journal article·2019-04-29Open access

Assessing Blockchain Consensus and Security Mechanisms against the 51% Attack

Sarwar Sayeed, Hector Marco-Gisbert

Applied Sciences· Volume 9· Issue 9

Abstract

The 51% attack is a technique which intends to fork a blockchain in order to conduct double-spending. Adversaries controlling more than half of the total hashing power of a network can perform this attack. In a similar way, n confirmation and selfish mining are two attack techniques that comprise a similar strategy to the 51% attack. Due to the immense attacking cost to perform the 51% attack, it was considered very unlikely for a long period. However, in recent times, the attack has befallen at a frequent pace, costing millions of dollars to various cryptocurrencies. The 51% attack strategy varies based upon the adopted consensus mechanism by a particular cryptocurrency, and it enables attackers to double-spend the same crypto-coin, restrict transactions, cancel blocks, and even have full control over the price of a cryptocurrency. A crypto-coin with a low hashing power is always jeopardized by the 51% attack due to the easily attainable hashing. In this paper, we analyze the real impact of the 51% attack, revealing serious weaknesses in consensus protocols that made this attack possible. We discuss the five most advanced protection techniques to prevent this attack and their main limitations. We conclude that in most cases, security techniques fail to provide real protection against the 51% attack because the weaknesses are inherited from the consensus protocols.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Blockchain Technology Applications and Security · Cryptography and Data Security · Spam and Phishing Detection

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

University of the West of Scotland, High Street, Paisley PA1 2BE, UK

References (53)

