4

Is there a name for an attack where someone with a lot of capital makes loads of transactions with a high fee, just to prevent other transactions from taking place?

This seems like a moderately cheap way of preventing 99% of all transactions. Is this a real vulnerability, and if so what is its name?

1
  • 3
    In a free market, it is expected that someone can outbid you for block space. I would not consider that a vulnerability. Commented Jul 14, 2020 at 19:22

2 Answers 2

4

It's a flood attack. Or just specifically "transaction spamming".

It's rather theoretical vulnerability, blockspace market is open to everyone and proceeding with this attack is a waste of money. It's not vulnerability in terms of being malicious and preventing parties from sending transactions with higher fees/ rbf.

4

Such a flood attack or spam attack is extremely costly. The attacker has to continuously outbid every other participant not once, but with a sufficient transaction volume to occupy all available blockspace. Meanwhile, each regular participant can decide to wait them out or increase the fee on their one or few transactions if their need to transact is urgent enough.

Not only is the attacker paying for 4,000,000 WU of blockdata per block at the highest fee rate, but if they maintain this level of fees, the increased reward is incentivizing miners to increase the hash rate, further increasing the blockspace supply that needs to be occupied. The attack is therefore largely self-defeating when aiming to suppress 99% of the transactions.

It may be useful for suppressing transactions below a certain level by creating e.g. a large backlog at 20 sats/vB, which would force other participants to overbid this level to get a timely confirmation. Such a backlog at a specific fee rate would be less costly to maintain and would get processed more slowly, but even so would cost up to about 29 BTC per day.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.