Welcome to the resource topic for 2023/956
Title:
Speculative Denial-of-Service Attacks in Ethereum
Authors: Aviv Yaish, Kaihua Qin, Liyi Zhou, Aviv Zohar, Arthur Gervais
Abstract:The expressiveness of Turing-complete blockchains implies that verifying a transaction’s validity requires executing it on the current blockchain state.
Transaction fees are designed to compensate actors for resources expended on transactions, but can only be charged from transactions included in blocks.
In this work, we show that adversaries can craft malicious transactions that decouple the work imposed on blockchain actors from the compensation offered in return.
We introduce three attacks:
(i) ConditionalExhaust, the first conditional Resource Exhaustion Attack (REA) against blockchain actors.
(ii) MemPurge, an attack for evicting transactions from victims’ mempools.
(iii) These attack are augmented by GhostTX, the first attack on the reputation system used in Ethereum’s Proposer-Builder Separation ecosystem.
We empirically evaluate the attacks on an Ethereum testnet.
The worst-case result we find is that by combining ConditionalExhaust and MemPurge, an adversary can simultaneously burden victims’ computational resources and clog their mempools, to the point where victims are unable to include transactions in their blocks.
Thus, victims create empty blocks, thereby hurting the system’s liveness.
The expected cost of a one-shot combined attack is $376, but becomes much cheaper if the adversary is a validator.
For other attackers, costs decrease if censorship is prevalent in the network.
ConditionalExhaust and MemPurge are made possible by inherent features of Turing-complete blockchains.
Potential mitigations may result in reducing a ledger’s scalability, an undesirable outcome likely harming its competitiveness.
ePrint: https://eprint.iacr.org/2023/956
See all topics related to this paper.
Feel free to post resources that are related to this paper below.
Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.
For more information, see the rules for Resource Topics .