29 votes
Accepted

How does the most recently found critical vulnerability (CVE-2018-17144) work?

If you were a miner, what are the steps you would take to create the extra (21,000,012.5th) bitcoin? Where in the source code is this exactly (link)? There are two components to CVE-2018-17144. There ...
user avatar
  • 62.4k
11 votes

Is it possible to brute force bitcoin address creation in order to steal money?

If you would like to see some proof to verify that it is truly quite impossible to generate a known keypair, you could test this yourself, if you wanted. Pavol Rusnak has created coinkit, a python ...
user avatar
  • 299
9 votes
Accepted

What is the "1 RETURN" bug?

Have a look at the early sources here: http://www.bitcointrading.com/forum/bitcoin-clients/original-bitcoin-source-code-archives/ there is a small piece of code in script.cpp: case OP_RETURN: ...
user avatar
  • 6,650
7 votes
Accepted

What wallets are affected by the NPM package vulnerability?

Only Copay is affected by this vulnerability. Although the package was included by many, many projects (both within and outside the crypto space), the attack payload was encrypted, and used the ...
user avatar
  • 16.5k
6 votes
Accepted

How is the Leaf node weakness in Merkle Trees exploitable?

In Bitcoin, inner nodes of the merkle tree are constructed by concatenating two 32 byte SHA256d hashes together. The resulting 64 byte value is hashed to get the next node in the tree. The leaf nodes ...
user avatar
  • 62.4k
4 votes

Is it possible to brute force bitcoin address creation in order to steal money?

There is the LBC (Large Bitcoin Collider) project that attempts to do that. According to their website they've created over 8,000 trillion keys, as of October 2017. According to a Motherboard article ...
user avatar
  • 41
4 votes

What will be happen if 21 million of bitcoins become the property of one?

It's entirely up to the people living at this hypothetical future point. There's no current rule about what happens. Maybe when this happens, people are tired of Bitcoin, so they go back to trading ...
user avatar
3 votes
Accepted

Vulnerability of Bitcoin Network

Bitcoin funds are locked to a specific private key. In order to spend them in a transaction, the transaction needs to be signed with the private keys corresponding to each input. The signature commits ...
user avatar
  • 64.5k
3 votes

Mining stale low-difficulty blocks as a DoS attack

Bitcoin determines the best chain by choosing the one with the most work. As "work" is a bit nebulous, it is specifically determined using a metric called "chainwork". Chainwork is ...
user avatar
  • 62.4k
3 votes

What would be required to disincentivize mining pools?

It doesn't matter if a mining pool has 100% of the total mining power so long as that mining pool can't choose which transactions its users work on, prevent them from submitting blocks that they find, ...
user avatar
2 votes

Can someone with an unlimited amount of money compromize the network?

In fact they can. Somebody who could raise 20x of the entire network's computing power can rerun the transaction history from the beginning, throwing out any transactions they don't like. So long as ...
user avatar
  • 129
2 votes

What effects would a scalable Quantum Computer have on Bitcoin?

With the current mining difficulty classical computers need to do 2*10^21 SHA256D invocations in average to find a block nonce. A quantum computer would need to do 4.5*10^10 invocations, which is ...
user avatar
2 votes

What effects would a scalable Quantum Computer have on Bitcoin?

I want to point out a quick possibly important point. As other answers have mentioned current implementations of Bitcoin could be compromised by a quantum computer. However, Quantum Computers do not ...
user avatar
  • 121
2 votes

What methods could a government use to shutdown Bitcoin?

In many cases a government could effectively shutdown bitcoin in its country by making the following law: No licensed or regulated financial institution can exchange currency for bitcoin. Since ...
user avatar
2 votes

Why are broadcast checkpoints considered bad?

Centralized checkpoints is a mechanism whereby nodes trust a certain hardcoded key to make new checkpoints. This means that in case of a fork, the key owner can make the network choose any branch he ...
user avatar
2 votes

How can address' hash160 be used to determine information for malicious purposes? (Ie reusing of the same address)

If your PRNGs are good, you don't lose any security by using the same address any number of times. Some websites claim that addresses should not be reused because that will make your bitcoins ...
user avatar
2 votes

What will be happen if 21 million of bitcoins become the property of one?

They would have no value. As such this cannot happen. If less people have less bitcoins the value of btc goes down as the utility goes down, as such holders would likely dump the btc which makes them ...
user avatar
  • 21
2 votes

How would one test the impact on the Lightning Network of a network split on the base layer?

Christian Decker answered this on Twitter. pyln-testing which is used for testing in c-lightning uses a proxy in front of bitcoind allowing you to mock responses. This allows you to get any node stuck ...
user avatar
2 votes

Mining stale low-difficulty blocks as a DoS attack

Block downloading proceeds in two phases. While they do happen mostly concurrently, it's easier to think of them as separate steps: First, block headers are downloaded from peers, and verified for ...
user avatar
2 votes

Vulnerability of Bitcoin Network

after the fastest node has found a nonce for its false transaction block, will the other nodes verify only the hash value (which fulfills the requirements) or do they also verify the transactions in ...
user avatar
1 vote
Accepted

After last bitcoin is mined, can miner(s) with nefarious reasons kill bitcoin by holding fees thereby deflating Bitcoin eventually to zero?

This would be fantastic for everyone but the attacker. First, everyone who held bitcoin would be rich. As bitcoin became more and more scarce, the price would go up. The attacker would have to offer ...
user avatar
1 vote

Vulnerability of Bitcoin Network

If a block is in any sense invalid, no honest node will ever accept it, period. So producing a block that is invalid is pointless, a waste of effort. Now say a block is just produced right now. ...
user avatar
1 vote

How do the JavaScript SecureRandom() vulnerabilities affect me?

What products are effected by these vulnerabilties? -- Not Sure specific products, but watch out for products(wallets) using javascript lib to generate private keys. As a user of these products, ...
user avatar
  • 161
1 vote

What prevents a majority attack from undoing transactions of others?

I believe what the wiki is implying, is that the other user's transactions won't be double spent. Because the attacker does not have the other user's private keys, he can't spend his coins to a new ...
user avatar
  • 8,734
1 vote

What would be required to disincentivize mining pools?

AFAIK there is nothing that can be done within the protocol to prevent 51% attacks. The best way to prevent such attacks from mining pools is to ditch that pool, and mine somewhere else. This happened ...
user avatar
  • 1,418
1 vote

What would be required to disincentivize mining pools?

Ok, I'll take a shot at this. We would need some kind of 'start work message' in the bitcoin system. For instance when miners start working on a block, they would have to broadcast a partial ...
user avatar
  • 298
1 vote

What would be required to disincentivize mining pools?

Mining pools are an important part of the Bitcoin ecosystem and I don't believe they should be disincentivized. What does need to be done is to eliminate the inherent preference to mine only in the ...
user avatar
1 vote

What are Ripple's weaknesses?

In 2019 several exchanges suffered an attack called 'ripple partial payment exploit'. It uses an integral part of the ripple network (partial payments) in conjunction with sloppy implementation by ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible