Crypto Gloss

DDoS Attack

A Distributed Denial of Service (DDoS) attack is a cyberattack where multiple compromised systems flood a target — such as a blockchain node, exchange, or website — with massive volumes of traffic, rendering it unable to serve legitimate users. DDoS attacks are one of the most common threats facing crypto infrastructure.

How It Works

A DDoS attack typically involves three components:

  1. Botnet — The attacker controls thousands or millions of compromised devices (computers, IoT devices, servers) that act as traffic sources.
  2. Command and Control — The attacker directs the botnet to simultaneously send requests to the target.
  3. Target Saturation — The target’s bandwidth, processing capacity, or memory is overwhelmed, causing service degradation or complete outage.

In crypto, DDoS attacks target several layers:

Target Impact
Exchange web servers Users cannot trade, withdraw, or deposit
Node infrastructure Network propagation slows; transactions stall
RPC endpoints DApps and wallets lose connectivity
Mining pool servers Miners disconnect; hashrate drops temporarily

DDoS in Blockchain Context

Blockchains like Bitcoin are inherently more resistant to DDoS than centralized services because there is no single server to overwhelm — the network is distributed across thousands of nodes. However, specific infrastructure remains vulnerable:

  • Exchanges are centralized services and frequent DDoS targets, especially during high volatility.
  • Solana experienced multiple outages partly attributed to transaction flooding that overwhelmed validator throughput — a form of on-chain DDoS.
  • Spam transaction attacks on blockchains can fill mempools and inflate gas costs, acting as economic DDoS.

Mitigation Strategies

Networks and services defend against DDoS through rate limiting, traffic filtering (e.g., Cloudflare), fee mechanisms that make spam expensive, and geographic distribution of infrastructure. On-chain, transaction fees serve as a natural DDoS deterrent — attackers must pay for each spam transaction.

History

  • 2013 — Mt. Gox suffers repeated DDoS attacks during Bitcoin price surges, contributing to trading disruptions.
  • 2016 — The Ethereum network is targeted with transaction spam attacks during the Shanghai DoS attacks, leading to protocol-level gas repricing.
  • 2021 — Solana mainnet halts for 17 hours after bot-generated transaction floods overwhelm validators.
  • 2023 — Multiple exchanges report DDoS attacks during periods of extreme market volatility.

Common Misconceptions

“DDoS attacks can destroy a blockchain.”

DDoS attacks can temporarily disrupt services built on top of blockchains (exchanges, RPCs, individual nodes), but they cannot destroy the blockchain itself. Decentralized networks recover once the attack subsides because the ledger state is replicated across thousands of independent nodes. The blockchain’s data remains intact.

Social Media Sentiment

DDoS attacks generate immediate community reaction, especially when exchanges go down during bull market volatility — users suspect intentional manipulation. Solana’s outages have been a persistent source of criticism, with detractors labeling them DDoS vulnerabilities. Security researchers regularly share DDoS mitigation analysis on crypto Twitter.

Last updated: 2026-04

Related Terms

Sources