Skip to content
This repository has been archived by the owner on Aug 22, 2019. It is now read-only.

Prevent Repeatedly Exiting UTXO #90

Open
AdityaSripal opened this issue Apr 10, 2018 · 0 comments
Open

Prevent Repeatedly Exiting UTXO #90

AdityaSripal opened this issue Apr 10, 2018 · 0 comments
Labels
bug Something isn't working enhancement New feature or request research Potential improvement to plasma MVP

Comments

@AdityaSripal
Copy link

References vulnerability found here: https://ethresear.ch/t/plasma-vulnerabiltity-sybil-txs-drained-contract/1654

Transaction must include the confirm signatures for the inputs being spent. If the confirm signatures are only ever sent to the receivers of UTXO's then one can create a chain of "Sybil Transactions" and then exit multiple times.
Additionally, If someone is offline for an extended amount of time and the sender of one of their UTXO's has already successfully exited, nothing currently stops them from simply exiting their invalid UTXO as well.

Proposed changes to fix the vulnerability:

  1. Include confirm signatures of inputs in transaction

  2. Include ability to challenge exit by proving that its input has already successfully exited.

  • Blockchain @ Berkeley Researcher
@smartcontracts smartcontracts added bug Something isn't working enhancement New feature or request research Potential improvement to plasma MVP labels Apr 12, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working enhancement New feature or request research Potential improvement to plasma MVP
Projects
None yet
Development

No branches or pull requests

2 participants