Timeline for What if a chain is compromised?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 2, 2021 at 22:28 | comment | added | porton | I don't assume this. I understand that a sidechain vulnerability can change token counts. But in the assumption that the sidechain will be rolled back (e.g. during 2 days), is there a big loss for my users? "Withdraw one token per second" is not quite exact, I mean "accumulate on a (non ERC-20) account exactly one token per second". (Accumulating 1 per second in a ERC-20 would be virtually impossible as every second would need a transaction, but we can transfer these accumulated tokens to user's wallet at any time.) | |
| Mar 2, 2021 at 7:17 | comment | added | Sergi Juanati | For me, the big risk is that you are assuming that the condition to withdraw one token per second will be always accomplished, but depending on the vector attack, that won't be necessarily the case, and the whole funds from the sidechain wallets could be drained in a single transaction. Also, even funds are not sent to mainnet after an attack, these could be transferred to an attacker address in the sidechain to either withdraw progressively or just freeze them: will the nodes accept forks or rollbacks affecting other users? in essence, your security now depends on the sidechain foundations. | |
| Mar 2, 2021 at 6:22 | comment | added | porton | I need specifics on my issue, where tokens are always allowed to be minted by 1 token per second. Is it safe enough in this case? | |
| Mar 2, 2021 at 6:04 | comment | added | Sergi Juanati | Agree, though the answers to your -several- questions depend on your specific implementation, the node validators and their foundational rules, the efficiency to detect and fix a potential attack, etc, so not sure you will ever get a specific answer for this besides the generic answers to any PoA attack. That's why I tried to propose alternatives if your concern is security. | |
| Mar 2, 2021 at 4:37 | comment | added | porton | This is not quite an answer: you mostly just pointed me a table for my further research rather than answering my particular questions. | |
| Mar 1, 2021 at 17:44 | history | answered | Sergi Juanati | CC BY-SA 4.0 |