[2014-02-13] Silk Road 2 Hacked, Unknown amount of Bitcoins Stolen - page 2.

Ripdon007

full member

Activity: 280

Merit: 100

Quote from: Carlton Banks on February 13, 2014, 04:25:15 PM

Transaction malleability (by itself) can't be exploited to steal, that's just the nature of the problem. So silk road 2.0 are either not competent or not being truthful, or both. There's more to this story.

They are absolutely incompetent for keeping all of the funds in "hot storage" knowing fully well of the malleability issue.

hilariousandco

global moderator

Activity: 4046

Merit: 2732

Join the world-leading crypto sportsbook NOW!

I'm sure they're just pulling a gox and using this as an excuse.

Quote from: SirWilliam on February 13, 2014, 04:16:57 PM

Ummm. Good? WTF, are we supposed to feel sorry for criminals having their bitcoins stolen or are we supposed to worry about the bad security of a criminal enterprise? Good, steal them all....

They're only criminals by stupid laws. What about all the cancer and other patients that get their meds from there?

vleroybrown

hero member

Activity: 1223

Merit: 506

This is who we are.

Quote from: Carlton Banks on February 13, 2014, 04:59:18 PM

Quote from: ?? on ??

Quote from: Carlton Banks on February 13, 2014, 04:25:15 PM

Transaction malleability (by itself) can't be exploited to steal, that's just the nature of the problem. So silk road 2.0 are either not competent or not being truthful, or both. There's more to this story.

It is possible. That is why the exchanges have stopped withdrawals. According to the article, "server access was never obtained by the attacker" and malleability was exploited by someone to "to repeatedly withdraw coins from our system until it was completely empty".

Forget "according to the article", how about according to the actual bug in the protocol? You can exploit the bug by tricking humans into re-sending after mutating, but it doesn't steal money on it's own, the protocol isn't tricked. Anyone who believes it can deserves to sell coins at the bottom of a panic.

This is why the whole explanation in this case to me doesn't add up. I could see this happening in the situation Mt Gox is in but a bunch of escrowed funds meant to be applied to sellers accounts after settlement. So was this just a case were admins don't want to be hands on to minimize legal liability so it wasn't even in their control while the sites bank was emptied out?

vleroybrown

hero member

Activity: 1223

Merit: 506

This is who we are.

This is causing me to double check current site policy were my coins are. If SilkRoad 2 was duped then any site will be at risk.

Carlton Banks

legendary

Activity: 3430

Merit: 3083

Quote from: ?? on ??

Quote from: Carlton Banks on February 13, 2014, 04:25:15 PM

Transaction malleability (by itself) can't be exploited to steal, that's just the nature of the problem. So silk road 2.0 are either not competent or not being truthful, or both. There's more to this story.

It is possible. That is why the exchanges have stopped withdrawals. According to the article, "server access was never obtained by the attacker" and malleability was exploited by someone to "to repeatedly withdraw coins from our system until it was completely empty".

Forget "according to the article", how about according to the actual bug in the protocol? You can exploit the bug by tricking humans into re-sending after mutating, but it doesn't steal money on it's own, the protocol isn't tricked. Anyone who believes it can deserves to sell coins at the bottom of a panic.

LiteCoinGuy

legendary

Activity: 1148

Merit: 1014

In Satoshi I Trust

Quote from: OneEyedJack on February 13, 2014, 04:37:39 PM

Here comes the mass exodus...

of course, bye bye. its dead.

OneEyedJack

member

Activity: 112

Merit: 10

Here comes the mass exodus...

Carlton Banks

legendary

Activity: 3430

Merit: 3083

Transaction malleability (by itself) can't be exploited to steal, that's just the nature of the problem. So silk road 2.0 are either not competent or not being truthful, or both. There's more to this story.

SirWilliam

sr. member

Activity: 248

Merit: 250

Ummm. Good? WTF, are we supposed to feel sorry for criminals having their bitcoins stolen or are we supposed to worry about the bad security of a criminal enterprise? Good, steal them all....

BitEscrow

newbie

Activity: 42

Merit: 0

http://www.forbes.com/sites/andygreenberg/2014/02/13/silk-road-2-0-hacked-using-bitcoin-bug-all-its-funds-stolen/

Yeah, it's true. Can't post the link from tor since most won't be able to view it. But this hack really happended.....

Arvicco

hero member

Activity: 574

Merit: 501

Please bear with me

http://www.deepdotweb.com/2014/02/13/silk-road-2-hacked-bitcoins-stolen-unknown-amount/

Topic: [2014-02-13] Silk Road 2 Hacked, Unknown amount of Bitcoins Stolen - page 2. (Read 3823 times)