Mastodon's Flagship Server Hit by DDoS Attack, Causing Site Instability

Mastodon's flagship server was hit by a distributed denial-of-service attack on Monday, rendering the instance unusable at times. The social networking software maker said in a status update at around 7 a.m. ET on Monday that it was investigating the cyberattack.

The attack caused much of the site to be inaccessible, throwing error messages or displaying a full-screen outage warning. However, by 9:05 a.m. ET, Mastodon said it implemented a countermeasure against the DDoS attack, and the site is accessible again. The company warned that some instability may continue to be seen as the attack is ongoing.

This is not the first time that decentralized social networks have been targeted by DDoS attacks. Bluesky, another decentralized social network, resolved much of its days-long outages following a lengthy DDoS attack just days ago. The attack on Bluesky continues, but its service has been stable since April 16 at 9 PM PDT.

DDoS attacks rely on sending massive amounts of junk web traffic towards an app or website's servers, with the aim of knocking them offline. These cyberattacks don't involve data theft, but DDoS attacks can be disruptive to users. The attacks have become exponentially more powerful over the years, with network security company Cloudflare mitigating what it says is the largest DDoS attack to date, measuring a peak of 29.7 terabits per second.

When aimed at decentralized social networking services, the attacks can cause instability and outages, but not everyone is taken offline. In Bluesky's case, those who had moved their account to other providers, like Blacksky, which run on the same protocol and interoperate with Bluesky, were not impacted. Similarly, the attack on Mastodon has so far targeted only the larger server (mastodon.social) and not the many smaller instances that make up the full Mastodon social network.

The attack on Mastodon comes as a reminder of the challenges faced by decentralized social networks in maintaining security and stability. As these networks continue to grow in popularity, they will need to invest in robust security measures to protect against DDoS attacks and other cyber threats.