Network Attack on XVG / VERGE

[vitaminas]

As soon as I've posted this, the attacker stopped his pool .. now we need to rollback the last 13h of the chain or leave the attacker with 13h * 1 second blocks

13 hours? It didn't last longer than 3 hours, are you trying to get admitted to the verge FUD army? Dev is already working in the fix it will be done soon

[Sjaak-trekhaak]

The FUD factory started. Missed out on low sats and got frustrated.

[fuhious]

As soon as I've posted this, the attacker stopped his pool .. now we need to rollback the last 13h of the chain or leave the attacker with 13h * 1 second blocks

13 hours? It didn't last longer than 3 hours, are you trying to get admitted to the verge FUD army? Dev is already working in the fix it will be done soon

He meant roll back to the 13th hour or 1pm. Not roll back 13 hours.

[Gedash]

The FUD factory started. Missed out on low sats and got frustrated.

sorry to tell you but its a fact that somebody abused a bug in the blockchain. The blockexplorers do not lie

[Patuba]

So is Verge going to tank worse than it is already or is this just a bump in the road?

[samspaces]

How is it these blocks were mined with a difficulty of 0.0002 ?

https://verge-blockchain.info/block/00000000128e57d865d68f1f8543f909decfdb859db7aa14e705928c7f582430

[Spexik]

Interesting, only Newbies are defending XVG and shouts about FUD.  

[BitcoinGoat]

And to think I was getting a good deal at .05 cents

[vanmoreno]

may be its just testing the water  , xvg its a stable coin mining, dont you think now when all altcoin dump, xvg is still grow..

[vitaminas]

Wow guys look   - vergebots.

your shitcoin has been attacked you fucking retards.

OCMINER IS HELPING YOU FUCKING PEASANTS.

Fact that you are calling verge a shitcoin clearly shows how much you know about crypto in general . But hey maybe you will learn a bit more about it when you FOMO in on 17th april.

[unknownids]

may be its just testing the water  , xvg its a stable coin mining, dont you think now when all altcoin dump, xvg is still grow..

yeah, the only people that feel this way are the retarded morons that have english as a second language that don't understand a single thing that was said in this thread. you probably don't even understand this sentence.

[ktru19]

network attack as soon as price rises 50% hmmm something suss...

[vitaminas]

Bug fixed, https://github.com/vergecurrency/VERGE/commit/7294e062a61f78ffb05689b562f90985463d1179

[mez]

Posted here for reference as the other Topic is self-moderated and this will probably get deleted:

There's currently a >51% attack going on on XVG which exploits a bug in retargeting in the XVG code.

Usually to successfully mine XVG blocks, every "next" block must be of a different algo.. so for example scrypt,then x17, then lyra etc.

Due to several bugs in the XVG code, you can exploit this feature by mining blocks with a spoofed timestamp. When you submit a mined block (as a malicious miner or pool) you simply
set a false timestamp to this block one hour ago and XVG will then "think" the last block mined on that algo was one hour ago.. Your next block, the subsequent block
will then have the correct time.. And since it's already an hour ago (at least that is what the network thinks) it will allow this block to be added to the main chain as well.

This is what is going on since about 06:00 UTC of 04.04.2018:

Code:

