Hacker News new | ask | show | jobs
by butisaidsudo 2713 days ago
I'm trying to understand what "cashing out" would look like in an attack like this. One option would be to send coins to an exchange as you mentioned, and I presume cash them out before publishing your longer chain.

However, after the attack wouldn't it be easy to compare both chains and see which coins were double spent? Wouldn't you obviously be the perpetrator, having both double spent, as well as having cashed out a large amount of money? Or is the idea that you'd be able to cash out to a bank account not tied to your real identity?

2 comments

It absolutely would be easy to compare both chains and see exactly which coins were double spent, and you'd obviously be the perpetrator. Not that I advocate it, but if you wanted to carry out an attack, you'd likely target an exchange that didn't require verification, and you might exchange and withdraw under another coin (ex: trade ETC for ETH).

Then spend and/or clean your ill-gotten gains.

Genuine question, forgive me if it's stupid: what happens immediately after you publish the blocks? Maybe I've misunderstood a step, but I think at this point you're in possession of a) whatever real-world goods or other currencies you bought with your bitcoins from the old chain, plus b) the same number of bitcoins on the new chain. Am I right that the value of bitcoin is now likely to crash rather quickly, as people inevitably realise what you've done? Is it just a question of completing the second spend quickly enough, before this happens?
The second spend in your double spend needs to be before the re-org is noticed. Make that spend a swap to Zcash / Monero and you can't be traced. So a full scenario would be:

* Swap coin for Zcash and start mining with 51%. * Wait until your chain is longer than the main chain, and you actually hold the Zcash. * Publish the longer chain, and immediately swap your spent coin for Zcash again. (At a different exchange just to be sure).

Now, you got twice the value of Zcash you needed, and due to Zcash shielded transactions can't be traced. You just have to hope that your shenanigans won't tank the value of Zcash.

Similar things could be done with Monero.

People reacted in so irrational ways to any BTC news related to crypto (the "this is good for bitcoin" meme), that I am not sure if it would crash the price. On hte other hand a "bank run" on attacked exchange is likely. And the victim of attack will almost always be the exchange. BTW no matter what crypto fans claim ("code is law") getting anything from a service and then canceling transaction that paid for it by 51% attack will be a criminal act under many jurisdictions. Considering that shorting crypto is probably better solution. Thought I am not sure if it is even possible to borrow required amount of coins.
You cash out by having a vested interest in damaging the exchange or currency in general. Say for example a hedge fund that shorts all crypto exchanges, or a competing cryptocurrency that wants to undermine confidence in their competition.