{"id":28543,"date":"2020-09-11T18:32:34","date_gmt":"2020-09-11T15:32:34","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=28543"},"modified":"2025-08-27T12:08:12","modified_gmt":"2025-08-27T09:08:12","slug":"developer-flags-potential-vulnerability-in-ethereum-2-0","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/developer-flags-potential-vulnerability-in-ethereum-2-0\/","title":{"rendered":"Developer flags potential vulnerability in Ethereum 2.0"},"content":{"rendered":"<p>Lior Yaffe, co-founder of Jelurida and a leading developer of Ardor and Nxt, has found a potential threat in the Ethereum 2.0 test network. <a href=\\\"https:\/\/decrypt.co\/41503\/how-an-attacker-might-try-to-break-ethereum-2-0\\\" target=\\\"_blank\\\" rel=\\\"noopener noreferrer\\\">Decrypt<\/a> reports this.<!--more--><\/p>\n<p>Yaffe considered a scenario in which node participation in the network is low and some \u201cwhales\u201d use multiple accounts. In his view, the minimum participation requirement of 66% could pose problems for the network.<\/p>\n<blockquote>\n<p>&#8220;Assume that 10% of ETH is staked at a participation level of 75%. A 9 percentage-point drop would stop the chain, while only 0.9% of ETH in circulation would need to be controlled,&#8221; the developer noted.<\/p>\n<\/blockquote>\n<p>A user cannot stake more than 32 ETH with a single node. But nothing prevents a hypothetical \u201cwhale\u201d from running multiple accounts. According to Yaffe, this is already happening in the Medalla testnet.<\/p>\n<p>The CEO of Etherscan, Matthew Tan, acknowledged the issue. A participation level below 66% would render the chain unstable and lead to finality problems, he explained.<\/p>\n<p>Raul Jordan believes that in the mainnet there will be \u201cmore than 16,384 validators, around 25,000 at launch,\u201d so the amount needed for an attack would be higher. He says that with participation around 99% an attacker would need to seize 33% of the total stake.<\/p>\n<p>Jordan asserts that in this case an attack would require around $100 million. The organizer&#8217;s losses would be no less than those of network participants.<\/p>\n<blockquote>\n<p>&#8220;That is not in his interests, unless he wants to lose a lot of money,&#8221; the developer noted.<\/p>\n<\/blockquote>\n<p>Earlier, Ethereum cofounder Vitalik Buterin <a href=\"https:\/\/u1f987.com\/en\/news\/vitalik-buterin-says-concerns-about-potential-ethereum-2-0-attacks-are-unfounded\">refuted<\/a> concerns about a 51% attack on ETH 2.0. In his words, it would not be fatal for the network.<\/p>\n<p>Developers <a href=\"https:\/\/u1f987.com\/en\/news\/launch-of-the-final-ethereum-2-0-testnet\">launched<\/a> the final Ethereum 2.0 testnet called Medalla on August 4. The network does not use real ETH or staking rewards.<\/p>\n<p>Follow ForkLog news on <a href=\\\"https:\/\/www.facebook.com\/forklog\\\" target=\\\"_blank\\\" rel=\\\"nofollow noopener noreferrer\\\">Facebook<\/a>!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lior Yaffe, co-founder of Jelurida and a leading developer of Ardor and Nxt, has identified a potential threat in the Ethereum 2.0 testnet. Decrypt reports this.<\/p>\n","protected":false},"author":1,"featured_media":28544,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1301,46,1138],"class_list":["post-28543","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-blockchain-vulnerabilities","tag-ethereum","tag-opinions"],"aioseo_notices":[],"amp_enabled":true,"views":"20","promo_type":"1","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/28543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=28543"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/28543\/revisions"}],"predecessor-version":[{"id":28545,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/28543\/revisions\/28545"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/28544"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=28543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=28543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=28543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}