Is performing a 51% attack / double spend on Bitcoin illegal?

7

Suppose I had an ultra large ASIC from the future, and could perform a double spend on the core Bitcoin network. At this point in Bitcoin's development, it is no longer a game - there's real money involved.

Would performing a successful double spend be considered illegal (e.g. in the U.S / Europe)?

ripper234

Posted 2012-07-29T23:21:02.093

Reputation: 25 192

Buying something and not paying is fraud, it doesn't matter if you didn't pay with Bitcoin or with a bounced check – Fraud is illegal.Murch 2015-06-09T23:07:31.023

The double-spend itself probably not. But someone would have delivered some goods to you without being payed, so I guess they could go after you because of that. Just like a cheque that bounced. Those are not illegal, either, right?Thilo 2012-07-30T04:19:28.793

A double spend is the act of "spending" Bitcoins twice. E.g. to purchase coins on an alt chain, or a car from wikispeed. To just do a "51% attack" without double spending is a different manner, and open to more interpretation.ripper234 2012-07-30T06:03:04.440

Bouncing a check may well be illegal, depending on your jurisdictionZachary K 2012-07-31T12:29:22.020

@ZacharyK - Bitcoin isn't legally money. Or maybe it is, I don't know anymore.ripper234 2012-07-31T14:01:06.183

Good point, but there is still an implied contract A for B. In truth I have no idea, and I expect it would depend a lot on the laws of where ever it came up and a million other factors.Zachary K 2012-07-31T16:48:05.563

Answers

3

The only way I could see a double spend attack being illegal in any part of the world would be if there was some kind of law that automatically recognises international alternative currencies in the first place.

I'm no lawyer, but I've never heard any mention of such a law existing.

Proprietary systems that create currency, points or tokens often have some kind of contract or T&C's that promise to give you something in return for the units and they also have conditions that you must meet to use them. Bitcoin however has no such contract for users to agree to, and no central authority to form an agreement with.

Further to that, even if a law in one particular country somehow made a double spend attack illegal, the international nature of Bitcoin means the attack could be performed from elsewhere.

Note that it may not be in your best interest to perform a double spend attack either. A successful, sizeable double spend would likely draw widespread attention and could shake the confidence in Bitcoin, maybe causing the price to plummet. Quietly mining 51% of the coins over a long period would likely earn you more profit.

Highly Irregular

Posted 2012-07-29T23:21:02.093

Reputation: 10 514

FYI, interchange of goods is legislated in most countries. Trading a good for another good is the same as trading a good for bitcoin when digital goods are taken into account. They may not be physical but it can be shown that they are not transferred. This is just so with buying and selling digital goods (see gaming items) being similar to buying and selling bitcoins.Steven Roose 2013-04-25T01:43:27.657

3Of course, drawing widespread attention and shaking the confidence in Bitcoin could be the purpose of doing this attack.Thilo 2012-07-30T06:15:54.063

2The law doesn't specify each tactic in committing fraud, it specifies what fraud is and lets a judge (and / or jury) determine if that tactic was fraudulent.

Intentional double spending with the intent to defraud would be illegal in most parts of the world. – Stephen Gornick 2012-09-15T05:58:38.680

8

A double-spend would be blackletter law illegal, guys. Fraud and theft include a wide variety of intentional deception wrongfully depriving someone of property - use of a government-minted currency is not, and never was, a required element. Look at any larceny or fraud statute - it will refer to loss of or damage to person and property not "dollars."

Schwarz - when you double-spend, you are representing to the seller as an existing fact that you are passing a valid bitcoin, which is a misrepresentation. Your representations as to fact are readily, and usually, implied from conduct in fraud and "larceny by trick." You don't have to literally state them in words. this goes for more than bitcoin. If you were considering stealing puppies to return them for a reward, it's a legal problem for the same reason. But do I really have to tell you this?

Of course, these are just general legal notes, and not legal advice. Before you consider undertaking any questionable business activity, consult an attorney.

