Position: Home page » Blockchain » Blockchain bug analysis

Blockchain bug analysis

Publish: 2021-05-22 23:48:08
1. Jinwowo analysis believes that blockchain mainly solves the trust and security problems of transactions. Once the information is confirmed and added to the blockchain, it will be permanently stored. Unless more than 51% of the nodes in the system can be controlled at the same time, the modification of data on a single node cannot be realized. Therefore, the data stability and reliability of blockchain are very high
e to the use of Distributed Accounting and storage, there is no centralized hardware or management organization, the rights and obligations of each node are equal, and the data blocks in the system are jointly maintained by the nodes with maintenance function in the whole system.
2.

Although driven by the influx of capital and talents, the blockchain instry ushered in rapid development, but as an emerging instry, the frequent warning of its security vulnerabilities caused people to worry about the risk of blockchain

Yu Kequn, director of the national information technology security research center, pointed out that the emergence of blockchain has brought people a lot of expectations for privacy exposure, data leakage, information tampering, network fraud and other issues. However, there are still many challenges in the security of blockchain

Li Bin, assistant director of China Information Security Evaluation Center, analyzed that the current blockchain is divided into three types: public chain, private chain and alliance chain. No matter which type, it faces security challenges in algorithm, protocol, use, time limit and system. What is particularly critical is that the current blockchain is still facing 51% attack problem, that is, nodes can successfully tamper and forge blockchain data by mastering more than 51% of the network examples

it is worth noting that in addition to external malicious attack risk, blockchain also faces the threat of its endogenous risk. Yu Kequn reminded that how to build a complete security application system around the equipment, data, application, encryption, authentication and authority of the application system of the whole blockchain is an important problem that all parties must face

Wu Jia also analyzed that as an emerging instry, employees in the blockchain instry are lack of safety awareness, which leads to the low safety factor of the software and hardware related to the blockchain and a large number of security loopholes. In addition, there are many ecological links in the whole blockchain. In contrast, the strength of the relevant security employees is scattered and it is difficult to form a joint force to solve the problem. A systematic solution is needed to meet the above challenges

content source: zhongxin.com

3. At present, there are still many problems in the practical application of blockchain technology, such as low performance, less transaction frequency per unit time, lack of technology application ecological environment, lack of relevant application cases and fraud in the name of blockchain.
4.

Recently, Vulcan team of 360 company found a series of high-risk security vulnerabilities in EOS, a blockchain platform. It is verified that some of the vulnerabilities can remotely execute arbitrary code on EOS nodes, that is, they can directly control and take over all nodes running on EOS through remote attacks

In the early morning of May 29, 360 reported this kind of vulnerability to EOS official for the first time, and assisted it to repair the security risks. The person in charge of the EOS network said that the EOS network will not be officially launched until these problems are fixed

EOS super node attack: the virtual currency transaction is completely controlled

in the attack, the attacker will construct and publish a smart contract containing malicious code, and the EOS super node will execute the malicious contract and trigger the security vulnerability. The attacker then uses the super node to pack the malicious contract into a new block, resulting in the remote control of all nodes in the network (alternative super node, exchange recharge withdrawal node, digital currency wallet server node, etc.)

because the system of the node has been completely controlled, the attacker can "do whatever he wants", such as stealing the key of the EOS super node and controlling the virtual currency transaction of the EOS network; Obtain other financial and privacy data in the participating node system of EOS network, such as digital currency in the exchange, user key stored in the wallet, key user information and privacy data, etc

What's more, an attacker can turn a node in the EOS network into a member of a botnet, launch a network attack, or become a free "miner" to extract other digital currency

