Feeds

MtGox fallout bogs down Bitcoin traders as malleability issue goes mainstream

No real risk to network as flood of traffic suspends trading for many

Choosing a cloud hosting partner with confidence

BitCoin service providers are scrambling to fix their systems and address flaws as a mass of traffic has been spotted targeting the "transaction malleability" loophole which has been connected to the embattled MtGox exchange.

Bitcoin information service/CoinDesk is reporting distributed denial of service (DDoS) slowdowns on a number of exchanges, while the Bitstamp exchange said that it would be temporarily suspending some transactions while it deals with a flood of traffic.

At issue is an apparent rush of attempts related to a "transaction malleability" issue in which certain exchanges (including MtGox) could be duped into believing that a completed transaction had not yet been processed.

According to experts, the core Bitcoin service itself is not affected by the attack and no funds are in danger from the issue. At this point the issue is limited to a slowdown on the activity certain networks which use partially vulnerable systems.

The transaction malleability issue has come to a head in the Bitcoin community in recent days amidst coverage of the suspension of activity at MtGox. The issue, which has been known about for years, allows an attacker to attempt to spoof the metadata on a transaction request, causing confusion and possibly errors which could be then exploited by an attacker.

Andreas Antonopoulos, chief security officer with Blockchain, likened the issue to the refund policy at retail stores. Much like a customer bringing a receipt to a store seeking a refund, users could attempt to claim funds from an exchange reporting an incomplete transaction.

In this case, many such claims are being brought to Bitcoin exchanges, much like a customer bringing a shoebox stuffed with old receipts to a store. Lacking any actual authentication, however the requests will only succeed in slowing traffic.

Antonopoulos told The Reg that firms and exchanges which have already implemented the correct protections for managing and processing transactions are not going to be affected by the DDoS at all.

Despite the headaches caused by the flood of traffic, the Blockchain security boss sees the Bitcoin community as a whole becoming more robust and secure as a result of today's issues.

"This is forcing any implementations that are not 100 per cent best practices to shake out their bugs," he said.

"I expect by this time next week, transaction malleability will be a non-issue, at least as far as these implementations go."

The slowdown is the latest in what has been a busy month for the Bitcoin market. Earlier this month Apple caught a flurry of protests when it blocked the last of the remaining Bitcoin trading tools on the App Store for violating its restrictions on in-app transactions.

A few days later, MtGox drew headlines and customer ire when it said that it would be suspending some transactions, leading to further scrutiny and criticism of the company's business practices and handling of transactions.

In the meantime, Bitcoin proponents have maintained that the cryptocurrency itself remains strong and is poised to continue its push into the finance space. ®

Remote control for virtualized desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Website security in corporate America
Find out how you rank among other IT managers testing your website's vulnerabilities.