Pages:
Author

Topic: QT strange DOUBLE SPEND (malleable) - page 2. (Read 13046 times)

member
Activity: 98
Merit: 10
Trust:+4:20--Warning* ASICs with extreme hashrate!
February 11, 2014, 02:28:13 AM
#37
So is it really that spam transaction bot or what?

i think it's ufos ! =)
sr. member
Activity: 378
Merit: 250
February 11, 2014, 02:26:43 AM
#36
I also had a transaction ID changed today on a transaction.
So 2 transactions appear in my wallet.
This is annoying. I am sure that is the intent.
sr. member
Activity: 434
Merit: 250
February 11, 2014, 01:22:28 AM
#35
So is it really that spam transaction bot or what?
legendary
Activity: 2114
Merit: 1005
ASIC Wannabe
February 11, 2014, 01:17:52 AM
#34
my exported transaction list DOES NOT ADD UP.

it includes the duplicate transaction of -0.2201 marked as 'Confirmed=FALSE' and a partly-confirmed mining income from an hour ago of 0.1674

please help me out here:

Wallet Status: Balance: 0.2146 BTC   Unconfirmed: 0.00 BTC    Immature: 0.1674 BTC
using the exported csv and adding all the transaction amounts, I get a total of 0.1363 BTC - this includes both the mining income and unconfirmed double spend.
Why does the math not add up? No matter how you add/subtract the renegade values my wallet amount isnt right
newbie
Activity: 48
Merit: 0
February 11, 2014, 01:02:04 AM
#33
Hi Guys

Have a problem with a tx using QT


Status: 0/unconfirmed
Date: 11-Feb-14 11:36
To: 1XXXXXXXXXXXXXXXUVWQ
Debit: -41.00 BTC
Transaction fee: -0.0001 BTC
Net amount: -41.0001 BTC
Transaction ID: 44acb7e6a12e55e44c3cce5304d3ef5d98ec5e51e2188669db5fcfc126a4171f


The coins have left my wallet but have not appeared in the new address. Also the tx ID says transaction not found and the status has been unconfirmed for over an hour?

I have done a rescan of QT, but still nothing. Any help will be greatly appreciated!

Cheers


whats the sending/destination addresses? with those it would be a little easier to see whats going on

Destination address 1JhLyQ4bgVw3ZxXWydKHouim4WNBxCUVWQ

But I have no idea the sending address sorry..

It also seems I have unspendable tx in my change wallets? OP_DUP OP_HASH160 e75f9696779377c0a1b9f7f36acff336c96f14f7 OP_EQUALVERIFY OP_CHECKSIG
legendary
Activity: 2114
Merit: 1005
ASIC Wannabe
February 11, 2014, 12:40:25 AM
#32
Hi Guys

Have a problem with a tx using QT


Status: 0/unconfirmed
Date: 11-Feb-14 11:36
To: 1XXXXXXXXXXXXXXXUVWQ
Debit: -41.00 BTC
Transaction fee: -0.0001 BTC
Net amount: -41.0001 BTC
Transaction ID: 44acb7e6a12e55e44c3cce5304d3ef5d98ec5e51e2188669db5fcfc126a4171f


The coins have left my wallet but have not appeared in the new address. Also the tx ID says transaction not found and the status has been unconfirmed for over an hour?

I have done a rescan of QT, but still nothing. Any help will be greatly appreciated!

Cheers


whats the sending/destination addresses? with those it would be a little easier to see whats going on
donator
Activity: 1218
Merit: 1079
Gerald Davis
February 11, 2014, 12:29:03 AM
#31
isn't there an issue due to the way the reference client allows users to immediately respend the change address from a prior transaction?

if I do two transactions one after the other and the second uses the change address of the first, if the first gets changed via the malleable relay then the second transaction will never confirm. the recipient won't get their funds as the input address is double spent.

a more malicious relayer could look for these chains and deliberately rewrite the first transaction to cause havoc amongst reference client users.

Both transactions are exactly the same, so the change address will have the amount you need to spend no matter which one is accepted


But it will have a different tx id, so they aren't "exactly" the same.  The prior poster is right any subsequent tx would fail.


BTW: Bitcoin doesn't work on the concept of balances it works on the concept of discrete inputs and outputs.  The input of a tx is the output of a prior tx.  You are spending x coins you are spending output X a specific and unique output of which there is no other like it in the bitcoin universe.


So say you have a tx which generates an output A & B where B is the change.
You then create another tx which uses B as the input.

If the first tx is modified it doesn't matter that the outputs have the same VALUE (and are going to the same addreses) they are no longer A & B they are lets say C & D.
Now if this modified tx is the one which makes it into a block then the second tx above which spent B will never confirm.  Why?  Because B no longer exists.
newbie
Activity: 48
Merit: 0
February 11, 2014, 12:22:43 AM
#30
Hi Guys

Have a problem with a tx using QT


Status: 0/unconfirmed
Date: 11-Feb-14 11:36
To: 1XXXXXXXXXXXXXXXUVWQ
Debit: -41.00 BTC
Transaction fee: -0.0001 BTC
Net amount: -41.0001 BTC
Transaction ID: 44acb7e6a12e55e44c3cce5304d3ef5d98ec5e51e2188669db5fcfc126a4171f


The coins have left my wallet but have not appeared in the new address. Also the tx ID says transaction not found and the status has been unconfirmed for over an hour?

I have done a rescan of QT, but still nothing. Any help will be greatly appreciated!

Cheers
cp1
hero member
Activity: 616
Merit: 500
Stop using branwallets
February 10, 2014, 11:56:55 PM
#29
isn't there an issue due to the way the reference client allows users to immediately respend the change address from a prior transaction?

if I do two transactions one after the other and the second uses the change address of the first, if the first gets changed via the malleable relay then the second transaction will never confirm. the recipient won't get their funds as the input address is double spent.

a more malicious relayer could look for these chains and deliberately rewrite the first transaction to cause havoc amongst reference client users.

Both transactions are exactly the same, so the change address will have the amount you need to spend no matter which one is accepted
member
Activity: 98
Merit: 10
Trust:+4:20--Warning* ASICs with extreme hashrate!
February 10, 2014, 11:50:13 PM
#28
interesting stuff here !~quantum computer in the middle? =0
Nothing quantum required. Just a well connected node re-writing sigscripts.  No reason to worry.

\o\--yea i rebroadcast with my iPhone ...i aint scurred but the little exchanges are! =0
newbie
Activity: 51
Merit: 0
February 10, 2014, 11:44:20 PM
#27
Nothing quantum required. Just a well connected node re-writing sigscripts.  No reason to worry.
isn't there an issue due to the way the reference client allows users to immediately respend the change address from a prior transaction?

if I do two transactions one after the other and the second uses the change address of the first, if the first gets changed via the malleable relay then the second transaction will never confirm. the recipient won't get their funds as the input address is double spent.

a more malicious relayer could look for these chains and deliberately rewrite the first transaction to cause havoc amongst reference client users.
hero member
Activity: 700
Merit: 500
February 10, 2014, 11:36:23 PM
#26
interesting stuff here !~quantum computer in the middle? =0
Nothing quantum required. Just a well connected node re-writing sigscripts.  No reason to worry.
member
Activity: 98
Merit: 10
Trust:+4:20--Warning* ASICs with extreme hashrate!
February 10, 2014, 11:12:37 PM
#25
interesting stuff here !~quantum computer in the middle? =0
hero member
Activity: 700
Merit: 500
February 10, 2014, 10:55:16 PM
#24
I still want to circle this back to my unanswered concern:

If my Bitcoin-Qt shows red (withdrawals) for both transactions on it's main window, and both (1 uncomfirmed and 1 many-times confirmed) in its tranacttions log - does the perceived account balance reflect ONE or BOTH withdrawals?

my concern is that this could make incorrectly-updated clients to report lower-than-actual bitcoin quantities and possibly cause these bitcoins to be forgotten when the user transfers the 'visible' balance elsewhere and leave behind the amount from the unconfirmed double spend that still belongs to the left-behind address?
Spends should be linked to specific txouts, not addresses, so the balance should always be correct.

