Network Attack on XVG / VERGE

[Hunterwolfie]

Yes but not sure how this attack works because it showed I was still earning. Just no payment happening.

***triple facepalm***

[misospider]

Devs' incompetency...

[skagos]

Yes but not sure how this attack works because it showed I was still earning. Just no payment happening.

Just FYI, the attack is active again since hours:

etBestChain: new best=0000000014199bb479e4  height=2024581  trust=2024582  date=04/05/18 04:12:23
ProcessBlock: ACCEPTED (scrypt)
received block 0000000005ea72a30c18
SetBestChain: new best=0000000005ea72a30c18  height=2024582  trust=2024583  date=04/05/18 05:45:42
ProcessBlock: ACCEPTED (scrypt)
received block 000000000cc5ddc0c405
SetBestChain: new best=000000000cc5ddc0c405  height=2024583  trust=2024584  date=04/05/18 04:12:24
ProcessBlock: ACCEPTED (scrypt)
received block 000000001e3596e79f46
SetBestChain: new best=000000001e3596e79f46  height=2024584  trust=2024585  date=04/05/18 05:45:43
ProcessBlock: ACCEPTED (scrypt)
received block 000000000bc74932f097
SetBestChain: new best=000000000bc74932f097  height=2024585  trust=2024586  date=04/05/18 04:12:25
ProcessBlock: ACCEPTED (scrypt)
received block 0000000018b6b325f06e
SetBestChain: new best=0000000018b6b325f06e  height=2024586  trust=2024587  date=04/05/18 05:45:44
ProcessBlock: ACCEPTED (scrypt)
received block 000000000415c5743e39
SetBestChain: new best=000000000415c5743e39  height=2024587  trust=2024588  date=04/05/18 04:12:26
ProcessBlock: ACCEPTED (scrypt)
received block 000000000a26a20a9739
SetBestChain: new best=000000000a26a20a9739  height=2024588  trust=2024589  date=04/05/18 05:45:45
ProcessBlock: ACCEPTED (scrypt)
received block 0000000016f52c223832
SetBestChain: new best=0000000016f52c223832  height=2024589  trust=2024590  date=04/05/18 04:12:27
ProcessBlock: ACCEPTED (scrypt)
received block 000000000e03064ef101
SetBestChain: new best=000000000e03064ef101  height=2024590  trust=2024591  date=04/05/18 04:12:28
ProcessBlock: ACCEPTED (scrypt)
received block 000000001db8e8120873
SetBestChain: new best=000000001db8e8120873  height=2024591  trust=2024592  date=04/05/18 04:12:29
ProcessBlock: ACCEPTED (scrypt)
received block 000000000a5d54a57c66
SetBestChain: new best=000000000a5d54a57c66  height=2024592  trust=2024593  date=04/05/18 05:45:48
ProcessBlock: ACCEPTED (scrypt)
received block 000000000fb646d4be87
SetBestChain: new best=000000000fb646d4be87  height=2024593  trust=2024594  date=04/05/18 04:12:30
ProcessBlock: ACCEPTED (scrypt)
received block 000000000483413c5790
SetBestChain: new best=000000000483413c5790  height=2024594  trust=2024595  date=04/05/18 05:45:49
ProcessBlock: ACCEPTED (scrypt)
received block 000000001bd339af32af
SetBestChain: new best=000000001bd339af32af  height=2024595  trust=2024596  date=04/05/18 04:12:31
ProcessBlock: ACCEPTED (scrypt)
received block 0000000008a51eee47a9
SetBestChain: new best=0000000008a51eee47a9  height=2024596  trust=2024597  date=04/05/18 05:45:50
ProcessBlock: ACCEPTED (scrypt)
received block 000000001fb6b0083e10
SetBestChain: new best=000000001fb6b0083e10  height=2024597  trust=2024598  date=04/05/18 04:12:32
ProcessBlock: ACCEPTED (scrypt)
received block 00000000088392c64556
SetBestChain: new best=00000000088392c64556  height=2024598  trust=2024599  date=04/05/18 05:45:51
ProcessBlock: ACCEPTED (scrypt)
received block 000000000a9fc220f36a
SetBestChain: new best=000000000a9fc220f36a  height=2024599  trust=2024600  date=04/05/18 04:12:33

I've stopped all suprnova pools

[invisiblefriend321]

And to think I was getting a good deal at .05 cents

u r getting amazing deal

really

[ocminer]

Yes but not sure how this attack works because it showed I was still earning. Just no payment happening.

The attack works like this:

The attacker replaces the legit blockchain, with legit high difficulty blocks, with his low diff blocks, invalidating all legit blocks (orphans).

That means no coins can be moved but his... He's not accepting any other transactions...

He'd need to stop in order to get the coins moved again.

