Security flaws have being blamed for a recent Monero(XMR) hack, leading to the question whether it is a good time to buy XMR or not. Though the vulnerabilities are said to be minor, but apparently hackers can penetrate in the system and forge their own Monero. They can then trick the support staff to crediting their account manually with extra tokens, The Next Web reported.Source
In fact, a post on HackerOne cited the source of the problem. “Due to a flaw in process_new_transaction in wallet2.cpp, if the tx pubkey is present multiple times, it will decode outputs correctly as many times, and add up the amounts. This means the final amount reported by show_transfers will be the actual amount received multiplied by the number of duplicate tx pubkeys present in the transaction extra field,” reads post on HackerOne.
For more details:Click here