2

What happens when a strong attacker has control of majority or all of the full nodes?

What damage can he do and would they be reversible?

3
  • "Completely Vulnerable" is a pretty bold statement. Do you think full nodes could re-write old transactions? forge transactions? replay previous transactions? Create new money? You should clarify your idea of completely vulnerable
    – abelenky
    Commented Oct 25, 2017 at 15:31
  • @abelenky, Right.. I've replaced "completely vulnerable" to "vulnerable".
    – Pacerier
    Commented Oct 25, 2017 at 16:14
  • 1
    Just full nodes, no mining power?
    – sr_gi
    Commented Oct 25, 2017 at 17:10

4 Answers 4

2

Here is an additional answer about what you can do if you control all fully validating nodes (but not necessarily all nodes that don't validate):

Anything

Bitcoin's security rests on auditing by full nodes. It is directly what prevents them from accepting fraudulent payments, and indirectly what makes it uneconomical for miners to produce invalid blocks (which in turn could be used to defraud non-validating clients).

If you have control over all fully validating nodes, you can effectively set the protocol rules at will. Including but not limited to theft and printing money out of thin air (beyond what the subsidy schedule currently permits).

2
  • how does the "printing money out of thin air" work? (Assuming the attacker gets to control all full nodes for 5 yrs.)
    – Pacerier
    Commented Oct 26, 2017 at 19:27
  • By creating a transaction that prints money out of thin air, and modifying all his nodes to accept it. As full nodes are the only ones that can validate, nobody else would even notice. Commented Nov 13, 2017 at 6:14
1

Assuming that you have majority control of full nodes and no control of mining. Here are few attacks that can be done:

  • Double spend even after confirmation: Don't relay the blocks that build upon the block (in which you spent coins). Instead relay any other forks on the blockchain to make them the longest chain

  • Fool SPV clients: SPV clients like electrum, multibit connect to full node for information. You can send them fraudulent transactions/chain by building headers on very less difficultly level

  • Force miners/users to pay you: Relay only those blocks/transactions that send your address some bitcoins. Non paying blocks/tx will be delayed through the network or will be orphaned. People wanting fast transactions will be forced pay you a bribe

1

During the moment of control, they can do at least the following:

  1. relay transactions selectively. this means they can choose to not relay transactions which are valid and therefor censor users of the network.

  2. relay blocks selectively. this means they can choose not to relay valid blocks by miners, as well as choose to relay invalid blocks, or blocks containing invalid transactions. it allows them to deny new nodes the current blockchain and the history it carries, and could even supply new nodes with an entirely different chain.

if 100% of all full nodes and all non-node storage of the current chain is lost, then they effectively control the current chains history.

however, since bitcoin is open to participation and holds decentralization as one of its core values, it is practically impossible to gain control of 100% of the nodes without new participants entering the network.

if less than 100% of the full nodes or all non-node storage of the current chain is compromised, the netwok can revert back to its last non-compromised state as new participants set up new, uncompromised, nodes.

attacking the network by controlling the nodes and taking actions that hurt users would also lower the utility of the network and that would lower the value of the tokens on the network, so it might not be economically feasable to do in the first place.

2
  • Re "without new participants", but there aren't many full nodes in the world. The cost is prohibitive, and will get even more so as time passes.
    – Pacerier
    Commented Oct 26, 2017 at 19:25
  • there is thousands of full nodes online right now, and as far as I know, computer hardware has so far gotten cheaper faster than cost of a full node has gone up. Commented Oct 26, 2017 at 19:30
-2

What can an attacker who controls majority or all of the full nodes do?

TL;DR Nothing dangerous.

2
  • 1) Eclipse attack
    – MCCCS
    Commented Oct 25, 2017 at 15:12
  • 1
    Can you please share more info eclipse attack? @MCCCS
    – sanket1729
    Commented Oct 25, 2017 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.