Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Demonstrate and fix front running attack (up to 3500 Gold) #18

Open
mikera opened this issue Jan 30, 2023 · 0 comments
Open

Demonstrate and fix front running attack (up to 3500 Gold) #18

mikera opened this issue Jan 30, 2023 · 0 comments

Comments

@mikera
Copy link
Member

mikera commented Jan 30, 2023

We currently believe that CPoS is relatively resistant to front-running attacks, and that a front running attack without special resources is not feasible on the Convex network. We would like to test and verify this belief, hence the objective of this bounty is to demonstrate and hopefully fix a front running attack.

Requirements:

  • Must show front running, i.e. an attacker successfully executes a transaction before an existing in-flight transaction observed on the network.
  • Must be a plausible attack where attacker does not have access to special resources:
  • does not have large network stake (<10%0
  • does not have ability to intercept / censor arbitrary messages on the network
  • does not have other unusual resources (e.g. ultra-fast global messaging)
  • Client is assumed to submit transaction to a good/trusted peer. Attacker must observe the message broadcast on the network before submitting its intended front-running transaction
  • Must have demonstration code that is repeatable (at least with high probability of attack success)

Bounty breakdown:

  • 500 Gold for repeatable attack demonstration code
  • 1000 Gold for PR to fix specific attack
  • Up to 2000 Gold extra for more general solution to front running / network security
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant