3

Being a distributed computing platform, is Ethereum vulnerable to Meltdown and Spectre attacks?

2

No. At least not as far as the EVM and contracts are concerned. The EVM has too much overhead and lacks the constructs needed to exploit either of these bugs.

| improve this answer | |
  • As far as I understand, even JavaScript can be used to exploit these vulnerabilities. Could you explain in more detail why it should be impossible via the EVM? – user626528 Jan 7 '18 at 22:09
  • 2
    You can use javascript to exploit these vulnerabilities because you have the ability to run high-performance code in javascript, and can do high-resolution timing to determine whether or not some piece of memory was fetched from cache or not. The EVM doesn't provide these capabilities--it's slow, lacks high-resolution timing, etc – DeviateFish Jan 8 '18 at 5:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.