Post AEnb0nSuJvUMQJSj7A by jb55@bitcoinhackers.org
(DIR) More posts by jb55@bitcoinhackers.org
(DIR) Post #AEnBzY1rjEARPC7aka by waxwing@x0f.org
2021-12-26T09:31:51Z
0 likes, 1 repeats
More moronic behaviour from the Binance casino:https://bitcoin.stackexchange.com/a/111441Give them a taproot withdrawal address, they *literally change the address*, just changing the segwit version from 1 to 0, (valid because P2WSH length) because ... lol?People sometimes say 'why do you care if the exchange does shitcoins?'. This is why. They just burned ~7.5K of this guy's money. He'll probably get it back because they're so rich they don't care, but he'll have to argue with them first.#bitcoin
(DIR) Post #AEnBzeJSMjnstUOj0C by waxwing@x0f.org
2021-12-26T09:55:59Z
0 likes, 0 repeats
Customer "support": https://ibb.co/tZq4txtAddress where the permanently destroyed money went:https://mempool.space/address/bc1qfdjlc5p92pxzvacgc5nhn3vgtt54e98472ymxgtejaa0ttdx8lkqgy3xdqIn 2017/2018 I got very militant about calling Coinbase traitors and incompetent and scumbags and so on; they all out attacked Bitcoin.This kind of behaviour is a bit different: it only indicates they care so little that one dumbass decision from one noob backend engineer ('oh, if I replace p with q, it works!!') is the level of attention they pay to Bitcoin.
(DIR) Post #AEnaMHCOrlhKlgQ4dE by jb55@bitcoinhackers.org
2021-12-26T14:40:26Z
0 likes, 0 repeats
@waxwing how would this not affect checksum? Couldn't this be considered a single-char change?
(DIR) Post #AEnb0nSuJvUMQJSj7A by jb55@bitcoinhackers.org
2021-12-26T14:47:44Z
0 likes, 0 repeats
@waxwing Unless they decode it and then ignore the version and hardcode it to 0. Wow... I can totally see an engineer doing that.
(DIR) Post #AEndRaUEskZ9tkzIem by waxwing@x0f.org
2021-12-26T15:14:57Z
0 likes, 0 repeats
@jb55 yeah, good Q.See https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#segwit-address-formatIt's 'human readable part', then 'version byte', then 'bech32 of witness program', where the third part gets the checksum property of the bech32 encoding. Why version byte isn't included in this encoding, and therefore in the checksum, (which after all is not relevant on-chain), I don't know. Maybe there's an obvious answer.Perhaps the same reason the human readable part isn't included: to make it readable to the naked eye. (q vs p, here).
(DIR) Post #AEni3eXgeRkFIV0UPA by kalle@bitcoinhackers.org
2021-12-26T15:23:23Z
0 likes, 0 repeats
@waxwingThe witness version is part of the checksum, they simply ignored the checksum, it seems. The data part, witness version+witness program, is checksummed.@jb55
(DIR) Post #AEni3eyz0xZyf9mHx2 by waxwing@x0f.org
2021-12-26T15:26:59Z
0 likes, 0 repeats
@kalle @jb55 yeah I was just about to say, after looking at it again - my bad.If you look, they actually swapped out the checksum. I'm not sure if this is worse or better!The original address was bc1pfdjlc5p92pxzvacgc5nhn3vgtt54e98472ymxgtejaa0ttdx8lkqzn304uThe paid-to address was bc1qfdjlc5p92pxzvacgc5nhn3vgtt54e98472ymxgtejaa0ttdx8lkqgy3xdq
(DIR) Post #AEni3fUX7eogF0XU80 by waxwing@x0f.org
2021-12-26T15:27:53Z
0 likes, 0 repeats
@kalle @jb55 It does seem utterly bizarre, but the "logic" must have been something like: "we'll take the scriptPubKey and change its version from 1 to 0, then our software spits out a valid segwit address".
(DIR) Post #AEni3frvifX1PZUAb2 by jb55@bitcoinhackers.org
2021-12-26T16:06:33Z
0 likes, 0 repeats
@waxwing @kalle wouldn't the logic be: "oh hey we supported taproot by implementing bech32m", then they simply decode the payload (valid checksum): "oh look 32 bytes, this must be a p2wsh output", and they go ahead and create one of those?
(DIR) Post #AEniPVTH3gKfXCMb9E by waxwing@x0f.org
2021-12-26T16:10:36Z
0 likes, 0 repeats
@jb55 @kalle yes in this case they started with an address, given to them by a user (not a tx from the blockchain) so they'd have had to decode from bech32m first, you're right. But every detail we point out like this just makes it crazier that they did it...