Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Add alert page for transaction malleability attack #314

Merged
merged 1 commit into from Feb 11, 2014

Conversation

Projects
None yet
4 participants
Contributor

saivann commented Feb 11, 2014

No description provided.

Contributor

luke-jr commented Feb 11, 2014

I'm not sure if this warrants an alert...?

Contributor

saivann commented Feb 11, 2014

@luke-jr This page will only appear in the Network status page to provide explanations about the (now widely public) problem. No "red alert" bar will be displayed on the website. This said, maybe these texts could be better if reviewed and improved by a native English speaker.

Contributor

schildbach commented Feb 11, 2014

s/shoud/should/

Contributor

schildbach commented Feb 11, 2014

I think it should be noted to be careful about requests to refund any coins or requests to "send again, because it didn't work". That basically the options how to trick someone into losing coins, taking advantage of the malleability issue.

Contributor

gmaxwell commented Feb 11, 2014

@schildbach if you ever resend coins without doing something fancy to make sure you doublespend yourself, you're screwed because the original payment may still go through at any time. I'd be worried that point this out here might cause people to think that they could resend coins if they didn't see any mutant transactions.

Contributor

saivann commented Feb 11, 2014

@schildbach @gmaxwell How about:

No action is required to protect your bitcoins. As usual, you should wait for one confirmation or more before spending bitcoins and any request to send a payment twice should be considered very suspect. You can refer to your exchange's website to be informed about their service status. Temporary confusion, delays and price volatility can be expected.

saivann added a commit that referenced this pull request Feb 11, 2014

Merge pull request #314 from bitcoin/malleabilityalert
Add alert page for transaction malleability attack

@saivann saivann merged commit 0cef1de into master Feb 11, 2014

@saivann saivann deleted the malleabilityalert branch Feb 11, 2014

Contributor

saivann commented Feb 11, 2014

I merged current branch. Please provide texts if you think the page should be further improved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment