Skip to main content
30 votes
Accepted

How does the most recently found critical vulnerability (CVE-2018-17144) work?

If you were a miner, what are the steps you would take to create the extra (21,000,012.5th) bitcoin? Where in the source code is this exactly (link)? There are two components to CVE-2018-17144. There ...
Ava Chow's user avatar
  • 71.1k
7 votes
Accepted

What wallets are affected by the NPM package vulnerability?

Only Copay is affected by this vulnerability. Although the package was included by many, many projects (both within and outside the crypto space), the attack payload was encrypted, and used the ...
Raghav Sood's user avatar
  • 17.1k
7 votes
Accepted

How could Bitcoin developers handle and resolve severe software vulnerability without drawing public attention?

How can a severe security bug be fixed in a new version without the public becoming aware of the fix, preventing anyone from exploiting the bug? It is extremely difficult for the reasons you point ...
Michael Folkson's user avatar
6 votes
Accepted

How is the Leaf node weakness in Merkle Trees exploitable?

In Bitcoin, inner nodes of the merkle tree are constructed by concatenating two 32 byte SHA256d hashes together. The resulting 64 byte value is hashed to get the next node in the tree. The leaf nodes ...
Ava Chow's user avatar
  • 71.1k
5 votes

Is it possible to brute force bitcoin address creation in order to steal money?

There is the LBC (Large Bitcoin Collider) project that attempts to do that. According to their website they've created over 8,000 trillion keys, as of October 2017. According to a Motherboard article ...
Roman's user avatar
  • 151
3 votes
Accepted

Mining stale low-difficulty blocks as a DoS attack

Block downloading proceeds in two phases. While they do happen mostly concurrently, it's easier to think of them as separate steps: First, block headers are downloaded from peers, and verified for ...
Pieter Wuille's user avatar
3 votes

Mining stale low-difficulty blocks as a DoS attack

Bitcoin determines the best chain by choosing the one with the most work. As "work" is a bit nebulous, it is specifically determined using a metric called "chainwork". Chainwork is ...
Ava Chow's user avatar
  • 71.1k
3 votes
Accepted

Vulnerability of Bitcoin Network

Bitcoin funds are locked to a specific private key. In order to spend them in a transaction, the transaction needs to be signed with the private keys corresponding to each input. The signature commits ...
Murch's user avatar
  • 76.3k
2 votes

What effects would a scalable Quantum Computer have on Bitcoin?

With the current mining difficulty classical computers need to do 2*10^21 SHA256D invocations in average to find a block nonce. A quantum computer would need to do 4.5*10^10 invocations, which is ...
Come-from-Beyond's user avatar
2 votes

Vulnerability of Bitcoin Network

after the fastest node has found a nonce for its false transaction block, will the other nodes verify only the hash value (which fulfills the requirements) or do they also verify the transactions in ...
Pieter Wuille's user avatar
2 votes

How would one test the impact on the Lightning Network of a network split on the base layer?

Christian Decker answered this on Twitter. pyln-testing which is used for testing in c-lightning uses a proxy in front of bitcoind allowing you to mock responses. This allows you to get any node stuck ...
Michael Folkson's user avatar
1 vote

Vulnerability of Bitcoin Network

If a block is in any sense invalid, no honest node will ever accept it, period. So producing a block that is invalid is pointless, a waste of effort. Now say a block is just produced right now. ...
David Schwartz's user avatar
1 vote
Accepted

After last bitcoin is mined, can miner(s) with nefarious reasons kill bitcoin by holding fees thereby deflating Bitcoin eventually to zero?

This would be fantastic for everyone but the attacker. First, everyone who held bitcoin would be rich. As bitcoin became more and more scarce, the price would go up. The attacker would have to offer ...
David Schwartz's user avatar
1 vote

How do the JavaScript SecureRandom() vulnerabilities affect me?

What products are effected by these vulnerabilties? -- Not Sure specific products, but watch out for products(wallets) using javascript lib to generate private keys. As a user of these products, ...
kherwa's user avatar
  • 161
1 vote

What prevents a majority attack from undoing transactions of others?

I believe what the wiki is implying, is that the other user's transactions won't be double spent. Because the attacker does not have the other user's private keys, he can't spend his coins to a new ...
Jestin's user avatar
  • 8,822
1 vote

What are Ripple's weaknesses?

In 2019 several exchanges suffered an attack called 'ripple partial payment exploit'. It uses an integral part of the ripple network (partial payments) in conjunction with sloppy implementation by ...
Oleg Belousov's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible