creekbore
Full Member
Offline
Activity: 210
Merit: 100
Lazy, cynical and insolent since 1968
|
|
February 14, 2014, 02:55:34 PM |
|
Let's se if understood correctly. The "malelability" of transaction requests can cause two problems:
* First, old or custom wallet software may broadcast out "non-canonical" transaction requests (like writing "$020,0" on check instead of "$20,00").
Such requests were originally accepted by the bitcoin network, but a few months ago the protocol was tightened and they started being rejected.
An exchange that issued such a request in order to execute bitcoin withdrawals by clients had to either re-issue the transaction request, or cancel the withdrawal and credit back those bitcoins to the client's account. If the exchange did either of these two things, the result would be only annoyance to clients as their withdrawals were delayed or failed. If the exchange did not do either of those things, the bitcoins would be subtracted from the client's account but would remain in the exchange's own wallet. If the exchange also failed do proper accounting (which it probably did, or else it would have detected the problem), it may have believed that the apparent BTC surplus (bitcoins in its own wallet minus sum of all bitcoins in the clients accounts) was its profit from fees; and therefore converted that surplus into dollars to pay for expenses and dividends. In extreme situations, the exchange may become insolvent (unable to produce enough bitcoins and dollars to honor all its client's accounts.)
* Second, some hackers exploited the malleability to steal coins from any exchange that issued non-canonical requests. The hacker would open an account at the exchange, put some bitcoins there, and request a withdrawal. He would then watch for the corresponding transaction request as it was broadcast by the exchange, and would broadcast a mutated copy (like changing "$020" to "$20"). The network would execute the "canonical" version and reject the original for being non-canonical (and also an attempted double spend).
The exchange would then think that the transaction had failed, and therefore would either re-try it, or cancel the withdrawal and credit back the coins to the hacker's account. In the first case the hacker would get the withdrawal executed two or more times but debited only once; in the second case he would get the withdrawal executed without his account being debited. Repeat to taste.
Again, this hack could be spotted imediately if the exchange kept proper accounting, as it would notice that the coins were taken out from its own wallet in spite of the transaction being apparently rejected.
Is this understanding correct?
If so, does anyone know whch exchanges had which of these problems, and how many bitcoins they overspent or had stolen?
It seems that for MtGOX the amount involved is at least 50,000 BTC or more, and one of those two problems had been occurring for several months. How could they fail to notice and diagnose such a big problem?
I believe that's correct although it wasn't the transaction amount but one of the transaction codes that was malleable. However, it was my understanding that no 'money' was ever actually stolen in this way from the exchanges at least (the SR example may the the exception that proves the rule). NB I'm no expert and this is based on the reading I've done this week, no flaming thanks
|
|
|
|
creekbore
Full Member
Offline
Activity: 210
Merit: 100
Lazy, cynical and insolent since 1968
|
|
February 14, 2014, 02:57:31 PM |
|
So Fonzie, did you hit your short targets or are we subject to another bout of your uber-trolling?
|
|
|
|
stompix
Legendary
Offline
Activity: 3052
Merit: 6623
Leading Crypto Sports Betting & Casino Platform
|
|
February 14, 2014, 02:57:44 PM |
|
Its going sideways, again Unfortunately , probably the only ones that can change this movement , either down or up are the guys at Mtgox.
|
|
|
|
stompix
Legendary
Offline
Activity: 3052
Merit: 6623
Leading Crypto Sports Betting & Casino Platform
|
|
February 14, 2014, 02:58:14 PM |
|
So Fonzie, did you hit your short targets or are we subject to another bout of your uber-trolling?
Real trolls don't trade and don't own any bitcoins.
|
|
|
|
600watt
Legendary
Offline
Activity: 2338
Merit: 2106
|
|
February 14, 2014, 02:58:47 PM |
|
Its going sideways, again 635 is the new 130800
|
|
|
|
derpinheimer
Legendary
Offline
Activity: 896
Merit: 1000
|
|
February 14, 2014, 03:01:14 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
|
|
|
|
yrtrnc
|
|
February 14, 2014, 03:05:56 PM |
|
Has anyone even tried doing a withdrawal with stamp or BTC-e?
|
|
|
|
fonzie
|
|
February 14, 2014, 03:07:03 PM |
|
So Fonzie, did you hit your short targets or are we subject to another bout of your uber-trolling?