Show source-provided references
1. Lafaille, C. (2019, March 01). What is Blockchain Technology. Available online: https://www.investinblockchain.com/what-is-blockchain-technology/.
2. ComputerWorldUK (2018, December 01). How Blockchain Is Being Used in Enterprise. Available online: https://www.computerworlduk.com/galleries/security/how-could-blockchain-be-used-the-enterprise-3628558/.
3. Bitcoin.org (2018, August 01). Bitcoin Is an Innovative Payment Network and a New Kind of Money. Available online: https://bitcoin.org/en/.
4. Baliga, A. (2018, August 01). Understanding Blockchain Consensus Model. Available online: https://pdfs.semanticscholar.org/da8a/37b10bc1521a4d3de925d7ebc44bb606d740.pdf.
5. (2018, July 01). What Is Blockchain. Available online: https://lisk.io/academy/blockchain-basics/what-is-blockchain.
6. Walker, H. (2018, August 01). How Digital Signatures and Blockchains Can Work Together. Available online: https://www.cryptomathic.com/news-events/blog/how-digital-signatures-and-blockchains-can-work-together.
7. Asolo, B. (2019, January 01). 51% Attack Exlpained. Available online: https://www.mycryptopedia.com/52-percent-attack-explained/.
8. CoinDesk (2018, August 01). How Bitcoin Mining Works. Available online: https://www.coindesk.com/information/how-bitcoin-mining-works.
9. Tuwiner, J. (2019, March 01). What Is Bitcoin Mining and How Does It Work?. Available online: https://www.buybitcoinworldwide.com/mining/.
10. Jimi, S. (2018, May 01). Blockchain: How a 51% Attack Works Double Spend Attack. Available online: https://medium.com/coinmonks/what-is-a-51-attack-or-double-spend-attack-aa108db63474.
11. Nakamoto, S. (2018, May 15). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.221.9986.
12. Rosenfeld, M. (2014). Analysis of Hashrate-Based Double Spending. arXiv.
13. Sharma, A. (2018, June 01). Understanding Proof of Stake Through Its Flaws. Part 3 Long Range Attacks. Available online: https://medium.com/@abhisharm/understanding-proof-of-stake-through-its-flaws-part-3-long-range-attacks-672a3d413501.
14. Vitalik Buterin (2018, September 01). Long-Range Attacks: The Serious Problem with Adaptive Proof of Work. Available online: https://blog.ethereum.org/2014/05/15/long-range-attacks-the-serious-problem-with-adaptive-proof-of-work/.
15. ROWAN MARLEY (2019, January 01). How Blockchain Can Fight DDoS Attacks. Available online: https://thechain.media/how-blockchain-can-fight-ddos-attacks.
16. Morgan, S. (2018, July 01). Blockchain Startup: 300,000 DDoS Attacks Will Cause 150B in Damages This Year. Available online: https://www.csoonline.com/article/3234775/security/blockchain-startup-300000-ddos-attacks-will-cause-150b-in-damages-this-year.html.
17. KASPERSKY (2019, January 01). DDoS Breach Costs Rise to over 2M for Enterprises finds Kaspersky Lab Report. Available online: https://usa.kaspersky.com/about/press-releases/2018_ddos-breach-costs-rise-to-over-2m-for-enterprises-finds-kaspersky-lab-report.
18. Buterin, V. (2018, June 01). The P + epsilon Attack. Available online: https://blog.ethereum.org/2015/01/28/p-epsilon-attack/.
19. Risberg, J. (2018, June 01). Yes, the Blockchain Can Be Hacked. Available online: https://coincentral.com/blockchain-hacks/.
20. Douceur, J.R. (2002). The Sybil Attack, Springer. Revised Papers from the First International Workshop on Peer-to-Peer Systems.10.1007/3-540-45748-8_24 ↗
21. Binance Academy (2019, January 01). Sybil Attacks Explained. Available online: https://www.binance.vision/security/sybil-attacks-explained.
22. Natoli, C., and Gramoli, V. (2016). The Balance Attack Against Proof-Of-Work Blockchains: The R3 Testbed as an Example. arXiv.
23. Maria, A., Aviv, Z., and Laurent, V. (2017, January 22–26). Hijacking Bitcoin: Routing Attacks on Cryptocurrencies. Proceedings of the 2017 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA.
24. Vervier, P.A. (2018, July 01). Why BGP Hijacking Remains a Security Scourge. Available online: https://www.symantec.com/blogs/feature-stories/why-bgp-hijacking-remains-security-scourge.
25. Reichl, P., Egger-Lampl, S., Schatz, R., and D’Alconzo, A. (2010, January 23–27). The Logarithmic Nature of QoE and the Role of the Weber-Fechner Law in QoE Assessment. Proceedings of the 2010 IEEE International Conference on Communications, Cape Town, South Africa.10.1109/ICC.2010.5501894 ↗
26. Tar, A. (2018, July 01). Proof-of-Work, Explained. Available online: https://cointelegraph.com/explained/proof-of-work-explained.
27. Lisk (2019, March 01). Proof of Work. Available online: https://lisk.io/academy/blockchain-basics/how-does-blockchain-work/proof-of-work.
