Date: Wed, 15 Jul 2015 11:18:25 -0400
From: Peter Todd <pete@petertodd.org>
To: Tom Harding <tomh@thinlink.com>
Message-ID: <20150715151825.GB20029@savin.petertodd.org>
References: <24662b038abc45da7f3990e12a649b8a@airmail.cc>
	<55A66FA9.4010506@thinlink.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="H+4ONPRPur6+Ovig"
Content-Disposition: inline
In-Reply-To: <55A66FA9.4010506@thinlink.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: bitcoin-dev@lists.linuxfoundation.org
Subject: Re: [bitcoin-dev] Significant losses by double-spending unconfirmed
 transactions
Precedence: list


--H+4ONPRPur6+Ovig
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 15, 2015 at 07:35:21AM -0700, Tom Harding via bitcoin-dev wrote:
>=20
> You perform a valuable service with your demonstration, but you
> neglected to include the txid's to show that you actually did it.
=20
> Your advice is must-follow for anyone relying on an unconfirmed tx: it
> must pay a good fee and be highly relayable/minable.

Actually, I was looking at what I believe was (part of?) this attack
yesterday in the logs on my full-RBF nodes and the txs involved *did*
have good fees and were highly relayable/minable - the double-spent txs
had near 100% propagation on blockchain.info (who has unfortunately
purged the relevant data already)

Shapeshift.io depends on Blockcypher's "confidence factor" model(1)
under the hood - yet another one of those sybil attacking network
monitoring things - to estimate tx confirmation probability by looking
at the % of nodes a tx has propagated too. But miners frequently use
customized Bitcoin Core codebases that don't follow normal policies, so
those measurements don't actually tell you what you need to know.

hapeshift confirmed(2) the attack - confirming that they disabled
unconfirmed tx acceptance - said they're going to "improve" their
system... It'll be interesting to see what that actually entails.

1) https://medium.com/blockcypher-blog/from-zero-to-hero-bitcoin-transactio=
ns-in-8-seconds-7c9edcb3b734
2) https://www.reddit.com/r/Bitcoin/comments/3ddkhy/bitcoindev_significant_=
losses_by_doublespending/ct468p7

--=20
'peter'[:-1]@petertodd.org
000000000000000010bf087ed645cba129e2523930d5cde636ddbae9e03aef9c

--H+4ONPRPur6+Ovig
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
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==
=zcmR
-----END PGP SIGNATURE-----

--H+4ONPRPur6+Ovig--