Network Attack on XVG / VERGE - page 84.

ocminer

legendary

Activity: 2688

Merit: 1240

Quote from: Dogedarkdev on April 04, 2018, 02:06:39 PM

Quote from: defaced on April 04, 2018, 01:58:33 PM

nice a new version of the famed timewarp attack.. very interesting.

yep.. we pushed a quick fix and most pools have already updated.. we're already working on a whole new block verification process.

we're kinda glad this happened and that it wasn't as bad as it could have been.

Hmm, you guys are aware that the "fix" you pushed actually IS a hardfork ? So your blockchain snapshot is not valid anymore, the wallet's won't sync up from scratch anymore and the current chain is simply not usable anymore with that new "fix" ?

Your change simply disagrees with the attackers blocks, the first block I see from the attacker was 2007365 - so the wallets will stop syncing there and simply not progress any further.

I remember your first forking dramas when trying to fork into Tor which failed 2 times IIRC.

You should immediately refrain from that "fix" and set a proper fork-height (at least 48h) and the chain up until the fork block MUST accept blocks with the old timestamps and blocks after that fork block then only with the new timestamp.

Firethorn29

newbie

Activity: 2

Merit: 0

They stole our jibs!! Angry

remon78eg

newbie

Activity: 10

Merit: 0

maybe he attacks the master nodes servers and make them vote to his blocks and reject the others, then the difficulty be low and he can mining alone at near zero difficulty.

bubbagump

jr. member

Activity: 104

Merit: 3

The explorer shows it's going on right now.

askmecrypto

full member

Activity: 406

Merit: 109

Worst part of it:
dev team is not able to understand this problem

In case the Devs are incompetent to understand the case, they must seek assistance from people who can and are willing to help. Ignorance is what took Verge down the line over time and this is like a cycle for repeated scenarios.

Dogedarkdev

legendary

Activity: 1708

Merit: 1009

$XVG - The Standard in Crypto as a Currency!

pwpwpw

hero member

Activity: 908

Merit: 503

ocminer nice job but don't remove xvg from your site just yet, we all know what a shitcoin it is but it will hurt your profits if you do, do you know how long this exploit has been used? Might be a standard thing, especially before the big pumps, when it was 10sat or below.

trgnn

full member

Activity: 756

Merit: 103

Dogedarkdev

legendary

Activity: 1708

Merit: 1009

$XVG - The Standard in Crypto as a Currency!

Quote from: defaced on April 04, 2018, 01:58:33 PM

nice a new version of the famed timewarp attack.. very interesting.

yep.. we pushed a quick fix and most pools have already updated.. we're already working on a whole new block verification process.

we're kinda glad this happened and that it wasn't as bad as it could have been.

defaced

legendary

Activity: 2198

Merit: 1014

Franko is Freedom

nice a new version of the famed timewarp attack.. very interesting.

5bot

newbie

Activity: 36

Merit: 0

hope this piece of shit gets taken over

hell78

newbie

Activity: 17

Merit: 0

"There's currently a >51% attack going on on XVG which exploits a bug in retargeting in the XVG code.

Usually to successfully mine XVG blocks, every "next" block must be of a different algo.. so for example scrypt,then x17, then lyra etc.

Due to several bugs in the XVG code, you can exploit this feature by mining blocks with a spoofed timestamp. When you submit a mined block (as a malicious miner or pool) you simply
set a false timestamp to this block one hour ago and XVG will then "think" the last block mined on that algo was one hour ago.. Your next block, the subsequent block
will then have the correct time."

What several bugs enable this? How is this looked over. Is this a commonly applicable exploit or something unique to verge's code?

1369

legendary

Activity: 1623

Merit: 1067

Quote from: SacredRonin on April 04, 2018, 10:26:45 AM

Quote from: monster333 on April 04, 2018, 10:20:10 AM

so is there another fork coming? due to the flaw

There's going to have to be. Verge Dev Team will fix it quickly as they don't want anything to interfere with their upcoming partnership.

