Why were two suspicious addresses locked?
In short, because the addresses contain provably stolen coins.
A bit of history. Long ago, regarding the block numbers listed below, someone attacked Kittehcoin (before the Lynx development team took over the project). The attack exploited a weakness that allowed the attacker to define the amount of mining reward. At that time, the default mining reward was only 2,000 MEOW per block. However, the blocks below show the reward was changed to the same 2 billion each time the attack was executed. The pattern is easy to find. The Lynx team fixed the security hole when they ported the latest Litecoin code to the (previouslt named) Kittehcoin chain. While the attack vector was closed, the coins still remained in existence, pumping up the circulating supply by ±28 billion coins.
The code change implemented in v0.16.3.9 includes a restriction for the 2 largest known single addresses on the Lynx blockchain:
The attacker(s) now has 2 options:
Option 1: Do nothing.
- The coins in those wallets will never be spendable. All future version of Lynx will include the lockdown code that will prevent the coins from being spent. Consensus of the network prevents the coins from being moved.
Option 2: Release the coins in exchange for a bounty.
- Each of the two blocked addresses may keep 100,000,000 Lynx in their original addresses IF they send the rest of coins to this — and only this — address: KQoKm4bzQvDAwiiFsPz3AE4UJHkHBvX6Bz. Once the coins are received, the blocking code will be removed in future Lynx releases and the 100,000,000 coins will revert to the attackers’ control.
- If the coins are ever received at that address, a small portion of them will be used to reimburse the few Lynx holders that experienced theft (approximately Dec 5, 2019) from an R-value Attack. Then, the remainder of the coins will be verifiably burned. A schedule will be published and the remaining stolen coins will be burned.
Why are we burning the stolen coins?
We’re burning the stolen coins because it’s the right thing to do. We have no interest in keeping them because it will erode trust in the Lynx project, and that’s something we take very seriously. These coins were created outside of the normal business rules of Lynx. Therefore, all Lynx holders paid for them. Lynx never had a pre-mine or ICO. The existence of the stolen coins harms every Lynx holder by suppressing the total value of the network market cap and reducing the total scarcity of the circulating supply. If these coins are burned, the total circulation should be reduced by roughly ~20%. We expect this will have a positive impact on the entire Lynx network — and the community of users that support it.
Note: our general policy is to not police the Lynx blockchain. However, we made an exception here because of the size of the theft, the number of users it impacts (everyone), and it’s easy to trace on the blockchain. It’s our hope that most of the Lynx community accepts and supports this difficult decision.