Bitcoin Forum
April 26, 2018, 12:36:21 PM *
News: Latest stable version of Bitcoin Core: 0.16.0  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: An automated attack on MtGox BTC deposits?  (Read 1134 times)
mrnejc
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
October 19, 2013, 08:59:47 AM
 #1

A strange thing just happened.

I've executed a transaction of BTC to an exchange account (not MtGox)
https://blockchain.info/tx/447fcc52f767975c92df78352b844b19a17bad2c34e41992548dc469aa75ecc7

but then a couple of minutes later another transaction with 0.00000001 BTC to the same deposit address was executed (seemingly from letsdice?)
https://blockchain.info/tx/4d00f3f4fa64b061c794f3ea5463eeb8ecf84be64bed86fc318327e042719c98

Now, its not a problem for me, but it may be if the deposit address was at MtGox since they give you single usage address.
If that 0.00000001 comes to MtGox before my transaction, my funds get stuck in a limbo and don't get to my account - I'm the one that should contact MtGox support to clear this and a lot of non-needed work is done.

Its a simple automated DoS attack ...

Another scenario is that someone is tagging large transactions - if you look at other addresses with 0.00000001 transaction these are all some large transactions before it.

Thougts?
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1524746181
Hero Member
*
Offline Offline

Posts: 1524746181

View Profile Personal Message (Offline)

Ignore
1524746181
Reply with quote  #2

1524746181
Report to moderator
coastermonger
Sr. Member
****
Offline Offline

Activity: 367
Merit: 250

Find me at Bitrated


View Profile
October 19, 2013, 09:25:46 AM
 #2

10 bitcoins says that the 0.00000001 would never arrive before the transaction, and it is only being added to your account by a watcher program that is attempting to keep track of what goes into the exchange.  Whether it is benign or malicious is difficult to say.

Bitrated user: Rees.
Foxpup
Legendary
*
Online Online

Activity: 2156
Merit: 1049



View Profile
October 19, 2013, 09:43:05 AM
 #3

It's got nothing to do with Mt. Gox specifically. LetsDice periodically scans the blockchain for new addresses and send a satoshi to them as advertising (at least, I assume that's why they're doing it, otherwise I have no idea). They don't even have the courtesy to pay a decent transaction fee.

Will pretend to do unverifiable things (while actually eating an enchilada-style burrito) for bitcoins: 1K6d1EviQKX3SVKjPYmJGyWBb1avbmCFM4
dserrano5
Legendary
*
Offline Offline

Activity: 1848
Merit: 1000



View Profile
October 19, 2013, 12:03:01 PM
 #4

Now, its not a problem for me, but it may be if the deposit address was at MtGox since they give you single usage address.
If that 0.00000001 comes to MtGox before my transaction, my funds get stuck in a limbo and don't get to my account - I'm the one that should contact MtGox support to clear this and a lot of non-needed work is done.

That couldn't happen since the address you're sending funds to isn't known to anyone except mtgox and you. Whoever send that satoshi could only do it after seeing your transaction in the blockchain or memory pool.

marcotheminer
Legendary
*
Offline Offline

Activity: 1232
Merit: 1004



View Profile
October 19, 2013, 12:30:02 PM
 #5

How do people send btc without a transaction fee?

Ive always wondered that question..
mrnejc
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
October 19, 2013, 10:31:13 PM
 #6

... could only do it after seeing your transaction in the blockchain or memory pool.

So attack like this can be done by a mining pool?

My transaction is visible in memory pool, so the attacker creates satoshi-sized transaction and puts it in block whilst putting mine on backburner ...
If that block is then "solved" they have their transaction before mine.

I still don't know why someone would do it - maybe only for the lolz ... :?

But I also accept Foxpops answer as quite possible - it certainly explains why they go after addresses that have more than 100 BTC in them.
peonminer
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500



View Profile
October 19, 2013, 10:35:26 PM
 #7

... could only do it after seeing your transaction in the blockchain or memory pool.

So attack like this can be done by a mining pool?

My transaction is visible in memory pool, so the attacker creates satoshi-sized transaction and puts it in block whilst putting mine on backburner ...
If that block is then "solved" they have their transaction before mine.

I still don't know why someone would do it - maybe only for the lolz ... :?

But I also accept Foxpops answer as quite possible - it certainly explains why they go after addresses that have more than 100 BTC in them.
Just PM the owner of Just Dice and ask him if his automated advertisement program sent a Satoshi to your wallet.

Like my posts? Buy me a beer Smiley Bitcoin Tip Jar: 1BDGMBgpbnD1bWXsUkaC8dZ8dgLmwXmE6t / Litecoin Tip Jar: LNB6XVHTvE5nPZZQc4CNAbPY1BLmFpgc7i / Bitcoin Cash Tip Jar: 1N6S4tfZ7NaryfczG2xSFUi3Pti9LJtu7j / Etherum Tip Jar: 0x940266d7a19202Cb2b9e4d8570B9e1eB2d01AD9b / *coinbase addys, no fees from coinbase accounts*
mrnejc
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
October 19, 2013, 10:40:37 PM
 #8

How do people send btc without a transaction fee?

Ive always wondered that question..

I use Bitcoin Armory and its quite simple - just set it to 0:

http://i.imgur.com/NGbONsg.png

the text is from help (blue questionmark).

I guess its even simpler programmatically ...
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!