In today’s digital age, the security of cryptocurrency systems is of great concern. Recently, the EOS system suffered an unprecedented EIDOS mining attack. Hackers used the unlimited CPU function of their accounts to conduct malicious mining. This incident triggered profound concerns about the vulnerabilities of the cryptocurrency system and reminded us to pay more attention to and prevent network security. Let’s analyze this attack in depth to reveal the hacking methods and system vulnerabilities behind it, as well as the security measures that need to be strengthened in future cryptocurrency systems.

Starting at 02:53 this morning, PeckShield's risk control platform DAppShield detected hackers launching continuous attacks on short-account bidding system contracts.

The system is used to return the previous bid operation to maliciously mine EIDOS. The attack is still ongoing. PeckShield security personnel analyzed and found that multiple hacker accounts lklk11111111, learneosgood, juyhgdf1234u,
maymaymay111 used the short account bidding rules of the EOS system to bid for some short accounts that had no bidders, starting from 0.0001 EOS
Start bidding, then make a transfer notification mining with a lower bid before the system account is returned.

Since the bidding transactions initiated by hackers consume less CPU, and the system account has unlimited CPU resources, malicious accounts can "steal" the system's CPU unlimitedly for mining. PeckShield would like to remind you that EIDOS malicious mining attacks have gradually migrated from DApps and exchanges to EOS system contracts, which will further aggravate the congestion of the EOS network. DApp developers and exchanges should always pay attention to changes in the account CPU market to ensure Necessary operations can be performed.