
@kennyog replied to a tweet by @kennyog:
Flaw #2: Go-Ethereum had a quite complex vulnerability related to the sidechain import mechanism. The developers had noticed and fixed this. But their countermeasure makes it possible for a syncing node to be tricked into regarding the honest blockchain as malicious. (10/14)