search

bradyrussell / UISCoin

Java cryptocurrency made to learn more about Bitcoin.
https://bradyrussell.github.io/UISCoin/javadoc
0 stars 1 forks source link

malicious height packet #60

Open bradyrussell opened 3 years ago

bradyrussell commented 3 years ago

by sending a height packet with an arbitrarily high number, you could cause the current implementation of the node to wait indefinitely for a block of that height

bradyrussell commented 3 years ago

is the height and height request communication really necessary? I'm thinking if we remove it and just immediately send 

SYNC <current height>

it would be all the same but without this exploit