Legitimate Bitcoin transactions are validated by miners and permanently recorded on the blockchain. "Flash" tools generally operate through one of the following technical exploits: