A malformed transaction exposed a long-standing software bug, fracturing the Cardano network and prompting a federal investigation


Cardano faced one of its most serious disruptions in its eight-year history after a deliberately crafted transaction triggered a chain split on Nov. 21, exposing a software flaw dating back to 2022. The event caused temporary network fragmentation, exchange suspensions, and a sharp 16% drop in ADA’s price, while sparking controversy over the decision to involve federal law enforcement.


How the Chain Split Unfolded

According to ecosystem incident reports, the disruption began around 08:00 UTC when a malformed delegation transaction bypassed validation checks on newer node versions but was correctly rejected by older versions.
This mismatch caused the blockchain to split into two competing chains, each producing blocks but reflecting inconsistent ledger states.

Exchanges reacted cautiously. Coinbase suspended ADA deposits and withdrawals for nearly 14 hours, while Kraken, Upbit, and others enacted shorter pauses as they tracked which chain would ultimately dominate.

During the partition, block explorers froze, DeFi protocols showed inconsistent outcomes, and transactions that normally finalize within seconds stretched to minutes or failed entirely.

Developers from IOG, the Cardano Foundation, Intersect, and EMURGO coordinated an emergency response. Patches were issued within three hours, and the network reconverged through natural consensus by Nov. 22.

An infrastructure analyst said the event “highlights the difficulty of maintaining uniform node behavior across a globally distributed network.”


Developer Confesses, Saying the Damage Was Unintentional

Shortly after the incident, an X user known as “Homer J” admitted responsibility. They claimed they were attempting to replicate the transaction seen on testnet and mistakenly relied on AI-generated instructions.

In their apology, the developer wrote that they were “ashamed of [their] carelessness” and accepted full responsibility for the disruption.

A blockchain security researcher commented that “even harmless testing can create systemic risks when performed on mainnet without isolation.”


Hoskinson Calls It Personal, Says FBI Notified

Despite the apology, Cardano founder Charles Hoskinson described the action as a “premeditated attack” and said federal authorities were already involved.


A fact sheet circulated by Intersect stated that law enforcement was being informed, adding a legal dimension rarely seen in open-source development failures.

Hoskinson’s stance sparked internal backlash. One IOG Plutus developer publicly announced their resignation, expressing concern that accidental mistakes could now carry the risk of legal consequences.


The chain split underscores the importance of robust validation, coordinated node upgrades, and secure testing practices within major blockchain ecosystems.
While Cardano’s consensus eventually restored network integrity, the fallout — technical, financial, and legal — raises urgent questions about developer responsibility and the boundaries of law enforcement involvement in open-source blockchain incidents.

Disclaimer

This content is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency trading involves risk and may result in financial loss.

Buy Crypto
You will be redirected to BloFin
logo_blockto.io

Blockto.io

info@blockto.io

Address: Overvliet 21, 3545NG, Utrecht

Blockto.io Copyright © 2026, All rights reserved

News
Rates
Buy
Events
We use cookies to personalize content and ads, provide social media features, and analyze our traffic. In accordance with GDPR/AVG and EU cookie regulations, data is processed only with your consent. We may share information about your use of our website with our social media, advertising, and analytics partners, and you can manage or withdraw your consent at any time. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

At BitxJournal.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and AVG (EU privacy legislation).

1. Data Controller

BitxJournal.com acts as the data controller for all personal data processed through this website.

2. Personal Data We Collect

We may collect and process the following categories of data:

Personal Data

  • Name and email address (when you subscribe to newsletters or contact us)

Technical & Usage Data

  • IP address, browser type, operating system

  • Device information

  • Pages visited, referral sources, and interaction data

This data is collected via cookies, log files, and analytics technologies.

3. Legal Basis for Processing

We process personal data only when a lawful basis exists, including:

  • Consent – when you explicitly agree (e.g., cookies, newsletter sign-up)

  • Legitimate interest – to operate, secure, and improve our website

  • Legal obligation – when required by applicable laws

You may withdraw your consent at any time.

4. Purpose of Data Processing

Your data is processed for the following purposes:

  • Operating and maintaining the website

  • Improving content, usability, and performance

  • Sending newsletters or updates (only with consent)

  • Analyzing traffic and user behavior

  • Responding to inquiries or support requests

5. Cookies & Consent Management

We use cookies and similar technologies in compliance with EU Cookie Law.

  • Non-essential cookies are placed only after explicit user consent

  • Users may accept, reject, or manage cookie preferences at any time

  • Consent can be withdrawn without affecting prior lawful processing

Detailed cookie information is available in our Cookie Settings panel.

6. Third-Party Data Processing

We may share limited data with trusted third-party service providers, including:

  • Analytics providers (e.g., Google Analytics)

  • Advertising partners (for personalized or non-personalized ads)

These third parties act as data processors and process data only under contractual obligations compliant with GDPR/AVG.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

9. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Your GDPR Rights

Under GDPR/AVG, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request data erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date.

12. Contact Information

For privacy-related inquiries or GDPR requests, contact:

📧 Email: support@blockto.io
🌐 Website: https://blockto.io

Save settings
Cookies settings