<p>As a participant in the peer to peer network, it is impossible for you to know that the state and timing you are seeing are consistent with what other people are seeing. You can't ask other participants in the network what they are seeing directly as they can lie, withhold information, or the request can be tampered with on its way across the network. The block chain and proof of work mining system are designed to ensure that in all probability, nodes in the network have consistent ordering and atomicity. Absent this, it would be very feasible for nodes to see a different state and make different decisions about validity. </p>

CC BY-SA 3.0
2015-08-22T08:06:02.080Z
2015-08-22T08:06:02.080Z
Claris
<p>I'm reading Bitcoin paper of Satoshi Nakamoto (<a href="https://bitcoin.org/bitcoin.pdf" rel="nofollow">https://bitcoin.org/bitcoin.pdf</a>).</p>

<p>It says:</p>

<blockquote>
  <p>Each owner transfers the coin to the next by digitally signing <strong><em>a hash
  of the previous transaction</em></strong> and the public key of the next owner and
  adding these to the end of the coin. A payee can verify the signatures
  to verify the chain of ownership.</p>
</blockquote>

<p>And the very next sentence is:</p>

<blockquote>
  <p>The problem of course is the payee can't verify that one of the owners
  did not double-spend the coin.</p>
</blockquote>

<p>That is, as I understand, after every transaction a new transaction hash is generated. So, first, it is not possible to double-spend a coin because it already has a new <em>previous transaction hash</em>. Second, why it says <em>payee can't verify</em> a double-spend if every transaction a coin has a new <em>previous transaction</em> hash?</p>

CC BY-SA 3.0
2015-08-22T04:54:56.050Z
A "double spend" refers to two transactions with the same previous transaction hash.  Given two such, how can you tell which is the "right" one, just by looking at them?  And given one, how can you know whether or not there is a second one that may someday show up?
Nate Eldredge
CC BY-SA 3.0
2015-08-22T06:45:34.417Z
@NateEldredge This should be an answer :)
Wizard Of Ozzie
CC BY-SA 3.0
2015-08-25T08:52:53.607Z
You see a transaction. It may or may not be a double spend. How do you tell? How do you prove that there does not exist another transaction that conflicts with this one that other people might think is valid instead of this one?
David Schwartz
<bitcoind><doublespend>
Why it is not possible for a payee to verify double-spends of the coin?
Green
# Why it is not possible for a payee to verify double-spends of the coin?

(Asked by: username_0 on 2015-08-22)

I'm reading Bitcoin paper of Satoshi Nakamoto (<https://bitcoin.org/bitcoin.pdf>).

It says:

> Each owner transfers the coin to the next by digitally signing ***a hash
> of the previous transaction*** and the public key of the next owner and
> adding these to the end of the coin. A payee can verify the signatures
> to verify the chain of ownership.

And the very next sentence is:

> The problem of course is the payee can't verify that one of the owners
> did not double-spend the coin.

That is, as I understand, after every transaction a new transaction hash is generated. So, first, it is not possible to double-spend a coin because it already has a new *previous transaction hash*. Second, why it says *payee can't verify* a double-spend if every transaction a coin has a new *previous transaction* hash?

**Tags:** bitcoind, doublespend

> **Comments:**
> **username_1**: A "double spend" refers to two transactions with the same previous transaction hash.  Given two such, how can you tell which is the "right" one, just by looking at them?  And given one, how can you know whether or not there is a second one that may someday show up?  
> **username_2**: @username_1 This should be an answer :)  
> **username_3**: You see a transaction. It may or may not be a double spend. How do you tell? How do you prove that there does not exist another transaction that conflicts with this one that other people might think is valid instead of this one?  

---

## 1 answers

### Answer by username_4 on 2015-08-22. Score: 3

As a participant in the peer to peer network, it is impossible for you to know that the state and timing you are seeing are consistent with what other people are seeing. You can't ask other participants in the network what they are seeing directly as they can lie, withhold information, or the request can be tampered with on its way across the network. The block chain and proof of work mining system are designed to ensure that in all probability, nodes in the network have consistent ordering and atomicity. Absent this, it would be very feasible for nodes to see a different state and make different decisions about validity.


---

