Git-Mirrors/blockchains-security-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/blockchains-security-toolkit.git synced 2025-07-30 01:48:43 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update polygon.md

Browse source
This commit is contained in:
bt3gl 2022-06-13 18:03:46 -07:00 • committed by GitHub
parent 12b68f7fdb
commit 80720896b6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Top-Immunefi-Vulnerabilities/polygon.md
View file

@ -55,12 +55,12 @@ updateTimeline(-(int256(amount) + delegationAmount), -1, targetEpoch);
1. Create a new validator using the stakeFor function.
2. Call the buyVoucher function with a big delegated amount to buy the shares of the validators by staking tokens.
3. The attacker can now repeat the following steps until validatorState.amount (total staking power) is low enough to bypass the consensus majority check (⅔) requirement.
a. Catch an available validator slot via an on-chain auction process which happens at regular intervals.
b. Migrate staking tokens into that validator by calling a migrateDelegation function.
c. Unstake the validator. (validatorState.amount is decreased again)
d. Wait for a checkpoint (for this validator slot to open)
a. Catch an available validator slot via an on-chain auction process which happens at regular intervals.
b. Migrate staking tokens into that validator by calling a migrateDelegation function.
c. Unstake the validator. (validatorState.amount is decreased again)
d. Wait for a checkpoint (for this validator slot to open)
* These steps will repeatedly decrease the total staking power by the same amount of delegated amount for each iteration. An attacker can repeat this until the total staking power is low enough to start accepting new checkpoints. He can bypass the required ⅔ consensus majority check. An attacker can lower the total staking power up to a low point that a sole validator can pass the majority check.
These steps will repeatedly decrease the total staking power by the same amount of delegated amount for each iteration. An attacker can repeat this until the total staking power is low enough to start accepting new checkpoints. He can bypass the required ⅔ consensus majority check. An attacker can lower the total staking power up to a low point that a sole validator can pass the majority check.