Why it is not possible for a payee to verify double-spends of the coin?

3

I'm reading Bitcoin paper of Satoshi Nakamoto (https://bitcoin.org/bitcoin.pdf).

It says:

Each owner transfers the coin to the next by digitally signing a hash of the previous transaction and the public key of the next owner and adding these to the end of the coin. A payee can verify the signatures to verify the chain of ownership.

And the very next sentence is:

The problem of course is the payee can't verify that one of the owners did not double-spend the coin.

That is, as I understand, after every transaction a new transaction hash is generated. So, first, it is not possible to double-spend a coin because it already has a new previous transaction hash. Second, why it says payee can't verify a double-spend if every transaction a coin has a new previous transaction hash?

Green

Posted 2015-08-22T04:40:55.903

Reputation: 151

4A "double spend" refers to two transactions with the same previous transaction hash. Given two such, how can you tell which is the "right" one, just by looking at them? And given one, how can you know whether or not there is a second one that may someday show up?Nate Eldredge 2015-08-22T04:54:56.050

2@NateEldredge This should be an answer :)Wizard Of Ozzie 2015-08-22T06:45:34.417

You see a transaction. It may or may not be a double spend. How do you tell? How do you prove that there does not exist another transaction that conflicts with this one that other people might think is valid instead of this one?David Schwartz 2015-08-25T08:52:53.607

Answers

3

As a participant in the peer to peer network, it is impossible for you to know that the state and timing you are seeing are consistent with what other people are seeing. You can't ask other participants in the network what they are seeing directly as they can lie, withhold information, or the request can be tampered with on its way across the network. The block chain and proof of work mining system are designed to ensure that in all probability, nodes in the network have consistent ordering and atomicity. Absent this, it would be very feasible for nodes to see a different state and make different decisions about validity.

Anonymous

Posted 2015-08-22T04:40:55.903

Reputation: 10 054