused blockchain IronFish has announced the impending termination of all remaining support for its network. The team stated that several days ago, they discovered anomalous activity involving the wIRON and ChainPort cross-chain bridges. A joint investigation confirmed that the root cause was an inflation vulnerability in the IronFish blockchain itself, not the cross-chain bridges. This vulnerability dates back to a Merkle tree implementation code commit in early 2019, involving the calculation of the nullifier (a marker to prevent double-spending) for privacy tickets. This allowed attackers to spend the same ticket multiple times and transfer assets out via the ChainPort cross-chain bridge. The relevant code had been included in internal and external audits, but the vulnerability went undetected. The team stated that a patch has been submitted, along with a detailed recap in the relevant PR, and the code repository will subsequently be closed and archived. https://(wublock123.com)/news/iron-fish-tocease-support-over-inflation-bug-in-merkle-tree-71062