25 Jun 2025 [mining]

P2Pool v4.8.1 released with security fixes

SChernykh1 has released P2Pool2 version 4.8.13 with fixes for various security issues:

A number of security issues were found and fixed. It is recommended to update to v4.8.1 [..] Special thanks to Low-power4 for contributions to this release.

Changes overview

* SideChain: fixed a synchronization blocker bug that could be exploited by malicious nodes
* Fixed a bug in block deserializer code
* Fixed a bug in varint parsing
* API: update Stratum hash rate data on new block template, even when no workers connected

The full list of changes since v4.8 is available on Github5.

Before using the software, you should verify the SHA256 sums with SChernykh’s GPG key6.

The README7 has valuable information about features, defaults, how pool shares work, build instructions and a short mining guide. If you need assistance, read the FAQ8 and join the project’s IRC channels9.

Note that it is strongly recommended to synchronize your system clock before you start mining.

This is an ongoing story and the report will be updated when new information is available.

  1. https://github.com/SChernykh/ ↩

  2. https://p2pool.io/ ↩

  3. https://github.com/SChernykh/p2pool/releases/tag/v4.8.1 ↩

  4. https://github.com/SChernykh/p2pool/commits?author=Low-power ↩

  5. https://github.com/SChernykh/p2pool/compare/v4.8…v4.8.1 ↩

  6. https://p2pool.io/SChernykh.asc, https://github.com/monero-project/gitian.sigs/blob/master/gitian-pubkeys/SChernykh.asc ↩

  7. https://github.com/SChernykh/p2pool/blob/master/README.md ↩

  8. https://p2pool.io/#faq ↩

  9. #monero-pools, #p2pool-log, #p2pool-mini (IRC-Libera) ↩