Author

Topic: Malleability Query (Read 2372 times)

sr. member
Activity: 364
Merit: 252
hero member
Activity: 552
Merit: 501
February 14, 2014, 05:03:53 AM
#1
Have I got this right?

Mr. Bad has 1 BTC in account with Gox

Mr. Bad sends withdrawal request for 1 BTC to Gox

Gox software sends 1 BTC with TX no. 0 to Mr. Bad

Mr. Bad broadcasts mutated version with TX no. 1

If TX no 1 gets in blockchain first then TX 0 never confirms.

Mr. Bad can then withdraw another 1 BTC from Gox because Gox in-house software checks only for whether TX 0 has confirmed.

Rinse and repeat?

But how can Mr. Bad broadcast mutated version quickly enough? How does he know when Gox have sent Tx 0? Unless he can do it quickly, Tx 0 is likely to confirm before Tx 1?




Jump to: