consensus-shipyard / ipc-actors

Rust implementation of the IPC actors for FVM
MIT License
6 stars 3 forks source link

Double voting #111

Open dnkolegov opened 1 year ago

dnkolegov commented 1 year ago

The following attack may be possible:

  1. A malicious validator A submits a checkpoint Ch_A, the subnet actor counts its votes.

  2. Validator A leaves the subnet, receives all the staked tokens back, and transfers them to another malicious validator B.

  3. B adds the stake, and then B may vote for the same checkpoint Ch_A. As a result, A's weight is used twice.