Bitcoin's Security Model Revisited
Yonatan Sompolinsky, Aviv Zohar

TL;DR
This paper critically reevaluates Bitcoin's security against double spending, revealing limitations in previous bounds and proposing new security notions tailored for different types of users and attack scenarios.
Contribution
It offers a revised interpretation of Bitcoin security, introduces new security notions for various stakeholders, and analyzes lightweight client vulnerabilities.
Findings
Previous bounds on transaction reversal probabilities are invalid if attackers choose attack timing.
Lightweight clients are less secure than full nodes against double spending.
New security strategies are proposed for different classes of Bitcoin users.
Abstract
We revisit the fundamental question of Bitcoin's security against double spending attacks. While previous work has bounded the probability that a transaction is reversed, we show that no such guarantee can be effectively given if the attacker can choose when to launch the attack. Other approaches that bound the cost of an attack have erred in considering only limited attack scenarios, and in fact it is easy to show that attacks may not cost the attacker at all. We therefore provide a different interpretation of the results presented in previous papers and correct them in several ways. We provide different notions of the security of transactions that provide guarantees to different classes of defenders: merchants who regularly receive payments, miners, and recipients of large one-time payments. We additionally consider an attack that can be launched against lightweight clients, and show…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsBlockchain Technology Applications and Security · Cryptography and Data Security · Crime, Illicit Activities, and Governance
