Open
Description
Standard BIP342 tapscript signatures suffer from a malleability issue: if a taproot address contains two identical script paths, eg:
TapBranch(
TapLeaf(A),
TapBranch(
TapLeaf(B),
TapBranch( TapLeaf(C), TapLeaf(A) )
)
)
Then you can replace the single-entry path (B,CA) with the three-entry path (A), (B), (C) without invalidating any signatures, and decreasing the fee rate of the transaction due to the fee staying the same while the witness data increases.
To remedy this, BIP118 should be changed to commit to the full merkle path being used to reach the leaf unless ANYPREVOUTANYSCRIPT is specified (in which case the tapleaf is not committed to either).
Metadata
Metadata
Assignees
Type
Projects
Status
Call for Interest