Doginal Dogs marketplace exploit, October 26 2026
On October 26 2026 (UTC), six Dogecoin transactions spent 264 Doginal Dogs inscriptions out of wallets that had listed them on the Doginal Dogs Marketplace (market.doginaldogs.com). The six transactions pay out one small amount in total, 0.338582 DOGE, to one address. This archive collects the public, checkable facts, with a primary link for each.
Summary of what is documented
- What happened on-chain. Six transactions, first seen between 10:56:10 and 10:56:48 UTC on Oct 26 2026, confirmed in Dogecoin blocks 6431226 and 6431231. They spend 264 inscription-carrying inputs and each has one output, to the same recipient address. See the timeline and transactions.csv.
- What the inputs have in common. All 264 inputs carry a seller signature of type 0x82 (SIGHASH_NONE|ANYONECANPAY). That type commits to the one input being signed and to no outputs, so it does not fix a price or a payee. See the technical explainer.
- What the code says. Archived and live client code of the marketplace uses 0x82 for seller listing signatures. A comment in the same source file describes SIGHASH_SINGLE|ANYONECANPAY. See evidence and methodology.
- Where the inscriptions went. In our analysis of ordinal sat flow, 201 of the 264 inscriptions reached the recipient address and 63 went to miner coinbase outputs.
- Estimated size. Our estimates range from about USD 0.3 million to about USD 1.5 million depending on the price basis. These are estimates, not realizable proceeds. See scale and value.
- Current state. As of Oct 28 2026 the marketplace site shows a “Trading temporarily paused” notice. We did not find an official statement about the Oct 26 transactions. See the status log.
What this archive does not claim
This archive does not state why the transactions happened, who is behind the recipient address, or whether anyone acted with any intention. The evidence we have is consistent with a design flaw in how listing signatures were constructed. Intent cannot be determined from public data. Read what we cannot know and the open questions.
Where to read next
- Timeline of dated events with links.
- Technical explainer: 0x82 versus 0x83, with a short code excerpt.
- Scale and value: estimate method and the “largest incident” question.
- Evidence and methodology, with SHA-256 hashes and archive links.
- Precedent: how other marketplaces responded to a similar signature problem.
- Other markets: a comparison of seller-signature handling.
- Community reactions, attributed and limited to public posts.
- Status log: dated, append-only checks of the live site.
- Claims and sources, FAQ, corrections and right of reply, about.
Date note: the transactions were first seen at 10:56 UTC on October 26 2026, which is 3:56 AM Pacific time (Vancouver) on Oct 26. Some public posts date the event to Oct 27, probably by when they noticed it. This archive uses the on-chain timestamps.