A configuration change drives issuance below zero and panics block production
- Severity
- Critical
- Class
- Consensus & liveness
- System
- Proof-of-stake chain (issuance module)
An issuance parameter update pushes a supply figure negative, panicking the per-block routine and permanently halting the chain.
A routine that runs at the start of every block computed an amount to issue from a configurable ceiling. Nothing stopped that ceiling from being set below what already existed, and once it was, the calculation produced a negative where only a non-negative was valid, panicking the routine every block.
A crash inside the per-block routine is unrecoverable through normal operation, because the chain can't produce the next block to fix itself.
Why it rated Critical
It's a total, self-perpetuating halt — recovery needs a coordinated hard fork rather than a config rollback.
The fix class
Validate the parameter against current supply when it's set, and make the per-block calculation saturate instead of going negative.