source: Science and Technology News

5. Several successful ones are block chain housing rental platform in xiong'an New District, SMIC block chain public service platform in Changsha high tech Zone, and block chain Real Estate Registration Platform in Loudi. Hunan has done a good job in the application of block chain technology in the whole country. There are mature and successful application cases in provincial capitals and prefecture level cities.
6. Now many organizations and institutions are studying the application of blockchain, but what kind of blockchain application is a good blockchain application? Let me sum up. If a successful blockchain application or decentralized application wants to be more universal, it should at least meet the following requirements. 1) As an excellent application, whether it is centralized or decentralized, it needs to have strong multi-user support capability. If decentralized applications want to be accepted by mainstream users, they must at least have the ability to support millions of people, so decentralized applications need to have enough capacity expansion. For example, the well-known applications such as Facebook, Uber and wechat must have the technology to handle tens of millions of daily active users, otherwise the application can't work normally, how can it be called an excellent application. The same is true for blockchain applications. The future application scenarios, whether payment transactions or social applications, need to have the ability to support a large number of users. It is very important to have a platform that can handle a large number of users. Now the number of users of blockchain applications is relatively small, so which application has strong scalability is an important part of future development. 2) Free application experience (users can not be forced to pay to use) the entire application platform or operating system, need to have the ability to support the application of this platform to develop free application software, need to provide a good user experience for users Even if there are many benefits of decentralized application services, users cannot be forced to pay for them.) Many times, application developers should flexibly provide free services to users. When users can use the platform without spending money, the number of applications developed on this platform is bound to grow. At the same time, the free block chain platform will naturally get more users' attention. When there are enough users, developers and related enterprises can create more profit models. 3) Simple and convenient system update capability (system update freedom and bug repair) the entire blockchain application and operation platform should provide enough freedom for participating developers. Update the decentralized application at the right time according to their ideas and needs If there is a bug in the application that needs to be solved, the developer should not affect the whole underlying operating system when repairing it. In addition, block chain based applications need to support software upgrade when they iterate. When the underlying platform of blockchain encounters a bug, it should have the ability to repair the error from the bug. 4) Low latency blockchain applications or decentralized applications should not only have the ability to run smoothly, but also have very low latency. For example, the speed of opening a website is very slow, and it takes several seconds. In this era of rapid consumption, users often have no patience to wait, at least it affects their mood and experience. The longer the delay time, the more user experience will be affected, and the decline of user experience will seriously affect and rece the market competitiveness of the application It's very easy to understand. If you open a web page very slowly, will you bother? 5) powerful serial performance. A good blockchain application should choose whether to focus more on serial capability or parallel capability according to specific application scenarios. For example, applications such as exchanges often need to handle a large number of serial operations. In this scenario, a good blockchain architecture needs to have strong serial performance, supplemented by intelligent parallel processing capability. Another example is that you need to transfer one purchase to another to avoid double spending. That is, if you take bitcoin and pay for things at the same time, one family may not receive money. Here is also to have a strong serial performance. 6) The intelligent parallel performance blockchain application operation platform should have the ability to make the decentralized applications based on it run synchronously, which can reasonably allocate the amount of computation and save time. Moreover, large-scale applications also need to divide the workload between multiple CPUs and computers
if you look at Aqua hydrogen oxygen project again, because its main website is not yet online, what I see here on the official website is more about the relationship between its investment and partners, and the noble background of the team. I believe in their strength, but when I investigate that Taotao class is also theirs, I want to ask how many people in this company have done a lot of things. But looking at the logic of doing things, I think there should be potential, but it will take time to verify
7. The loss of battery and CPU will be accelerated, and it will feel stuck when using. Nothing else.
8. Chongqing jinwowo analyzes and solves problems in the following ways:
first of all, by using all data chains in the blockchain for prediction and analysis, the regulatory authorities can timely discover and prevent possible systemic risks. The decentralized characteristics of the blockchain can eliminate the information island in big data risk control, and improve risk control through information sharing

secondly, the distributed database of blockchain can improve the poor quality of big data risk control data, and solve the problems of data format diversification, data form fragmentation, lack of effective data and incomplete data content

finally, blockchain can prevent data leakage. Because the blockchain database is a decentralized database, any node's operation on data will be found by other nodes, thus strengthening the monitoring of data leakage.
Hot content
Inn digger Publish: 2021-05-29 20:04:36 Views: 341
Purchase of virtual currency in trust contract dispute Publish: 2021-05-29 20:04:33 Views: 942
Blockchain trust machine Publish: 2021-05-29 20:04:26 Views: 720
Brief introduction of ant mine Publish: 2021-05-29 20:04:25 Views: 848
Will digital currency open in November Publish: 2021-05-29 19:56:16 Views: 861
Global digital currency asset exchange Publish: 2021-05-29 19:54:29 Views: 603
Mining chip machine S11 Publish: 2021-05-29 19:54:26 Views: 945
Ethereum algorithm Sha3 Publish: 2021-05-29 19:52:40 Views: 643
Talking about blockchain is not reliable Publish: 2021-05-29 19:52:26 Views: 754
Mining machine node query Publish: 2021-05-29 19:36:37 Views: 750