[论文解读] Mind Your Credit: Assessing the Health of the Ripple Credit Network

Pedro Moreno-Sánchez, Navin Modi+3 more|arXiv (Cornell University)|Jun 7, 2017

Blockchain Technology Applications and Security参考文献 20被引用 6

一句话总结

本文首次对2013年至2017年期间Ripple信用网络的结构与安全性进行了纵向分析，揭示了信用分配与交换机制中的关键漏洞。研究发现，由于错误配置的rippling标志，超过1300万美元的信用处于风险之中；另有超过490万美元因网关故障而停滞不前，且过时的兑换报价使用户得以利用汇率差异获利，总额超过450万美元。

ABSTRACT

The Ripple credit network has emerged as a payment backbone with key advantages for financial institutions and the remittance industry. Its path-based IOweYou (IOU) settlements across different (crypto)currencies conceptually distinguishes the Ripple blockchain from cryptocurrencies, and makes it highly suitable to an orthogonal yet vast set of applications in the remittance world for cross-border transactions and beyond. This work studies the structure and evolution of the Ripple network since its inception, and investigates its vulnerability to devilry attacks that affect the credit of linnet users' wallets. We find that about 13M USD are at risk in the current Ripple network due to inappropriate configuration of the rippling flag on credit links, facilitating undesired redistribution of credit across those links. Although the Ripple network has grown around a few highly connected hub (gateway) wallets that constitute the network's core and provide high liquidity to users, such a credit link distribution results in a user base of around 112,000 wallets that can be financially isolated by as few as 10 highly connected gateway wallets. Indeed, today about 4.9M USD cannot be withdrawn by their owners from the Ripple network due to PayRoutes, a gateway tagged as faulty by the Ripple community. Finally, we observe that stale exchange offers pose a real problem, and exchanges (market makers) have not always been vigilant about periodically updating their exchange offers according to current real-world exchange rates. For example, stale offers were used by 84 Ripple wallets to gain more than 4.5M USD from mid-July to mid-August 2017. Our findings should prompt the Ripple community to improve the health of the network by educating its users on increasing their connectivity, and by appropriately maintaining the credit limits, rippling flags, and exchange offers on their credit links.

研究动机与目标

• 理解自Ripple网络创立以来其结构演变与信用流动的动态特征。
• 评估Ripple IOU网络中用户信用的安全性，特别是针对意外的信用再分配与网关中断的风险。
• 研究过时兑换报价对做市商与用户的影响，及其可能引发的金融套利行为。
• 识别可能导致用户孤立或流动性中断的系统性漏洞，尤其在网关依赖的背景下。
• 为用户与做市商提供切实可行的建议，以提升网络韧性与信用完整性。

提出的方法

• 收集并分析了2013年1月至2017年8月期间Ripple账本中的2940万笔交易、181233个钱包及352420条信用链接。
• 构建动态网络图以研究连通性、社区结构与中心性，识别出网关作为核心枢纽。
• 通过在中间钱包间模拟交易，评估rippling机制，以检测意外的信用再分配。
• 通过模拟移除高连接度网关钱包并测量用户孤立程度，评估网络韧性。
• 随时间分析兑换报价，检测过时报价，并通过与现实世界汇率对比量化其财务影响。
• 利用PayRoutes网关案例研究，展示了因rippling功能被禁用，导致490万美元信用实际停滞的现实情况。

实验结果

研究问题

• RQ1 自Ripple信用网络创立以来，其结构与信用链接分布如何演变？
• RQ2 由于信用链接上错误配置的rippling标志，用户在多大程度上面临意外信用再分配的风险？
• RQ3 由于少数高度连接的网关钱包失效或中断，有多少钱包面临金融孤立的风险？
• RQ4 过时的兑换报价对做市商与用户造成了多大的财务影响？此类机会被利用的频率如何？
• RQ5 Ripple信用网络中存在哪些系统性漏洞，可能破坏用户流动性与信用完整性？

主要发现

• 由于信用链接上错误配置的rippling标志，超过1300万美元的信用处于风险之中，导致资金通过多条路径意外再分配。
• 约112,000个钱包可能因仅10个高度连接的网关钱包的故障而面临金融孤立，目前约490万美元信用因PayRoutes网关故障而停滞不前。
• 过时的兑换报价使84个钱包得以利用汇率差异获利，2017年7月中旬至8月中旬期间获利总额超过450万美元。
• 该网络呈现出缓慢混合、异配性的结构特征，钱包被划分为以两个主要网关为中心的地理分界社区。
• 约65,000个钱包构成的内核网络对干扰具有韧性，但更广泛的用户群体仍高度依赖少数关键网关以维持流动性与连通性。
• 未能根据现实世界汇率及时更新报价的做市商面临重大财务损失，并为用户创造了套利机会。