teonite / casper-node

Reference client for CASPER protocol
https://casper.network
Apache License 2.0
0 stars 0 forks source link

fake IPs gossip problem #17

Open przemyslaw opened 5 months ago

przemyslaw commented 5 months ago

To ensure Casper is safeguarded from potential misuse, it's important to address vulnerabilities associated with blockchain software gossip. Specifically, there needs to be robust mechanisms to prevent the propagation of fake IP addresses among nodes, which was notably exploited during the attack on Solana.

Background:

During the Solana attack, malicious actors gossiped fake IP addresses, causing nodes to attempt peering with these false addresses. The attack predominantly involved IP addresses of major banks which led to significant complaints from these corporations. As a result, provider had to take severe measures, including removing Solana validators from their facilities.

Problem:

Similar attacks can be replicated on other blockchain platforms, possibly on Casper, posing a risk.

Proposed Solution: