arXiv subjects

Sisi Duan

Publications and source records attributed to Sisi Duan.

3 recordsLinked to original sources

arXiv2026

Timestamp Manipulation: Incentive Attacks on Timestamp-Based Proof-of-Work Blockchains with Minimal Additional Risk

Nakamoto consensus is the most widely adopted decentralized consensus mechanism in cryptocurrency systems. Since its proposal in 2008, many studies have investigated incentive attacks, where the adversary aims to earn more rewards than its fair share but the security properties are not violated. One notable example is the recent Riskless Uncle Maker (RUM) attack on timestamp-based Nakamoto blockchains (CCS'23) such as Ethereum 1.x (deprecated in Sep 2022) and Ethereum Classic (still active) and EthereumPoW (still active). Specifically, the RUM attack shows that an adversary with 25\% relative hash power can achieve a normalized profit share of 26.12\%. In this work, we propose two new incentive attacks on timestamp-based Nakamoto consensus: Unrestricted Uncle Maker (UUM) and Staircase-Unrestricted Uncle Maker (SUUM). Compared with RUM, both attacks achieve higher profit without risking reward loss. We demonstrate through theoretical analysis and experimental validation that if an adversary controls 25\% relative hash power, it can achieve a normalized profit share of 28.41\% and 33.30\% in UUM and SUUM, respectively. We further conduct an empirical analysis on three major ETH 1.x-based blockchains, namely Ethereum 1.x, Ethereum Classic, and EthereumPoW. Our on-chain observations reveal persistent SUUM-style behavior in four large mining pools. Compared to honest mining, the estimated additional revenues gained by these mining pools are nearly three million USD (\$2,961,078 to be specific).

cs.CR↗

arXiv2025

FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts

Large Vision-Language Models (LVLMs) signify a groundbreaking paradigm shift within the Artificial Intelligence (AI) community, extending beyond the capabilities of Large Language Models (LLMs) by assimilating additional modalities (e.g., images). Despite this advancement, the safety of LVLMs remains adequately underexplored, with a potential overreliance on the safety assurances purported by their underlying LLMs. In this paper, we propose FigStep, a straightforward yet effective black-box jailbreak algorithm against LVLMs. Instead of feeding textual harmful instructions directly, FigStep converts the prohibited content into images through typography to bypass the safety alignment. The experimental results indicate that FigStep can achieve an average attack success rate of 82.50% on six promising open-source LVLMs. Not merely to demonstrate the efficacy of FigStep, we conduct comprehensive ablation studies and analyze the distribution of the semantic embeddings to uncover that the reason behind the success of FigStep is the deficiency of safety alignment for visual embeddings. Moreover, we compare FigStep with five text-only jailbreaks and four image-based jailbreaks to demonstrate the superiority of FigStep, i.e., negligible attack costs and better attack performance. Above all, our work reveals that current LVLMs are vulnerable to jailbreak attacks, which highlights the necessity of novel cross-modality safety alignment techniques. Our code and datasets are available at https://github.com/ThuCCSLab/FigStep .

cs.CR↗

arXiv2021

MiB: Asynchronous BFT with More Replicas

State-of-the-art asynchronous Byzantine fault-tolerant (BFT) protocols, such as HoneyBadgerBFT, BEAT, and Dumbo, have shown a performance comparable to partially synchronous BFT protocols. This paper studies two practical directions in asynchronous BFT. First, while all these asynchronous BFT protocols assume optimal resilience with 3f+1 replicas (where f is an upper bound on the number of Byzantine replicas), it is interesting to ask whether more efficient protocols are possible if relaxing the resilience level. Second, these recent BFT protocols evaluate their performance under failure-free scenarios. It is unclear if these protocols indeed perform well during failures and attacks. This work first studies asynchronous BFT with suboptimal resilience using 5f+1 and 7f+1 replicas. We present MiB, a novel and efficient asynchronous BFT framework using new distributed system constructions as building blocks. MiB consists of two main BFT instances and five other variants. As another contribution, we systematically design experiments for asynchronous BFT protocols with failures and evaluate their performance in various failure scenarios. We report interesting findings, showing asynchronous BFT indeed performs consistently well during various failure scenarios. In particular, via a five-continent deployment on Amazon EC2 using 140 replicas, we show the MiB instances have lower latency and much higher throughput than their asynchronous BFT counterparts.

cs.DC↗