On the security of softforks



Summary:

On December 18, 2015, Pieter Wuille via bitcoin-dev raised concerns about the risk of an old full node wallet accepting a transaction whose coins passed through a script that depends on the softforked rules. However, there is also a scenario where an attacker creates a majority chain that follows the old rules but not the new ones. Non-upgraded nodes would accept a transaction on what they believe to be the consensus chain only to find out that when they try to spend those coins, no one accepts them because they were part of an invalid chain. This could result in dropping non-upgraded nodes to a form of SPV security without their consent.In contrast to a hard fork, where a full node operator can explicitly set their node to accept higher version blocks that it can't validate and get the soft fork functionality back, the soft fork approach forces the changes on users. Additionally, doing forks in this way has the benefit of notifying the user they are accepting unvalidated coins, whereas they won't know that in a soft fork.


Updated on: 2023-06-11T02:21:36.936429+00:00