The coordinator is currently vital to the operation of the Iota network. There are both security (leaking the seed used to generate milestones) and availability (it must be able to issue milestones) impacts if it were to be successfully attacked.
There are obvious attacks:
- Denial-of-service - this would prevent milestones from being issued, which in turn would cause the network to stop working.
- Any remotely exploitable vulnerability in the system (from remote code execution through to weak passwords) could allow the seed to be leaked.
- Physical access - someone with access to the server could steal the seed.
Are there any more subtle or interesting attacks that could be carried out with knowledge of the IP or location of the coordinator?