2014/01/01 by Christian Decker, Roger Wattenhofer · 2 voices · 232 citations
Computer Science · #Blockchain Technology Applications and Security #Ciphertext #Computer science #Computer security #Cryptography and Data Security #Database #Database transaction #Encryption #Internet Traffic Analysis and Secure E-voting #Malleability #Transaction processing #cs.CE #cs.CR
paper · pdf · doi:10.1007/978-3-319-11212-1_18
published in Lecture notes in computer science, 313-326 (Springer Science+Business Media)
openalex publication_date 2014/01/01 · arxiv created 2014/03/26 · arxiv updated 2014/12/30 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/05
In Bitcoin, transaction malleability describes the fact that the signatures that prove the ownership of bitcoins being transferred in a transaction do not provide any integrity guarantee for the signatures themselves. This allows an attacker to mount a malleability attack in which it intercepts, modifies, and rebroadcasts a transaction, causing the transaction issuer to believe that the original transaction was not confirmed. In February 2014 MtGox, once the largest Bitcoin exchange, closed and filed for bankruptcy claiming that attackers used malleability attacks to drain its accounts. In this work we use traces of the Bitcoin network for over a year preceding the filing to show that, while the problem is real, there was no widespread use of malleability attacks before the closure of MtGox.