July 2015 flood attack

From Bitcoin Wiki
Revision as of 09:10, 10 August 2017 by Taras (talk | contribs)
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

The July 2015 flood attack was a large "stress test" of the Bitcoin network. The possibly distributed attack has provoked hundreds of thousands of transactions, leaving over 80,000 in the mempool at one time.[1][2] The attack is subsequent to stress tests executed in June.

Some charities and organizations, including WikiLeaks and Voat, have received thousands of dust outputs.[3][4] Additionally, some single-word brainwallets ("password", "cat"[5], etc.) have been the recipients of thousands of transactions, leaving 0.00001 BTC outputs. F2Pool has been concatenating these outputs in huge 1MB transactions.[6][7][8][9] These transactions fill up an entire block on their own, and are far too large to be relayed by nodes; they have only been confirmed because F2Pool dedicated blocks to them.[10][11] Some nodes reported having spent over 20 seconds verifying one of these transactions,[12] explaining momentary but extreme latency and downtime on block chain explorers.[13][14]

Gregory Maxwell later contacted F2Pool, advising them to use the same signature for each input in the large transactions.[15][16] This made the transactions highly compressible and far easier to verify.[17]

As a result of this attack, most mining pools updated their software to produce 1 MB blocks, as originally most capped their blocks at sizes such as 250 kB or 750 kB. The attack seems to have concluded by July 15.[18]

Motivation

The attackers may have had an agenda related to the blocksize debate, attempting to demonstrate the infeasibility of 1MB blocks including transactions of hundreds of thousands of users.[11] Specifically, the Chinese mining pools (AntPool, BW Mining, F2Pool, BTC China, & Huobi) have expressed distaste towards Gavin Andresen's proposals to increase the blocksize limit, citing concerns of relatively low bandwidth compared to that available in the United States and Europe.[11][19] The flood attack may have been attempting to discredit the pools, and subsequently force them off the network after the raised blocksize limit is in effect.[11][20]

It is unlikely that the attack was used in an attempt to damage or shut down Bitcoin, as it appears to have been controlled and benevolent.[11][21] It has also resulted in the donation of over 30 BTC to various sites.[4]

Suspects

Coinwallet.eu, who had executed the previous stress tests, may have something to do with this attack as one of their bitcoin addresses had been used in both efforts.[11] However, Coinwallet.eu did not announce involvement in this attack, as they had in the stress tests.[11][22]

Peter Todd had previously offered to execute a stress test for $7,000[23] but he denies involvement in this attack.[24]

A redditor has published the private keys to hundreds of addresses which have been recipients of dust outputs in 2013, perhaps in an attempt to incite additional spam as redditors try to claim the funds.[25][26]

Satoshi Nakamoto has been (perhaps jokingly) labeled a suspect,[11][27] as he had mentioned that the block size should be increased when it is needed[28] and may be campaigning for this change without revealing his involvement.

References

  1. /r/Bitcoin thread 3ck5z9. 80,000 Unconfirmed Transactions right now 8 July 2015. Self post.
  2. BitcoinTalk thread 1113292. 28 000 unconfirmed TXs 7 July 2015. Post 11823370.
  3. Pearson, Jordan (9 July 2015). "WikiLeaks Is Now a Target In the Massive Spam Attack on Bitcoin". Vice Media LLC. http://motherboard.vice.com/read/wikileaks-is-now-a-target-in-the-massive-spam-attack-on-bitcoin. Retrieved 10 July 2015.
  4. 4.0 4.1 /r/technology thread 3cs0ln. Voat.co and Wikileaks under attack from Bitcoin spammers 10 July 2015. This post
  5. /r/Bitcoin thread 3cgft7. Largest transaction ever mined, 999.657 KB. Consumes an entire block. 7 July 2015. This post
  6. Transaction bb41a757f405890fb0f5856228e23b715702d714d59bf2b1feb70d8b2b4e3e08.
  7. Transaction 5d8875ed1707cfee2221741b3144e575aec4e0d6412eeffe1e0fa07335f61311.
  8. BitcoinTalk thread 1112943. New achivement. The biggest tx 7 July 2015.
  9. /r/Bitcoin thread 3cgft7. Largest transaction ever mined, 999.657 KB. Consumes an entire block. 7 July 2015. Self post.
  10. /r/Bitcoin thread 3cgft7. Largest transaction ever mined, 999.657 KB. Consumes an entire block. 7 July 2015. This post
  11. 11.0 11.1 11.2 11.3 11.4 11.5 11.6 11.7 Pearson, Jordan (9 July 2015). "The Mystery Behind the Biggest Bitcoin Transaction Ever Made". Vice Media LLC. http://motherboard.vice.com/read/the-mystery-behind-the-biggest-bitcoin-transaction-ever-made. Retrieved 9 July 2015.
  12. /r/Bitcoin thread 3cgft7. Largest transaction ever mined, 999.657 KB. Consumes an entire block. 7 July 2015. This post
  13. /r/Bitcoin thread 3ckhcj. Blockchain.info is 10 blocks behind the network 8 July 2015. Self post.
  14. BitcoinTalk thread 1112943. New achivement. The biggest tx 7 July 2015. Post 11823487.
  15. /r/Bitcoin thread 3cvw52. Is this a self-interested or altruistically constructed block? 11 July 2015. This post
  16. Transaction 4a5e1e4baab89f3a32518a88c31bc87f618f76673e2cc77ab2127b7afdeda33b.
  17. /r/Bitcoin thread 3cvw52. Is this a self-interested or altruistically constructed block? 11 July 2015. This post
  18. /r/Bitcoin thread 3dbu73. Transaction mempool back down to normal range: 7k tx. 15 July 2015. Self post.
  19. Pearson, Jordan (16 June 2015). "China's Powerful Bitcoin Miners Say Their Bandwidth Sucks". Vice Media LLC. http://motherboard.vice.com/read/chinas-powerful-bitcoin-miners-say-their-bandwidth-sucks. Retrieved 9 July 2015.
  20. BitcoinTalk thread 1089283. Hearn's Worst Case Scenario: Checkpoints in XT to "ignore the longest chain" 13 June 2015.
  21. /r/Bitcoin thread 3ci9av. Could the recent attack on bitcoin be the product of a core developer? 8 July 2015. This post
  22. BitcoinTalk thread 1094865. Ultimate Bitcoin Stress Test - Monday June 22nd - 13:00 GMT 20 June 2015.
  23. /r/Buttcoin thread 3bk12f. Why doesnt buttcoin start its own "stress test"? 29 June 2015. This post
  24. /r/Bitcoin thread 3ci9av. Could the recent attack on bitcoin be the product of a core developer? 8 July 2015. This post
  25. /r/Bitcoin thread 3cf6qg. Need help moving coins to new address 7 July 2015. This post
  26. /r/Bitcoin thread 3chere. Stress Test Giveaway 7 July 2015. Self post.
  27. /r/Bitcoin thread 3ci9av. Could the recent attack on bitcoin be the product of a core developer? 8 July 2015. This post
  28. BitcoinTalk thread 1347. (PATCH) increase block size limit 3 October 2010. Post 15139.