The best government attack is to legally forbid Bitcoin and force ISPs to block Bitcoin traffic. Then Bitcoin would start a cat and mouse race to obfuscate the protocol data/port and that would hurt Bitcoin and prevent a wider adoption of the system.
This attack probably costs a few hundred USD.
I suspect that you are grossly underestimating the costs associated with passing the law, enforcement of the law, and engaging in the "cat and mouse race". Furthermore, it would have to be "forbid" in all countries. Otherwise bitcoin would continue to exist and function outside the jurisdiction of the countries that forbid it.
Yes, I was. I just wanted to point out that this is the most easy way to crack Bitcoin for goverments.
The best private company attack is to earn BTC by market manipulation. This attack probably costs 1M+ USD to control the coin.
I'm not sure that I'd consider this an attack. This sounds like a legitimate business practice to me, although I'll admit I haven't taken a lot of time to consider all the implications.
In almost all countries market manipulation is forbidden. It is prohibited in the United States under Section 9(a)(2).
The best crybecriminal attack is to exploit vulnerabilities added on purpose to steal BTC from nodes. This attack probably costs 50K - 200K USD and may include bribery to one of the core devs, github or sourceforge.net programmers or ISP workers. Probably the easiest way is by doing a man-in-the-middle attack of Windows binary downloads, since nobody checks fingerprints.
You are mistaken when you say "
nobody checks fingerprints". Many don't, but enough do. Word would spread pretty fast once someone found that the software they downloaded didn't match the fingerprint.
Then why there is no link to the fingerprint in the Bitcoin.org main page? Why is Bitcoin running on http and not on https anyway?
The fingerprint is only accessible through sourceforge.org (SHASUMS.asc) which is also not secured by http.
You see, it's very easy to
forge the binary, the public key and the fingerprint.
The best gray hat hacker attack is to find ways to DoS the network in order to manipulate the coin price. This attack probably costs 10K - 20K USD.
Bitcoin is distributed/decentralized. There is no central server to mount a DoS attack against. You might manage to mount a DoS attack against an individual (or a few individuals), but that wouldn't affect the rest of the network.
My own research says that it's quite easy and cheap to hire 5000 virtual IPs and, with some time, manage to be connected to every other Bitcoin node.