Could bribery payments issued via smart contract undo the bitcoin mining pool model?
A new research paper outlines a kind of attack against pools in which a malicious actor uses smart contracts, or agreements hard-coded onto a blockchain, to pay miners to essentially stymie their own efforts to solve the cryptographic puzzles at the heart of mining. Mining is an energy-intensive – and competitive – process by which parties race to add the next block of transactions to the network.
The paper, entitled "Smart Contracts Make Bitcoin Mining Pools Vulnerable", was penned by Yaron Velner of the Hebrew University of Jerusalem; Jason Teutsch of the University of Alabama and Birmingham; and Loi Luu of the National University of Singapore's School of Computing.
on 7th March, the research posits that, in the right scenario, someone could use smart contracts to guarantee payments to miners who, in that case, would then withhold information from the pools (or large conglomerations of miners) to which they are connected.
By doing so, the malicious actor effectively increases their share of any profits relative to the pool's total hash rate. Conversely, this attack could be deployed to break up an opposing pool to the benefit of another.
Yet the key is the use of a smart contract, the authors say, who go on to explain:
Why take this route? Those who mine on their own without a significant amount of hashing power run the risk of burning all that electricity with no profits to show for it.
So, miners congregate around pools, which concentrate that hashing power onto one point, splitting the block rewards received (if any) and distributing those bitcoins to the miners miner based upon the hash rate they contribute.
With a block withholding attack, a miner who has a big amount of hashing power divides it between two pools, withholding full proof-of-work solutions from one of them.
Yet according to the authors, it wasn’t until the development of smart contracts that this type of coordinated internal mining attack was possible.
Still, the attack isn't guaranteed, as some miners – particularly those guided by ethical considerations and those who don't want to rely on a smart contract to get paid (given that those contracts have failed due to flaws in the past) – might not want to participate, according to the researchers.
Read the full paper here.
STORY CONTINUES BELOW
Recommended for you:
Image via Shutterstock