bitcoin-dev

Keyless Anchors Are Vulnerable To Replacement Cycling Attacks

Keyless Anchors Are Vulnerable To Replacement Cycling Attacks

Original Postby Keagan McClelland

Posted on: August 2, 2024 21:58 UTC

The suggestion made is to enhance Bitcoin Core by introducing an optional rebroadcasting module.

This module's purpose would be to monitor transactions that have been dropped and then reinsert them into mempools once they become valid again. Such a feature is proposed as a solution to combat replacement cycling attacks, indicating a belief in its capability to address and rectify this specific security vulnerability within the Bitcoin network.

However, concerns are raised regarding the potential for this module to unintentionally serve as a vector for Denial of Service (DOS) attacks. The mechanism by which transactions (referred to as B3, B4, etc.) could be continuously cycled through, thereby forcing nodes with this module to maintain all such transactions until one is finally mined, is highlighted as a significant risk. This process could lead to unnecessary strain on the resources of nodes, such as memory and disk space, which might not be sustainable in the long term.

Additionally, there is an issue related to how the mempool would manage these resurrected transactions. Specifically, the challenge lies in determining which of these previously dropped transactions should be given priority when it comes to eviction from a conflicting spot in the mempool. This adds another layer of complexity to the implementation of such a module, suggesting that careful consideration and potentially additional mechanisms are needed to ensure fairness and efficiency in transaction processing.

In summary, while the proposal to add a rebroadcasting module to Bitcoin Core presents a promising solution to the problem of replacement cycling attacks, it also introduces several new challenges. These include the risk of enabling DOS attacks and the need for sophisticated management of transaction priorities within the mempool. Further analysis and exploration of these issues are necessary to fully assess the viability of this proposal.