Bitcoin price plunges as Mt. Gox says flaw in protocol allows fraud
IDG News Service - Bitcoin software has a bug that allows fraud, Tokyo-based bitcoin exchange Mt. Gox said Monday. The news was followed by a new fall in the value of the digital currency.
Mt. Gox said it will continue its suspension of bitcoin transfers from wallets it holds to external bitcoin addresses, announced Friday, while it works to resolve the problem.
Conversions of bitcoins to conventional currencies and bitcoin transfers to other Mt. Gox addresses are not affected.
"A bug in the bitcoin software makes it possible for someone to use the Bitcoin network to alter transaction details to make it seem like a sending of bitcoins to a bitcoin wallet did not occur when in fact it did occur," Mt. Gox said in a statement.
"Since the transaction appears as if it has not proceeded correctly, the bitcoins may be resent. MtGox is working with the Bitcoin core development team and others to mitigate this issue."
The flaw, called "transaction malleability," is already known to some of the core Bitcoin software developers, Mt. Gox said. It allows a third party to alter the hash associated with a freshly issued transaction without invalidating its signature, resulting in two similar transactions, only one of which can ultimately be validated and included in the log of Bitcoin transactions called the blockchain.
An attacker with access to sufficient computing power could ensure that the modified transaction is included, and the original rejected. With current Bitcoin applications, it is easy to determine that the original transaction failed, but much less obvious that a modified transaction succeeded, Mt. Gox said.
"This means that an individual could request bitcoins from an exchange or wallet service, alter the resulting transaction's hash before inclusion in the blockchain, then contact the issuing service while claiming the transaction did not proceed," the exchange warned.
http://www.networkworld.com/news/2014/021014-bitcoin-price-plunges-as-mt-278584.html