A research paper published by The Hebrew University in Israel reports having discovered the “first evidence of a consensus-level attack on a major cryptocurrency.” The paper is currently awaiting peer review but utilizes publicly available on-chain data and Ethereum’s open source codebase to affirm its conclusions.
At its core, the paper highlights an issue where miners can change the timestamp related to a mined block to avoid increased difficulty on the network. On-chain data appears to support the claim as Aviv Yaish, one of the paper’s authors, highlighted F2Pool’s block timestamps being artificially altered to improve rewards.
(9/12) Whenever F2Pool’s block timestamps reach the point where mining difficulty is supposed to decrease, they artificially set them to be one second earlier. F2Pool has been executing this attack over the past two years, and the evidence has been hiding in plain sight! … pic.twitter.com/mDEG2UqXZh
— Aviv Yaish (@yaish_aviv) August 5, 2022
Uncle Maker
Ethereum is maintained through a proof-of-work consensus mechanism, which will be moved to proof-of-stake this September. However, to this point, the network appears to be susceptible to the attack identified in by The Hebrew University.
The consensus-level attack is referred to as an Uncle Maker attack within the paper in reference to the “uncle” blocks used in the exploit. Blocks within the Ethereum blockchain act as a set of records that are checked, distributed, and verified across the entire network. Uncle blocks are valid blocks that have been removed from the main chain but still receive rewards.
“The attack allows an attacker to replace competitors’ main-chain blocks after the fact with a block of its own, thus causing the replaced block’s miner to lose all transactions fees for the transactions contained within the block, which will be demoted from the main-chain.”
Miners can set a block’s timestamp within “a certain reasonable bound,” typically within a…
Click Here to Read the Full Original Article at Ethereum (ETH) News | CryptoSlate…