Proposal to help stop thieves

[Peter Todd]

OP doesn't seem to realize the thief can simply move the coins to another address in his wallet in just a few seconds. Impossible to say whether they were spent or moved from left hand to right.

So this introduces situations where people accept coins without knowing if they can be spent later.

Extremely bad for the Bitcoin network overall. People need to trust that coins they receive can be spent otherwise the value of Bitcoin becomes question and the market price will reflect this.

Hence, a system like this socializes the cost of a theft over the whole network as reduced utility and lower value. But doesn't stop the thief at all from spending to users who choose not to accept blacklists - which I expect should be almost everyone.

Not to mention the thief can turn coins into block rewards by spending them on transaction fees.

Is mining income tainted too now?

[BkkCoins]

OP doesn't seem to realize the thief can simply move the coins to another address in his wallet in just a few seconds. Impossible to say whether they were spent or moved from left hand to right.

So this introduces situations where people accept coins without knowing if they can be spent later.

Extremely bad for the Bitcoin network overall. People need to trust that coins they receive can be spent otherwise the value of Bitcoin becomes question and the market price will reflect this.

Hence, a system like this socializes the cost of a theft over the whole network as reduced utility and lower value. But doesn't stop the thief at all from spending to users who choose not to accept blacklists - which I expect should be almost everyone.

Not to mention the thief can turn coins into block rewards by spending them on transaction fees.

Is mining income tainted too now?

The fee is not part of the generation transaction so I don't think this would make any difference as far as it being a normal transaction in the blockchain. Plus, he would only be able to keep the funds if he found the block. This could only be done if he mined solo or controlled the pool that mined the block. And the second option would be silly as it would expose the thief.

[Peter Todd]

'

Not to mention the thief can turn coins into block rewards by spending them on transaction fees.

Is mining income tainted too now?

The fee is not part of the generation transaction so I don't think this would make any difference as far as it being a normal transaction in the blockchain. Plus, he would only be able to keep the funds if he found the block. This could only be done if he mined solo or controlled the pool that mined the block. And the second option would be silly as it would expose the thief.

The coinbase transaction is allowed to have a value of up to subsidy+fees; the thief most certainly could move value into it. You aren't proposing blocking the transactions themselves, which would split the network anyway, so any thief, or even a group of them, can get together and buy some mining hardware to find blocks faster. Or rent time on gpumax, or, for now, buy time on a botnet.

On top of this once you can mine some blocks you can also use non-standard transactions to spend your loot, complicating any code designed to taint transactions.

More importantly they can cause miners a lot of pain by simply moving coins around, spending fees, and casting others under suspicion if you start calculating taint on coinbases.


I second Gavin's response: go and implement it for us and we'll see what happens.

[DeathAndTaxes]

The fee is not part of the generation transaction so I don't think this would make any difference as far as it being a normal transaction in the blockchain. Plus, he would only be able to keep the funds if he found the block. This could only be done if he mined solo or controlled the pool that mined the block. And the second option would be silly as it would expose the thief.

The fee IS part of the generation tx.  The difference of the sum of inputs and sum of outputs of all tx in the block is added to the current block subsidy to form the block reward.  


As for "coin-melting" being silly.  If there was enough demand I am sure some botnets or some large hashing farms would be happy to "coin-melt" your blacklisted coins for a cut of the profits.  I mean blacklisting is going nowhere (just like it didn't the 99 times in the past it was proposed) and the OP is delusional but for the sake of the argument lets pretend it existed and was ironclad.   So as a thief if you could have 24,000 BTC which were completely unspendable and worthless or 12,000 BTC in brand new generated coins which would you pick?  Where would the other 50% go?   How about send 10% to random addresses to taint their existing coins (and add a hell of a lot of noise to any blacklist system), send another 15% as fees in random txs to be picked up by legit miners (every pool on the planet would be "polluted" with coinbase tx which include blacklisted fees, the last 25% goes as a fee/bonus (no top of normal block rewards) for the coin-melting private farm and/or botnet.  

[BkkCoins]

My bad. I thought it was added as a side transaction but I didn't go check.

[Peter Todd]

The fee is not part of the generation transaction so I don't think this would make any difference as far as it being a normal transaction in the blockchain. Plus, he would only be able to keep the funds if he found the block. This could only be done if he mined solo or controlled the pool that mined the block. And the second option would be silly as it would expose the thief.

