transaction malleability problem
   HOME

TheInfoList



OR:

The transaction malleability problem is a vulnerability in blockchain which can be exploited by altering a
cryptographic hash A cryptographic hash function (CHF) is a hash algorithm (a map of an arbitrary binary string to a binary string with fixed size of n bits) that has special properties desirable for cryptography: * the probability of a particular n-bit output ...
, such as the digital signature used to identify a cryptocurrency transaction. Transaction malleability is considered to be one of the largest ongoing threats to blockchain technology, as it can compromise financial transactions such as Bitcoin and other cryptocurrency transaction, and cause other issues in the network.


Discovery

The transaction malleability problem became known to the Bitcoin community in 2011. In February 2014, Japanese Bitcoin exchange
Mt. Gox Mt. Gox was a bitcoin exchange based in Shibuya, Tokyo, Japan. Launched in 2010, it was handling over 70% of all bitcoin (BTC) transactions worldwide by early 2014, when it abruptly ceased operations amid revelations of its involvement in the ...
revealed that they had been targeted by an exploit in Bitcoin protocol called "Transaction Malleability". At the time, Mt. Gox was the world's largest bitcoin exchange, handling approximately 70% of all bitcoin transactions. The company reportedly lost hundreds of millions of dollars worth of Bitcoin due to this bug. After failing to attract enough investors to offset its losses, Mt. Gox suspended withdrawals, and closed its website. The company soon filed for bankruptcy with CEO
Mark Karpelès Mark Marie Robert Karpelès (born June 1, 1985), also sometimes known by his online alias MagicalTux, is the former CEO of bitcoin exchange Mt. Gox. Born in France, he moved to Japan in 2009. Early life and education Born in Chenôve, France, ...
resigning. Shortly after Mt. Gox's announcement, it was revealed that Silk Road 2.0 had lost $2.7 million worth of Bitcoin due to an unknown hacker who exploited transaction malleability. A 2014 study published by Christian Decker and Roger Wattenhofer found that no major transaction malleability exploitations had occurred prior to the MT. Gox attack.


Applications and threats

Transaction malleability can be used to alter the unique ID of a monetary transaction before it is confirmed. For example, it is possible for a hacker to fool computer systems into erroneously sending multiple transactions by manipulating the TX ID of a bitcoin transaction.


References

{{Reflist Blockchains