Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit number of parallel claims #30

Open
hswick opened this issue Nov 27, 2017 · 1 comment
Open

Limit number of parallel claims #30

hswick opened this issue Nov 27, 2017 · 1 comment

Comments

@hswick
Copy link
Contributor

hswick commented Nov 27, 2017

This solves the attack below:
Our default client verifiers will have limited and known deposits available. An attacker could submit many claims, so many that all verifier deposits are locked up, and their other claims go unchallenged.

@sinahab
Copy link
Collaborator

sinahab commented Nov 28, 2017

More context on the attack: the attacker knows the total amount of deposits the altruistic verifiers have available. Therefore, it creates enough claims to bond all these deposits, and then some more. These extra claims will go through unchallenged.

The solution to this is to limit the number of parallel claims.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants