0xB10C

b10c.me

Bitcoin developer and observer

Public Key

npub1kyxqqqq8n2pu7f5pthr48zqcmr2k52vrud6wxzjpg0jsqcyhs3tshfc6vv

NIP-05 Address

b10c@b10c.me

NIP-57 Address

0xb10c@bitrefill.me

Profile Code

nprofile1qqstzrqqqqre4q70y6q4m36n3qvd34t29xp7xa8rpfq58egqvztcg4cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs7amnwvaz7tmwdaehgu3wd4hk6j782gk

Publishing to

relay.damus.io

nostr.mom

relay.noswhere.com

Author Public Key

npub1kyxqqqq8n2pu7f5pthr48zqcmr2k52vrud6wxzjpg0jsqcyhs3tshfc6vv

Show more details

Last Notes

2024-10-11 12:10:15

Additional context for "DoS due to inv-to-send sets growing too large"
https://x.com/0xB10C/status/1844705899455062220
originally posted at https://stacker.news/items/719038

2024-10-11 10:20:01

Bitcoin Core: Disclosure of hindered block propagation due to mutated blocks
https://bitcoincore.org/en/2024/10/08/disclose-mutated-blocks-hindering-propagation/
originally posted at https://stacker.news/items/718945

2024-10-11 10:19:19

Bitcoin Core: Disclosure of DoS due to inv-to-send sets growing too large
https://bitcoincore.org/en/2024/10/08/disclose-large-inv-to-send/
originally posted at https://stacker.news/items/718944

2024-08-02 12:08:19

Stats on compact block reconstructions
https://delvingbitcoin.org/t/stats-on-compact-block-reconstructions/1052
originally posted at https://stacker.news/items/632109

2024-07-15 15:04:23

- reply

I usually say "zero ex B ten C" or just "B ten C"

2024-07-15 14:56:25

Mining Pool Game Theory during Forks
https://b10c.me/blog/014-mining-pool-game-theory-during-forks/
originally posted at https://stacker.news/items/609264

2024-07-11 13:53:27

mining pool game theory during forks
https://x.com/0xB10C/status/1811390920744468502
originally posted at https://stacker.news/items/604715

2024-05-30 22:08:17

Who mined on which previous block during the fork at height 845626?
https://x.com/0xB10C/status/1780611768081121700

2024-04-19 21:18:43

- reply

Thank you!

2024-04-19 20:45:04

25 blocks to go, halving stream is live
https://www.youtube.com/watch?v=C6D9OEjnWmA

2024-04-19 10:07:13

- reply

Isn't that what my NIP-05 address is for?

2024-04-19 10:05:17

- reply

The MIT DCI build https://pooldetective.org/ in the past, but this looks very abandoned now..

2024-04-17 20:51:22

- reply

Not too difficult, just time consuming

2024-04-17 15:59:11

Looking at the merkle branches that mining pools send to miners as part of stratum jobs, it's clear that the BTCcom pool, Binance pool, Poolin, EMCD, Rawpool, and possibly Braiins* have exactly the same template and custom transaction prioritization as AntPool.
https://image.nostr.build/33d5ac0f59082e8fbb5d02ccd9a50dccea43327ae97e10db06effaede7f7c064.jpg
Stratum v1 jobs include (parts of) the coinbase transaction and the merkle branches a miner needs to compute the merkle root. If all branches are equal across pools, the block template is exactly the same.
This is a smaller merkle-tree with the stratum job branches highlighted.
https://image.nostr.build/dab683037cc63f0e4805ae16561800dd342dd53dbb646c91e6c066044a51b2d6.jpg
Here, branch0 is the txid of the first transaction in the block after the coinbase.
In the AntPool/Binance/BTCcom/.. template, it's a manually prioritized transaction paying 9.03 sat/vbyte https://mempool.space/tx/c938e8027a7fba782a092695a53d37654021bf20df71ca91b4a6daa9198b0c73
Many of the other pools didn't prioritize a transaction and included the highest feerate transaction https://mempool.space/tx/96608dc747677d6dfbc3a2b37f8a0146abae132799b13c130066bd3716fdf91a paying 301 sat/vbyte. ViaBTC prioritized another transaction and has a vastly different template.
This indicates that F2Pool currently is not using the AntPool templates, even if they share the the same custody provider. We know from multiple occasions that F2Pool has been building their own templates (https://b10c.me/o11, https://b10c.me/o9, https://b10c.me/o8)
Note that SigmaPool and SecPool both seem to share the same template (distinct from AntPools template). Two names, but probably one pool.
Some overlap in the first branches of distinct pools is expected as these branches consist of few (usually high feerate) transactions. For example, Ocean's "default" and "core" templates overlap up to branch3. At least the first 15 tx (2⁴ - 1) in the template are equal.
* similar to EMCD in the picture, Braiins sometimes differs from AntPool in the later branches of the template. This could indicate they're only helping with AntPools transaction accelerator and directly syncing with AntPools mempool, causing occasional differences in templates.
I've heard speculation about this all being liked to an FPPS partnership with AntPool/Bitmain.
Bitmain insures against bad pool luck but you have to use Bitmains templates/transaction prioritization and pay the mining reward to the insurer for later distribution.
Essentially a pool of pools and a lot of mining centralization.

