pull down to refresh

The critical vulnerability is here
To improve content privacy, MimbleWimble allows for the aggregation of transactions. However, the adversary can exploit this feature to launch a denial of service attack. Among different aggregations that have a transaction in common, at most one can end up in the blockchain. Therefore, by aggregating different incoming transactions with a newly generated transaction, the adversary can perform a denial of service attack on the incoming transactions.
Basically, tx aggregations are malleable and an adversary can create malicious aggregations. It kind of underscores why it's important to disallow relaying nodes from from being able to detrimentally maleate the packages/txs it's relaying. It also highlights how important the mempool is.
reply
Fantastic link, thanks. I've been really curious about MimbleWimble since it came out, good to see some real adversarial research. Thanks again.
reply