Pentagon’s research body, DARPA, commissioned a report to analyze the extent to which blockchains are truly decentralized. While focusing primarily on Bitcoin and Ethereum, Trail of Bits, the security company commissioned by DARPA, found evidence of major security flaws in the blockchain system.
In a damning summary, the report detailed that bitcoin and Ethereum are not truly centralized. It further revealed that only a set of four entities in the case of Bitcoin, and two entities in the case of Ethereum are enough to change past transactions.
Major Security Concerns In Bitcoin
The report also questions the efficacy of the mining process. It states that Bitcoin miners are not engaging in the mining process and that there is no set of rules to punish dishonesty. Moreover, the Stratum protocol used in coordination within mining pools is unencrypted and unauthenticated. It also found Bitcoin to be vulnerable to a 51% attack and a Sybil attack.
In another major concern, 21% of Bitcoin nodes have been using a version of the Bitcoin core that has been known to be vulnerable since June of 2021.
Moreover, 60% of Bitcoin traffic is traversed through three ISPs. Blockchain services being exploited due to a non-blockchain vulnerability is a common occurrence. Ronin and more recently, the harmony protocol was hacked because of a server vulnerability that had nothing to do with blockchains.
