Japanese Cryptocurrency Management Platform Raises $2.3 Million

Bitcoin Magazine
Japanese Cryptocurrency Management Platform Raises $2.3 Million

Japanese cryptocurrency management service provider and SmartCoin operator Orb has raised US $2.3 million in seed funding from leading Japanese venture capital firms and angel investors including SBI investment.

With the new financing, the Orb team plans to allocate its funds to the development of Orb’s cryptocurrency management platform, which is currently in private beta.

The Orb team will also use the funds to continue the development of their newly launched decentralized cloud computing system, which allows users and developers to authenticate assets and transactions on the blockchain. Orb co-founder and CEO Masa Nakatsu firmly believes that Orb is a great contribution to the cryptocurrency ecosystem, and will become one of the main competitors of Chain, Ethereum and 21 Inc.

Prior to the development of Orb, Nakatsu has cofounded several multi-million dollar ventures in Japan and Silicon Valley. Nakatsu founded Japan’s largest social lending platform Maneo, with which he raised more than $140 million in funding.

Over the past few decades, Nakatsu has focused on the search of solutions toward the problems of traditional currency systems. Nakatsu founded Musavy, a content curation venture in Silicon Valley and worked with the Business Development department of Groupon.

With his expertise in finance, eCommerce and online payments, Nakatsu plans to grow Orb into a prominent cryptocurrency platform in the near future.

The post Japanese Cryptocurrency Management Platform Raises $2.3 Million appeared first on Bitcoin Magazine.

The Who, What, Why and How of the Ongoing Transaction Malleability Attack

For the past several days*, the Bitcoin network has been plagued by a so-called “transaction malleability attack.” Bitcoin users have experienced a number of annoyances, causing confusion and frustration. And while the transaction malleability issue is well-known and has plagued the Bitcoin network before, to many it is still unclear what it is, why it is a problem, who is causing the attack right now, and what can be done about it.

*According to the claimed attacker (see below), the attack is currently paused at the time of writing, but could and probably will be continued at any time.

What is transaction malleability?

In order to understand the transaction malleability attack, it helps to first understand the basics of how Bitcoin transactions work. In simplified form, each transaction over the Bitcoin network consists of different types of data. This includes transaction inputs (refering to the addresses bitcoin come from), transaction outputs (refering to the addresses bitcoin are sent to), the amount of bitcoin sent, and more. All of this data is cryptographically signed, combined, and scrambled (“hashed”) into a unique and smaller piece of data: a hash. This hash is essentially the transaction ID. If a miner confirms the transaction, the transaction ID is included in a block and stored in the blockchain.

The problem that enables transaction malleability, however, is that effectively identical signatures can result in completely different hashes. The specifics of this are deeply cryptographic, and are very hard – if not impossible – to explain in plain English. But as one extremely simplified example to get an idea of the problem, a comparison would be that the numbers “145” and “0145” are effectively the same number in many cases. But when hashed, “145” and “0145” might actually produce completely different results.

In the case of the ongoing transaction malleability attack, the attacker picks transactions from the Bitcoin network, and tweaks signature data. As a result, all sorts of transactions have two completely different transaction IDs circulating on the Bitcoin network. And since a specific transaction can confirm only once, just one of the transaction IDs will be included in a block, while the other will be ignored.

Are transaction malleability attacks a problem?

The essence of the transaction malleability problem arises when someone uses the transaction ID – and nothing but the transaction ID – to check whether a transaction has been included in a block. This is a problem, of course, because the transaction ID may have been changed by the attacker, and his new transaction ID could have been included in the block rather than the original transaction ID. It might then seem as if the transaction itself never went through – though it effectively did.

This can be problematic for several reasons.

For one, it complicates writing wallet software. This is a problem in particular for Bitcoin companies that use their own software, which several of the bigger businesses in the space do.

The best-known and most infamous example of such a company would be Mt. Gox, the world’s first bitcoin exchange that spectacularly failed in 2014 as it claimed to have lost most of its customers’ funds. Mt. Gox claimed it lost this money because it fell victim to a long-lasting malleability attack, which messed up its bookkeeping. With it seeming as if transactions never confirmed, users are said to have been able to withdraw more bitcoin than they owned. Whether this is really why Mt. Gox lost so much of its customers bitcoin remains unclear, but it could – at least theoretically – be true.

This is an extreme example, as Mt. Gox asserts to have automatically re-sent bitcoin merely based on the transaction IDs – not a smart thing to do. But transaction malleability could complicate matters for Bitcoin companies with a more sensible payout policy, too. If they, like Mt. Gox, run software that keeps track of transaction IDs for bookkeeping, the transaction malleability attack could severely damage their records. Even if they do not automatically resend transactions, and, as such, don’t lose any, it’s still a nuisance.

A less urgent but potentially bigger problem is that transaction malleability impedes on chained transactions. Chained transactions are transactions that use an unconfirmed output as its own input, or in other words: They spend bitcoin balances that have not been confirmed yet. But if they spend transactions of which the transaction IDs are changed, they – and all subsequent chained transactions – become invalid all at once.

Chained transactions come in a lot of shapes and forms. The most common might be bitcoin spent from change addresses. But chain transactions also form the basis of more fancy bitcoin use cases, such as payment channels. Indeed, the transaction malleability issue is one of the reasons advanced scaling solutions such as the Lightning Network are not quite ready to be deployed yet.

It bears noting, however, that transaction malleability is no existential problem for Bitcoin. Only the transactions IDs can be changed, not the transactions themselves; no one can steal funds from anyone else, and no one can reverse or block transactions. Moreover, the current transaction malleability attack doesn’t really make the deeper problems with transaction malleability worse. These risks would have existed with or without the current attack.

Why is the Bitcoin network being attacked?