SetBestChain: new best=00000000049c2d3329a3  height=2009406  trust=2009407  date=04/04/18 13:50:09
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000a307b54dfcf  height=2009407  trust=2009408  date=04/04/18 12:16:51
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000196f03f5727e  height=2009408  trust=2009409  date=04/04/18 13:50:10
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000010b42973b6ec  height=2009409  trust=2009410  date=04/04/18 12:16:52
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000e0655294c73  height=2009410  trust=2009411  date=04/04/18 12:16:53
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000013490372b825  height=2009411  trust=2009412  date=04/04/18 12:16:54
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000017192ea8924b  height=2009412  trust=2009413  date=04/04/18 13:50:13
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000007f75f237b3b  height=2009413  trust=2009414  date=04/04/18 12:16:55
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000006ecb5753261  height=2009414  trust=2009415  date=04/04/18 13:50:14
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000019eb5bfd2f76  height=2009415  trust=2009416  date=04/04/18 12:16:56
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000018d5b80c0ee9  height=2009416  trust=2009417  date=04/04/18 13:50:15
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000159ca0701894  height=2009417  trust=2009418  date=04/04/18 12:16:57
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000ad1a8cd6b44  height=2009418  trust=2009419  date=04/04/18 13:50:16
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001002986218fc  height=2009419  trust=2009420  date=04/04/18 12:16:58
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000b58e4fed470  height=2009420  trust=2009421  date=04/04/18 13:50:17
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000d9f0707d83f  height=2009421  trust=2009422  date=04/04/18 12:16:59
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000007283d98dbb0  height=2009422  trust=2009423  date=04/04/18 12:17:00
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000002ec7b8a6e80  height=2009423  trust=2009424  date=04/04/18 12:17:01
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001f359a8f2f4a  height=2009424  trust=2009425  date=04/04/18 13:50:20
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000293a6723940  height=2009425  trust=2009426  date=04/04/18 12:17:02
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001397927ec69d  height=2009426  trust=2009427  date=04/04/18 13:50:21
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000efb6e062c02  height=2009427  trust=2009428  date=04/04/18 12:17:03
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001e181a0d0f4a  height=2009428  trust=2009429  date=04/04/18 13:50:22
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000008ca5848691b  height=2009429  trust=2009430  date=04/04/18 12:17:04
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000066a216ac27b  height=2009430  trust=2009431  date=04/04/18 13:50:23
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001874a45f28c7  height=2009431  trust=2009432  date=04/04/18 12:17:05
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000005bc0408b8ca  height=2009432  trust=2009433  date=04/04/18 13:50:24
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000005feb2b45e5d  height=2009433  trust=2009434  date=04/04/18 12:17:06
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000000c211ba04de  height=2009434  trust=2009435  date=04/04/18 12:17:07
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001402dc20ae5f  height=2009435  trust=2009436  date=04/04/18 12:17:08
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001e73181cf91c  height=2009436  trust=2009437  date=04/04/18 13:50:27
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000062720b222ea  height=2009437  trust=2009438  date=04/04/18 12:17:09
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000e10aeecf7f1  height=2009438  trust=2009439  date=04/04/18 13:50:28
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000b41ab258a8f  height=2009439  trust=2009440  date=04/04/18 12:17:10
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001136b924f67b  height=2009440  trust=2009441  date=04/04/18 13:50:29
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000a1c1af529cd  height=2009441  trust=2009442  date=04/04/18 12:17:11
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000007f1d1f8d921  height=2009442  trust=2009443  date=04/04/18 13:50:30
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000ca0a1bc6b0e  height=2009443  trust=2009444  date=04/04/18 12:17:12
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000003075b7a580  height=2009444  trust=2009445  date=04/04/18 13:50:31
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001c9f43fd7305  height=2009445  trust=2009446  date=04/04/18 12:17:13
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000009129b024a  height=2009446  trust=2009447  date=04/04/18 12:17:14
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000008e180f24f15  height=2009447  trust=2009448  date=04/04/18 12:17:15
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000084eb6c59c6d  height=2009448  trust=2009449  date=04/04/18 13:50:34
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000d8510f41c9a  height=2009449  trust=2009450  date=04/04/18 12:17:16
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000011df91a1ab87  height=2009450  trust=2009451  date=04/04/18 13:50:35
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001ba92e976854  height=2009451  trust=2009452  date=04/04/18 12:17:17
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000364bf981384  height=2009452  trust=2009453  date=04/04/18 13:50:36
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000012d88fa3db27  height=2009453  trust=2009454  date=04/04/18 12:17:18
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000305cd62b1f2  height=2009454  trust=2009455  date=04/04/18 13:50:37
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000011300c4f86cb  height=2009455  trust=2009456  date=04/04/18 12:17:19