Chris

Posted 2012-07-29T23:21:02.093

Reputation: 81

3

It's probably not criminal in many jurisdictions. It should be fraud, but it's not quite in most jurisdictions. For example, in the United States, the elements of fraud are:

a representation of an existing fact;
its materiality;
its falsity;
the speaker's knowledge of its falsity;
the speaker's intent that it shall be acted upon by the plaintiff;
plaintiff's ignorance of its falsity;
plaintiff's reliance on the truth of the representation;
plaintiff's right to rely upon it; and
consequent damages suffered by plaintiff.

All of these are clearly met by the typical double spend except the first one. There really is no "existing fact" that is misrepresented.

However, you can certainly be sued for unjust enrichment and breach of the implied covenant of good faith and fair dealing implicit in any agreement.

David Schwartz

Posted 2012-07-29T23:21:02.093

Reputation: 46 931

The federal wire fraud statute would apply (assuming you weren't in the same state as the guy you were ripping off) and it's much less restrictive than the law you're quoting.

Nick ODell 2015-06-10T01:45:20.577

3

Let's ignore the crypto-currency part of Bitcoin, the 51% attack you're talking about is a form of computer hacking, and there are laws to protect against this.

My opinion is that any law that applies to "hacker 'penetration testing'" applies to hacking bitcoin in addition to whatever else the law can throw against such an attacker.

Don't do it! Don't do it! If you are in the US, the law is very broad. You don't want to even tiptoe up to the line.

The relevant law is the Computer Fraud and Abuse Act (18 U.S.C. 1030). In a nutshell (and simplifying slightly), under the CFAA, it is a federal crime to "intentionally access a computer without authorization or exceed authorized access". This language is very broad, and I imagine an ambitious prosecutor could try to use it to go after everything on your list except #1 (view source).

Orin Kerr, one of the leading legal scholars in this area, calls the statue "vague" and "extraordinarily broad", and has said that "no one actually knows what it prohibits".

And, as @Robert David Graham explains, there have been cases where folks were prosecuted, threatened with prosecution, or sued for doing as little as typing a single-quote into a textbox, adding a ../ to a URL, or signing up to Facebook under a pseudonym. It's pretty wild that this alone constitutes a federal offense, even if there is no malicious intent. But that's the legal environment we live in.

I'd say, don't take chances. Get written authorization from the company whose websites you want to test.

source

Although that above link applies to a specific company, I'm sure the distributed nature of Bitcoin could land a hacker in hot water in several countries, not to mention the attacker will also be wanted by the entire community of Bitcoin users (both good people and unsavory users).

If you want to test, be open and transparent about your actions (tell people on the forums) and only do your tests on the test network. (yes there is a dedicated bitcoin network for testing that makes it pretty easy to apply a 51% attack on)

goodguys_activate

Posted 2012-07-29T23:21:02.093

Reputation: 11 898

1

Mining isn't necessarily any different between when done with 2% of mining power than with 52% -- you are simply performing hashes and solving blocks.

Now when you have more than 50%, the options available to you change. You have the ability to do a transaction, to let that transaction get a confirmation maybe even, and then to release blocks that make it as if that original transaction never happened and to spend the coins a second time to secure the funds.

You really can't double spend accidentally. So that would be an action performed with the intent to defraud. Nearly everywhere fraud is illegal.

Now whether a Bitcoin double spend would be something that a jury would convict on, who knows.

Stephen Gornick

Posted 2012-07-29T23:21:02.093

Reputation: 26 118

1

Double spending would be fraud.

Luke-Jr

Posted 2012-07-29T23:21:02.093

Reputation: 1 064

I'm not sure it's actually breaking any specific law (see other answers here).ripper234 2012-08-07T04:59:07.197

1

One thing to consider is that the purpose of the 51% attack may not to be to double spend the same bitcoins. The purpose could be to disrupt the network and profit from a short. This kind of attack would also need to be considered.

user762209

Posted 2012-07-29T23:21:02.093

Reputation: 11