The rest of the details is in post 1

[boxalex]

Yes but not sure how this attack works because it showed I was still earning. Just no payment happening.

the blocks/shares on the legit pools get orphaned due the hack => no income

[ocminer]

I skimmed the logs and saw the attacker started the new attack at around block 2014060 and stopped just now at block 2026196

..

12k blocks this time Lets say 10k... so additional 10.000 + 1560 = 15.600.000  XVG

[shubham412302]

The only profitable coin got hacked . Moved to raven which is 2nd most profitable.

[boxalex]

I skimmed the logs and saw the attacker started the new attack at around block 2014060 and stopped just now at block 2026196

..

12k blocks this time Lets say 10k... so additional 10.000 + 1560 = 15.600.000  XVG

only about 1.000.000.000 left and the maxsupply is reached and the issue gets solved its own :-)

[Ghrand]

I skimmed the logs and saw the attacker started the new attack at around block 2014060 and stopped just now at block 2026196

..

12k blocks this time Lets say 10k... so additional 10.000 + 1560 = 15.600.000

Well, we know from their github that the dev can't do math but I'm sure they will show up and say it's some other low number of XVG for more damage control. 

[idolism]

I just  made quick research on few addresses that continue to exploit the bug.

D8Z2APfnC68K461amMR6v4faaiCxWiY1rE - user phm87

https://verge-blockchain.info/address/D8Z2APfnC68K461amMR6v4faaiCxWiY1rE

https://forum.unimining.net/viewtopic.php?t=4

https://github.com/phm87

https://avatars0.githubusercontent.com/u/31578435?s=460&v=4

https://bitcointalk.org/index.php?action=profile;u=1117726


---------

Mentions of the address DBfVheAAcBd5X6tA2YpZMyNBvcn434oGqR


https://verge-blockchain.info/address/DBfVheAAcBd5X6tA2YpZMyNBvcn434oGqR

https://bitcointalk.org/index.php?topic=2172845.860

[BlackPrapor]

Could've just turn off scrypt algo support for now, until its all got fixed.

[testingtester]

So did I get it right: The devs just need to fix this timestamp bug and reset to the last legit block? The hacker(s) even cannot move their illegit coins? (btw: binance has blocked transfers to it, anyways)

[ocminer]

Could've just turn off scrypt algo support for now, until its all got fixed.

You can do that with every algo ... scrypt is just easy to rent at nicehash and that's probably why the attacker used it

[sxott72]

Ty. Will it kill the project or is it an easy fix? If it hard forks, do I need my coins in wallet off the exchanges?

[ocminer]

So did I get it right: The devs just need to fix this timestamp bug and reset to the last legit block? The hacker(s) even cannot move their illegit coins? (btw: binance has blocked transfers to it, anyways)

It's actually not so hard to get it fixed and even the hackers coins removed:

Simply exclude all blocks from the blockchain mined with a "bad timestamp" e.g. don't accept blocks where the next block is more than an hour ahead of the previous one.

By doing it this way, you'd already see from the beginning which blocks "belong" to the attacker and which blocks are legit. Then you would simply set checkpoints to exclude the malicious chain and only include legit blocks again.

It's definitely possible.. it requires some work but it's possible.. Definitely better than letting one person get away with > 20 Million XVG ...

[andro hac]

Verge Is Forced to Fork After Suffering a 51% Attack https://news.bitcoin.com/verge-is-forced-to-fork-after-suffering-a-51-attack/ … 

[yeswepump]

Just found out about this event. So is the attack still ongoing and the chain is at risk?

[siege3967]

Can someone elaborate whats happening. ExplainLikeim5. Thanks =)

Your best to read through the whole post to get a good understanding of what has happened.

On another note, this is hardly the first crypto to be hit like this and most probably won't be the last..... don't really see why people are freaking out so badly.... shit happens like this all the time.... Welcome to crypto.

Stop being so nonchalant. You're behaving like Sunerok. It's actually quite a big deal.

clearly you have not been in crypto that long lol..... i am not going to panic or worry.... a fix will be released as it has always been done with soo many different crypto coins. i have seen this happen so many times and everything has always recovered at the end of the day, may take weeks or months but it eventually recovers. the team is working on a fix just like many other coin devs did...

Stop embarrassing yourself. These sort of attacks are not common at least not in this way with exploitable code. Stop comparing with eth. You have an idiot dev who can't calculate 15 minutes and copy-pastes all the code for the coin (including the "fix" they tried from peercoin which he just copy pasted without even editing the comment) and they have vitalik.

[Surging Chaos]

Verge Is Forced to Fork After Suffering a 51% Attack https://news.bitcoin.com/verge-is-forced-to-fork-after-suffering-a-51-attack/ … 

This isn't even a 51% attack. This is more like a 100% attack. Who needs hashing power when you can just magically orphan all legit blocks?