ISCC2019线上赛特殊题 – 渗透物联网区块链（测试网）

Penetrate IoTeX Blockchain (Testnet)

IoTeX began our journey in 2017 to build the Internet of Trusted Things, where all physical and virtual “things” — humans, machines, businesses, and dApps — can efficiently exchange information and value at global scale. Throughout the past two years, we built IoTeX from scratch and devoted ourselves to delivering new innovations to the blockchain industry. This is manifested in Mainnet Alpha, which delivers a state-of-the-art Root Chain on which new Layer 2 chains, tokens, dApps, and businesses will be launched.

IoTeX Mainnet Alpha introduces the Root Chain, which is a robust foundation for future Layer 2 (L2) chains and dApps. As the manager of all L2 chains, the Root Chain utilizes Roll-DPoS consensus to guarantee security, reliability and transparency. The Root Chain provides P2P networking and consensus resources, which are leveraged by all L2 chains in the IoTeX Network. The Root Chain will allow developers to spin up custom L2 chains just as they would a new instance on Cloud! Cross-chain communication is also enabled by the Root Chain, which allows L2 chains to interoperate.

Here are more details about IoTeX and MainNet Alpha:
https://medium.com/@iotex/everything-you-need-to-know-about-iotex-mainnet-alpha-b8d790e0bd55.

In addition to MainNet, IoTeX also has a TestNet where almost the same blockchain software as MainNet uses is deployed, and it is used as the testbed for the protocol and dapp developers. The challenges are to penetrate the TestNet. There are multiple dimensions people could try to hack:

• 1. Attack one node in the network to make it be unable to function normally, such as crash,out of service, being partitioned by the rest of the network, etc.
• 2. Flood P2P network with high volume traffic, so that the computer resources (e.g.,bandwidth, CPU) are wasted or exhausted from many of nodes in the network.
• 3. Attack the consensus process to affect the consensus reachability, thus blocking transaction process.
• 4. Prevent a certain transaction from being processed for a period or permanently.

Participants are free to come up with other kinds of attack, as long as it could result into data pollution, performance downgrade or outage for part of or all the nodes in the network.

To claim that the attack was successful, please submit the following information to iotex_iscc@163.com:

• 1.Category of the attack
• 2.Targets
• 3.Steps to reproduce
• 4.Supporting Material/References, e.g., source code, scripts
• 5.Mitigate recommendation
• 6.Your name and country, e.g., unidentified submitters will not be eligible for reward

• IoTeX blockchain code is here: https://github.com/iotexproject/iotex-core
• The instructions to join TestNet: https://github.com/iotexproject/iotex-bootstrap
• For any questions, feel free to contact iotex_iscc@163.com.