The kgw exploit is real.
The problem is that the software will accept blocks that are timestamped earlier than previous blocks, (for good reasons) up to the median timestamp of the previous 11.
Kgw counts these as very fast blocks and adjusts the difficulty up by its 20% maximum. Once. But you can use that once to roll the timestamp back after five blocks that are long enough to drive the difficulty 20%lower each.
So the exploit is to start mining your own block chain, time stamping several blocks into the future far enough to get the maximum downward adjustment of difficulty each time. Then jump backwards in time getting the maximum upward difficulty once. Rinse, repeat, and your chain gets ridiculous low difficulty and you mine a whole lot of blocks while advancing your timestamp not much further than the main chain.
When the time in the main block chain catches up, you release your own chain and force a reorganization, which allocates to you all the coins mined for the last umpty ump blocks.
The problem is that the software will accept blocks that are timestamped earlier than previous blocks, (for good reasons) up to the median timestamp of the previous 11.
Kgw counts these as very fast blocks and adjusts the difficulty up by its 20% maximum. Once. But you can use that once to roll the timestamp back after five blocks that are long enough to drive the difficulty 20%lower each.
So the exploit is to start mining your own block chain, time stamping several blocks into the future far enough to get the maximum downward adjustment of difficulty each time. Then jump backwards in time getting the maximum upward difficulty once. Rinse, repeat, and your chain gets ridiculous low difficulty and you mine a whole lot of blocks while advancing your timestamp not much further than the main chain.
When the time in the main block chain catches up, you release your own chain and force a reorganization, which allocates to you all the coins mined for the last umpty ump blocks.
I'm in the process of rewriting KGW for our purposes. I've spend a few hours thoroughly going through the code and I think I can come up with a better implementation that doesn't have these kind of problems. DarkGravity?
BlackHole
I think that "Dark" must be in the name, it's better for the brand.
DDF
Evans Dark Well
Dark Field
thats political and your right to support it.
