Cardano Temporarily Splits Into Two Chains After Attacker Uses AI-Generated Script to Exploit a Known Bug

20 hours ago

The divergence emerged erstwhile newer nodes accepted a malformed transaction that older nodes rejected.

Nov 23, 2025, 12:30 p.m.

A malformed transaction pushed Cardano into a little concatenation divided connected Saturday, arsenic older and newer node versions validated transaction information submitted to the web differently.

The mismatch caused immoderate artifact producers to travel a “poisoned” concatenation portion others stayed connected the mean one, prompting an exigency spot and network-wide upgrade instructions.

The incidental — which has since been traced to a wallet belonging to a erstwhile testnet subordinate — is being investigated arsenic a imaginable cyberattack.

Cardano ecosystem governance assemblage Intersect said successful a post-mortem report that the divergence emerged erstwhile newer nodes accepted a malformed transaction that older nodes rejected.

The inconsistency exploited a bug successful an underlying bundle room that validation logic failed to trap. Once propagated, artifact producers began gathering connected antithetic branches of the chain, creating what the radical called a “poisoned” ledger and a parallel “healthy” chain.

Devs rushed to deploy patched node software, and operators were instructed to upgrade to rejoin the canonical chain.

Exchanges and wallet providers paused deposits and withdrawals passim the incidental arsenic a precaution, though Intersect said nary idiosyncratic funds were mislaid and astir retail wallets were insulated due to the fact that they relied connected components that safely ignored the malformed transaction.

Cardano co-founder Charles Hoskinson characterized the lawsuit arsenic a targeted, premeditated onslaught by a disgruntled stake-pool relation who had been seeking ways “to harm the marque and reputation” of Input Output Global (IOG).

He warned the disruption affected each users from artifact producers losing rewards to DeFi protocols encountering inconsistent authorities and said restoring afloat web uniformity could instrumentality weeks.

Loading...

Meanwhile, an X idiosyncratic posting arsenic “Homer J.” claimed responsibility, saying helium acted alone, did not abbreviated oregon merchantability ADA, and did not mean to origin harm.

The idiosyncratic said helium relied connected AI-generated terminal commands to artifact outer postulation portion trying to replicate the malformed transaction and lone realized the grade of the disruption erstwhile artifact explorers froze.

“I’m ashamed of my carelessness,” helium wrote. “I didn’t person evil intentions, but I endangered the web and caused unnecessary stress.”

Loading...

ADA fell much than 6% pursuing the disruption, starring losses among large tokens, arsenic traders apt reacted to the evident deficiency of coordinating large-scale upgrades successful decentralized proof-of-stake networks.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M successful full gross crossed its merchandise lines. The GoPlus App is the superior gross driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol astatine $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 cardinal monthly calls year-to-date successful 2025 , with a highest of astir 1 cardinal calls successful February 2025. Total blockchain-level requests, including transaction simulations, averaged an further 350 cardinal per month.
  • Since its January 2025 motorboat , the $GPS token has registered implicit $5B successful full spot measurement and $10B successful derivatives measurement successful 2025. Monthly spot measurement peaked successful March 2025 astatine implicit $1.1B , portion derivatives measurement peaked the aforesaid period astatine implicit $4B.

More For You

DOGE Beats the Blue Chips arsenic D.O.G.E Calls it Quits

(Minh Pham/Unsplash)

DOGE – the memecoin – edged past the CoinDesk 20 and the CoinDesk memecoin scale arsenic the White House announced Elon Musk's authorities ratio inaugural is to shutter.

What to know:

  • Dogecoin roseate implicit 3% arsenic traders anticipated the motorboat of Grayscale's DOGE coin ETF.
  • Grayscale's DOGE ETF, trading nether the ticker $GDOG, is acceptable to statesman trading connected NYSE Arca.
  • Cat-themed memecoins outperformed dog-themed coins, with a 4.2% marketplace headdress summation compared to 4% for dog-themed coins.
View source