Ravencoin disclosed that a critical consensus vulnerability had been exploited on its network, allowing invalid blocks to be accepted by vulnerable nodes starting at block height 4,487,776 on August 7. The project's official account confirmed the exploit in a network notice, saying the flaw had already been active for days before it was caught and stopped.
The vulnerability reportedly sits in a header field called nHeight, part of Ravencoin's KAWPOW proof-of-work validation, which is supposed to be checked against a block's actual position in the chain but wasn't — letting an attacker bypass the network's normal memory-intensive mining requirements. RVN dropped roughly 19% to around $0.00288 following the disclosure, cutting the token's market capitalization to near $47.3 million, while exchanges including Upbit and Bitget suspended RVN deposits and withdrawals as the issue spread.
A mining-pool fix, not a core-team one
Mining pools 2Miners and RavenMiner, which together control a majority of the network's hash rate, have moved to mine a chain that excludes the exploited branch starting from block height 4,487,776. If that clean chain becomes dominant, the network faces a deep chain reorganization of roughly three days — meaning transactions confirmed on the compromised branch during that window could effectively be reversed. Notably, the fix is coming from the mining pool operators rather than Ravencoin's own core development team, an unusual response path for a critical consensus-layer bug.
The incident is a reminder that even long-running, well-known proof-of-work networks aren't immune to consensus-layer flaws. A similar dynamic played out recently with a Lightning wallet exploit affecting BTCPay Server, where the fix and disclosure also came from outside the core maintaining team's usual release cycle.
What happens to affected transactions
Users and exchanges holding RVN from transactions confirmed during the compromised window face uncertainty until the reorganization plays out and a single canonical chain is firmly established. Until mining pools fully coordinate around the clean branch, further price volatility and continued withdrawal suspensions at major exchanges are likely.
Related: BTCPay Server Offers 3 BTC Bounty After Lightning Wallet Exploit
Ravencoin has not yet detailed a permanent protocol-level fix beyond the pool-driven chain exclusion, leaving open the question of how the network prevents a repeat of the same nHeight validation gap going forward.
