3

I have a background in security, so i try to understand what is hapeneing to Ethereum project.

Recently, i heard that Ethereum will make a fork to stop the Ddos attack. here i want to know how the attacker perform its attack, what is he exploiting (a code bug or what)?

I understand that the opcodes have gas price to prevent such attack and the fork aims to reprice their cost but is it enough to stop him?

3

What's being exploited?

The attacker is exploiting a combination of inadequate pricing (too cheap) for specific EVM operations and inefficient client implementation of that operations (mainly geth which is the most widely used one). This specially crafted "bad transactions" cause a lot of I/O on the clients, resulting in many of them not being able to keep in sync with the blockchain. This also resulted in block times going considerably higher then the average 15s at times. More details here.

Can it be stopped?

I think so. The protocol changes in the fork will make this kind of "transaction spamming" much more expensive. Even if the attacker decided to pay the much higher price and continue, the effect should get smaller, because additional measures are being implemented, e.g. automatic lowering of gas limit after "slow blocks" (with the result of expensive transactions not being processed) and optimizations to the I/O related code. More details about protocol changes here.

Of course all this doesn't guarantee the spamming to stop. If the attacker has deep enough pockets and is determined enough to harm the Ethereum project, he/she may continue to annoy the Ethereum community.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.