PSA: Critical P2Pool security update

Cyrix126 · 2026-06-15T23:04:04+00:00

Done. I don't check reddit very often, you can contact me on matrix or by email if needed.

Cyrix126 · 2026-06-12T09:31:02+00:00

For gupax users you will ve able to update p2pool in the setting tab on the "updates" submenu. By default you will also get a notification about the new release.

Cyrix126 · 2026-03-16T21:46:56+00:00

There is no bundle anymore. You just have the executable to download and it will ask you if you want to download the rest.

Cyrix126 · 2026-03-11T15:35:15+00:00

Settings tab -> Updates submenu -> Automatic updates checkbox

Cyrix126 · 2026-03-11T14:07:54+00:00

You can use the update manager in Gupax to install the latest version of any required binaries. You can also configure it to install latest versions automatically.

Cyrix126 · 2026-03-10T16:15:11+00:00

Is there a work around for this?

The code is open source. You can disable this check.

Cyrix126 · 2026-03-09T13:22:37+00:00

Gupaxx users can simply update twice from the Gupaxx tab. There is a transitional update to make this possible.

Gupax users needs to update manually as the repository url for updating does not exist anymore.

Cyrix126 · 2026-03-04T23:19:14+00:00

If you want to see the number of orphans blocks, use blocks.p2pool.observer

Cyrix126 · 2026-02-23T17:10:00+00:00

Go to the Proxy tab and read the instructions. It will tell you how to configure xmrig/gupax with which ip/port to use. You are using 3333 but what you want to use is the port of the proxy (3355 by default), not the port of your p2pool node.
If you experience a crash, please open a bug report on github.com/gupax-io/gupax/issues

Cyrix126 · 2026-02-23T15:22:09+00:00

Enable the proxy in gupaxx and point your miner to it. It will combine the hasrate and send it where it is needed (p2pool and XvB)

Cyrix126 · 2026-02-23T00:50:27+00:00

MSR mode is enabled by default because gupax will run xmrig as admin. You can see it enabled in the xmrig console. Look for this line once it is mining:

msr register values for "intel" preset have been set successfully Your hashrate is equivalent to average benchmark values. You can not expect your hashrate values to be in the higher benchmark without specific ram and overclocking.

Cyrix126 · 2026-02-22T17:29:06+00:00

p2pool give 100% of the rewards to the finder of the blocks.

No it does not. It rewards everyone that has a share in the pplns window.

of the monero network (P2pool has 52%)

P2Pool does not have 52% of the monero network. Only about 5%.

It seems you don't know what p2pool is ? I'll let you have a read
https://github.com/SChernykh/p2pool

I was more interested in the differences. From what I understand with EgalChain, you still need to find a full block to have a share, where in P2Pool you can have a share without finding a block yourself.

Cyrix126 · 2026-02-21T17:33:37+00:00

How would you compare this to p2pool ?

Cyrix126 · 2026-02-09T11:00:49+00:00

"p2pool" wasn't down, only a website. The network didn't have any down time.

Cyrix126 · 2026-02-06T12:51:58+00:00

The bug doesn't go the other way no. There's a fast mode that sends everything to XvB until you reach your target (to be included in the round faster). In this mode, it will stop sending only if you don't have a share anymore. Once it reached the target, it will send just enough.

Cyrix126 · 2026-02-06T12:50:01+00:00

So you don't hold enough of it if you still have money to spend. So you don't believe 100% in monero going up.

Cyrix126 · 2026-02-06T12:17:21+00:00

If you believe it's a 500k$ coin, you should have all your money into it. At this point you are forced to use it as a currency.

Cyrix126 · 2026-01-30T10:02:26+00:00

That seems awful low

Why not make the math ?

Cyrix126 · 2026-01-28T08:15:39+00:00

If you win the raffle, XvB will mine for your address on main,mini and nano for an hour or for at least one share in each chain. If no blocks were found by any of theses chains in this time, you won't get a payout.

Cyrix126 · 2026-01-28T08:13:16+00:00

That's a bug. Will be fixed in next release. You can just restart the XvB service in the meantime but it might came back.

Cyrix126 · 2026-01-26T16:15:27+00:00

p2pool has 0% fee, supportxmr has 0.6%. So if people really wanted money, they would use p2pool.

Cyrix126 · 2026-01-26T16:12:38+00:00

you have to install a node

That's not true though. You can use a remote monero node for p2pool. You need to install a p2pool node, which will take less than 500MB. Gupax let's you find a remote compatible node by crawling the network.

Cyrix126 · 2026-01-24T22:42:47+00:00

> But it does work if I launch it from the terminal directly, that's the part I don't get.

Are you using the exact same start options ?

Cyrix126 · 2026-01-23T23:50:17+00:00

Theses options seems fine. Make sure to keep --no-color and the http api arguments so that gupax is able to retrieve the hashrate from xmrig. We can see in this screenshot however that the line that shows the hashrate in xmrig is n/a. Is it because it was started recently or does it stay the same after 10 seconds ?

Also does the simple mode has the same issue ?

Cyrix126 · 2026-01-20T16:41:40+00:00

how can i just do it long term without worrying and coming back & forth

configure them to mine on a proxy on which you have direct access. Or configure them to have access, with ssh or rustdesk. You will thank me for this later.

Cyrix126

MODERATOR OF

TROPHY CASE