Topic: [ANN][EXCHANGE]Altilly Next Generation Crypto-Asset Exchange - page 3. (Read 1857 times)

---

Update: 26th of December 2020 - 01:25 CET

Dear Altilly users,

Earlier this week. We've noticed suspicious activities on our Altilly servers.
After rebooting and checking the servers, we've noticed the same activity and a new system user being created on our servers.
Meaning that the system was hacked above OS level most likely using recue mode during the reboot.
We were still unsure what was going on and decided to move things over to a new hosting provider.

During the process, we've lost access to our servers at our previous hosting provider, including the database, wallets and codebase of Altilly.
We are investigating what is going on and what has been saved so far.
We are not sure yet if funds are lost.
We are still waiting for final analysis from the current hosting provider.
We will keep you posted.

--

yes this seems to be FUD being posted to dis-credit Altilly. They are a great secure exchange. Bitcoin Token https://www.bitcointoken.pw. is more then happy to be partnered with with and using this exchange.

Hi Oscar,

Thank you for notifying us about your concern.
We do not store passwords in plain text.

Please have a nice day.

- Nayiem

WARNING THIS EXCHANGE HAS A SERIOUS SECURITY CONCERN

I registered to this site and got an email WITH MY PASSWORD INSIDE IN PLAIN TEXT!

This is a SERIOUS security issue, as it shows that

1) This exchange is storing passwords in plain text somewhere on their database. Or best case scenario plain text passwords are passed through their registration system into their email system (probably using a third party such as mailchimp) at least once.
2) They don't realise how terrible the practice of emailing users their passwords is. (If a user email is compromised, the password is compromised)

The standard practice for password storage is to one-way hash passwords and save the hash in the database, then any password attempt will also be hashed - then the hashes are compared and validated for login. That way if the exchange is hacked, only the password hashes are in the database, and hence no actual passwords are compromised because you cannot reverse a one-way password hash back into the original password. This is STANDARD web practices!

Be very careful and request that the developers confirm their password security practices. We do not want another compromised exchange that leaks users' passwords in plain text to the world.

When I contacted the developers on the issue, and a couple more security issues that I noticed (Which I will not discuss here because I'm not trying to help anyone hack them) they basically snobbed me off and didn't listen, the lead developer's final message to me was:



This is after I pointed out three vulnerabilities that I noticed with the exchange within 10 minutes of browsing the site as a user. Who knows how many more there are...


I don't normally complain about clunky / sketchy exchanges, but this is insane. If you plan on using this exchange, please proceed with EXTREME caution. Too many people are being compromised by exchanges with bad security practices these days.

Great, Altilly has mining pools now.

Any idea on how to use the pool?

Qredit is amazing, fantastic currency, exceptional developer, amazing fomunity

Altilly is one of the best exchange I know! Fast, easy, reliable!

I always love trading with Altilly Exchange. Simply and safety exchange.

I've been using altilly for a while now and am very happy with it. Having a competition is a very good way to improve in trading skills. thank you

Let's start the Qredit "Gold" trading competition this will be awesome to the XQR environment 🔥

Can't wait to get stuck in to the xqr competition great exchange admins and looks like a great future ahead.

Altilly’s #BravoCoin trading competition is the bomb , I personally will be trading my face off trying to win the awesome prizes on offer . Thanks Altilly & thank you BravoCoin.
1234 I’m gonna start a bidding war !

🙌

This weeks Telegram game has finished

The winners of "Robot Rise" are:

1. Richi Souto – 129     1500 XQR
2. brosso         - 122     1250 XQR
3. Bolang        –   63     1000 XQR

Congratulations!

---

This weeks Telegram game winners are

1.Black Sonic   –    7777444    1500 XQR   
2.TheGasMan   –    5204856    1250 XQR
3.Mark            –     2068564    1000 XQR