7

Suppose I had an ultra large ASIC from the future, and could perform a double spend on the core Bitcoin network. At this point in Bitcoin's development, it is no longer a game - there's real money involved.

Would performing a successful double spend be considered illegal (e.g. in the U.S / Europe)?

  • The double-spend itself probably not. But someone would have delivered some goods to you without being payed, so I guess they could go after you because of that. Just like a cheque that bounced. Those are not illegal, either, right? – Thilo Jul 30 '12 at 4:19
  • A double spend is the act of "spending" Bitcoins twice. E.g. to purchase coins on an alt chain, or a car from wikispeed. To just do a "51% attack" without double spending is a different manner, and open to more interpretation. – ripper234 Jul 30 '12 at 6:03
  • Bouncing a check may well be illegal, depending on your jurisdiction – Zachary K Jul 31 '12 at 12:29
  • @ZacharyK - Bitcoin isn't legally money. Or maybe it is, I don't know anymore. – ripper234 Jul 31 '12 at 14:01
  • Good point, but there is still an implied contract A for B. In truth I have no idea, and I expect it would depend a lot on the laws of where ever it came up and a million other factors. – Zachary K Jul 31 '12 at 16:48
3

The only way I could see a double spend attack being illegal in any part of the world would be if there was some kind of law that automatically recognises international alternative currencies in the first place.

I'm no lawyer, but I've never heard any mention of such a law existing.

Proprietary systems that create currency, points or tokens often have some kind of contract or T&C's that promise to give you something in return for the units and they also have conditions that you must meet to use them. Bitcoin however has no such contract for users to agree to, and no central authority to form an agreement with.

Further to that, even if a law in one particular country somehow made a double spend attack illegal, the international nature of Bitcoin means the attack could be performed from elsewhere.

Note that it may not be in your best interest to perform a double spend attack either. A successful, sizeable double spend would likely draw widespread attention and could shake the confidence in Bitcoin, maybe causing the price to plummet. Quietly mining 51% of the coins over a long period would likely earn you more profit.

  • 3
    Of course, drawing widespread attention and shaking the confidence in Bitcoin could be the purpose of doing this attack. – Thilo Jul 30 '12 at 6:15
  • 2
    The law doesn't specify each tactic in committing fraud, it specifies what fraud is and lets a judge (and / or jury) determine if that tactic was fraudulent. Intentional double spending with the intent to defraud would be illegal in most parts of the world. – Stephen Gornick Sep 15 '12 at 5:58
  • FYI, interchange of goods is legislated in most countries. Trading a good for another good is the same as trading a good for bitcoin when digital goods are taken into account. They may not be physical but it can be shown that they are not transferred. This is just so with buying and selling digital goods (see gaming items) being similar to buying and selling bitcoins. – Steven Roose Apr 25 '13 at 1:43
8

A double-spend would be blackletter law illegal, guys. Fraud and theft include a wide variety of intentional deception wrongfully depriving someone of property - use of a government-minted currency is not, and never was, a required element. Look at any larceny or fraud statute - it will refer to loss of or damage to person and property not "dollars."

Schwarz - when you double-spend, you are representing to the seller as an existing fact that you are passing a valid bitcoin, which is a misrepresentation. Your representations as to fact are readily, and usually, implied from conduct in fraud and "larceny by trick." You don't have to literally state them in words. this goes for more than bitcoin. If you were considering stealing puppies to return them for a reward, it's a legal problem for the same reason. But do I really have to tell you this?

Of course, these are just general legal notes, and not legal advice. Before you consider undertaking any questionable business activity, consult an attorney.

3

It's probably not criminal in many jurisdictions. It should be fraud, but it's not quite in most jurisdictions. For example, in the United States, the elements of fraud are:

a representation of an existing fact;
its materiality;
its falsity;
the speaker's knowledge of its falsity;
the speaker's intent that it shall be acted upon by the plaintiff;
plaintiff's ignorance of its falsity;
plaintiff's reliance on the truth of the representation;
plaintiff's right to rely upon it; and
consequent damages suffered by plaintiff.

All of these are clearly met by the typical double spend except the first one. There really is no "existing fact" that is misrepresented.

However, you can certainly be sued for unjust enrichment and breach of the implied covenant of good faith and fair dealing implicit in any agreement.

  • The federal wire fraud statute would apply (assuming you weren't in the same state as the guy you were ripping off) and it's much less restrictive than the law you're quoting. – Nick ODell Jun 10 '15 at 1:45
3

Let's ignore the crypto-currency part of Bitcoin, the 51% attack you're talking about is a form of computer hacking, and there are laws to protect against this.

My opinion is that any law that applies to "hacker 'penetration testing'" applies to hacking bitcoin in addition to whatever else the law can throw against such an attacker.

Don't do it! Don't do it! If you are in the US, the law is very broad. You don't want to even tiptoe up to the line.

The relevant law is the Computer Fraud and Abuse Act (18 U.S.C. 1030). In a nutshell (and simplifying slightly), under the CFAA, it is a federal crime to "intentionally access a computer without authorization or exceed authorized access". This language is very broad, and I imagine an ambitious prosecutor could try to use it to go after everything on your list except #1 (view source).

Orin Kerr, one of the leading legal scholars in this area, calls the statue "vague" and "extraordinarily broad", and has said that "no one actually knows what it prohibits".

And, as @Robert David Graham explains, there have been cases where folks were prosecuted, threatened with prosecution, or sued for doing as little as typing a single-quote into a textbox, adding a ../ to a URL, or signing up to Facebook under a pseudonym. It's pretty wild that this alone constitutes a federal offense, even if there is no malicious intent. But that's the legal environment we live in.

I'd say, don't take chances. Get written authorization from the company whose websites you want to test.

source

Although that above link applies to a specific company, I'm sure the distributed nature of Bitcoin could land a hacker in hot water in several countries, not to mention the attacker will also be wanted by the entire community of Bitcoin users (both good people and unsavory users).

If you want to test, be open and transparent about your actions (tell people on the forums) and only do your tests on the test network. (yes there is a dedicated bitcoin network for testing that makes it pretty easy to apply a 51% attack on)

1

Mining isn't necessarily any different between when done with 2% of mining power than with 52% -- you are simply performing hashes and solving blocks.

Now when you have more than 50%, the options available to you change. You have the ability to do a transaction, to let that transaction get a confirmation maybe even, and then to release blocks that make it as if that original transaction never happened and to spend the coins a second time to secure the funds.

You really can't double spend accidentally. So that would be an action performed with the intent to defraud. Nearly everywhere fraud is illegal.

Now whether a Bitcoin double spend would be something that a jury would convict on, who knows.

1

Double spending would be fraud.

  • I'm not sure it's actually breaking any specific law (see other answers here). – ripper234 Aug 7 '12 at 4:59
1

One thing to consider is that the purpose of the 51% attack may not to be to double spend the same bitcoins. The purpose could be to disrupt the network and profit from a short. This kind of attack would also need to be considered.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.