A short answer would be that it’s hard to know for sure, as it is hard to determine who is carrying out the attack – let alone why.

Bitcointalk.org user “amaclin,” however, has claimed to be behind the attack. Amaclin, who is probably Russian (or at least speaks Russian), announced his involvement in the malleability attack shortly after it was first noticed on October 1.

Amaclin says he has carried out the attack, essentially, out of boredom. Additionally, amaclin argues that Bitcoin is fundamentally broken. He specifically points out that the incentive structures of Bitcoin’s development process do not align well, as users are not incentivized to reward developers for their work building and maintaining Bitcoin. By attacking the network, amaclin believes he is revealing that only a small number of developers can fix the issue, while most Bitcoin users expect them to do so for free. That is an unsustainable proposition, amaclin says.

Amaclin claims that he is not attacking the network in order to gain financially in any way. He also denies attacking any specific business in order to defraud them or otherwise. He has, however, posted two donation addresses in his forum signature: One is labeled a vote for the attack, while the other is labeled a vote against. At the time of writing, both addresses have had one transaction sent to them, adding up to 300 bits, worth less than 10 cents in total.

Whether amaclin is telling the truth is hard to verify. But the fact that he could be telling the truth, the fact that a networkwide attack on the Bitcoin network could be carried out by a bored individual with some coding skills, is probably quite telling in itself.

Can the problem be solved?

The good news is that the transaction malleability issue could likely be solved eventually. BIP 62 (Bitcoin Improvement Proposal 62) in particular is intended to prevent malleability attacks by narrowing down the types of data that can be included in Bitcoin transactions. BIP 62 could be implemented as a soft fork, which means that it would then be up to miners to adopt the changes.

The bad news is that the issue is still pretty far from actually being solved. The transaction malleability problem is quite complicated, and some solutions might create other – even bigger – problems for the Bitcoin network. BIP 62 currently is still in draft stage, and not ready to be implemented in Bitcoin Core yet. Moreover, it is far from clear that BIP 62 does or even can tackle all possible malleability issues. It is possible that additional exploits have not yet been found, and have, therefore, not yet been countered by proposals included in BIP 62.

While fixing the malleability issue is widely considered to be a problem that needs solving, it might take a while before a definite solution is ready – if one ever is. For the foreseeable future, wallet software will have to tackle the problem using workarounds.

Thanks to Bitcoin Core developer Peter Todd and Bitonic CEO Jouke Hofman for providing feedback.

The post The Who, What, Why and How of the Ongoing Transaction Malleability Attack appeared first on Bitcoin Magazine.

Bitcoin Businesses Meet with US Congressman Jared Polis to Find Common Ground

Congressman Polis Bridges Gap Between Bitcoin Companies and Capitol Hill

U.S. Congressman Jared Polis took time out from his busy campaign schedule recently to meet with representatives, including CEOs, from nine digital currencies companies including itBit and Blockchain.

Organized by the Washington, D.C.-based advocacy and education group Coin Center, the roundtable was an attempt to bridge the gap between the world of Washington and Congress and the world of fintech and digital currencies.

Coin Center Executive Director Jerry Brito, who chaired the meeting, was happy with the outcome and told Bitcoin Magazine:

“We visit policymakers in D.C. often to talk about these issues, but there’s no substitute for having them come out and meet the actual innovators who are building these great companies and technologies. I think Rep. Polis learned a lot about what these companies do and the regulatory issues they’re facing, and they learned a bit more about what it takes to move policy in government.”

Rep. Polis is an acknowledged “thought leader” for the digital currency movement and has made a name for himself in the community with his ongoing support for Bitcoin.

Polis was one of the first to take advantage of a Federal Election Commission ruling that political candidates can now accept donations in bitcoin and has “Now Accepting Bitcoin!” on his website.

CEOs from nine digital currencies businesses meet with Rep. Jared Polis to find common ground

“It was a very productive meeting. Polis really ‘gets’ digital currencies.

He has tech DNA, something that is still too rare in D.C.,” Blockchain’s Marco Santori, who attended the meeting, told Bitcoin Magazine.

“Encouragingly, whenever the small group of entrepreneurs and policy experts in the meeting would register generalized grievances, Polis would respond with very specific proposed solutions,” Santori said. “I think this kind of meeting will lead to improvements for digital currencies companies in the future.”

It’s an election year in the U.S., and Rep. Polis is seeking re-election in Colorado’s 2ndDistrict, but he wants to get started immediately making sure that digital currencies startups are being served by government and not strangled by regulatory red tape.

“We have a policymaker who is genuinely excited about this technology taking the time to meet with the community at the forefront of making it successful,” said Brito. “The idea of a U.S. representative taking Bitcoin so seriously was laughable as little as a few years ago. This meeting shows just how quickly it is growing toward the mainstream.

“It’s a major indicator of the technology’s growing significance that such a meeting took place to begin with. The technology has grown and its industry has become mainstream to the point where congressmen are meeting with leaders from it.”

Congressman Jared Polis and Coin Center Executive Director Jerry Brito meet with representatives from the digital currencies community.

Rep. Polis’s interest in digital currencies comes from a lifelong passion for technology and the Internet.

While in college, Polis started his first tech company, American Information Systems, and in 2006 founded Techstars, a Colorado-based startup accelerator.

“Rep. Polis has been an engaged and vocal supporter of Bitcoin innovation for some time now. This event gives him and the people building on this technology an opportunity to meet, exchange ideas, and learn from each other,” added Brito.

Companies that met with Congressman Polis included AlphaPoint, Blockchain, Case, Chain Code, Digital Currency Group, itBit, Onename, SolidX Partners Inc., and Union Square Ventures.

The post Bitcoin Businesses Meet with US Congressman Jared Polis to Find Common Ground appeared first on Bitcoin Magazine.