South Korea’s Bithumb Launches Zero Fee Transfers to Global Platform

15h
cointelegraph

Altcoin News Ethereum News Technology NFT News CryptoKaiju: 2019 in Review By Oliver Carding - February 14, 2020 86721 0

15h
coinjournal

Australian Soccer Club Calls Off Purchase Deal With Controversial Crypto Company

15h
cryptonewmedia

Ripple Partners with Major European Money Transfer Service, Proving XRP's Potential

15h
utoday

EOS Burns $132M Worth of Tokens to Curb Inflation

15h
bitcoinist

Bitcoin (BTC) Is Days Away From The Next Big Move

15h
cryptodaily

EOS.IO (EOS) to Release Solution to Save RAM Capacity: Details

15h
utoday

Bitcoin Halving Not Priced In: Is The Market Still In For A Big Year?

15h
zycrypto

Coinbase becomes a Visa principal member

15h
cryptonewmedia

Coronavirus Effect: Investors Are Selling Bitcoin [BTC] To Increase Cash Positions, Confirms Analyst

15h
coingape

$9,000 is “Do or Die” for Bitcoin: Can Bulls Hold the...

15h
newsbtc

How to Earn Bitcoin with a Mobile Phone in 2020?

15h
cryptodaily

Morgan Creek Digital's Anthony Pompliano Explains Why He Is So Bullish on Bitcoin

15h
cryptoglobe

Таинственный майнер сумел присвоить себе тысячи утерянных владельцами монет Bitcoin Cash

15h
coinfox

XRP, Ethereum Getting Obliterated While Bitcoin’s Dominance Accelerates

16h
zycrypto

ConsenSys Continues Restructuring Process with ConsenSys Health Spin-Off

16h
cryptonewmedia

Bank of Canada: “There is not a compelling case to issue a CBDC.”

16h
cryptodaily

Why Is Bitcoin (BTC) Price Down 12 Percent? Top Analyst Calls Its Safe Haven Status Into Question

16h
utoday

Judge Reduces Bitcoin Miner CEO’s Role in $27M Pump-And-Dump

16h
bitcoinist

Judge Says Plaintiff Can Proceed Against AT&T in $24M Hack Case

16h
cointelegraph

Malta’s Financial Watchdog Releases Industry Feedback on Security Tokens

16h
cointelegraph

Finnish Customs Controls $15 Million in Seized Cryptocurrency

16h
cryptoglobe

Swiss Stock Exchange Invests in Institutional Trading Platform for Digital Assets

16h
cryptonewmedia

Bitcoin (BTC) Hacker Victim Approved to Sue AT&T, Judge Takes His Side

16h
utoday

Tron’s (TRX) Justin Sun Announces BitTorrent (BTT) File System Beta: What's New

17h
utoday


ZCash and Other Sapling-based Altcoins are Subject to Powerful DoS Attacks

nulltx

6mon ago

Grudges can go a long way in the cryptocurrency world. This is particularly apparent where altcoins are concerned. In the case of ZCash, a new tool has been released. It is allegedly capable of performing a DoS attack against this network. Although the code is not publicly available, it won’t take long until someone decides to give this a try.

Those who follow the development of ZCash will know about the most recent upgrade. Known as Sapling, it introduces a wide range of changes and upgrades. In most cases, the code introduced by such upgrades should make the network more secure. In the case of ZCash, that might not necessarily be the case this time around.

What makes this particular tool so powerful is how it can be used. Not only can users perform DOS attacks against the ZCash network itself. It is possible to attack any blockchain implementing the ZCash 2.x Sapling protocol. Any currency forked from ZCash thus becomes a potential target for anyone looking to mess around. The consequences of such an attack are difficult to predict.

Using the Sapling Woodchipper doesn’t require a wide range of computers to flood the network. Instead, a lot of damage can be done with just one machine. It is a very CPU intensive method of attack, which means more powerful computers can cause more havoc. Interestingly enough, the code which allows this tool to be used was recently merged in the ZCash main code.

Due to the Sapling upgrade, transactions can fill up entire network blocks. Since the ZCash protocol produces just 576 blocks per day, it becomes somewhat straightforward to exploit the network. By actively filling all network blocks, users could cripple this network altogether. It is also worth noting this attack vector can be mitigated, albeit it would also force the maximum transaction size down once again.

Even though the GitHub repository associated with the Sapling Woodchipper seems legit, it is unclear if this tool poses a real threat. It is a proof of concept which will not be shared with the general public at this time. In fact, this user doesn’t want any harm to be done through this tool. It is merely a research project to show how damaging these seemingly innocent code changes can be if anyone with nefarious intentions takes a closer look at things.

That being said, it does show how vulnerable alternative blockchains can be, even in 2019. Since this code issue dates back to October 2018, it is almost a miracle no one has taken advantage of it as of yet. That situation can come to change fairly soon, depending on how the developers will handle this problem. Ignoring the code which can be abused wouldn’t be in anyone’s best interest, after all.

Disclaimer: This is not trading or investment advice. The above article is for entertainment and education purposes only. Please do your own research before purchasing or investing into any cryptocurrency or digital currency.

Image(s): Shutterstock.com

Regarding any copyrights issue, please contact us:content@hashbee.com.

0 comments