http://invest3dhpatvh2etjmx75kkkqrwut2u4e6rgncxg2ng2irmiztjc4id.onion/miningpoolhub-monero/index21.html
Effectively, one can alter a transaction ID to a new one, and the new ID can still be valid.This can create many issues as illustrated below: Alice sends Bob 1 BTC, and Bob sends Merchant Carol this 1 BTC for some goods. Bob sends Carols this 1 BTC, while the transaction from Alice to Bob is not yet validated.