I am thinking through some of the edge cases of adversaries attempting to compromise the Stellar Network.
Let's say an adversary creates four consensus bearing Stellar-core nodes and runs all four of them, he makes all nodes list each other in each other's quorum sets.
Each of these four compromised validators also have a single normal non-compromised validator in their quorum sets for a total of 5 validators in the quorum set with a threshold of let's say 80%.
What would happen to the network, if these four nodes proposed different transaction sets to the ledger compared to the rest of the network ( and their one uncompromised peer )?
In this scenario, these nodes are receiving the messages from the rest of the network, and rejecting that transaction set and ledger in favor of the one being proposed by the compromised group.
Some of the questions I am pondering are as follows:
1) What if bridge servers start to listen and relay transactions to one of the comprised servers?
2) Do both networks operate independently
3) How would a client find the proper horizon servers on the uncompromised network?
4) Would this halt the network?