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000001487b026dd4  height=2009456  trust=2009457  date=04/04/18 13:50:38
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000001c8532ef2df  height=2009457  trust=2009458  date=04/04/18 12:17:20
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001c17ae6efeeb  height=2009458  trust=2009459  date=04/04/18 12:17:21
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000002bf168f5eab  height=2009459  trust=2009460  date=04/04/18 12:17:22
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001a23e2c283bc  height=2009460  trust=2009461  date=04/04/18 13:50:41
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000014ecd97066c4  height=2009461  trust=2009462  date=04/04/18 12:17:23
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001643a1c4a3bb  height=2009462  trust=2009463  date=04/04/18 13:50:42
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000008ec0214e6c2  height=2009463  trust=2009464  date=04/04/18 12:17:24
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000009b069fcd1cc  height=2009464  trust=2009465  date=04/04/18 13:50:43
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001722adbca417  height=2009465  trust=2009466  date=04/04/18 12:17:25
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000a9e8d58c86b  height=2009466  trust=2009467  date=04/04/18 13:50:44
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000010f27ab0a452  height=2009467  trust=2009468  date=04/04/18 12:17:26
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000479c982db76  height=2009468  trust=2009469  date=04/04/18 13:50:45
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001f8be1b4066c  height=2009469  trust=2009470  date=04/04/18 12:17:27
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000b05233d5ad7  height=2009470  trust=2009471  date=04/04/18 12:17:28
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000007a9c6cdba5d  height=2009471  trust=2009472  date=04/04/18 12:17:29
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000622e29e4307  height=2009472  trust=2009473  date=04/04/18 13:50:48
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001a8d80324a57  height=2009473  trust=2009474  date=04/04/18 12:17:30
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001eddc0154526  height=2009474  trust=2009475  date=04/04/18 13:50:49
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000ac0a256f263  height=2009475  trust=2009476  date=04/04/18 12:17:31
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000040f83b5ee2f  height=2009476  trust=2009477  date=04/04/18 13:50:50
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001827966aa60b  height=2009477  trust=2009478  date=04/04/18 12:17:32
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000012d0d1501121  height=2009478  trust=2009479  date=04/04/18 13:50:51
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000032868a4c74  height=2009479  trust=2009480  date=04/04/18 12:17:33
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000092675395f6e  height=2009480  trust=2009481  date=04/04/18 13:50:52
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001f95a9a174d4  height=2009481  trust=2009482  date=04/04/18 12:17:34
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000017503fc3dc13  height=2009482  trust=2009483  date=04/04/18 12:17:35
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000007c61b36c76  height=2009483  trust=2009484  date=04/04/18 12:17:36
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000070810d5a6e5  height=2009484  trust=2009485  date=04/04/18 13:50:55
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000068467683637  height=2009485  trust=2009486  date=04/04/18 12:17:37
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000041dc83f0978  height=2009486  trust=2009487  date=04/04/18 13:50:56
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000011fb17203f4  height=2009487  trust=2009488  date=04/04/18 12:17:38
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000a96b38de1a0  height=2009488  trust=2009489  date=04/04/18 13:50:57
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000121e7a285719  height=2009489  trust=2009490  date=04/04/18 12:17:39
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000348e668204f  height=2009490  trust=2009491  date=04/04/18 13:50:58
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000012766d85cab4  height=2009491  trust=2009492  date=04/04/18 12:17:40
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000181a0c1be275  height=2009492  trust=2009493  date=04/04/18 13:50:59
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000015c05593e210  height=2009493  trust=2009494  date=04/04/18 12:17:41
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000719cb24d9c0  height=2009494  trust=2009495  date=04/04/18 12:17:42
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000015d9b853834d  height=2009495  trust=2009496  date=04/04/18 12:17:43
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000115e68a6d447  height=2009496  trust=2009497  date=04/04/18 13:51:02
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000004d9233f19c6  height=2009497  trust=2009498  date=04/04/18 12:17:44
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000141ab049fe19  height=2009498  trust=2009499  date=04/04/18 13:51:03
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001b91344fa33c  height=2009499  trust=2009500  date=04/04/18 12:17:45
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=0000000001d112440f7b  height=2009500  trust=2009501  date=04/04/18 13:51:04
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000001bf2c8a073c6  height=2009501  trust=2009502  date=04/04/18 12:17:46
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000116863c0157c  height=2009502  trust=2009503  date=04/04/18 13:51:05
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000ec5da17852e  height=2009503  trust=2009504  date=04/04/18 12:17:47
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=000000000d7cd87c5e53  height=2009504  trust=2009505  date=04/04/18 13:51:06
ProcessBlock: ACCEPTED (scrypt)
--
SetBestChain: new best=00000000156becbf42cd  height=2009505  trust=2009506  date=04/04/18 12:17:48
ProcessBlock: ACCEPTED (scrypt)

