Topic: [ANN] iBITS - Internet Currency - Blockchain Registry & Attestation - page 18. (Read 42363 times)

if I have this coin in large quantities may be different story. I would be rich sir 

1 dollar each, its very cheap now.

teck ok
the price is very low

but after exploit there is no trust

I also do not know how many coins there are and if this coin is really safe

Ohh yeah and why ?!

Not gonna stay this low very long. These coins are valued at 1$ per coin. This coin has some of the best tech of any altcoin released this year.

bittrex on line

low prices   

Good to hear dev. Timely fixes are in fact needed in a good coin.

The issue can be considered completely fixed. We have asked independent code reviewers to go over the code to ensure that other exploits do not exist. This is in addition to the standard code review that Bittrex conduct. Obviously, in time, other exploits may be discovered but as always, we will make sure that we patch things if they happen.

However, we are confident that this latest patch does bring our security up to the level of any other leading currencies and in addition to this, we have also decided to bring a security expert to the team who will assess potential security flaws and attack vectors as we issue further updates. It is still a learning process for us, but we are committed to maintaining integrity to the system.

Apologies, obviously we can't force Bittrex to speed up the process. What we have done is issued our fix, and communicated this to them in the fastest time possible.
The rest is down to Bittrex to update and reopen the market.

Will this completely fix this issue? Are there any other possible exploits that may be hidden?

My god, this is so long !!!

thx for quick response.

I appreciate your concern, but I assure you, that Bittrex will update and open up the market live as soon as possible. This will likely be later on tonight.

It was posted more than 6 hours ago. when to trade start or not ?
dou you have any news from bittrex ?

You guys are great, I knew you would restore confidence in the market! To the moon!

Greetings All

As you all know, we were hit with an exploit yesterday which allowed a malicious attacker to create a stake reward of 15 Million Coins.

Thankfully, Bittrex have systems in place to check for such anomalies and the market was closed whilst we work out the bug and fix the issue.

We have now corrected this issue which we believe was left in the code from the code base we started with.

To be on the correct chain, you must download the new client version 1.0.0.2 which can be found https://www.dropbox.com/s/pk8pg4n3bap33xz/windows-ibits-qt-1.0.0.2.zip?dl=0

You must delete everything in the app data folder apart from wallet.dat, and then start the new client and allow it to sync up.

Once sync'd you will be on the good chain.

Linux QT update is  coming shortly.

For those running the coin daemon, the Github has been updated to reflect the update and the same process is required. (keep wallet.dat, delete everything else, recompile then run)

Again, on behalf of the ibits team, we apologize for the turbulent start, and we hope our next update will not be a fix but rather a progressive update.

Trading should go live shortly when bittrex update their client.

Any questions do feel free to ask.

Thanks

Best advice ever! Checkout Guldencoin this is a little hidden gem!

Here is result of checking previous version of ibits from https://github.com/ibitsteam/ibits-src, after commit b87a8a0d0a674804bc6f8630b159578d15b6ecec

CTransaction::FetchInputs          Good      arch           
ProcessMessage                     Good      arch                 
CMerkleTx::GetBlocksToMaturity     Good      arch                 
AcceptToMemoryPool                 Good      arch                 
SendMessages                       Good      arch                 
CheckProofOfWork                   Good      arch                 
GetNextTargetRequired              Dangerous arch           Manually checked:        Good
CBlock::AcceptBlock                Good      arch                 
CBlock::SignBlock                  Good      arch                 
GetTransaction                     Good      blackcoin arch       
ComputeMinStake                    Good      arch                 
CTransaction::DisconnectInputs     Good      blackcoin arch       
ProcessBlock                       Good      arch                 
CBlockIndex::IsSuperMajority       Good      dash blackcoin arch 
CTransaction::GetValueIn           Good      blackcoin arch       
ComputeMinWork                     Good      arch                 
GetProofOfStakeLimit               Dangerous arch                            Manually checked:        Good
CTransaction::CheckTransaction     Good      blackcoin arch       
CWalletTx::AcceptWalletTransaction Good      blackcoin arch       
CTransaction::ConnectInputs        Good      arch                 
CBlock::CheckBlock                 Good      arch                 
CMerkleTx::AcceptToMemoryPool      Good      arch                 
CBlock::SetBestChainInner          Good      blackcoin arch       
CBlockIndex::GetBlockTrust         Good      blackcoin arch       
ProcessMessages                    Good      arch                 
CBlock::CheckBlockSignature        Good      arch                 
CTxOut CTransaction::GetOutputFor  Good      blackcoin arch       
CBlock::ConnectBlock               Most similar shrmcoin, diff=11, codehash=6c3fe8871559a9ed2e02 Manually checked:        Bad  Repaired in new wallet

---

What is this? And how to read this info?
As you know most of the coins have very similar code bases. But any little bug could damage the whole blockchain. To avoid this people check the code both manually and automatically.  As I know ocminer automatically check code for already known bugs, so his checks couldn't find new bug. Earlz check code manually, but he also could miss something, because codebase is very huge. I chose different way. I wrote the script which compare code in one coin with code in other already inspected coins. So if you see something like "Good blackcoin arch " it means that i already inspected this code before in blackcoin's and arch's source, and I think that its safe. When my script finds new code it asks me to check it manually and tells me whih codebases is most similar, so 'CBlock::ConnectBlock                Most similar blackcoin, diff=5, codehash=1a0a6fb0d9bc6aefff4e'  means that most similar code of CBlock::ConnectBlock have seen in blackcoin and there is 5 places where something was changed.
Currently i check only most important functions in main.cpp.

---

I checked also diggits code and it has entirely the same codebase and the same bug. Moreover, by my opinion this bug was embedded into code intentionally, because there is no reason to remove line with calculation nStakeReward for check unintentionally.

Explorer wallet updated to 1.0.0.2, and the explorer is resynchronizing.
For reference here is a screenshot of this page http://i.imgur.com/ssw0vu8.png as it was before the update/resynch.

There is coin revier xadsa . I asked her in pm to review this one.