Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Malleability Attack #10

Open
neocarmack opened this issue Jun 28, 2020 · 3 comments
Open

Malleability Attack #10

neocarmack opened this issue Jun 28, 2020 · 3 comments
Assignees
Labels
bug Something isn't working Fixed this bug is fixed

Comments

@neocarmack
Copy link
Member

Bitcoin raw transactions are malleable, if without SegWit. That is to say a transaction can be modified, without invalidate it, but without access to the relevant private keys.

BIP-0062

So that OBD HTLC transactions built upon omni raw transactions are maleable, one participant ( Alice ) can broadcast a modified elder commitment transaction with totally different TxID without trigger the following ED, BR, HERD transactions, but pays himself the same money.

His counterparty (Bob) has no knowledge of this actitvity, and even if Bob knows, his punishment BR transaction can never be broadcast because Alice broadcaseted an transaction with totally different TxID.

When Omnicore supports SegWit, obd shall update all the currently being constructed transacitons.

@neocarmack neocarmack self-assigned this Jun 28, 2020
@neocarmack neocarmack added the bug Something isn't working label Jun 28, 2020
@DeusNexus
Copy link

Is this Malleability attack fixed?

@neocarmack
Copy link
Member Author

yes. But i will close this issue after omnibolt mainnet launches. Currently we tested on testnet.

@neocarmack neocarmack added the Fixed this bug is fixed label Mar 10, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Fixed this bug is fixed
Projects
None yet
Development

No branches or pull requests

2 participants