3 ms·

Thanks for your wonderful suggestion! Honestly speaking, I haven't considered this because at first, it's hard to find anyone willing and able to deposit $10,0

Thanks for your wonderful suggestion! Honestly speaking, I haven't considered this because at first, it's hard to find anyone willing and able to deposit $10,000 (Mt. Gox limits withdrawals, including redeemable codes. Can be lifted though.) Even if that happens in reality, I have already designed some counter-measures: - The system will automatically break large orders down to 50 BTC increments in a chain. Execution of new orders in the chain will require validation of status of previous rebalance process. - Limit orders won't be executed further, because the price must increase. - Market orders will be executed at higher and higher prices, and due to low liquidity, the spread will be larger too. - The user will run out of margin very soon. Since I mention that Bitcoinica guarantees liquidity, measures like this must be implemented. Hopefully they are useful to counter malicious trading attempts too. I'll think about this in detail though. Will further refine my algorithms before the launch of Trading API (which is very dangerous if the algorithms are problematic). Edit: line breaks

JoachimSchipper 15y ago
Well, wonderful suggestion - I'm trying to break your scheme for my own amusement. ;-) Note that the attack works fine if the system allows me to keep buying BTC at, say, Mt Gox' price plus 10%. (For values of "works fine" which handwave a lot of practical issues, like paying you untraceably and making sure that I don't get undercut at Mt Gox too often.) Maybe you should switch to 1:1 leverage for all accounts once the total balance goes over $1000 until you've had some time to think this kind of thing through? EDIT: you also want a security@ account and a PGP key. I'm also happy to remove this discussion if you'd prefer that; I arguably shouldn't have posted the first post publicly.
- zhoutong 15y ago
  Thanks for that! Really. I will consider this and focus on my algorithm design further. I don't mind if you leave the discussion here. Hiding a problem is never the solution. :-)
- nitrogen 15y ago
  Thanks for posting publicly. It helps third parties to consider attacks to their own software that may not have occurred to them.

JoachimSchipper 15y ago

Well, wonderful suggestion - I'm trying to break your scheme for my own amusement. ;-) Note that the attack works fine if the system allows me to keep buying BTC at, say, Mt Gox' price plus 10%. (For values of "works fine" which handwave a lot of practical issues, like paying you untraceably and making sure that I don't get undercut at Mt Gox too often.) Maybe you should switch to 1:1 leverage for all accounts once the total balance goes over $1000 until you've had some time to think this kind of thing through? EDIT: you also want a security@ account and a PGP key. I'm also happy to remove this discussion if you'd prefer that; I arguably shouldn't have posted the first post publicly.

zhoutong 15y ago
Thanks for that! Really. I will consider this and focus on my algorithm design further. I don't mind if you leave the discussion here. Hiding a problem is never the solution. :-)
nitrogen 15y ago
Thanks for posting publicly. It helps third parties to consider attacks to their own software that may not have occurred to them.