28. (2018, May 01). Bitcoin Mining. Available online: https://powercompare.co.uk/bitcoin/.
29. Wang, K. (2018, June 01). Cryptoeconomics: Paving the Future of Blockchain Technology. Available online: https://hackernoon.com/cryptoeconomics-paving-the-future-of-blockchain-technology-13b04dab971.
30. Gautham (2018, July 01). PoW Blockchain Could Be Vulnerable to Balance Attack. Available online: https://www.newsbtc.com/2017/01/29/pow-blockchain-balance-attack/.
31. Stan Higgins (2018, July 01). Bitcoin Mining Pools Targeted in Wave of DDOS Attacks. Available online: https://www.coindesk.com/bitcoin-mining-pools-ddos-attacks.
32. (2018, July 01). Proof of Stake. Available online: https://lisk.io/academy/blockchain-basics/how-does-blockchain-work/proof-of-stake.
33. Komodo (2019, March 01). Komodo: Advanced Blockchain Technology, Focused on Freedom. Available online: https://komodoplatform.com/wp-content/uploads/2018/06/Komodo-Whitepaper-June-3.pdf.
34. Buterin, V. (2018, July 01). Proof of Stake: How I Learned to Love Weak Subjectivity. Available online: https://blog.ethereum.org/2014/11/25/proof-stake-learned-love-weak-subjectivity/.
35. Asolo, B. (2018, July 01). Delegated Proof of Stake (DPOS) Explained. Available online: https://www.mycryptopedia.com/delegated-proof-stake-dpos-explained/.
36. (2018, August 01). Solving the Byzantine Generals Problem with Delegated Proof of Stake (DPoS). Available online: https://www.radixdlt.com/post/what-is-delegated-proof-of-stake-dpos.
37. Matt (2019, January 01). Bitcoin’s Attack Vectors: 51% Attacks. Available online: https://medium.com/chainrift-research/bitcoins-attack-vectors-51-attacks-a96deac43774.
38. Komodo (2019, March 01). Komodo’s Blockchain Security Service. Available online: https://komodoplatform.com/wp-content/uploads/2019/02/Komodo-Blockchain-Security-Service-Brochure.pdf.
39. Bastiaan, M. (2019, March 01). Preventing the 51%-Attack: A Stochastic Analysis of Two Phase Proof of Work in Bitcoin. Available online: https://pdfs.semanticscholar.org/0336/6d1fda3b24651c71ec6ce21bb88f34872e40.pdf.
40. Bai, Q., Zhou, X., Wang, X., Xu, Y., Wang, X., and Kong, Q. (2018). A Deep Dive into Blockchain Selfish Mining. arXiv.10.1109/ICC.2019.8761240 ↗
41. Vitalik Buterin (2018, August 01). Selfish Mining: A 25% Attack Against the Bitcoin Network. Available online: https://bitcoinmagazine.com/articles/selfish-mining-a-25-attack-against-the-bitcoin-network-1383578440/.
42. IOTA (2019, February 01). What Is IOTA?. Available online: https://www.iota.org/get-started/what-is-iota.
43. Daniel Barta (2019, March 01). IOTA: The Currency of Skynet. Available online: https://hackernoon.com/iota-the-currency-of-skynet-281b6abaec5.
44. Bitcoin.com (2019, January 01). What Is Bitcoin Double-Spending?. Available online: https://www.bitcoin.com/info/what-is-bitcoin-double-spending.
45. Jon Matonis (2018, September 01). The Bitcoin Mining Arms Race: GHash.io and the 51% Issue. Available online: https://www.coindesk.com/bitcoin-mining-detente-ghash-io-51-issue.
46. Blockchain (2019, March 01). Hash Distribution. Available online: https://www.blockchain.com/pools?timespan=24hours.
47. Garoffolo, A., Stabilini, P., Viglione, R., and Stav, U. (2019, January 01). A Penalty System for Delayed Block Submission. Available online: https://www.horizen.global/assets/files/A-Penalty-System-for-Delayed-Block-Submission-by-Horizen.pdf.
48. ChainZilla (2019, February 01). Blockchain Security and How to Mitigate. Available online: https://medium.com/chainzilla/solutions-to-51-attacks-and-double-spending-71526be4bb86.
49. Fawkes (2019, January 01). PirlGuardInnovative Solution against 51% Attacks. Available online: https://medium.com/pirl/pirlguard-innovative-solution-against-51-attacks-87dd45aa1109.
50. Alexander Block (2019, March 01). Mitigating 51% Attacks with LLMQ-based ChainLocks. Available online: https://blog.dash.org/mitigating-51-attacks-with-llmq-based-chainlocks-7266aa648ec9.
51. Cryptocompare.com (2019, January 01). What Is Merged Mining-Bitcoin & Namecoin-Litecoin & Dogecoin. Available online: https://www.cryptocompare.com/mining/guides/what-is-merged-mining-bitcoin-namecoin-litecoin-dogecoin/.
52. Edmund, N.G. (2019, January 01). A Dash to Mitigate 51% Attacks with ChainLocks. Available online: https://blockchainreporter.net/2018/12/01/dash-to-mitigate-51-attacks-with-chainlocks/.
53. Nicehash (2018, August 01). Largest Crypto Mining Marketplace. Available online: https://www.nicehash.com/.