> Anyone can alter the txid - more details needed. The number of altered > txids in practice is not so high in order to make us believe anyone can > do it easily. It is obvious that all current bitcoin transactions are > malleable, but not by anyone and not that easy. At least I like to think so. Don't assume that because it does not (frequently) happen, that it cannot happen. Large amounts of malleated transactions have happened in the past. Especially if you build a system depends on non-malleability for its security, you may at some point have an attacker who has financial gain from malleation. > >From your answer I understand that right now if I create a transaction > (tx1) and broadcast it, you can alter its txid at your will, without any > mining power and/or access to my private keys so I would end up not > recognizing my own transaction and probably my change too (if my systems > rely hardly on txid)? In theory, yes, anyone can alter the txid without invalidating it, without mining power and without access to the sender's private keys. All it requires is seeing a transaction on the network, doing a trivial modification to it, and rebroadcasting it quickly. If the modifies version gets mined, you're out of luck. Having mining power helps of course. After BIP62, you will, as a sender, optionally be able to protect others from malleating. You're always able to re-sign yourself. -- Pieter