<p>One story I know:</p>
<p>Not long ago user has transferred 900 mBTC to address known as generated from empty string. This amount has been immediately transferred elsewhere.</p>
<p>Seems like someone has lost 900 mBTC because of poor implementation of their software.</p>

CC BY-SA 4.0
2022-11-08T14:56:56.443Z
"address known as generated from empty string" what? Please clarify what happened and on what software. And also please cite your source.
Michael Altfield
CC BY-SA 4.0
2022-11-08T17:30:27.253Z
You can use empty string to hash it to sha256, then base58check it and you have private key derived from empty string and that was used to sent 900 mBTC. That's all I know.
pbies
CC BY-SA 4.0
2022-11-08T17:36:27.600Z
Please delete your answer as it doesn't answer this question. Anyone can design a malicious or poorly-designed bitcoin wallet. This is not a flaw in the bitcoin protocol, so it is not a valid answer to this question.
Michael Altfield
CC BY-SA 4.0
2022-11-08T17:58:28.933Z
@MichaelAltfield it is valid because the BTC was stolen.
pbies
CC BY-SA 4.0
2022-11-08T18:06:36.813Z
did you read the question?? `Has money ever been stolen in bitcoin due to a design flaw in the protocol?` Bitcoin gets stolen all the time, we all know that. The purpose of this question was to identify a historical case where bitcoin was stolen **due to a design flaw in the protocol**. Your questions suggests an uncited case where an implementation of an unknown bitcoin wallet caused lost of funds. That is *not* a case of loss of funds due to a design flaw in the protocol.
Michael Altfield
CC BY-SA 4.0
2022-11-08T19:01:38.997Z
@MichaelAltfield how would you know how this person implemented the protocol?
pbies
CC BY-SA 4.0
2022-11-07T10:15:49.293Z
2022-11-07T10:15:49.293Z
pbies
<p>Is there an example of a single historical case of theft of bitcoin due to a flaw in the design of the bitcoin protocol?</p>
<p>When googling &quot;is bitcoin secure?&quot; it's easy to get confused because you can read endless stories about a <em>lot</em> of people having <em>lots</em> of bitcoins lost or stolen. As far as I can tell, most of these cases occur when the victim:</p>
<ol>
<li>Forgot their private key</li>
<li>Lost control of their private key</li>
<li>Gave their balance to a custodian, and that custodian lost control of their private key(s)</li>
<li>Other user error</li>
</ol>
<p>I'm also aware that, in the history of bitcoin, there have been fundemental flaws, such as the <a href="https://bitcoin.stackexchange.com/questions/38037/what-is-the-1-return-bug?rq=1">1 RETURN</a> bug that would allow anyone to spend anyone else's bitcoin with a maliciously crafted transaction.</p>
<p>My question is: is there a single documented case of theft happening due to such a flaw in the actual design of bitcoin that can't be attributed to user error?</p>

CC BY-SA 4.0
2022-11-04T11:23:34.013Z
To be clear - you are separating protocol flaws from software implementation flaws in any implementation including Bitcoin core? This might be problematic since some people regard Bitcoin core's code as part of the definition of handling network communications and applying rules to those communications. In other words, the Bitcoin protocol is arguably more than the list of messages and message formats.
RedGrittyBrick
CC BY-SA 4.0
2022-11-04T14:45:25.690Z
I'd maybe consider implementation flaws in Bitcoin Core (only) to be a "flaw in the actual design of bitcoin," but not third party wallets.
Michael Altfield
<security><history><theft>
Has money ever been stolen in bitcoin due to a design flaw in the protocol?
Michael Altfield
# Has money ever been stolen in bitcoin due to a design flaw in the protocol?

(Asked by: username_0 on 2022-11-04)

Is there an example of a single historical case of theft of bitcoin due to a flaw in the design of the bitcoin protocol?

When googling "is bitcoin secure?" it's easy to get confused because you can read endless stories about a *lot* of people having *lots* of bitcoins lost or stolen. As far as I can tell, most of these cases occur when the victim:

1. Forgot their private key
2. Lost control of their private key
3. Gave their balance to a custodian, and that custodian lost control of their private key(s)
4. Other user error

I'm also aware that, in the history of bitcoin, there have been fundemental flaws, such as the [1 RETURN](https://bitcoin.stackexchange.com/questions/38037/what-is-the-1-return-bug?rq=1) bug that would allow anyone to spend anyone else's bitcoin with a maliciously crafted transaction.

My question is: is there a single documented case of theft happening due to such a flaw in the actual design of bitcoin that can't be attributed to user error?

**Tags:** security, history, theft

> **Comments:**
> **username_1**: To be clear - you are separating protocol flaws from software implementation flaws in any implementation including Bitcoin core? This might be problematic since some people regard Bitcoin core's code as part of the definition of handling network communications and applying rules to those communications. In other words, the Bitcoin protocol is arguably more than the list of messages and message formats.  
> **username_0**: I'd maybe consider implementation flaws in Bitcoin Core (only) to be a "flaw in the actual design of bitcoin," but not third party wallets.  

---

## 1 answers

### Answer by username_2 on 2022-11-07. Score: -2

One story I know:

Not long ago user has transferred 900 mBTC to address known as generated from empty string. This amount has been immediately transferred elsewhere.

Seems like someone has lost 900 mBTC because of poor implementation of their software.

> **Comments:**
> **username_0**: "address known as generated from empty string" what? Please clarify what happened and on what software. And also please cite your source.  
> **username_2**: You can use empty string to hash it to sha256, then base58check it and you have private key derived from empty string and that was used to sent 900 mBTC. That's all I know.  
> **username_0**: Please delete your answer as it doesn't answer this question. Anyone can design a malicious or poorly-designed bitcoin wallet. This is not a flaw in the bitcoin protocol, so it is not a valid answer to this question.  
> **username_2**: @username_0 it is valid because the BTC was stolen.  
> **username_0**: did you read the question?? `Has money ever been stolen in bitcoin due to a design flaw in the protocol?` Bitcoin gets stolen all the time, we all know that. The purpose of this question was to identify a historical case where bitcoin was stolen **due to a design flaw in the protocol**. Your questions suggests an uncited case where an implementation of an unknown bitcoin wallet caused lost of funds. That is *not* a case of loss of funds due to a design flaw in the protocol.  
> **username_2**: @username_0 how would you know how this person implemented the protocol?  

---