2024-04-02 11:17:10

Invalid F2Pool blocks 783426 and 784121 (April 2023)
https://b10c.me/observations/11-invalid-blocks-783426-and-784121/

2024-03-28 14:38:33

Happy Birthday, LinkingLion!
A year ago I reported about LinkingLion, an entity that's presumably linking transactions to IP addresses and has been opening hundreds of connections per minute to my monitoring nodes.
An update: https://b10c.me/blog/013-one-year-update-on-linkinglion/

2024-03-28 14:37:46

Update on LinkingLion: Reduced activity and a statement by LionLink Networks
https://b10c.me/blog/013-one-year-update-on-linkinglion/

2024-03-20 20:59:31

- reply

Also: find bugs at companies that pay a higher bug bounty.

2024-03-20 20:56:49

- reply

I agree with what you say. At the time I only saw a very very small chance that something like this could be exploitable on a pool this big..

2024-03-20 14:00:41

- reply

tl;dr: ViaBTC didn't check the header merkle root in their P2P client. Sending a block message with an old header and a modified coinbase transaction caused them to SPV mine on the old header for 30s at a time. I responsibly disclosed this to ViaBTC, and they awarded 2000 USDT.

2024-03-20 13:58:08

In January, while investigating a misbehaving client on the Bitcoin P2P network, I found a vulnerability in ViaBTC's SPV mining code that allowed a remote attacker to waste their 60 EH/s hashrate by sending a single, crafted Bitcoin P2P message.
https://b10c.me/blog/012-viabtc-spv-vulnerability-disclosure/

2024-03-18 13:03:17

ERROR: AcceptBlock: bad-witness-nonce-size…
You might have seen this in the debug log of your listening Bitcoin Core node. I dug into the origin and found that ViaBTC's mining server broadcasts mutated blocks without witness data:
https://b10c.me/observations/10-viabtc-blocks-without-witness-data/?n

2024-01-29 15:02:00

I took a look at non-standard transactions in the last 117k blocks. Here's an overview:
https://b10c.me/observations/09-non-standard-transactions/?n

2023-11-22 08:01:25

- reply

They were all picked up by other miners

2023-11-21 12:08:16

My miningpool-observer project recently reported six OFAC-sanctioned transactions as missing from blocks.
Four of these transactions were likely filtered by F2Pool. This is the first filtering based on OFAC sanctions I've seen.
More in: https://b10c.me/observations/08-missing-sanctioned-transactions?n

2023-09-27 10:32:20

- reply

It seems like MARAPool had a transaction ordering issue.
66dfefcdc3eeec2745c11f511f6068d62f34c34c767ba0feed47f63f01ccc2d8 is the 6th tx in the invalid block.
It spends from 7d18f0eefce0497b5d0c9b61fdf816b7744587c7e5e57acc53de71d1dae59725, which is the 1454th tx in the block.

2023-09-27 09:24:12

MaraPool mined an invalid block at 809478 on mainnet. I observed the block on 9 out of 9 nodes.
ERROR: ConnectTip: ConnectBlock 000000000000000000006840568a01091022093a176d12a1e8e5e261e4f11853 failed, bad-txns-inputs-missingorspent, CheckTxInputs: inputs missing/spent
https://void.cat/d/3XxZTGnzrUdNhxHkCJ5ENg.webp

2023-05-29 15:32:07

- reply

It's this one apparently: https://mempool.space/block/00000000000000000000ef263c1a23ba30872e9982352562df5e84115b806050

2023-05-10 22:13:17

more reorgs https://void.cat/d/J8YTKxTAnMTTY6evHzi3N.webp

2022-07-11 15:39:13

- reply

add Iinux

2022-05-31 21:06:01

- reply

do normal, animated PNGs work too? ![](https://b10c.me/data/mo/mo3-blockchaincom-recommendations/methodology.png)

2022-05-31 21:03:46

![](https://www.da.vidbuchanan.co.uk/adamation/image.png)

2022-05-24 11:31:32

- reply

Thanks!

2022-05-23 12:40:54

hello high-PoW world