Bitcoin Forum
March 29, 2024, 08:50:59 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: An effective attack against SatoshiDice  (Read 1233 times)
jl2012 (OP)
Legendary
*
Offline Offline

Activity: 1792
Merit: 1087


View Profile
January 03, 2013, 04:24:18 AM
 #1

I find an interesting transaction: http://blockchain.info/tx/9106ac6859097079d39127aaac86208ac2a2b9bade92c3ae109192b7bc340872

Paying 0.01BTC fee, it sent 228 x 0.000001BTC outputs to SatoshiDice. SD returned the fund (because they were lower than the minimum bet) with 228 transactions with 0.001BTC fee for each, with a total of 0.228BTC or about 3USD.

Comparing the loss of the attacker and SD, the ratio is 22.8x and seems quite effective. Actually there were 243 outputs in the attacking transaction (15 of them were not sent to SD) so the real ratio should be 24.3x. Since outputs do not contain public keys thus are small in size, I think 0.01BTC fee could actually pay for more than 243 outputs, making the attack even more effective.

So the question is, what could be the maximum harm done if the attacker paid 1BTC fee?

Donation address: 374iXxS4BuqFHsEwwxUuH3nvJ69Y7Hqur3 (Bitcoin ONLY)
LRDGENPLYrcTRssGoZrsCT1hngaH3BVkM4 (LTC)
PGP: D3CC 1772 8600 5BB8 FF67 3294 C524 2A1A B393 6517
1711702259
Hero Member
*
Offline Offline

Posts: 1711702259

View Profile Personal Message (Offline)

Ignore
1711702259
Reply with quote  #2

1711702259
Report to moderator
1711702259
Hero Member
*
Offline Offline

Posts: 1711702259

View Profile Personal Message (Offline)

Ignore
1711702259
Reply with quote  #2

1711702259
Report to moderator
1711702259
Hero Member
*
Offline Offline

Posts: 1711702259

View Profile Personal Message (Offline)

Ignore
1711702259
Reply with quote  #2

1711702259
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
Third Way
Full Member
***
Offline Offline

Activity: 238
Merit: 100



View Profile
January 03, 2013, 06:26:12 AM
 #2

Christ how horrifying. Dmanit bitcoin I just got my first five now this scary ass fuck news.

blease resbond -> 1BYJKxpntNn6TZbM5M5CWkEb8vr8vDcBrr
paybitcoin
Member
**
Offline Offline

Activity: 85
Merit: 10


1h79nc


View Profile WWW
January 03, 2013, 07:16:47 AM
 #3

Meh, SD would just start keeping the small transactions or roll out some better fraud protection if it becomes an issue.
dooglus
Legendary
*
Offline Offline

Activity: 2940
Merit: 1327



View Profile
January 03, 2013, 07:28:41 PM
 #4

Meh, SD would just start keeping the small transactions or roll out some better fraud protection if it becomes an issue.

Or they could pay out each incoming transaction with a single outgoing transaction.

If you want to make 100 bets in a single transaction, you won't mind getting your payout in a single transaction either.  If you want to look into exactly which bets won and which lost, you can check their website for details.

Just-Dice                 ██             
          ██████████         
      ██████████████████     
  ██████████████████████████ 
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
    ██████████████████████   
        ██████████████       
            ██████           
   Play or Invest                 ██             
          ██████████         
      ██████████████████     
  ██████████████████████████ 
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
    ██████████████████████   
        ██████████████       
            ██████           
   1% House Edge
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!