Transaction malleability is a loophole in the bitcoin protocol that was most famously used in February 2014 to allegedly withdraw funds from Mt Gox.
The idea behind transaction malleability is that a user who is tracking transactions via their hash would not be able to trace the transaction if the hash was changed.
The risk could have been easily mitigated through simplistic internal checks and balances.
A transaction is in the blockchain is referred to by its hash, and their value is included in the merkle tree for that block. A transaction is also signed by the private key associated with the transaction input. So if the transaction can be altered before being hashed and signed with the signature and then propagated to the network – the sender would not be able to track the transaction as its hash has been altered.
The attackers using transaction malleability against Mt Gox would request a withdrawal. When they received a hash of the transaction from the Company they would alter it by changing the <scriptPubKey> whilst using the <ScriptSig> and re-flooding the network with this new transaction. Mt Gox would then look for their transaction and assume there was an issue and resubmit the funds to the user. The user could then repeat this attack. Their flaw was that if they didn’t manage to propagate their updated transaction quick enough then they would still receive the Bitcoin but wouldn’t receive the extra funds. In this case they just tried again – they hadn’t lost much – just a bit of time.
This meant that Mt Gox’s funds were gradually leached away. However basic accounting checks and reports would have been able to detect this breach or loophole. In fact when summing up the process this was due to a lack of oversight by the management.
- How to Trade Bitcoin?
- How to sell Bitcoins?
- What is the Blockchain?
- What will happen to the Bitcoin Price when the Block Reward Halves in 2016?
- How to trade Bitcoin and other Crypto Currencies Using an SMA?
- How to trade Bitcoin and other Crypto Currencies Using an EMA?
- How to trade Bitcoin and other Crypto Currencies Using Bollinger Bands?
- Permaweb: Creating An Uncensorable World Wide Web
- BitTaxer: Simplifying Cryptocurrency Tax Filing for the 2018 Tax Season
- How to Buy Bitcoin With Luno
- Everything You Need to Know About Ripple and XRP
- How to Buy Bitcoin With EO.Finance
- Why Is the Price of Bitcoin so Volatile?
- Why Do Bitcoins Have Value?
- What is a Security Token?
- Mining Sky - How to buy a Mining Contract
- How to use our API