Bitcoin Forum

Economy => Service Discussion => Topic started by: mrnejc on October 19, 2013, 08:59:47 AM



Title: An automated attack on MtGox BTC deposits?
Post by: mrnejc on October 19, 2013, 08:59:47 AM
A strange thing just happened.

I've executed a transaction of BTC to an exchange account (not MtGox)
https://blockchain.info/tx/447fcc52f767975c92df78352b844b19a17bad2c34e41992548dc469aa75ecc7

but then a couple of minutes later another transaction with 0.00000001 BTC to the same deposit address was executed (seemingly from letsdice?)
https://blockchain.info/tx/4d00f3f4fa64b061c794f3ea5463eeb8ecf84be64bed86fc318327e042719c98

Now, its not a problem for me, but it may be if the deposit address was at MtGox since they give you single usage address.
If that 0.00000001 comes to MtGox before my transaction, my funds get stuck in a limbo and don't get to my account - I'm the one that should contact MtGox support to clear this and a lot of non-needed work is done.

Its a simple automated DoS attack ...

Another scenario is that someone is tagging large transactions - if you look at other addresses with 0.00000001 transaction these are all some large transactions before it.

Thougts?


Title: Re: An automated attack on MtGox BTC deposits?
Post by: coastermonger on October 19, 2013, 09:25:46 AM
10 bitcoins says that the 0.00000001 would never arrive before the transaction, and it is only being added to your account by a watcher program that is attempting to keep track of what goes into the exchange.  Whether it is benign or malicious is difficult to say.


Title: Re: An automated attack on MtGox BTC deposits?
Post by: Foxpup on October 19, 2013, 09:43:05 AM
It's got nothing to do with Mt. Gox specifically. LetsDice periodically scans the blockchain for new addresses and send a satoshi to them as advertising (at least, I assume that's why they're doing it, otherwise I have no idea). They don't even have the courtesy to pay a decent transaction fee.


Title: Re: An automated attack on MtGox BTC deposits?
Post by: dserrano5 on October 19, 2013, 12:03:01 PM
Now, its not a problem for me, but it may be if the deposit address was at MtGox since they give you single usage address.
If that 0.00000001 comes to MtGox before my transaction, my funds get stuck in a limbo and don't get to my account - I'm the one that should contact MtGox support to clear this and a lot of non-needed work is done.

That couldn't happen since the address you're sending funds to isn't known to anyone except mtgox and you. Whoever send that satoshi could only do it after seeing your transaction in the blockchain or memory pool.


Title: Re: An automated attack on MtGox BTC deposits?
Post by: marcotheminer on October 19, 2013, 12:30:02 PM
How do people send btc without a transaction fee?

Ive always wondered that question..


Title: Re: An automated attack on MtGox BTC deposits?
Post by: mrnejc on October 19, 2013, 10:31:13 PM
... could only do it after seeing your transaction in the blockchain or memory pool.

So attack like this can be done by a mining pool?

My transaction is visible in memory pool, so the attacker creates satoshi-sized transaction and puts it in block whilst putting mine on backburner ...
If that block is then "solved" they have their transaction before mine.

I still don't know why someone would do it - maybe only for the lolz ... :?

But I also accept Foxpops answer as quite possible - it certainly explains why they go after addresses that have more than 100 BTC in them.


Title: Re: An automated attack on MtGox BTC deposits?
Post by: peonminer on October 19, 2013, 10:35:26 PM
... could only do it after seeing your transaction in the blockchain or memory pool.

So attack like this can be done by a mining pool?

My transaction is visible in memory pool, so the attacker creates satoshi-sized transaction and puts it in block whilst putting mine on backburner ...
If that block is then "solved" they have their transaction before mine.

I still don't know why someone would do it - maybe only for the lolz ... :?

But I also accept Foxpops answer as quite possible - it certainly explains why they go after addresses that have more than 100 BTC in them.
Just PM the owner of Just Dice and ask him if his automated advertisement program sent a Satoshi to your wallet.


Title: Re: An automated attack on MtGox BTC deposits?
Post by: mrnejc on October 19, 2013, 10:40:37 PM
How do people send btc without a transaction fee?

Ive always wondered that question..

I use Bitcoin Armory (http://bitcoinarmory.com/) and its quite simple - just set it to 0:

https://i.imgur.com/NGbONsg.png (http://imgur.com/NGbONsg)

the text is from help (blue questionmark).

I guess its even simpler programmatically ...