MASTR · CRYPTO & WEB3
Bitcoin’s early lesson: money rules need independent verification
Keys authorise a spend, nodes decide whether it is valid, and proof of work orders the valid history. None of those jobs should be confused.
章节正文和技术图表为英文，导航支持七种语言。
Can a powerful miner make an invalid payment valid?
Three jobs behind one balance
A wallet balance is a convenient summary of spendable outputs. The private key authorises particular spending conditions; it does not instruct every node to accept any amount the signer chooses. A validating node checks the transaction against the rules and its view of existing outputs. A miner proposes a block ordering transactions and demonstrating work. Keeping these roles separate explains why a large mining share and ownership of somebody else’s coins are different kinds of power.
The ledger is verified state
A node does more than download a list of transfers. It checks that inputs exist and are not already spent, that their spending conditions are satisfied and that outputs do not create unauthorised value. Blocks also have consensus conditions. A block explorer displays a provider’s interpretation of this process. Running a node can reduce dependence on that provider, although the operator still needs appropriate software, connectivity and security. An attractive explorer interface is not another consensus vote.
The history contains software failures
Bitcoin Core’s September 2018 disclosure of CVE-2018-17144 describes both denial-of-service and inflation vulnerabilities and the release of fixes. That disclosure is an important historical source because it shows that a monetary rule written in prose is not enough: implementations have to enforce it correctly. It does not establish that arbitrary coins were successfully created and accepted everywhere. Distinguish the existence of a vulnerability, its exploitation and its observable effects.
Inclusion and finality are not the same
A payment appearing in a recent block means it is included in one accepted history. A competing history can replace recent blocks. Additional confirmations make ordinary reversals more costly under the relevant assumptions, but there is no universal confirmation count suitable for every amount and threat model. An application crediting a deposit before settlement is extending trust. Its policy is separate from the network’s validity rules.
A practical reading habit
When a story says that Bitcoin was hacked, ask which component failed: a wallet, an exchange database, a signing device, a mining pool, a node implementation or consensus itself. A stolen exchange account does not demonstrate a failure of Bitcoin signatures. Conversely, a functioning chain does not repair an exchange’s missing customer assets. Historical accuracy requires naming the layer and the evidence, not merely the asset ticker.
示例解析
Suppose a transaction tries to spend an output twice inside one block. The question is whether the node’s implementation rejects that block, not whether the miner has a famous name or substantial hash power. Validity comes before comparison of competing valid chains.
思考问题
- Name the failed layer.
- Distinguish a vulnerability from observed exploitation.
- Separate a deposit credit from final settlement.