I did close em @565. But will open new ones in the next time between 640-670. If it doesn´t get that high in the next 24 hours i will smash it in@ every price above 600$. I will stop trolling when Bitcoin hits 200-300$ , promised.
|
|
|
|
creekbore
Full Member
Offline
Activity: 210
Merit: 100
Lazy, cynical and insolent since 1968
|
|
February 14, 2014, 03:10:10 PM |
|
So Fonzie, did you hit your short targets or are we subject to another bout of your uber-trolling?
Real trolls don't trade and don't own any bitcoins. From the man himself: I will stop trolling when Bitcoin hits 200-300$ , promised.
|
|
|
|
gizmoh
Legendary
Offline
Activity: 1428
Merit: 1000
|
|
February 14, 2014, 03:11:32 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
Its coming soon, just like a swift transfer from Tibanne co ltd. We all know how deceitful Gox is..
|
|
|
|
EuroTrash
|
|
February 14, 2014, 03:13:30 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
Not everyone reads this forum and checks prices every day. See threads like: "I was away, what happened with GOX"?
|
|
|
|
michaelGedi
Sr. Member
Offline
Activity: 364
Merit: 250
"to be or not to be, that is the bitcoin"
|
|
February 14, 2014, 03:14:07 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
Its coming soon, just like a swift transfer from Tibanne co ltd. We all know how deceitful Gox is.. withdrawals will be working again in 2 weeks, along with their new engine and litecoin trading up and running
|
|
|
|
stompix
Legendary
Offline
Activity: 3052
Merit: 6623
Leading Crypto Sports Betting & Casino Platform
|
|
February 14, 2014, 03:14:32 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
Because usually gox is late 6 months. Only bitstamp and btc-e have confirmed they are processing withdrawals. (well , bitstamp will do that today according to them). http://www.coindesk.com/bitstamp-resume-bitcoin-withdrawals-btc-e-working-solution/
|
|
|
|
hd060053
|
|
February 14, 2014, 03:15:38 PM |
|
insider trading now on gox? pushing the price up
|
|
|
|
fonzie
|
|
February 14, 2014, 03:15:52 PM |
|
200 BTC left until 1000$ on Gox Wow, Gox is really fucked up now. Seein the orderbook, they really should stop trading.
|
|
|
|
F-bernanke
|
|
February 14, 2014, 03:16:38 PM |
|
insider trading now on gox? pushing the price up
Watch them scooping the cheap coins. IF gox ever allows btc withdrawals, all asks will be pulled, and they will flash "crash" to $1000.
|
|
|
|
UnDerDoG81
Legendary
Offline
Activity: 2179
Merit: 1201
|
|
February 14, 2014, 03:16:54 PM |
|
Why havent gox prices begun recovery if its true withdrawals are coming back???
I still can´t withdraw on gox.
|
|
|
|
adamstgBit
Legendary
Offline
Activity: 1904
Merit: 1037
Trusted Bitcoiner
|
|
February 14, 2014, 03:17:28 PM |
|
Has anyone even tried doing a withdrawal with stamp or BTC-e?
poeple are still reporting problems but some say they got there withdrawals, maybe they are manually clearing up the mess, this could take some time bitstamp is OPEN - WITHDRAWAL just hit blockchain!
not sure how reliable this "rob2360a"... but it looks like there is light at the end of the tunnel
|
|
|
|
Revolution
Full Member
Offline
Activity: 140
Merit: 101
Trading BTC, looking for amazon cards
|
|
February 14, 2014, 03:18:29 PM |
|
insider trading now on gox? pushing the price up
Watch them scooping the cheap coins. IF gox ever allows btc withdrawals, all asks will be pulled, and they will flash "crash" to $1000. yea this keeps happening... how are they pumping so much money
|
|
|
|
UnDerDoG81
Legendary
Offline
Activity: 2179
Merit: 1201
|
|
February 14, 2014, 03:19:50 PM |
|
Gox goes up to 400, I´m really close to become a troll...
|
|
|
|
|