Topic: [ANN][Pool][Profit-Switch][Optional Auto-Exchange per Coin][Vardiff] ~ Hashcows - page 102. (Read 347337 times)
December 24, 2013, 03:16:28 PM
This hack and the fact that the hashcows pool goes down 20 fucking times a day is the final straw, goodbye hashcows!
December 24, 2013, 03:11:19 PM
mine BTCs are gone as well. Such a bad Christmas Eve
December 24, 2013, 03:01:06 PM
I lost almost 0.2 BTC as well... =/. Just logged on to find it all wiped from the account. I really hope we get reimbursement for this...
I would not expect them to reimburse. If you are too lazy or stupid to pick your own coins to mine, well, you know what they say about a fool and his money.
December 24, 2013, 03:00:38 PM
It appears they even stole the confirmed exchanged balance from today, not yet paid out to the users. My confirmed exchange looks REALLY low, and could have sworn it was higher earlier. But since I was off HC since yesterday, I can't know for sure.
Can anyone confirm that?
Can anyone confirm that?
December 24, 2013, 02:58:57 PM
IMPORTANT NEWS: There's been a breach this afternoon with a number of users reporting payout addresses being changed and manual payouts being triggered to the new address. All payouts have been disabled and we are working on determining the scope of the issue. While its unlikely passwords have been compromised (and nothing is stored plain text in the db anyways), its not a bad practice to assume the worst and change passwords anyways. We apologize to all hashcows miners who have been affected by this theft. We are working as best we can to determine scope and close holes, All payouts of any kind are currently disabled until further notice. Terrible time of year to wake up to such news.
December 24, 2013, 02:57:03 PM
SO WE HAVE BEEN HACKED!! 
December 24, 2013, 02:54:38 PM
Make sure you are using your 4-digit pin to change the addresses or it won't change.
December 24, 2013, 02:50:28 PM
Also, I've tried to change my DOGE address but it keeps reverting back to this hacked address: DLb8WE29H9R26EpjT2BjUZuzY4BcEUD76X
December 24, 2013, 02:50:09 PM
I also noticed that my DOGE account address has been changed as well. Its changed to an address I don't recognize, so it could be the attack is more than just the BTC side!!!!
me too. can't get doge out, can't change my doge address, i have no idea if the site is phishing for pins at this point. December 24, 2013, 02:49:32 PM
These perfect idiots are not able to run their website
December 24, 2013, 02:47:41 PM
This sucks!
Ok, so I tried to change my BTC address back to my correct one, and it keeps reverting back to the hacked BTC address instead.
I also noticed that my DOGE account address has been changed as well. Its changed to an address I don't recognize, so it could be the attack is more than just the BTC side!!!!
I'll be back when things are fixed....maybe...
Ok, so I tried to change my BTC address back to my correct one, and it keeps reverting back to the hacked BTC address instead.
I also noticed that my DOGE account address has been changed as well. Its changed to an address I don't recognize, so it could be the attack is more than just the BTC side!!!!
I'll be back when things are fixed....maybe...
December 24, 2013, 02:43:55 PM
FUCK IT!
Same thing here! I changed it back...what the hell??? THEY HAVE A HUGE SECURITY FLAW.
Same thing here! I changed it back...what the hell??? THEY HAVE A HUGE SECURITY FLAW.
December 24, 2013, 02:43:28 PM
I also got hit by 13R87ropkDKzDEuVeQoX64kkcLvPWVdTKH, Lost 0.00120115 BTC that didn't get a chance to withdraw. 
What is even more scary is they got by the 4-digit PIN that is MANDATORY to set.
Clearly there is a big security issue here, Most likely several of the Boxes running Hashcows have been r00ted. Clean back-ups should be restored and the servers wiped and rebuilt.
It would be nice to have compensation.
What is even more scary is they got by the 4-digit PIN that is MANDATORY to set.
Clearly there is a big security issue here, Most likely several of the Boxes running Hashcows have been r00ted. Clean back-ups should be restored and the servers wiped and rebuilt.