You know... I am starting to wonder if MtGox is running this Maliability bot to fuck with the blockchain even more.
legendary
Activity: 2114
Merit: 1005
ASIC Wannabe
February 10, 2014, 10:52:16 PM
#23
I still want to circle this back to my unanswered concern:

If my Bitcoin-Qt shows red (withdrawals) for both transactions on it's main window, and both (1 uncomfirmed and 1 many-times confirmed) in its tranacttions log - does the perceived account balance reflect ONE or BOTH withdrawals?

my concern is that this could make incorrectly-updated clients to report lower-than-actual bitcoin quantities and possibly cause these bitcoins to be forgotten when the user transfers the 'visible' balance elsewhere and leave behind the amount from the unconfirmed double spend that still belongs to the left-behind address?
hero member
Activity: 700
Merit: 500
February 10, 2014, 09:53:00 PM
#22
This is not a double spend in any way, shape, or form.  You have double spent if you get two different transactions confirmed in the blockchain.

0 confirmation transactions are irrelevent... anyone can re-spend non-confirmed txouts quite trivially.

Transaction maliability is fine... it isn't a bug or a fault. 

Someone is re-broadcasting tx's with slight modifications that result in different txid's.  If anything, the person is benefiting the network by forcing idiots like the MtGox devs to stop relying on the txid before it is confirmed in a block.
sr. member
Activity: 342
Merit: 250
February 10, 2014, 09:48:18 PM
#21
my guess is a malicious, high-volume node must be causing this to every transaction that it can pass through it
Maybe somebody should ask the person who seemed to know about it ahead of time: https://bitcointalksearch.org/topic/the-transaction-rebroadcasting-spam-bot-459013

I may be wrong but I believe I saw that thread after people were complaining about getting Satoshi's from the address with Enjoy in it. I could be wrong.
legendary
Activity: 1148
Merit: 1018
February 10, 2014, 08:45:16 PM
#20
So any conclusion on what this means (in terms of security, usability of bitcoin)?

my guess is a malicious, high-volume node must be causing this to every transaction that it can pass through it - whether this means tens or thousands per second I'm not sure. The issue seems to have no impact on bitcoin, since it can only repeat the transaction under a slightly different txid, it is not capable of modifying it (such as to change the recipient). Here is a very simplified explanation: http://www.reddit.com/r/Bitcoin/comments/1xieb9/keep_calm_transaction_malleability_is_not_double/

is there any way to track these sort of double-spends without having to know the originating tx or wading through the recents or block tx lists to spot double spends?

I'd say that more than a double spends those are "mutated transaction". There's really no way for the malicious third party to steal any coins unless he social engineers the sender... In the case of Gox their shitty accounting helped.
legendary
Activity: 1400
Merit: 1009
February 10, 2014, 08:43:07 PM
#19
my guess is a malicious, high-volume node must be causing this to every transaction that it can pass through it
Maybe somebody should ask the person who seemed to know about it ahead of time: https://bitcointalksearch.org/topic/the-transaction-rebroadcasting-spam-bot-459013
legendary
Activity: 2114
Merit: 1005
ASIC Wannabe
February 10, 2014, 08:40:42 PM
#18
So any conclusion on what this means (in terms of security, usability of bitcoin)?

my guess is a malicious, high-volume node must be causing this to every transaction that it can pass through it - whether this means tens or thousands per second I'm not sure. The issue seems to have no impact on bitcoin, since it can only repeat the transaction under a slightly different txid, it is not capable of modifying it (such as to change the recipient). Here is a very simplified explanation: http://www.reddit.com/r/Bitcoin/comments/1xieb9/keep_calm_transaction_malleability_is_not_double/

is there any way to track these sort of double-spends without having to know the originating tx or wading through the recents or block tx lists to spot double spends?
Pages:
Jump to: