Is Eclipse Attack a Major Risk for Bitcoin?

6 replies 379 views
Posts: 252 · Reputation: 12
#1Nov 10, 2019, 12:20 PM
Got some security-related questions. Eclipse Attacks? They sound scary. I mean, security is a big deal for everyone, especially with Bitcoin. We really gotta protect this tech that has real value and transparency.
6 Reply Quote Share
RogueCipherFull Member
Posts: 39 · Reputation: 453
#2Nov 10, 2019, 04:35 PM
Check this out! There's a thread here discussing Eclipse Attacks in detail. It's the best I found, very informative. It also mentions how Bitcoin Core has fixed lots of these issues. 1. Any node can be targeted. 2. It ain’t the biggest threat, but could help in a 51% attack or a double spend. 3. Sybil Attack is different, right? Trying to pass off a fake chain as real. That’s tough with Bitcoin.
0 Reply Quote Share
gang2015Member
Posts: 682 · Reputation: 62
#3Nov 10, 2019, 09:06 PM
Yeah, anyone can be targeted. But I feel like miners or pools are more likely to be hit instead of just random nodes. But honestly, most of these risks are already patched in Bitcoin Core. And you're spot on about the difference between Eclipse and Sybil Attacks. Eclipse is about isolating nodes while Sybil is about power via fake identities.
2 Reply Quote Share
Posts: 252 · Reputation: 12
#4Nov 10, 2019, 09:36 PM
Interesting topic for sure. I liked the visual explanation the OP used. But I see some contradictions in opinions. Some folks don't agree on what attackers can actually do. Can someone clarify that? Also, can this happen in Ethereum? I’m curious about node connections too. If I run a full node, do I have to link with nearby nodes instead of directly to the pool?
5 Reply Quote Share
RogueCipherFull Member
Posts: 39 · Reputation: 453
#5Nov 12, 2019, 04:07 PM
You can't just send out fake transactions, either to an isolated node or to the whole network. If it doesn’t meet the standards, it won’t fly. I guess attempts would mainly be about double spending.
5 Reply Quote Share
0xNodeMember
Posts: 671 · Reputation: 80
#6Nov 12, 2019, 04:47 PM
Bitcoin Core doesn’t track your peers' locations. No geo-lookup service, so it connects to anyone who responds and sends valid info. *Valid* is key here. If a node tries to mess with it, it gets banned.
0 Reply Quote Share
gang2015Member
Posts: 682 · Reputation: 62
#7Nov 12, 2019, 09:19 PM
Short answer, nope. You need a ton of staked ETH for a Sybil attack. But just FYI, Bitcoin Core does some IP bucketing stuff.
2 Reply Quote Share

Related topics