The fee IS part of the generation tx.  The difference of the sum of inputs and sum of outputs of all tx in the block is added to the current block subsidy to form the block reward.  


As for "coin-melting" being silly.  If there was enough demand I am sure some botnets or some large hashing farms would be happy to "coin-melt" your blacklisted coins for a cut of the profits.  I mean blacklisting is going nowhere (just like it didn't the 99 times in the past it was proposed) and the OP is delusional but for the sake of the argument lets pretend it existed and was ironclad.   So as a thief if you could have 24,000 BTC which were completely unspendable and worthless or 12,000 BTC in brand new generated coins which would you pick?  Where would the other 50% go?   How about send 10% to random addresses to taint their existing coins (and add a hell of a lot of noise to any blacklist system), send another 15% as fees in random txs to be picked up by legit miners (every pool on the planet would be "polluted" with coinbase tx which include blacklisted fees, the last 25% goes as a fee/bonus (no top of normal block rewards) for the coin-melting private farm and/or botnet.  

Of course one interesting thing about "coin-melting" would be the incentives it'd give to mining. If people handing out 12,000BTC fees was ever common, pools would be willing to stop working on the latest block and work on the second, or even third, latest to attempt to reverse the high-fee mined block and collect the fees for themselves. Of course, you could wait until you got really lucky and found, say, two blocks in a row and spread fees between them. Or just melt a small amount of fees per block, maybe spread over a boatload of transactions to obscure what you were doing.

Now, does the honest miner who takes a risk to steal a thief's fees by working to reverse a block rather than extend the chain deserve to keep those fees as their reward? Some of those fees? How do you know they're an honest miner?

[Dabs]

After reading some parts of this thread, my conclusion is that this will NOT work now, will NOT work in the future, and can NEVER work. Taint has been discussed before and in the end, it won't work. None of the developers would also work on this as this is not a priority.

This is a problem outside of bitcoin, outside of the protocol, outside of the technology. Bank robbers will always steal banks and use the money. You just have to have the bank better protected.

[BkkCoins]

As for "coin-melting" being silly.  If there was enough demand I am sure some botnets or some large hashing farms would be happy to "coin-melt" your blacklisted coins for a cut of the profits.

It's not like a large fee is going to go unnoticed, nor the output tx feeding the fee would be hidden. As long as the miner is totally hidden and unknown it could perhaps work but the thief would likely have to trust the miner enough to be sure he didn't mine all the fees into his own wallet.

And in that case why bother mining it? Why not just make a deal to take the coins and for a cut launder/mix them? Any fees in the generation tx are going to end up in the miners address and be just as tainted as the input fee tx.

I guess what I mean eg. the bitfloor hack btc are just sitting there. If they were to be paid in fees and with people watching the btc sitting there it would be visible that they end up in a new block.

[n8rwJeTt8TrrLKPa55eU]

I look forward to the day when the Bitcoin client and/or protocol are "fixed" to make all transactions fully anonymous by default (as per various proposals floating around, the latest of which I saw at London conference from the Russian guys), if only so that any schemes to trace/block coins quickly get shut down as technically impossible.

[flower1024]

I look forward to the day when the clients or protocols are "fixed" to make all transactions fully anonymous by default, if only so that any proposals to trace/block coins quickly get shut down as technically impossible.

+1
atm i cant imagine how this would work but i would really like it

i just hope that more people see bitcoins like gold: you just dont have any chance to see the route the gold has taken until it reached you.

the whole idea about "good" or "bad" bitcoins is just crazy

edit: bad typo

[Herbert]

Please give up on this tainted coins idea. There have been enough threads discussing this, each showing a multitude of reasons why it won't work as expected. Just don't waist any more time on this topic. Thank you.

[FactoredPrimes]

You cannot just return a payment. Many wallet and exchange services send from a common address and if you send the money back from the sending address it will not go to the correct person. You will need to ask the sender for an address to return it to.

You cannot reject payments as you say, you can refuse to spend them, you can refuse to honor the payment but not automatically reject them.

[FactoredPrimes]

Also, if it is easy to add a transaction to a black list then you can DOS the chain by blacklisting all over.

If it is not easy to add a transaction to a black list then a theif will have time to send it through an anonymizing/mixing service BEFORE it ends up on the black list.

I see blacklist management as the fatal flaw in this idea.