Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
Home»ETHEREUM NEWS»Sepolia incident | Ethereum Foundation Blog
ETHEREUM NEWS

Sepolia incident | Ethereum Foundation Blog

By Crypto FlexsMarch 21, 20244 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Sepolia incident |  Ethereum Foundation Blog
Share
Facebook Twitter LinkedIn Pinterest Email

This blog post exposes threats to the Ethereum network that existed from the Merge to the Dencun hard fork.

background

Prior to the merge, various message size limits were set for RPC communications to protect clients from denial of service (DOS) attacks. These restrictions, which apply to messages received via HTTP endpoints, are passed on to the Engine API, which plays an important role in connecting execution and consensus layer clients during block creation. The engine API’s participation in block generation allows block generation to exceed the RPC size limit for some clients but remain within an acceptable range for others.

If an attacker generates a message that exceeds a client’s size limit at the lowest settings while respecting gas limit requirements, and then waits for a block to be generated, a situation may arise where some clients consider that block. We consider it valid, but others reject it and issue an HTTP error code: “413: Content too large”.

effect

An attacker who can manipulate these messages can force the majority of nodes (=geth) to reject blocks that the minority accepts. These blocks will fork and the proposer will miss out on the reward.

Initially, we thought it would only be possible to create these blocks using a modified version of the builder or client. Geth has a default 128KB limit for transactions. This means that large transactions like the one being discussed will not be included in any geth node’s transaction pool. However, it was still possible to trigger the limit by having a client with a higher limit propose a block and have the CL request validation of this proposed larger block.

We proposed a solution that temporarily lowered the RPC limit for all clients to the lowest value (5 MB). This invalidates the block and causes most nodes to reject the block, thus very limiting the disruption an attacker can cause to the network.

However, on February 7, we discovered that it is possible to create a block that hits the 5MB limit with multiple transactions that are below the 128KB limit and do not exceed 30 million gas.

This is a bigger problem because attackers have realized that they can generate many high-value transactions and send them onto the network. Because he pays more than everyone else in the mempool, all nodes (even geth nodes) include attack transactions in their blocks, creating blocks that are not accepted by the majority of the network, resulting in many forks (all are considered ). valid by a small number of nodes) the chain is continuously re-formed.

By late February 7th, we had all come to the conclusion that raising the RPC limit was a safer alternative.

timeline

  • 2024-02-06 13:00: Toni (EF), Pari (EF) and Justin (Besu) are attempting to submit a specifically refined transaction to the network. Transactions contribute up to 2.7 MB blocks when compressed quickly.
  • 2024-02-06 13:25: The transaction should be valid, but Pari receives an error from the local Geth node.
  • 2024-02-06 15:14: Justin put the transaction into a block and submitted it through the Besu client.
  • 2024-02-06 20:46: Sam (EF) warns Pari (special thanks) Mystic Ryujin X), Toni and Alex talk about a particular Sepolia node they are having trouble with.
  • 2024-02-06 21:05: Team checks again with Marius on Geth and checks for bugs.
  • 2024-02-06 21:10: The gang gets together to debug.
  • 2024-02-07 23:40: Decided to limit all clients to RPC request limit to 5MB.
  • 2024-02-07 6:40: There may be a bigger problem, and we have discovered that the attack can be executed with transactions less than 128KB in size.
  • 2024-02-07 10:00: Decided to increase RPC request limit for all clients.
  • 2024-02-07 21:00: Fix merged into geth.
  • 2024-02-09: Geth is released.


This issue has been addressed by the individual client team in the next release.

Geth: v1.13.12

Nethermind: v1.25.4

believe: 24.1.2

Erigon: v2.58.0

Res: v0.1.0-alpha.18

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Hash research CEO is appointed chief policy officer at the presidential office

June 7, 2025

Ether Leeum’s imminent brake out in major chart patterns

June 6, 2025

Bitcoin dives for less than $ 102K in fading momentum and macroscopic uncertainty.

June 6, 2025
Add A Comment

Comments are closed.

Recent Posts

The merchant warns that Bitcoin is in ‘cancer price behavior’.

June 7, 2025

Is Bitcoin Price Rally $ 150K by the end of the year?

June 7, 2025

How does it affect Bitcoin?

June 7, 2025

Gala Games introduces a step -by -step approach to founder node staking.

June 7, 2025

AB starts in binance

June 7, 2025

ETF publisher’s latest warning -SEC’s approval process ‘Innovation, AIDS GIANTS’

June 7, 2025

Solana (SOL) introduces Alpenglow for faster blockchain agreement.

June 7, 2025

The Foresight Ventures report shows a collection shift where more than 32,000 sellers around the world accept encryption.

June 7, 2025

$ AB is live on Binance, guiding the new era of new cross chain asset mobility.

June 7, 2025

Trump memoin is faced with a $ 520m lock in July and the price drops by 85%.

June 7, 2025

Vaneck launches GPZ ETF for alternative asset managers.

June 7, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

The merchant warns that Bitcoin is in ‘cancer price behavior’.

June 7, 2025

Is Bitcoin Price Rally $ 150K by the end of the year?

June 7, 2025

How does it affect Bitcoin?

June 7, 2025
Most Popular

How to maximize your profits through Black Friday?

November 28, 2024

BlackRock Sets 0.25% Fee in Latest Revised Form as Firms Prepare to Launch Spot Ethereum ETFs

July 17, 2024

Southeast Asia welcomes Devcon 7!

January 3, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.