Denial of Service using Package Relay



Summary:

In an email on 07/06/2023, a user named alicexbt raised concerns about the acceptance of unconfirmed inputs in a coinjoin transaction. They pointed out that allowing unconfirmed inputs could be unsafe because the sender of the unconfirmed transaction can replace it and potentially invalidate the coinjoin. The user also mentioned that the coordinator B should not accept the unconfirmed UTXO from step 2 because it is not even aware of that transaction and it has zero fee, making it unlikely to be relayed.The user also noted that a similar attack could already be carried out by registering the same UTXO with multiple coordinators, without the need for package relay. However, they acknowledged that package relay could still be beneficial for coinjoins. They explained that with package relay, any participant in the coinjoin can rebroadcast it with a further Child Pays for Parent (CPFP) if the coinjoin falls below the minimum relay fee. They also mentioned that upcoming proposals for Replace-By-Fee (RBF) in package transactions could allow other child transactions in the package to RBF the entire transaction, eliminating the need for all participants to re-sign the coinjoin for RBF.Overall, the user highlighted concerns about the acceptance of unconfirmed inputs in coinjoins and discussed the potential benefits of package relay and upcoming RBF proposals for improving the security and efficiency of coinjoin transactions.


Updated on: 2023-07-13T17:25:57.818543+00:00