~/talk

Bitcoin Transaction Malleability Theory in Practice

Talkat Black Hat USA 2014 · 2014-08-02..08-07· [security, bitcoin]
links:none on file
slides:none on file

Explains the concrete exploit: grab a pending raw transaction hex, edit the scriptSig by inserting OP_PUSHDATA2 and a zero byte while updating the overall length, rebroadcast the mutated TX to enough peers to win the race and get it mined instead of the original; this causes the original ID to become unusable so an exchange believing the original TX failed issues a second payout. Demo shows raw tx hex parsing and a live 30→60 mcoin demo, authors provide a tool and note a client-side patch that drops nonstandard pushdata.

AI-written summary · about

  1. 0:00Start
  2. 6:01Block Header Structure
  3. 18:32P2P Lottery
  4. 23:06Standard Transaction
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.