It would be nice to have compensation.
Oh yah no doubt they have had a full compromise.
It will be interesting to see if they figure out how, and whether they know how to fix it and whether they disclose how it happened.
We'll learn a lot about hashco.ws's in the next few days...
December 24, 2013, 02:38:46 PM
I also got hit by 13R87ropkDKzDEuVeQoX64kkcLvPWVdTKH, Lost 0.00120115 BTC that didn't get a chance to withdraw.
What is even more scary is they got by the 4-digit PIN that is MANDATORY to set.
Clearly there is a big security issue here, Most likely several of the Boxes running Hashcows have been r00ted. Clean back-ups should be restored and the servers wiped and rebuilt.
It would be nice to have compensation.
What is even more scary is they got by the 4-digit PIN that is MANDATORY to set.
Clearly there is a big security issue here, Most likely several of the Boxes running Hashcows have been r00ted. Clean back-ups should be restored and the servers wiped and rebuilt.
It would be nice to have compensation.
December 24, 2013, 02:30:26 PM
I lost almost 0.2 BTC as well... =/. Just logged on to find it all wiped from the account. I really hope we get reimbursement for this...
December 24, 2013, 02:18:50 PM
WTF, I lost .202 BTC. I just emptied a few days ago but they had to strike right after the doge days.
December 24, 2013, 02:12:04 PM
Yeah, not impressed... Log on to see a manual BTC payout with no fee to the address of 13R87ropkDKzDEuVeQoX64kkcLvPWVdTKH. This pool had better do something to fix this issue.. I had a 16 digit random password generated for this site before it was hacked.. I have regenerated another now and my antivirus and spyware detector come up negative on my side. This was a hole in hashco.ws and I expect to be reinbursed.
December 24, 2013, 02:09:10 PM
Needless to say, I will not mine on the site or any other future pools that might be created by Hashcows team until I am fully reimbursed. If I am, I will gladly come back.
I'm gonna follow you and do the same there.
This was a good chunk of my mining in the last month..
December 24, 2013, 02:08:33 PM
I'm sure the amount that HC has been taking in from fees and their own mining is plenty to cover this 40BTC loss. The RIGHT thing for them to do would be to own up to it and just refund what was taken from each person. As well as fix the security.
That's pretty much the only thing they can do to earn the trust of their miners again.
That's pretty much the only thing they can do to earn the trust of their miners again.
December 24, 2013, 02:06:57 PM
Woke up to find 0.106427 BTC stolen from my Hashcows account. It went to the same address that stole everyone else's. I even had my withdraw limit set to 0.5 BTC, but it was changed to auto at the same time the person changed the address.
I have never had any of the pools or exchanges I frequent ever have my account hacked. Even the lowly two-bit operations. I use a different password and PIN at each site too.
40 BTC seems like a lot for this site to be able to cover in reimbursements due to its own security flaws (which it clearly was since so many were affected). I certainly hope I get paid back, but not holding my breath either. It must be very tempting to simply close down the site and not pay $25,000+ dollars worth of coin to users because of the site's security problems. That's if Hashcows even has enough funds to pay people to begin with.
Needless to say, I will not mine on the site or any other future pools that might be created by Hashcows team until I am fully reimbursed. If I am, I will gladly come back.
I have never had any of the pools or exchanges I frequent ever have my account hacked. Even the lowly two-bit operations. I use a different password and PIN at each site too.
40 BTC seems like a lot for this site to be able to cover in reimbursements due to its own security flaws (which it clearly was since so many were affected). I certainly hope I get paid back, but not holding my breath either. It must be very tempting to simply close down the site and not pay $25,000+ dollars worth of coin to users because of the site's security problems. That's if Hashcows even has enough funds to pay people to begin with.
Needless to say, I will not mine on the site or any other future pools that might be created by Hashcows team until I am fully reimbursed. If I am, I will gladly come back.
Jump to: