I’m releasing a new minor version of Reddcoin wallets which uses the latest OpenSSL 1.0.1g with fix for Heartbleed security bug.
The source code release on github can be found here.
- I want to build my wallet from the source code release. What should I do?
Make sure your installed OpenSSL is upgraded to 1.0.1g and then compile the wallet as before.
- Is my wallet compromised? Have I lost coins?
If you are not running the wallet in daemon mode with RPC + TLS, most likely no. All bitcoin + altcoin wallets use OpenSSL for encrypted connection to the built-in RPC server. If you are just a normal user, Heartbleed bug should not affect you.
- I’m a pool owner / exchange owner / developer, is my wallet compromised?
Yes and no. If you ever query the RPC server in wallet daemon, you should always use its configuration file to specify the short list of IP addresses that are allowed. You should never run your wallet daemon with open RPC port on a public server for everyone to access or attempt to access. In any case, the fix is much more relevant to you and upgrade now.
- Will there be a fork?
No. Wallet 18.104.22.168 is fully backward-compatible with 22.214.171.124 and 1.1.3.
- Does every crypto-currency require a fix?
Yes and I’m glad we are one of the very first few coins which have released the wallet fix for Heartbleed.
UPDATE: All binaries (Windows, Linux, Mac) are now available. Use the links in the side bar.