Remix.run Logo
hombre_fatal 4 days ago

Just because something is profitable doesn't mean it's not expensive, which only means it costs a lot of money.

Or, you need to spend a lot of resources to do the attack even if it's the case that you get that money back when you succeed. And the attack is not available to you if you can't front those resources (because it's expensive rather than cheap).

marcosdumay 4 days ago | parent | next [-]

I guess the clearer term for that would be "capital intensive".

ozlikethewizard 4 days ago | parent | prev | next [-]

surely the fall in value of XMR caused by such an attack would make it unprofitable as well

jcfrei 4 days ago | parent [-]

You could just short XMR heavily and profit that way.

loxs 4 days ago | parent [-]

You can only do that on centralized exchanges, which would mean that you effectively doxx yourself by shorting. Also the exchange will most probably seize your funds before you are able to withdraw them.

0x457 4 days ago | parent [-]

Not sure how are you doxxing yourself, what stopping me from YOLOing my life savings into this short after reading a few comments in this thread?

subsistence234 3 days ago | parent [-]

You'd have to spend $30M per day in order to control 51% of XMR, and then you'd YOLO your life savings (which would have to be another couple hundred million dollars) on centralized exchanges without anyone noticing?

0x457 3 days ago | parent [-]

I meant I, as someone that is aware of attempt to take over, not as an attacker.

It's only doxxing if you can, you connect that large transaction to the attacker, but you can't unless I'm missing something.

subsistence234 3 days ago | parent [-]

Oh yeah for sure.

blantonl 4 days ago | parent | prev [-]

Or, you need to spend a lot of resources to do the attack even if it's the case that you get that money back when you succeed.

There is a word for this. We call it risk.

zamadatix 4 days ago | parent | next [-]

I'm not sure I'd call this risk. Risk would be "you can invest the money, but you might not get it back" however the above is referring to the "a 51% attack absolutely works but you need a shit ton of money to do it" aspect instead. This makes it capital intensive, not (necessarily) risky.

freehorse 4 days ago | parent | next [-]

The fact that it succeeds does not mean that you get the money back (eg the price of monero could drop if that happens). You may also have miscalculated some parameters in all this or something unexpected happens (where human factor is involved). So there should always be risk involved imo. Otherwise I agree, even in a probability 1 success situation this would still not be called "cheap".

zamadatix 4 days ago | parent [-]

Agreed, no such thing as a real-world investment with truly 0 risk.

IncRnd 4 days ago | parent | prev | next [-]

It is absolutely risky. Your facilities can burn down once the ASICs arrive and before they are turned on, or your employees simply steal them for their own uses. Heck, you can have a fire once they get powered-on, because a power cable was poorly made. You might get sent the wrong product, or you could be ghosted without a delivery.

Expensive is a better fit than capital intensive, because there are massive ongoing costs to actually perform the attack, electricity for one.

If you want to understand the risks for a project, pretend you are at arms length and are being asked to fund the project 100% up-front. You'll find a huge list of risks very soon.

zamadatix 3 days ago | parent [-]

This is why I didn't say it made the investment risk free, I said being capital intensive does not make something (inherently) risky. There is no such thing as an investment without risk, but how risky it is is largely orthogonal to how capital intensive it is, and the above was talking about the latter so using the term "risk" for that half is not a great correction.

loxs 4 days ago | parent | prev [-]

Having the power to deny others to mine blocks does not mean that you can obtain the tokens from their wallets. Miners can't sign transactions on users' behalf. You can rewrite all of history but then no exchange will accept your version of it to let you exchange the tokens for fiat. Also this will almost certainly crash the price of XMR substantially. And later people will be able to fork/restore the original version. The technological side of the blockchain is only part of the consensus/trust/market/popularity. People are the other part, and people will not pay the attacker for their successful attack.

MadnessASAP 4 days ago | parent [-]

The attacker doesn't need to steal tokens. They just need to short the token while they sufficiently disrupt the network to drive down the price. They get the money and your tokens become worthless.

subsistence234 3 days ago | parent [-]

Controlling 51% of XMR costs ~$30M per day, you'd have to short a huge amount of XMR to make that worthwhile. Who would be the counter party and how would you do that anonymously?

The attack itself is unprofitable, the "profit" for Qubic is the publicity they get. (or at least that's what they're betting on)

MadnessASAP 3 days ago | parent [-]

Monero has a theoretical market cap of $4.7B USD and daily volumes >$100M USD. I wouldn't recommend taking that short position in one go but over a few days and a few exchanges I wouldn't see a problem acquiring a very large short of the token.

4 days ago | parent | prev [-]
[deleted]