Pages:
Author

Topic: SolidCoin Exploited. - page 2. (Read 3434 times)

legendary
Activity: 1484
Merit: 1005
December 01, 2011, 06:52:38 PM
#7
Looks like SC was dropped from allchains

this is the end my friends
donator
Activity: 1218
Merit: 1079
Gerald Davis
December 01, 2011, 05:49:09 PM
#6
This exploit (and others like it) is why it was so important to release the code the control nodes run.
Before the coin launches, not after.

Peer review for the win.

WPA vs WEP
Bitcoin vs ScamCoin
AES vs DES
legendary
Activity: 1190
Merit: 1000
December 01, 2011, 12:50:03 PM
#5
This exploit (and others like it) is why it was so important to release the code the control nodes run.
Before the coin launches, not after.
hero member
Activity: 686
Merit: 564
December 01, 2011, 06:05:21 AM
#4
Quote
The trust node system has allowed us to pretty much nullify any serious attack vector that was possible (as unlikely as they were it did highlight some more things we needed to tie down).
I don't think this is actually true. The thing I didn't entirely grasp when first reading the patch is that unlike Bitcoin, which prefers the first block it saw if it receives two that are equally good, Solidcoin uses the most recent block:
Code:
    // New best
    if (pindexNew->bnChainWork > g_bnBlockBestChainWork || pindexNew->bnChainWork == g_bnBlockBestChainWork)
    {
        if (!SetBestChain(txdb, pindexNew)) return false;
    }
So in theory not even using the trust nodes to completely shut down Solidcoin would be enough to stop someone from exploiting this to rewrite history. They should give RealSolid some power to influence which side of a double spend wins if he catches it soon enough and has enough hashpower, though.

That's a thought actually. If the new version breaks backwards compatibility and some nodes don't upgrade on time it'd require a lot less hashpower to attack those nodes than it normally would.
legendary
Activity: 2114
Merit: 1031
December 01, 2011, 05:08:30 AM
#3
Well started a thread on this page I found about mining the trusted blocks on SolidCoin and one of the SC trolls had this to post in the thread apparently the page was correct and someone has exploited the "unbreakable code of the master programmer" RS.



Response from RealSolid

Quote
Posted Today, 06:01 AM
Yeah there was an exploit which currently takes some of the CPF payment away from the CPF in the trust blocks and instead gives it to an address supplied by the attacker. It's mostly been limited though with code given to the trust nodes, exchanges and larger pools. There currently isn't much SC going to the CPF each day, so the amount they got was quite small. The trust node system has allowed us to pretty much nullify any serious attack vector that was possible (as unlikely as they were it did highlight some more things we needed to tie down).

There will be a new version out soon which signs the trust blocks themselves so that they cannot be altered and "reused" at all.

What I find weird on that page though is the fact it's revenge for Litecoin, they think we had something to do with their spam or something? Quite weird when we already know one person who has admitted to spamming in the past and thinks it's a valid "testing tool" , ie artforz. The guy who is also likely behind this exploit.


SAC

I am no more of a SC troll than you are a LTC troll.

gotta love the troll on troll action!

alternative cryptocurrency volatility FTW!  Day-trading anyone?
legendary
Activity: 1764
Merit: 1015
December 01, 2011, 03:28:51 AM
#2
Well started a thread on this page I found about mining the trusted blocks on SolidCoin and one of the SC trolls had this to post in the thread apparently the page was correct and someone has exploited the "unbreakable code of the master programmer" RS.



Response from RealSolid

Quote
Posted Today, 06:01 AM
Yeah there was an exploit which currently takes some of the CPF payment away from the CPF in the trust blocks and instead gives it to an address supplied by the attacker. It's mostly been limited though with code given to the trust nodes, exchanges and larger pools. There currently isn't much SC going to the CPF each day, so the amount they got was quite small. The trust node system has allowed us to pretty much nullify any serious attack vector that was possible (as unlikely as they were it did highlight some more things we needed to tie down).

There will be a new version out soon which signs the trust blocks themselves so that they cannot be altered and "reused" at all.

What I find weird on that page though is the fact it's revenge for Litecoin, they think we had something to do with their spam or something? Quite weird when we already know one person who has admitted to spamming in the past and thinks it's a valid "testing tool" , ie artforz. The guy who is also likely behind this exploit.


SAC

I am no more of a SC troll than you are a LTC troll.
SAC
sr. member
Activity: 322
Merit: 250
December 01, 2011, 03:15:50 AM
#1
...
Pages:
Jump to: