Vertcoin, a crypto project that aims to keep mining power decentralized, has suffered its second 51-percent attack in a year.
The incident saw 603 genuine blocks on the Vertcoin main blockchain replaced with 553 blocks written by the attacker, according to the project's lead maintainer, James Lovejoy, in a GitHub notice.
Occurring on Sunday, Dec. 1, the blockchain reorganization caused five "double spends" to the value of 125 vertcoin (VTC) worth approximately $29. "Each of the double-spent outputs are coinbase outputs owned by the attacker and it is unknown to whom the coins were originally sent before being swept to an attacker address after the reorg," Lovejoy said.
Put simply, a 51-percent attack can occur when an entity (or entities) gains over half of the hashing power of a blockchain network, bringing the ability to rewrite the blocks making up the "chain."
Almost exactly a year ago to the day, Vertcoin saw another 51-percent attack that caused multiple reorgs and was estimated by Coinbase to have cost users over $100,000. After that attack, Vertcoin – which aims to block powerful mining chips called ASICs from the network to keep mining more community based and affordable – switched its proof-of-work algorithm to one called Lyra2REv3.
The latest attack had been seen coming. Lovejoy explained:
The developer continued to say there's "strong evidence" that the attack was carried out by harnessing leased hashrate from Nicehash.
"The attack was originally discovered by inspecting the work being sent from Nicehash's stratum servers, which were sending work for non-public blocks," he said.
Why Vertcoin was attacked again is unclear. Lovejoy said it would not have been profitable based on miners' block rewards alone. He suggested Bittrex may have been target, but the exchange disabling its Vertcoin wallet may have prevented more double spends.
An alternative option is that thefts via double spending was not the plan and the attack may have been "a proof of concept or sabotage attack."
CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk offers all employees above a certain salary threshold, including journalists, stock options in the Bullish group as part of their compensation.