Being a distributed computing platform, is Ethereum vulnerable to Meltdown and Spectre attacks?

1 Answer 1


No. At least not as far as the EVM and contracts are concerned. The EVM has too much overhead and lacks the constructs needed to exploit either of these bugs.

  • As far as I understand, even JavaScript can be used to exploit these vulnerabilities. Could you explain in more detail why it should be impossible via the EVM?
    – user626528
    Commented Jan 7, 2018 at 22:09
  • 2
    You can use javascript to exploit these vulnerabilities because you have the ability to run high-performance code in javascript, and can do high-resolution timing to determine whether or not some piece of memory was fetched from cache or not. The EVM doesn't provide these capabilities--it's slow, lacks high-resolution timing, etc Commented Jan 8, 2018 at 5:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.