CRITICAL security vuln fixed

[gsovereignty]

I've discovered an alarming vulnerability, but fortunately there's a really simple fix so I've sent a pull request to address it.

In the current implementation, trusted 'validator nodes' are core to the security model. This means that hard power is centralised around these few entities. The protocol itself depends on these entities to (as the name suggests) validate the protocol. This means the protocol is whatever they decide it is. These entities can change the rules whenever they want. This means they can freeze your coins, take your coins, issue new coins, or really whatever they want - the sky is the limit.

This problem can easily be solved by using a permissionless system where the hard power is decentralised across a very large number of participants in such a way that making changes to the protocol is impossible without near unanimous agreement by everyone involved.

This pull request contains a patch to the existing codebase to resolve this issue.

Edit: related issue: bnb-chain/node-binary#36

[tzarebczan]

ACK.

[tamasblummer]

Concept ACK
utACK

[DESIGNfromWITHIN]

Hahahaha Epic SIR!

[SamSamskies]

lgtm

[Kukks]

This seems to address a number of issues acknowledged on the whitepaper, great work!

[OverSoft]

ACK
This commit fixed all issues.

[tiero]

tACK

[Kixunil]

tACK

[bvolpato]

LGTM

[mandelmonkey]

ACK

[Kixunil]

Fixes #57 and #35

[pretyflaco]

ACK

[amanusk]

Fixed it for me!

[lorenzodisidoro]

Now ready to be released 🚀

[gpestana]

Weird way to write Rust, but LGTM.

[backmeupplz]

[Sizuji]

ACK

[kanemil]

ACK

[ohld]

Perfect solution for decentralized future.

[eugenioclrc]

Great contribution! ACK!

[ddustin]

lgtm merge it in!

[hellc]

Nice try!

[joaquinmoreira]

tACK

[dondreytaylor]

Wow, this pull request works perfectly on nimbleNODE (pocket size full node) too. Good stuff
https://nimblenode.io

[agiUnderground]

utACK

[viktor-berezin]

ACK

[melekhine]

Yeah, just merge this!!!

[adamtache]

LGTM

[nikandfor]

lgtm

[bonzofenix]

LGTM

[bitstein]

LGTM

[blockchainwalletorg]

[binaryFate]

This PR does not address privacy concerns though, it only tackles the decentralization aspects but suggest to use a dangerously transparent blockchain.

[ericnakagawa]

Libra initially uses a set of validators from Founding Members -- this helps to provide stability for the project in its early days. However, over the long run, validators will be selected only on their holdings of Libra, forming a permissionless system.

We believe that Libra can coexist with other currencies like Bitcoin -- Libra addresses a number of needs (like low-volatility) that other currencies do not address today.