Doginal Dogs Marketplace Incident Archive

Context and open questions

Open questions

These are factual questions that public sources do not answer. They are addressed to the operators of the Doginal Dogs Marketplace and, where noted, to others. They are not accusations, and they do not assume any particular answer. If a public, verifiable source answers one of them, the page is updated and the change is logged (corrections policy).

  1. Timing. When did the operators first learn that listing signatures made with 0x82 do not commit to any output? Was this before or after Oct 26 2026 at 10:56 UTC?
  2. Design choice. Why does the signing code use SIGHASH_NONE|ANYONECANPAY (0x82) while the comment in the same file describes SIGHASH_SINGLE|ANYONECANPAY (0x83)? Has the difference been reviewed?
  3. Access to signed listings. How are signed listing templates stored and served, and who could retrieve them before Oct 26?
  4. Maintenance notice. On what date were the maintenance banner and the “Trading temporarily paused” notice enabled, and what do “AI-driven exploits” and “upgraded protections” refer to?
  5. Statement. Is an official account of the Oct 26 transactions planned? As of Oct 28 2026 we did not find one (status log).
  6. Compensation. Will affected holders be compensated or restored, and on what basis? If so, how and when would affected holders be contacted?
  7. Terms. The Terms page includes an “as is” clause and a limitation of liability that mentions “loss of funds”. How do the operators view the application of those terms to these events?
  8. The 63. In our analysis, 63 inscriptions went to miner coinbase outputs in blocks 6431226 and 6431231. Who holds them now? Is there a plan to ask the holders to return them? (This question is also for the miners or pool operators concerned.)
  9. The recipient. Has anyone contacted the holder of the recipient address, and has that holder responded or returned anything? We do not know who that holder is.
  10. Remaining listings. Are other active listings signed with 0x82 still exposed? What has been done to cancel or invalidate them?
  11. Independent audit. Will the operators commission an independent security review of the listing and signing flow and publish its findings?
  12. Verification. Can the operators confirm or correct the figures on this site (264 inputs, 201 delivered, 63 to miners, six transaction IDs)?