5

I've noticed that every few seconds transactions show up on live Tangle trackers with a tag of:

9999STOLEN9IOTAS999F***9YOU

Here a pending one valued at $144k which appeared 3 minutes ago: iotasear.ch result.

Using http://iota.cool I can see that there have been at least 500 of these transactions in the last minute, all of which are as yet unconfirmed. https://thetangle.org shows that there have been over 22,000 transactions with this tag.

This tag isn't a one-off example, either, there are other tags like "PC99STOLEN9IOTAS999F***9YOU, "D999STOLEN9IOTAS999F***9YOU" and "UG99STOLEN9IOTAS999F***9YOU" which I've noticed. I'm sure there are many others.

If I look at the list of richest 100 addresses, the top 5 all feature unconfirmed transactions with this tag - some spanning back to over a month ago.

Example

Some of these transactions are actually marked as confirmed, such as this one valued at $1k:

Example 2


  1. How are they able to generate a transaction from an address like this?
  2. Why are there so many of these?
  3. Should I be worried about this?
1
  • 1
    A tag is not an address. the 9999STOLEN...... is nothing more then a comment in the transaction. Nov 30, 2017 at 12:32

2 Answers 2

6

As others already stated, these transactions are not valid as they do not have the correct signature (some of them even have some text - stating that they don't have the correct signature - tryte-encoded in the signature field).

The reason why creating these transactions is so successful: Currently tangle explorers do not validate transactions well enough (they don't check signatures and they don't check whether the balance from the source address is actually there), thereby causing confusion for the users who use the tangle explorers.

1
  • 1
    Thank you. I hope the Tangle explorer developers can do something about these before IOTA gains too much media coverage, as for me it was a bit of a shock. Nov 30, 2017 at 21:59
9

Anyone can issue a transaction for any amount from any address. Such a transaction won't be confirmed without knowledge of the private key. Your case is about an attempt to pretend that funds have been stolen.

6
  • What about the 779.46Mi transaction mentioned in my question which was confirmed? Nov 30, 2017 at 9:48
  • 1
    That one was real, it's not hard to buy iotas and then send them to an exchange to sell. Exchanges don't care what tag you use for a deposit transaction. Nov 30, 2017 at 9:53
  • $1,000 worth? Why would you want those tagged with "9999STOLEN9IOTAS999F***9YOU"? Nov 30, 2017 at 9:56
  • 2
    Because you own 200 coins of an obsolete blockchain technology and spreading FUD is the only way for your coin to stay on the top. Nov 30, 2017 at 19:08
  • 2
    This question is not related to the main question, please, create a new main question. Nov 30, 2017 at 20:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.