Transaction malleability is a loophole in the bitcoin protocol that was most famously used in February 2014 to allegedly withdraw funds from Mt Gox.
The idea behind transaction malleability is that a user who is tracking transactions via their hash would not be able to trace the transaction if the hash was changed.
The risk could have been easily mitigated through simplistic internal checks and balances.
A transaction is in the blockchain is referred to by its hash, and their value is included in the merkle tree for that block. A transaction is also signed by the private key associated with the transaction input. So if the transaction can be altered before being hashed and signed with the signature and then propagated to the network – the sender would not be able to track the transaction as its hash has been altered.
The attackers using transaction malleability against Mt Gox would request a withdrawal. When they received a hash of the transaction from the Company they would alter it by changing the <scriptPubKey> whilst using the <ScriptSig> and re-flooding the network with this new transaction. Mt Gox would then look for their transaction and assume there was an issue and resubmit the funds to the user. The user could then repeat this attack. Their flaw was that if they didn’t manage to propagate their updated transaction quick enough then they would still receive the Bitcoin but wouldn’t receive the extra funds. In this case they just tried again – they hadn’t lost much – just a bit of time.
This meant that Mt Gox’s funds were gradually leached away. However basic accounting checks and reports would have been able to detect this breach or loophole. In fact when summing up the process this was due to a lack of oversight by the management.
- How to Trade Bitcoin?
- How to sell Bitcoins?
- What will happen to the Bitcoin Price when the Block Reward Halves in 2016?
- How to trade Bitcoin with the Relative Strength Index?
- How to trade Bitcoin and other Crypto Currencies Using an SMA?
- How to trade Bitcoin and other Crypto Currencies Using an EMA?
- How to trade Bitcoin and other Crypto Currencies Using Bollinger Bands?
- How to Buy Crypto in Five Minutes: A Guide to XCOEX
- Why Using a VPN is Important for Crypto
- Roobee IEO: A New Company Shaking Up the Investment Industry
- Bitcoin Casino Kings - Crypto Casino Review Website
- What Are Smart Contracts?
- Cryptocurrency Tokens vs Coins: What's the Difference?
- What’s the Difference Between Bitcoin (BTC) and Ethereum (ETH)?
- What Is A Blockchain?
- What Is An ICO And How Does It Work
- TREZOR Model T CryptoCompare Review