[bisq-network/proposals] Send arbitration funds to a burning address instead of BTC donation address. (#135)

xbyvee notifications at github.com
Wed Nov 6 22:47:44 UTC 2019


I think there is a very realistic risk of funds being stolen. Over on the Bisq forum I have outlined how this would work:

-Donation address holder places a bunch of orders to sell XMR and below market price (can work on the buy side too but the donation address holder would need a lot of btc for that).
-If the price above or below market is big enough 100s of BTC worth of orders will come in
-Donation address holder either doesn't pay or doesn't release the funds, at this point no one suspects anything, it could just be a trader that has lost their keys or is having technical issues etc..
-10 days elapses with no payment / release
-donation address holder publishes the timelock transaction and receives the btc (either for nothing or receives their own btc back plus the XMR that people paid them, depending on which side of the book it was on).

How does anyone stop this attack from happening at all? If the other parties have already taken the trade and paid there's absolutely nothing anyone can do to stop the donation address holder from getting a bunch of BTC after the timelock?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/proposals/issues/135#issuecomment-550536190
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20191106/c410988c/attachment.html>


More information about the bisq-github mailing list