Author

Topic: [03-24-2015] Bitcoin Exchange Cryptoine Hacked Due To Trading Engine Bug (Read 890 times)

hero member
Activity: 588
Merit: 501
Their website says they have decided to close.

https://cryptoine.com/

2015-03-26 08:36 UTC

We apologize everyone, and thank you all for your understanding.

Attacker acted in hours from 3:15 to 10:00 UTC.

Cryptoine database is reversed to 2015-03-24 03:08 UTC and frozen.

In response to many questions...

There was no break-in to the system
There was no leak of data
Wallet private keys are safe and not compromised
The attacker was not able to execute any external code
The bug has been located and fixed. However, the losses are irreversible. We plan to complete the activity of exchange.

We will enable withdrawals in April 2015.

It's sad to say goodbye to all crypto-community. We need to take a few months break. But we will back stronger and more experienced than ever before.
  



I'm a bit lost, did any customers lose money?   If so how is it being handled?


[edit]

ohhhh, I got it, no customer's lost money but someone got "in" and 'acted' like there were funds where there were no funds.

glad there was no real funds lost.


[double edit]

We will enable withdrawals in April 2015.

It's sad to say goodbye to all crypto-community. We need to take a few months break. But we will back stronger and more experienced than ever before.

2015-03-24 19:45 UTC

Our hot wallets was drained, coins: bitcoin, litecoin, urocoin, dogecoin, bitcoinscrypt, magi, darkcoin, dogecoindark, cannabis

All coins that we have, will be returned to users. Coins stolen - in correspondingly smaller quantities.

We had wallets in the ratio 60%/40% (hot/cold).

withdrawals made by hacker:

address                                 amount          coin          ip                date
LN6Y9Etr5B1p6A7DdkUGUef9U4tV1NajYa    500             litecoin      46.98.75.23    2015-03-24 09:00:22.886758
LN6Y9Etr5B1p6A7DdkUGUef9U4tV1NajYa    24.99746504     litecoin      46.98.75.23    2015-03-24 08:28:21.178608
1HF3WND3pG9VEW6Kt7Qj33LoCqVbFpHp2n    0.1             bitcoin       46.98.75.23    2015-03-24 08:20:04.507378
LN6Y9Etr5B1p6A7DdkUGUef9U4tV1NajYa    7.94331864      litecoin      46.98.75.23    2015-03-24 08:06:02.539477
Um2fYEPJ9uVnC31bxaFWBD7PmrzhgUNE2D    16.89396348     urocoin       46.98.75.23    2015-03-24 08:04:50.16697
DHXBCX6qsayWYdTw9DygE5pmBfaQG9TxUk    36661.31739499  dogecoin      46.98.78.245    2015-03-24 07:16:00.387179
1NuEdUhdwVsuFg2noqpNjcpBamEJMYXHUv    2999.99943972   bitcoinscrypt 46.98.78.245    2015-03-24 07:02:02.404771
DHXBCX6qsayWYdTw9DygE5pmBfaQG9TxUk    32265.60946069  dogecoin      46.98.78.245    2015-03-24 05:40:55.727633
99grxHJ2cMAZpbtqbNaTbcpnNjxQ2XoGs8    14996.31229316  magi          46.98.78.245    2015-03-24 05:33:57.490186
Xe6duo43m3xWb2Hw3CFVo3EJJ56m29L5kg    15.44527325     darkcoin      46.98.78.245    2015-03-24 05:25:27.019065
D5AuHhndAvFARTJ9MJ8qJkJgC1iHGNVy42    219999.99997229 dogecoindark  46.98.78.245    2015-03-24 05:24:15.654911
CbtR69smzynN1MfTZXmWje9Ay8VgeWgfxz    2156.27062232   cannabis      46.98.78.245    2015-03-24 05:21:52.423902
1NuEdUhdwVsuFg2noqpNjcpBamEJMYXHUv    8459.64676958   bitcoinscrypt 46.98.78.245    2015-03-24 05:19:37.350262
DHXBCX6qsayWYdTw9DygE5pmBfaQG9TxUk    265334.39030659 dogecoin      46.98.78.245    2015-03-24 05:10:24.015617
LN6Y9Etr5B1p6A7DdkUGUef9U4tV1NajYa    2.16209537      litecoin      46.98.33.104    2015-03-24 04:34:30.514059
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    0.5             bitcoin       46.98.33.104    2015-03-24 04:31:50.770491
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    0.5             bitcoin       46.98.33.104    2015-03-24 04:28:40.170138
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    1               bitcoin       46.98.33.104    2015-03-24 04:27:57.658323
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    1               bitcoin       46.98.33.104    2015-03-24 04:23:13.164357
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    1               bitcoin       46.98.33.104    2015-03-24 04:21:27.592489
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    1               bitcoin       46.98.33.104    2015-03-24 04:18:45.405848
1Dwoam5EXn6g1NuAK8moEd5cpDvUFcqvPi    0.5             bitcoin       46.98.33.104    2015-03-24 04:16:58.138757
DGbs2YfkN5n5sALDdZmSRpdPa5mVtW5HQX    6               dogecoin      46.98.33.104    2015-03-24 03:29:29.110043
Registered to e-mail addresses: [email protected], [email protected], [email protected]
legendary
Activity: 2772
Merit: 2846
Their website says they have decided to close.

https://cryptoine.com/

Quote
2015-03-26 08:36 UTC

We apologize everyone, and thank you all for your understanding.

Attacker acted in hours from 3:15 to 10:00 UTC.

Cryptoine database is reversed to 2015-03-24 03:08 UTC and frozen.

In response to many questions...

There was no break-in to the system
There was no leak of data
Wallet private keys are safe and not compromised
The attacker was not able to execute any external code
The bug has been located and fixed. However, the losses are irreversible. We plan to complete the activity of exchange.

We will enable withdrawals in April 2015.

It's sad to say goodbye to all crypto-community. We need to take a few months break. But we will back stronger and more experienced than ever before.
  
hero member
Activity: 588
Merit: 501
http://btcfeed.net/news/bitcoin-exchange-cryptoine-hacked-due-to-trading-engine-bug/

The stressful times for Bitcoin exchanges around the world will not come to an end anytime soon, as we learned earlier today that the Cryptoine platform has been hacked. Not too many details have been made available at this point in time, but we will recap the information we managed to obtain so far.




Wow, it's obvious that Cryptoine was really pro-security, I'm really sorry to hear this took place, I encourage them to seek outside auditors to do security checks to help reveal weaknesses. 

Here's a simple note, slow things down to a relative craw when it come to withdrawing funds. Make sure that all of the debits and credits are in order before releasing funds.

If someone is able to manipulate the books that means the books can be manipulated, there's got to be an absolute check and balance system so that everything makes sense.

Then when you find the hacker, shoot him, or her.
newbie
Activity: 28
Merit: 0
http://btcfeed.net/news/bitcoin-exchange-cryptoine-hacked-due-to-trading-engine-bug/

The stressful times for Bitcoin exchanges around the world will not come to an end anytime soon, as we learned earlier today that the Cryptoine platform has been hacked. Not too many details have been made available at this point in time, but we will recap the information we managed to obtain so far.

Jump to: