What happened in this transaction?

[mikeywith]

Transaction > https://blockchair.com/bitcoin/address/1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV


The recipient is

Code:

1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV

What they received in the transaction

Code:

07cfd96f66d48112243df72813de8b30eed509bae04cfb2bcedea38c2925f09e

was immediately sent to

Code:

1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg

in this transaction

Code:

0d8aee82f186e61fc4f2b0611f7d5e39c6b013f0a5c53115bf2b445b7fa2834c

The last address doesn't belong to the wallet which generated the first address.

Both transactions have the same number of confirmations!

[1715149046]

1715149046

[1715149046]

1715149046

[1715149046]

1715149046

[1715149046]

1715149046

[1715149046]

1715149046

[ranochigo]

It's likely just that someone has a script which automatically crafts a transaction to send the funds immediately to another address upon seeing it, confirmed or not. Both transactions were included in the same block


How would you know if the other address doesn't belong to the same wallet btw?

[AB de Royse777]

What I understand is that both were picked at the same block.
The receiver either has his address coded to send any receiving to the last address, or he manually made the tx to that last address.

@ranochigo, you were few seconds ahead :-P

How would you know if the other address doesn't belong to the same wallet btw?

It does not matter though.

[mikeywith]

It's likely just that someone has a script which automatically crafts a transaction to send the funds immediately to another address upon seeing it, confirmed or not. Both transactions were included in the same block

How would he be able to spend an input that hasn't been confirmed? won't the transaction be invalid at that point?

How would you know if the other address doesn't belong to the same wallet btw?

I don't know for sure, the recipient claims so.

perhaps I should put in more details, my friend was asked to solve a dispute between a buyer and a seller, the buyer is 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV, he paid in cash for 0.09 BTC, his wallet now shows empty, the seller has a proof of over 60 confirmation while the buyer "claims" not having received anything.

So long story short, my friend is waiting for me to tell him to whom the cash should be given since both parties denied ownership for the last receiving address 1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg

It does not matter though.

It does matter in this particular situation, if the buyer said that was his address then there would have been no dispute, but I agree that in general, it doesn't matter.

[ranochigo]

How would he be able to spend an input that hasn't been confirmed? won't the transaction be invalid at that point?

Nope, it's valid. The rule pretty much only dictates that the inputs must be referenced and confirmed. It's fine to have an unconfirmed input as long as it is confirmed in the same block.

I don't know for sure, the recipient claims so.

perhaps I should put in more details, my friend was asked to solve a dispute between a buyer and a seller, the buyer is 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV, he paid in cash for 0.09 BTC, his wallet now shows empty, the seller has a proof of over 60 confirmation while the buyer "claims" not having received anything.

So long story short, my friend is waiting for me to tell him to whom the cash should be given since both parties denied ownership for the last receiving address 1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg

As long as the coin is confirmed and sent to the specified address, the deal is complete. I regard any deal which has a valid transaction to the specified address as complete. Whatever happens after that is out of the control of the sender. What wallet is the recipient using?

It does matter in this particular situation, if the buyer said that was his address then there would have been no dispute, but I agree that in general, it doesn't matter.

If the funds were sent to the correct address as dictated, there is no dispute. Wherever the funds are sent to is a separate matter entirely.

[hosseinimr93]

How would he be able to spend an input that hasn't been confirmed? won't the transaction be invalid at that point?

You can always spend unconfirmed outputs. But they won't be confirmed unless the previous transaction is confirmed.
If you cannot spend unconfirmed outputs, that's only because your wallet doesn't allow you. You can do it using other wallets.

In the blockchain, you can find many series of transactions all confirmed in a single block specially when CPFP (Child Pay For Parent) method is used. (That's not the case here, of course.)
When you accelerate a transaction using CPFP method, both transactions are confirmed in a single block.

[AB de Royse777]

It does matter in this particular situation, if the buyer said that was his address then there would have been no dispute, but I agree that in general, it doesn't matter.

Since you explained the situation, now it matters. My sense was in two separate tx it does not matter.
Which address your friend was given?


If this is 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV then your friend sent the coins to the correct address.

So long story short, my friend is waiting for me to tell him to whom the cash should be given since both parties denied ownership for the last receiving address 1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg

It seems the buyer's given address was 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV which means the BTC were sent to his given address. From the blockchain evidence it's clear so the seller gets his USD/fiat (if that was the transection form)

[mikeywith]

Nope, it's valid. The rule pretty much only dictates that the inputs must be referenced and confirmed. It's fine to have an unconfirmed input as long as it is confirmed in the same block.

Ok, so what happened here is that the moment he receipt/hacker/script got the unconfirmed outputs, they immediately spent it to 1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg and since both transactions are signed properly then they can be confirmed in the same block by the nodes.

As long as the coin is confirmed and sent to the specified address, the deal is complete. I regard any deal which has a valid transaction to the specified address as complete. Whatever happens after that is out of the control of the sender. What wallet is the recipient using?

This was my initial guess, I just thought there could be something that I don't know about and it wouldn't be fair to just tell him to ask the buyer to go figure.

It's a Blockchain wallet, so my guess is that someone else might have full access to his wallet.

You can always spend unconfirmed outputs. But they won't be confirmed as long as the the previous transaction is unconfirmed.

Yup, I am aware of that, it's all about whether or not it's considered valid, what I initially thought is that this can't be done in the same block, but now after reading's comment and when I think about it, nothing is stopping them from sending raw transactions to spend unconfirmed outputs.

Which address your friend was given?

My friend is neither the sender nor the recipient, he is just trying to solve a dispute between two parties so he only knows as much as we all now know, both parties agreed that the buyer's address was > 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV , they also agree on the amount received which was 0.09xxBTC, the buyer says his wallet is still empty while the seller says the transaction to 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV was confirmed so he says "I should take my money and leave".

It seems the buyer's given address was 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV which means the BTC were sent to his given address. From the blockchain evidence it's clear so the seller gets his USD/fiat (if that was the transection form)

Yup seems like the only fair way to go about this, get the seller out of the equation, and start figuring out what went wrong with the buyer's wallet, since this is a shitty web-based wallet, many things could have gone wrong, so a lot of digging on the buyer's wallet needs to be done.

Anyway, I have gotten the answer, I will keep this topic open for further discussion, I am sure other members will come up with different theories on what could have gone wrong with the buyer's wallet.


Thank you all.

[AB de Royse777]

and start figuring out what went wrong with the buyer's wallet, since this is a shitty web-based wallet, many things could have gone wrong,

I see two possibilities :
- maybe he is lying, he moved the coins and now denying having the coins in the address
- maybe his key was compromised and the hacker had this script to moved to his own wallet

Either way, he had the coins in the address he gave to the other guy.

[o_e_l_e_o]

Ok, so what happened here is that the moment he receipt/hacker/script got the unconfirmed outputs, they immediately spent it to 1GpXLNYGfi7jWgZxn7hDaQs39VD59WYtvg and since both transactions are signed properly then they can be confirmed in the same block by the nodes.

It did not necessarily have to be a script which sent the transaction on immediately. The owner of the address could manually have sent the coins on any time after the first transaction was broadcast. Since the timestamp on the block explorer is the time the transaction was mined, not the time it was broadcast, there could have been anything from a few second to several days between the first transaction being broadcast and it being mined, during which someone could have manually included it in a second transaction.

It's a Blockchain wallet, so my guess is that someone else might have full access to his wallet.

The first receiving address - 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV - is part of a blockchain.com wallet? As far as I am aware, blockchain.com does not allow users to spend unconfirmed inputs in their transactions. If 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV is indeed part of a blockchain.com wallet, then someone has exported the seed from blockchain.com and is using that address in a different wallet which does allow unconfirmed inputs. This makes it much more likely that the buyer has indeed been hacked.

The seller sent 0.09370169 BTC to 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV. This is a fact and is non-debatable. If the buyer is agreed that 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV is their address, then the seller has completed their part of the trade. If the buyer's wallet has been hacked or compromised, the seller is not at fault and should therefore receive the agreed upon amount of fiat.

[AB de Royse777]

If 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV is indeed part of a blockchain.com wallet, then someone has exported the seed from blockchain.com and is using that address in a different wallet which does allow unconfirmed inputs.

This is the case without any doubt. The seed were exported and restored with a wallet which allows writing script. And the script was just to send the coins to the given address when there is any new balance.

[mikeywith]

- maybe he is lying, he moved the coins and now denying having the coins in the address
- maybe his key was compromised and the hacker had this script to moved to his own wallet

Based on how my friend described the buyer, he seems like a complete newbie, so it's very unlikely that he knows how to do anything aside from sending and receiving, but well, there is a chance that he is faking it, either ways, if he was lying then he lost no money if he was a careless newbie than sadly he lost about a thousand $ worth of BTC.

The first receiving address - 1GpuDxXn9mYUf3fiMy4YpvTgx7AKUsZbbV - is part of a blockchain.com wallet?

It indeed is, now I have more info on this matter, the buyer said he saw the transaction appears on his wallet for a few seconds and then it vanished, this adds more strength to the fact that there was a script doing all the work, and that was not on the blockchain.com wallet, so the hacker really knows how to get the job done, this is yet another reason why web-based wallets suck big time.

Of course, all of these assumptions are based on the fact that the buyer is telling the truth, for all we know, he could have those seeds imported somewhere else and he manually spent them since he knew when the transaction was going happen.

[o_e_l_e_o]

It indeed is, now I have more info on this matter, the buyer said he saw the transaction appears on his wallet for a few seconds and then it vanished

His account has absolutely been hacked then.

Of course, all of these assumptions are based on the fact that the buyer is telling the truth, for all we know, he could have those seeds imported somewhere else and he manually spent them since he knew when the transaction was going happen.

That's more or less irrelevant to your friend. Your friend completed his part of the deal, and there is blockchain evidence of that. He is not at fault and should receive whatever was agreed upon.