Langsung ke konten utama

Lightning Network Exploits Continue to Hinder the Bitcoin Scaling Solution

Lightning Network Exploits Continue to Hinder the Bitcoin Scaling Solution

While bitcoin has run-up to all new price highs in 2020, a great number of crypto supporters have been complaining about the mempool backlog and the high fees needed to send a transaction. Meanwhile, the Lightning Network is far from seeing widespread adoption, and a number of attack vectors have been revealed this year.

At the time of publication, the Bitcoin (BTC) mempool (backlog of transactions) shows 113,000+ unconfirmed transactions and the backlog hasn’t been this high since 2017. When the bull run took place three years ago, transaction fees and unconfirmed transactions shot through the roof. Currently, according to bitcoinfees.cash data on October 31, the next BTC block fee is $10.77 and the current median fee is $6.43.

Even with the high fees and the mempool clog, the greater bitcoin community is still transacting mostly onchain. The Layer 2 protocol built on top of Bitcoin called the Lightning Network (LN) was supposed to ease the problems, and it was assumed people would shift to the LN solution. However, this never came to fruition, as the LN software has been considered too difficult for the average user, many apps are custodial, and there have been numerous vulnerabilities disclosed this year.

Even though the LN total-value-locked (TVL) in 2020 has been at an all-time high ($14.3M), it hasn’t come close to the over $2 billion worth of bitcoin (BTC) held on Ethereum. The attack vectors have also been making crypto advocates leery of the Layer 2 protocol, as there’s been a number of vulnerabilities disclosed. For instance, Joost Jager, an independent Bitcoin and Lightning Network engineer tweeted about one on Sept. 22.

“Lightning is great, but can’t say it is battle-tested,” said Jager. “If script kids would be interested, they could take down those shiny new 5 BTC wumbo channels with negligible cost and no effort at all.” The fact that any script kiddie could leverage the ‘griefing attack’ to take down those 5 BTC channels, with very little effort, is quite discouraging.

The Bitcoin (BTC) mempool (backlog of transactions) shows 113,000+ unconfirmed transactions on October 31, 2020.

Moreover, the researchers Jona Harris and Aviv Zohar recently published a paper called: “Flood & Loot: A Systemic Attack On The Lightning Network,” which is similar to the griefing attack.

“One of the risks that were identified early on is that of a wide systemic attack on the protocol, in which an attacker triggers the closure of many Lightning channels at once,” explains the paper’s authors. “The resulting high volume of transactions in the blockchain will not allow for the proper settlement of all debts, and attackers may get away with stealing some funds. This paper explores the details of such an attack and evaluates its cost and overall impact on Bitcoin and the Lightning Network.”

Furthermore, on June 2, 2020, Antoine Riard and Gleb Naumenko published a paper on another Lightning Network vulnerability called the “time-dilation attack.” One scary fact that Naumenko and Riard disclose about the time-dilation attack, is that it is “currently possible to steal the total channel capacity by keeping a node eclipsed for as little as 2 hours.”

Not too long after that issue, Antoine Riard recently discussed another susceptible exploit called the “Pinning Attack.” Riard notes that to the best of his knowledge, “currently deployed LN peers aren’t secure against [certain Pinning Attack] scenarios.” One particular scenario “requires heavy, long-term work at the base layer,” Riard stressed.

The Lightning Network has been around for quite some time, but these vulnerabilities and exploits combined with how unfriendly the user experience is, it hard to imagine the second layer solution catching on.

Of course, some of the exploits are more costly than other attacks, and engineers are working on solutions to fix these issues. However, many Lightning Network skeptics don’t believe the LN protocol will ever be ready, as one individual noted on Twitter:

Even if that were a success (by 2051, with one-third of the buyers already dead of old age) Lightning Network would STILL be vulnerable to Flood and Loot attack, and trivial DDOS at the protocol level. Lightning Network is no solution whatsoever.

What do you think about the Lightning Network vulnerabilities disclosed this year? Do you think it’s a good scaling solution? Let us know what you think in the comments section below.

The post Lightning Network Exploits Continue to Hinder the Bitcoin Scaling Solution appeared first on Bitcoin News.



source https://news.bitcoin.com/lightning-network-exploits-continue-to-hinder-the-bitcoin-scaling-solution/

Komentar

Postingan populer dari blog ini

Kucoin Hacked for $150 Million in Bitcoin; Bitfinex and Tether Freeze $33 Million of the Stolen Funds

Cryptocurrency exchange Kucoin may have been hacked for $150 million in bitcoin and multiple ERC20 tokens. The Singapore-based exchange confirmed the September 25 security breach, but did not disclose the amount stolen. “Bitcoin, ERC-20 and, other tokens in Kucoin’s hot wallets were transferred out of the exchange,” said Kucoin in an update on Saturday. Meanwhile, Bitfinex and Tether, issuers of the centralized stablecoin USDT , immediately froze a combined $33 million worth of USDT suspected to be part of the funds looted in the Kucoin hack – an action that has stirred questions around the influence of centralized platforms. Paolo Ardoino, chief technology officer of both entities, tweeted that Bitfinex froze $13 million USDT on EOS as part of the hack. Tether froze $20 million USDT “sitting on this ethereum address as a precautionary measure,” he said. In its update, Kucoin maintains that funds in its cold wallets (offline storage, which is less susceptible to hacks) ar...

Binance Blasts CFTC for Trying to Be World’s Derivatives Police, Seeks to Dismiss Lawsuit

Binance has submitted a new motion to dismiss the lawsuit filed by the U.S. Commodity Futures Trading Commission (CFTC) against it. The leading cryptocurrency exchange urges the court to reject the agency’s attempt to expand its territorial reach beyond the United States. Binance Accuses CFTC of Using U.S. Lawsuit as a ‘Trojan Horse’ to Gain Global Regulatory Reach The world’s largest digital assets exchange, Binance, has again tried to convince a U.S. court to dismiss the lawsuit in which America’s derivatives markets regulator alleged earlier this year that the crypto company had violated U.S. trading and derivatives rules. The CFTC sued Binance and its CEO Changpeng Zhao (CZ) in March, claiming that at least since July 2019, the exchange had offered and executed commodity derivatives transactions on behalf of U.S. persons. Binance sought to dismiss the complaint in July which the Commission disputed in September. In its latest filing , the crypto giant argues that the regulat...

Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli

Pi Network - Mulai Menambang Gratis Pi Network: Menambang Cryptocurrency Gratis dan Anti Monopoli Pi Network adalah proyek cryptocurrency yang memungkinkan Anda menambang Pi Coin secara gratis dan tanpa perangkat keras canggih. Hanya dengan menggunakan ponsel Anda, Anda bisa bergabung dalam jaringan blockchain yang sedang berkembang ini. Potensi Pi Network: Dengan semakin banyaknya pengguna, Pi Coin bisa menjadi mata uang digital yang sangat berharga di masa depan. Menambang Anti Monopoli: Tidak seperti penambangan tradisional, Pi Network memungkinkan siapa saja untuk berpartisipasi tanpa memerlukan perangkat keras mahal. Cara Menambang: Cukup unduh aplikasi Pi Network, daftar, dan mulai menambang hanya dengan menekan tombol di aplikasi setiap hari. Mulai Menambang Pi Network Gratis