i go out from cryptorush with -12% BTC
change BTC in DOGE and sold BTC on Bter!
i never come back! bye bye cryptorush!
Topic: [ANN] Crypto Rush - Crypto to Crypto exchange - page 59. (Read 141822 times)
I wrote every piece of the website from scratch. Just thought I'd clear this up, making claims that I copied my code is pretty offensive to a developer. Either way I'm no longer in a position to edit the code as I've already handed over my ownership to the new owner.
So of all 30+ pages of crap this is what you have chosen to address? Not the withdrawal or login issues, but something you personally are offended by (and why would that be offensive if it's open source?). So can we assume it's your code that's responsible for the "hack" or whatever the current excuse is now?
"The site is currently in maintenance mode, please try again later and check Twitter for updates."
Had 1 btc on cryptorush, got out from it via doges as well. Lost 15% of btc.
Sorry, i like your exchange, and i wish you best luck to restore, but i lost too many money on hacked/scamed exchanges last mounth to stay.
Had 1 btc on cryptorush, got out from it via doges as well. Lost 15% of btc.
Sorry, i like your exchange, and i wish you best luck to restore, but i lost too many money on hacked/scamed exchanges last mounth to stay.
Had to take a little bit of a hit due to the exchange rate, but I got out via Doge a few minutes ago.
OMG. Nightmare finally over.
My portfolio took a 20% hit, but at least I can wake up now from the dream of horror.
https://dogechain.info/address/DNbjqjFye2vgwkJcC5gDk1E3en5pE43QVn
And another tweet on their tweeter account:
Cryptorush's three-step focus: 1. Stability & Security 2. Compensation 3. Rebuilding Reserves - We've purchased new powerful servers today.
https://twitter.com/TheCryptoRush/statuses/449226568175349760
Cryptorush's three-step focus: 1. Stability & Security 2. Compensation 3. Rebuilding Reserves - We've purchased new powerful servers today.
https://twitter.com/TheCryptoRush/statuses/449226568175349760
Crypto Rush @TheCryptoRush
Our servers are presently under DDoS attack which will cause delays in site performance. We are working on new servers to prevent this now.
https://twitter.com/TheCryptoRush/statuses/449224260267945984
Our servers are presently under DDoS attack which will cause delays in site performance. We are working on new servers to prevent this now.
https://twitter.com/TheCryptoRush/statuses/449224260267945984
I don't know if I'm bugging but I'm trying to get out of that exchange through buying altcoins and I noticed something weird.
When one wants to buy an altcoin (let's say DOGE) with BTC and clicks on the BTC balance to buy an Altcoin with the remaining total of BTC, the formula they have automatically sets this total but minus 0.01 in the "amount to buy". If you're not careful then you click on submit and if the transaction goes through, you're left with a ridiculous amount of BTC which is not withdrawable. It might be a bug, but it may also be something shady... Beware.
When one wants to buy an altcoin (let's say DOGE) with BTC and clicks on the BTC balance to buy an Altcoin with the remaining total of BTC, the formula they have automatically sets this total but minus 0.01 in the "amount to buy". If you're not careful then you click on submit and if the transaction goes through, you're left with a ridiculous amount of BTC which is not withdrawable. It might be a bug, but it may also be something shady... Beware.
dear cryptorush "devs". you copied your website from my openex beta source code. you should take the website down immediately.
at the very least, you need to do the following:
find on login php where the $loggedInUser Object is created for the loggedinuser class. prior to setting the session add this line.
as a quick fix you can cut/paste this into config.php of the models directory, however for performance and the sake of doing it the "right way", these values should be set in php.ini
the real way to prevent session fixation and hijacking in php
for your sake, i hope you switched to bcrypt or mcrypt for password hashing as well.
I'm not trying to be rude, but the code is full of race conditions and lacks any protection against sql injection. it also doesn't use transactions. you will have a constant nightmare as long as you use that source code. for the sake of your users, take the site down, pay someone to fix it or wait until i've finished with the new openex source code before someone loses big money and sues your ass.
also, your source code is likely vulnerable to malleated transactions unless you added a secondary table to check against changes in tx hash for the same amount/account timestamp. this is an issue that was brought to my attention earlier today. there is much more. if you would like to talk you know where to find me.
at the very least, you need to do the following:
find on login php where the $loggedInUser Object is created for the loggedinuser class. prior to setting the session add this line.
