A critical flaw in Bitcoin's mining algorithm has been identified, potentially allowing miners to exploit it for rapid block creation.
A significant flaw has been discovered in Bitcoin's mining algorithm, potentially allowing for the rapid mining of blocks, as revealed by researcher Loïc Morel. This bug is tied to the mechanism that adjusts mining difficulty.
Every 2016 blocks, which occurs roughly every two weeks, the Bitcoin network recalibrates the difficulty to maintain a consistent block generation rate of one block every ten minutes. This process involves measuring the time taken to mine the last set of blocks and adjusting the difficulty based on this timing.
“The error lies in these calculations. To measure the timing of blocks in the past period, a node compares the timestamp of the first block of the period with the timestamp of the last,” explained Morel. “However, this is incorrect because there are only 2015 intervals between the first and last blocks of the period, not 2016.”
The miscalculation, identified as a "one-off error," results in a roughly 0.05% inflation of the difficulty metric. More critically, this bug allows for a gap in the adjustment periods, leading to vulnerabilities that could be exploited through what Morel describes as a "time distortion" attack.
Potential Exploit
In such an attack, a miner with majority control of the network could manipulate timestamps to create an illusory increase in block creation speed, potentially allowing for up to six blocks to be mined every second instead of the standard ten-minute interval. This would have severe implications for the network, undermining transaction confirmations and drastically increasing the risk of network overload.
“The consequences would be disastrous: time locks would become useless, the network would be overloaded, and transaction confirmations would lose value,” warned Morel.
Proposed Solution
To address this issue, Morel suggests a soft fork as part of Bitcoin Improvement Proposal (BIP)-0054. This proposal aims to ensure that the timestamp of the first block in a new difficulty period does not exceed the timestamp of the last block from the previous period by more than two hours, effectively preventing time manipulation and restoring continuity between periods.
In light of this vulnerability, there are also concerns regarding potential quantum threats to Bitcoin's security, as voiced by industry experts earlier this year, indicating a broader context of risks facing the cryptocurrency.
