In step 5 of the procedure described in https://en.bitcoin.it/wiki/Smart_Property#Theory, the buyer creates a partially signed transaction. Will the seller be able to change an output prior to signing and broadcasting - and thus returning the token to an output he may redeem himself?


In one word: no. Changing tx output after signing makes existing signature invalid.

( There are some special cases, like signature hash type SIGHASH_SINGLE or SIGHASH_NONE, but we assume that the buyer uses correct signing SIGHASH_ALL )

  • There's nothing more correct about SIGHASH_ALL than other signature types.
    – Matthieu
    Apr 1 '15 at 18:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.