As you can see in the text above, those blocks are all subsequent, so one miner gets them all and you see there's 90 min difference between all the blocks, thats one bug the miner is
exploiting. You also see the correct time is the latter time.. so the last block ended on 13:51:06 and the block before was 12:17:47 and the block with the correct time before that one
was at 13:51:05 .. That means the hacker is mining one block per second !

The vergeDEV @ Discord says "everything is okay - there's nothing to fix"..

Since about 99% blocks by legit pools are rejected - and the dev team is not able to understand this problem, i'm closing and removing all VERGE pools from suprnova.


Here's a incomplete list of the malicious addresses:

https://verge-blockchain.info/address/DKE3tKrXJJ2s7nCPYtE5vntBKBZKGLb2kB
https://verge-blockchain.info/address/DBbZgu2eeZfxdUiqtf1dbG3H5kExDTqzCM
https://verge-blockchain.info/address/DTnxUQ476HWeSqm5hct2astEp2EB8BQBMD
https://verge-blockchain.info/address/DMK8aqjFGUNVQibv7i3qu4pyUyXcnSHHcC
https://verge-blockchain.info/address/DN4rx2gKm7Lepa6kyZx62zJtWVLAxNBc15
https://verge-blockchain.info/address/DFSnNgjEyYkfDVJGR8BG2LdFLYbJgdtFRa
https://verge-blockchain.info/address/DAf5YdtmvTaq2gySAPtfPzv86jC9nGY1RR
https://verge-blockchain.info/address/DUCtin38xfPWvLvkAtWMJoUDefg3mu1rYQ
https://verge-blockchain.info/address/D5Gz63joDNteuMJSMuiD153hQHPN626ryw

From what I see there are a lot more

this shows the incompetence of the XVG developers.
Myriadcoin had these type of attacks years ago on their multialgo so there is a fix out there

[Febo]

Wow guys look   - vergebots.

your shitcoin has been attacked you fucking retards.

OCMINER IS HELPING YOU FUCKING PEASANTS.

LOL  What is coming next is that ocminer will be accused to be part of some other coin and he attacked verge because of jealousy or something.  

[Tarlatata]

Bug fixed, https://github.com/vergecurrency/VERGE/commit/7294e062a61f78ffb05689b562f90985463d1179

Looks like 2 * 15 sec, not 15 minutes.

[dallase]

Bug fixed, https://github.com/vergecurrency/VERGE/commit/7294e062a61f78ffb05689b562f90985463d1179

Looks like 2 * 15 sec, not 15 minutes.

lead dev fail.

[adiebitsler]

Wow guys look   - vergebots.

your shitcoin has been attacked you fucking retards.

OCMINER IS HELPING YOU FUCKING PEASANTS.

LOL  What is coming next is that ocminer will be accused to be part of some other coin and he attacked verge because of jealousy or something.  

it seems to be called a competition, should be well with the development to be done in the future rather than by jealousy and others.

[boxalex]

may be its just testing the water  , xvg its a stable coin mining, dont you think now when all altcoin dump, xvg is still grow..

yeah, the only people that feel this way are the retarded morons that have english as a second language that don't understand a single thing that was said in this thread. you probably don't even understand this sentence.

Your comment is an offence for every average 2nd language English speaker :-)
You are too soft. English is my 3rd language and i understand perfectly everything. My guess is more that these guys (clowns) you talk about did not finish even yet their native 1st language yet or even aborted the learning process.

[promomei]

ty for a signal bro ocminer