5

I've noticed that every few seconds transactions show up on live Tangle trackers with a tag of:

9999STOLEN9IOTAS999F***9YOU

Here a pending one valued at $144k which appeared 3 minutes ago: iotasear.ch result.

Using http://iota.cool I can see that there have been at least 500 of these transactions in the last minute, all of which are as yet unconfirmed. https://thetangle.org shows that there have been over 22,000 transactions with this tag.

This tag isn't a one-off example, either, there are other tags like "PC99STOLEN9IOTAS999F***9YOU, "D999STOLEN9IOTAS999F***9YOU" and "UG99STOLEN9IOTAS999F***9YOU" which I've noticed. I'm sure there are many others.

If I look at the list of richest 100 addresses, the top 5 all feature unconfirmed transactions with this tag - some spanning back to over a month ago.

Example

Some of these transactions are actually marked as confirmed, such as this one valued at $1k:

Example 2


  1. How are they able to generate a transaction from an address like this?
  2. Why are there so many of these?
  3. Should I be worried about this?
Helmar
  • 1,293
  • 1
  • 15
  • 28
James Donnelly
  • 395
  • 2
  • 9

2 Answers2

9

Anyone can issue a transaction for any amount from any address. Such a transaction won't be confirmed without knowledge of the private key. Your case is about an attempt to pretend that funds have been stolen.

Come-from-Beyond
  • 1,540
  • 9
  • 15
6

As others already stated, these transactions are not valid as they do not have the correct signature (some of them even have some text - stating that they don't have the correct signature - tryte-encoded in the signature field).

The reason why creating these transactions is so successful: Currently tangle explorers do not validate transactions well enough (they don't check signatures and they don't check whether the balance from the source address is actually there), thereby causing confusion for the users who use the tangle explorers.

mihi
  • 7,324
  • 2
  • 15
  • 34
  • 1
    Thank you. I hope the Tangle explorer developers can do something about these before IOTA gains too much media coverage, as for me it was a bit of a shock. – James Donnelly Nov 30 '17 at 21:59