Questions tagged [denial-of-service]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
258 votes
9 answers
193k views

What is meant by the term "gas"?

An Ethereum application that I want to use talks about needing "gas" to run. What is gas, and where do I get it?
Jeff Coleman's user avatar
  • 21.9k
3 votes
1 answer
2k views

Why are coins at risk when honestly staking?

It has been repeatedly written that staking nodes should buy DDoS protection or be at risk of losing their coins. Can someone explain why an honest staker is at risk of losing his coins in case it ...
Cedric Martin's user avatar
3 votes
3 answers
618 views

Ethernaut level 20 Denial probably no longer solvable. Why?

I solved all levels of Ethernaut game except level 20 Denial: https://ethernaut.openzeppelin.com/level/0xcE1BB92eeb71AF5Fec09D38B0c854d55285f6e04 Eventually, I gave up and looked up the solution on ...
SmilingHeretic's user avatar
3 votes
1 answer
858 views

Hidding IP address behind sentry nodes

I would like to know how to set up an Ethereum node behind sentries (proxy nodes). I know there are several ways to approach this issue as mentioned here. https://medium.com/@kidinamoto/tech-choices-...
wacax's user avatar
  • 1,368
3 votes
0 answers
67 views

Is EVM vulnerable to denial of service with out of gas in call to other contract?

if I call a function in a sub-contract and it runs out of gas, the gas is not completely consumed. Instead, it is returned to the calling contract. Could that be a vulnerability for a denial of ...
Mario HSMW's user avatar
3 votes
0 answers
217 views

Denial attacks by submitting transactions with strategically calculated gas prices

As can be understood from the title, there is a specific form of denial attack where specific transactions are blocked by submitting transactions with strategically calculated gas prices. Example 1: ...
osolmaz's user avatar
  • 409
2 votes
1 answer
92 views

How do Ethereum nodes defend against DDoS attacks by mass reading?

Suppose a bad actor has large amounts of data stored on a smart contract. Since reading data is free (doesn't need a transaction), what stops one from simply reading that data over and over again, ...
Tamás Sengel's user avatar
2 votes
1 answer
72 views

Would a 51% attack be easier if an attacker can DoS certain nodes?

I am wondering whether a 51% attack would be simplified by being able to remotely crash miner nodes. Consider the following scenario: Malicious mining pool A controls 16% percent of the mining power ...
CryptoFan's user avatar
1 vote
2 answers
62 views

How is the ethereum network protected against bombardment with invalid transactions?

I am wondering what would happen to ethereum's mempool if it was bombarded with tons and tons of invalid transactions. Not even reverting transactions, because they cost gas, but against completely ...
Marlo's user avatar
  • 305
1 vote
1 answer
91 views

What are the possible security threats when using mappings in Solidity?

Does the use of a nested mapping possess any threats to the security of the contract below? contract Users { struct User { address payable regAddress; uint64 timestamp; ...
Mila A's user avatar
  • 202
1 vote
3 answers
30 views

If dos a single function solidity, will other functions not work?

I read lots of articles about dos causing a Denial Of Service. Let say that a contract has 2 functions, if called one of them repeatedly, will the other function works? Contract ABC { function one() ...
anonauditor's user avatar
0 votes
0 answers
33 views

Possibility of spoofing miners in Ethereum

Ethereum uses node IDs to identify nodes uniquely and to route traffic between nodes based on the node discovery protocol (https://github.com/ethereum/devp2p/blob/master/discv4.md) built on Kademlia-...
Deepal's user avatar
  • 66
0 votes
1 answer
34 views

Denial of Service(DoS) and withdraw.pendingReturns[msg.sender]=0;

I am trying to understand the role of : withdraw.pendingReturns[msg.sender]=0; in detecting denial of Service (DoS) vulnerability. The following paper VeriSolid says that: withdraw.pendingReturns[...
zak100's user avatar
  • 1,406