Nobody is spreading fud about an attack that actually happened. There's proof that has been presented to everyone here. OCMiner is a *highly* respected member of the mining community, has been for years. Multiple pool operators have agreed with the assessment. Please save the attacks on him or the mining community at large. THAT is unproductive.

Lol, what's next, claiming Mother Theresa kicked the terminally ill children she cared for?

Dogedarkdev

legendary

Activity: 1708

Merit: 1009

$XVG - The Standard in Crypto as a Currency!

Quote from: BBBoi on April 04, 2018, 01:49:28 PM

Quote from: Dogedarkdev on April 04, 2018, 01:30:52 PM

Quote from: nerreus on April 04, 2018, 01:24:11 PM

Wonder when they are going to hardfork it

why would we do that? we just made a quick simple update and most pools have already updated...

we are now working on a higher level of redundancy checking as well.

the attack only lasted 3 hours, and not all coins produced during that period were intercepted.

Are you reading what you have said yourself?

"Only 3 hours". At 1 block/second that is almost 17000000 verge
Current marketprice: "only" ~152 BTC: at 6800$/btc that is just over 1000000$
Wtf do you mean only 3 hours?!

it was only 3 hours, and it was 1 second between the blocks they had on their fork, they were not put in our chain in 1 second increments. they were able to intercept -some- blocks over a 3 hour period.

Peter88

newbie

Activity: 10

Merit: 2

@Dogedarkdev Please do not pretend this was only a small glitch. This had real impact. Personally, I lost all mining power for nothing while the hacker earned a lot of coins, which he can keep. If this is the way you will react to this kind of problems when the currency would be big, you'll see some dramatic losses in price.

Project seemed promising, but things like this (and the poor reaction) are bad news. Also other 'simple' problems with the Electrum wallet like the unconfirmed state and the constant connection issues (yes both in the Tor as the non-tor version) are giving away the professionalism and stability yet needs to come.

BBBoi

newbie

Activity: 5

Merit: 0

Quote from: Dogedarkdev on April 04, 2018, 01:30:52 PM

Quote from: nerreus on April 04, 2018, 01:24:11 PM

Wonder when they are going to hardfork it

why would we do that? we just made a quick simple update and most pools have already updated...

we are now working on a higher level of redundancy checking as well.

the attack only lasted 3 hours, and not all coins produced during that period were intercepted.

Are you reading what you have said yourself?

"Only 3 hours". At 1 block/second that is almost 17000000 verge
Current marketprice: "only" ~152 BTC: at 6800$/btc that is just over 1000000$
Wtf do you mean only 3 hours?!

themonkii

full member

Activity: 672

Merit: 124

Quote from: bykardinal on April 04, 2018, 12:47:31 PM

I hope it can be fixed.
DeepOnion guys like verge too.

good luck verge

I'll second that - I hope they get this resolved - one way or another. The last thing the market needs right now is more bad news.

whisperitplease

newbie

Activity: 4

Merit: 0

Quote from: Horsetoothless on April 04, 2018, 01:17:40 PM

Still waiting for my wallet to sync, will mine else where and see what happens.
Huh

Newly registered.

Wanted to see if I was the only one having this problem. Mine hasn't sync'd since 5 or 6 hours ago, and Yiimp is showing a pay out 5 hours ago that hasn't hit.

Also, every single transaction is "unverified" in my wallet (googled it, seems a common issue?)

Dogedarkdev

legendary

Activity: 1708

Merit: 1009

$XVG - The Standard in Crypto as a Currency!

Quote from: nerreus on April 04, 2018, 01:24:11 PM

Wonder when they are going to hardfork it

why would we do that? we just made a quick simple update and most pools have already updated...

we are now working on a higher level of redundancy checking as well.

the attack only lasted 3 hours, and not all coins produced during that period were intercepted.

nerreus

newbie

Activity: 3

Merit: 0

Wonder when they are going to hardfork it

Topic: Network Attack on XVG / VERGE - page 84. (Read 29513 times)