[Monero-announce] Important message for exchanges & Monero service operators

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 If you are running a wallet on an exchange, payment gateway, or service, please pay attention to the following message. The Monero Vulnerability Response workgroup has received a disclosure of a wallet bug related to coinbase transactions, that could be disruptive to anyone running a wallet on an exchange, payment gateway, or service. There will be a patch released on GitHub on March the 6th, 2019, at 4pm GMT, so in about 4 days. In the meantime, you can be safe against anyone trying to exploit this bug by running "set refresh-type no-coinbase" in monero-wallet-cli. Note that you will need to first close monero-wallet-rpc, and open the wallet with monero-wallet-cli. This should be set for every wallet you're running. This is a persistent flag, so once you quit monero-wallet-cli and start monero-wallet-rpc on that same wallet, the setting will persist. NB: this is not a consensus bug, there is no double spend, it does not allow coins to be created out of thin air, etc.