Thursday, August 27, 2026|20°C Partly Cloudy
Next edition scheduled
Your Personal Daily Intelligence
Edition 2026-08-21

CRYPTO

Alpenglow Contest Did Not Cover Clock Attack Disclosed Months Earlier

Researchers at USENIX Security presented a Solana Proof-of-History clock attack on August 12, 2025, a flaw that had been disclosed privately to Solana developers in December 2025.

By cryptoslate · 7d ago · Source: cryptoslate

Full article

Researchers at USENIX Security presented a Solana Proof-of-History clock attack on August 12, 2025, a flaw that had been disclosed privately to Solana developers in December 2025. The 50,000 SOL Alpenglow competition ended on August 19, 2025, and its rules omitted behavior that is only reachable when the legacy Proof-of-History consensus was inactive. The paper explains that a scheduled leader can withhold a protocol-valid block, allowing honest validators to advance their logical time, and then release the block anchored to an earlier point in the clock, a process termed re-anchoring. This can create a fork that may orphan an honest leader's block. The attack combines Time Inflation and Fork-Assisted Time Inflation, which merge the re-anchoring with TowerBFT fork-choice logic. Experiments were conducted on a local testnet and through simulations; the authors did not observe a live exploit or mainnet manipulation. Analysis of public mainnet data identified validators with longer timestamp intervals and higher inclusion rates, a pattern consistent with Time Inflation incentives, but no significant increase in skip rates that would indicate Fork-Assisted Time Inflation. The competition excluded this vector because it required the inactive legacy consensus components that Alpenglow intends to replace. Alpenglow's design removes the Proof-of-History re-anchoring and TowerBFT fork-choice prerequisites used in the attack. The Solana development team responded within one day of the December 2025 disclosure, indicating the behavior was known internally and that a future upgrade such as Alpenglow was expected to address it. Activation of Alpenglow is planned for Agave 4.3, after which the specific attack path would become unreachable, leaving the transition as an open issue. The study presents a protocol-valid fairness and latency concern that has not been demonstrated in live use, and the contest's scope leaves the matter unresolved until the planned consensus upgrade takes effect.

Source transparency

Publisher
cryptoslate
Reliability
high
Published
8/21/2026, 10:00:25 AM
Retrieved
8/21/2026, 10:00:25 AM
Relevance
80%
Confidence
85%
Read original at cryptoslate

Botwin's Morning Wire publishes the full source article for reading convenience. Please visit the publisher for the original presentation and any updates.