Code:
session_regenerate_id(true);
as a quick fix you can cut/paste this into config.php of the models directory, however for performance and the sake of doing it the "right way", these values should be set in php.ini
the real way to prevent session fixation and hijacking in php
Code:
ini_set('session.cookie_httponly', 1);//prevent hijacking
ini_set('session.entropy_file', '/dev/urandom');//choose a source to pull entropy from
ini_set('session.entropy_length', 16);//integer amount in bytes to read from dev/random
ini_set('session.hash_function', 'sha256');//prevents fixation as bruteforcing is pointless at this point.
ini_set('session.entropy_file', '/dev/urandom');//choose a source to pull entropy from
ini_set('session.entropy_length', 16);//integer amount in bytes to read from dev/random
ini_set('session.hash_function', 'sha256');//prevents fixation as bruteforcing is pointless at this point.
for your sake, i hope you switched to bcrypt or mcrypt for password hashing as well.
I'm not trying to be rude, but the code is full of race conditions and lacks any protection against sql injection. it also doesn't use transactions. you will have a constant nightmare as long as you use that source code. for the sake of your users, take the site down, pay someone to fix it or wait until i've finished with the new openex source code before someone loses big money and sues your ass.
also, your source code is likely vulnerable to malleated transactions unless you added a secondary table to check against changes in tx hash for the same amount/account timestamp. this is an issue that was brought to my attention earlier today. there is much more. if you would like to talk you know where to find me.
I wrote every piece of the website from scratch. Just thought I'd clear this up, making claims that I copied my code is pretty offensive to a developer. Either way I'm no longer in a position to edit the code as I've already handed over my ownership to the new owner.
Cryptorush
is working, but only owner can withraw bitcoin and litecoin imho...
Scam continue,
owner withraw bitcoin, buy cheap alt coins on another exchange. Then deposit to cryptorush and sale for overpriced prices. And again, again, again...
Site work, didnt work, work, didnt work = panic and people buy,buy,buy anything altcoin..and withdraw out
:/
My hypothesis
is working, but only owner can withraw bitcoin and litecoin imho...
Scam continue,
owner withraw bitcoin, buy cheap alt coins on another exchange. Then deposit to cryptorush and sale for overpriced prices. And again, again, again...
Site work, didnt work, work, didnt work = panic and people buy,buy,buy anything altcoin..and withdraw out
:/
My hypothesis
BAT withdrawals not working for me 
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
I bought some bats for 2sat today but sent to my wallet 2h ago.
Was it big amount of BATs?
I'll not sell my BATs unless they hit 25 satoshis anyway
Had to take a little bit of a hit due to the exchange rate, but I got out via Doge a few minutes ago.
BAT withdrawals not working for me
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
I bought some bats for 2sat today but sent to my wallet 2h ago.
Was it big amount of BATs?
Guess it was their turn to get "hacked" huh?
Based on the exchange's silence, I'm changing my opinion. We've all been goxed.
BAT withdrawals not working for me
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
I've been Goxed once (some 14 BTCs lost over there), it seems I cannot learn my lesson...
Are Doge withdrawals still working?
withdraw DOGE is ok men.
Are Doge withdrawals still working?
Is anyone able to withdraw alts, or just can't withdraw BTC?
Leaf is still working...but you have to know a place to get rid of it for 3 Sat or you have to calculate your loss.....
or you change your ltc to btc at cryptorush for 0.035... then byu leaf and sell them for minimum 85 Litoshi so your loss is not so huge
mine was 1% all this, because LTC withdrawel doesnt worked for me....
Is anyone able to withdraw alts, or just can't withdraw BTC?
Leaf is still working...but you have to know a place to get rid of it for 3 Sat or you have to calculate your loss.....
or you change your ltc to btc at cryptorush for 0.035... then byu leaf and sell them for minimum 85 Litoshi so your loss is not so huge
mine was 1% all this, because LTC withdrawel doesnt worked for me....
I am trying but site not working for me is this working for others any update
Jump to: