+++Community Proposal to Bring Everyone Whole Again After the February 2014 Poloniex Hack+++
As a community need to collect-up 6,100 XCP + 80 BTC. While this seems like a daunting mountain to climb, here is a plan for how we can rally together to get it done:
6,100 XCP - Roll-back of all trades that led to withdrawals between 0.002 and 0.009 time-stamped at time of the hack (ill-gotten gains)
+
12 BTC - Dev Commitment (off the top of my head, I seem to recall this is the amount the Devs pledged; can someone please confirm?)
+
10-20 BTC - Community Donations (pledges already committed)
+
10-20 BTC - extra 2.5% trading fees on Poloniex over next 10 days (assumes 50-100 BTC volume per day; lets get the exchange trading again Busoni!)
+
30-60 BTC - 50% stake of XCP PowerBall Lottery (if the Devs need assistance I will volunteer to ensure this is provably fair + executed quickly; or better than me would be an entrepreneur who the Devs trust who wants to put up a cool webpage and market the lottery all over the internet and run it as a profit-making business, with, say, [1% fee] with cap of, say, [100 XCP] or something like that for every time the lottery runs)
Timeframe:
We should set a goal to have this matter closed-out by, say, [Saturday, March 1st]. And any surplus raised should go to the Bug Bounty Program as a measure of defense in the future.
Why this is High Priority:
Every additional minute that this security breech goes unresolved is wasting the time of our incredibly-talented Devs, people like me with initiatives underway to list real assets are being totally distracted & losing support of key business partners, and the reputation, liquidity, and market-cap of the project is being compromised as people visit BitcoinTalk and see the community in temporary disarray. Moreover, if we don't resolve this incident, Busoni probably needs to declare bankruptcy as no one will ever use his exchange again if he can't pay back the losses.
Call to Action:
My fellow community members I urge you please, please, please do your part to bring this to resolution! If you are the hacker, then send back the BTC! If you are going to donate, then donate! If you want to run a lottery, then PM the Devs! Busoni lets get the exchange back up!
Lets all follow flayway's example! He donated 500 XCP! Lets be action oriented!
Lets get this whole thing behind us ASAP!
I've just donated via Jimhsu, you can do it too! =)
Donation Address:
14Tf35AovvRVURzd623q5i9kry2EW8WzyL
Topic: [ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread - page 463. (Read 1276916 times)
February 21, 2014, 11:48:35 PM
February 21, 2014, 11:47:33 PM
We create an asset issuance fees (25 XCP), this fee will be sent to a security/development fund account. This fund will be used to compensate the victims of this theft.
In future this fund will be used to offer a security and development bounties.
In future this fund will be used to offer a security and development bounties.
February 21, 2014, 11:15:55 PM
Hi,
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
Hi Jimhsu,
I just sent you my private key. Please send 10% of the balance of my account to the Donation Address.
February 21, 2014, 11:09:22 PM
Hi,
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
Confirm. I give away really big amount versus my invested money, but i have still much profit left and after this all i believe i get still much more money when we solve this situation fast and not get more damage for project.. Its not reason to anyone not donate if cant use software if jimhsu offer help to import private key and send you back what you want to other address. Give what you can few coin or more if you have invest more..
I hereby nominate flayway for the Counterparty Wall of Fame.
Thank you flayway for giving our community this positive example.
Share a +1 if you agree.
February 21, 2014, 11:07:50 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This feels like a good idea that could make-up all or part of the solution.
If we can get a good assortment of "+ 1s" on this idea maybe we can take this as symbolic of a community mandate . And then to implement maybe the Dev team could nominate a trusted member of the community to run the XCP Powerball Lottery (haha), say, once per week or once every two weeks with advertising all over Reddit and the other boards!
+1
+1
+1
Great idea. I'm in
February 21, 2014, 10:47:13 PM
On a related note, Busoni don't you have identification information for the users who took advantage of this situation?
You have email addresses, IP addresses, BTC addresses, etc.
Could you not use this to publicly shame those involved and ask that they do the right thing and return the XCP to their rightful owners?
They are only stealing from the community. This is not a victimless crime like stealing from a bank.
We should not be using community funds to recover those funds which were depleted by malicious actions. This is a inefficient way of operating; like paying off one credit card with another credit card. We would basically be causing damage to the community to repair damage caused to the community.
Give me the emails and ip addresses if you don't want to do it.
You have email addresses, IP addresses, BTC addresses, etc.
Could you not use this to publicly shame those involved and ask that they do the right thing and return the XCP to their rightful owners?
They are only stealing from the community. This is not a victimless crime like stealing from a bank.
We should not be using community funds to recover those funds which were depleted by malicious actions. This is a inefficient way of operating; like paying off one credit card with another credit card. We would basically be causing damage to the community to repair damage caused to the community.
Give me the emails and ip addresses if you don't want to do it.
This is a very not good idea. I agree those who now knowing what happened and got cheap xcp at the expense of XCP depositors or busoni himself should
be ashamed of themselves if they don't return them. But some of them may not read this thread and just think they got lucky. And some might see it as
hey its not my fault all I did was trade according to the rules and withdrew my balance. These lucky sob's were not the hackers just got lucky. Posting their
info is immoral if not illegal.
These people bought XCP at dirt cheap prices and then immediately withdrew them. Let's stop kidding ourselves, they saw an opportunity and took advantage of the situation. Why else would they withdraw them so suddenly?
Furthermore, how is posting someones email address without a name illegal. The answer is it's not.
You know whats more immoral than posting someones email on some forums?
Keeping stolen goods at the expense of others.
Let's just put this in perspective:
Whether those who bought XCP because of the dump knowingly or unknowingly took advantage of the situation is IRRELEVANT.
The site was hacked, those orders shouldn't have been filled.
The only reason they haven't been rolled back is because they were withdrawn.
This is not a "let them decide if they want to" kind of situation. If you don't send the funds back you are acknowledging that you received funds through illicit means and you accept that you are keeping the ill-gotten gains at the expense of the community. Period. I don't see why that is unclear to some people?
IMAGINATION TIME!
You own a store. Someone robs an old lady and uses that money to buy something from your store. When the police say "hey we've got an item to return that was purchased with stolen money" are you really going to say "no thanks, I think I'll just keep the stolen money!". You wouldn't fucking say that would you? You get your item back and the old lady gets her money back, no one suffers. So why is it any different now?
Poloniex needs to put a notice up on the site saying:
Quote
We kindly ask if you are one of these people who's order was filled that you return your XCP and let Poloniex refund your BTC. You are not out any money and you will be helping the community repairs itself.
Busoni why aren't you contacting those who made withdrawals after the hack and asking them to return the XCP instead of soliciting the community for damages? All it would take is one mass email. This should be your first method of repairing the damage. I think there are many members who if they knew what was going on would return the XCP for a refund. The least you could do is try.
I agree the best would be busoni contacting them privately asking them to give it back. But again these people were not hackers just traders. The
fact that they withdrew immediately does not mean they knew something was wrong. Some of them maybe, but a lot of people myself included like
to withdraw immediately from CENTRALIZED exchanges. BTW I am not one of those who bought at .002. I actually have over 300 xcp stuck
on poloniex but that doesn't mean I think its right to publish private account info on a public forum. Are you 19 years old? I am not meaning that
as a put down. It's either that or you have a lot stuck on poloniex which I feel sorry if you do but you will get it back. i'm thankful I only put tiny
amount on poloniex. I only put what I could afford to lose.
February 21, 2014, 10:45:47 PM
Hi,
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
Confirm. I give away really big amount versus my invested money, but i have still much profit left and after this all i believe i get still much more money when we solve this situation fast and not get more damage for project.. Its not reason to anyone not donate if cant use software if jimhsu offer help to import private key and send you back what you want to other address. Give what you can few coin or more if you have invest more..
February 21, 2014, 10:38:48 PM
I feel like everyone is working on exacerbating the problem.
The community is out a lot of XCP.
What should we do?
Get the community to pay out more XCP!
Why aren't we trying to retrieve the XCP from those who withdrew them before the rollback?
Shouldn't we at least give them a chance to do the right thing before we start throwing more money at the problem? (many of them might not even know what's going on).
Why are we donating to a relief fund before seeing how much of the funds will be returned by the users?
The community is out a lot of XCP.
What should we do?
Get the community to pay out more XCP!
Why aren't we trying to retrieve the XCP from those who withdrew them before the rollback?
Shouldn't we at least give them a chance to do the right thing before we start throwing more money at the problem? (many of them might not even know what's going on).
Why are we donating to a relief fund before seeing how much of the funds will be returned by the users?
February 21, 2014, 10:33:52 PM
anyone could start the lottery right ? someone start it and let us know the conditions
A rough idea of how we could set up a lottery:
- seperate lottery thread
- 1 ticket = 5 XCP or 0.05 BTC
- publicly viewable google doc to record entries
- random number generator to select winner
Example:
- DaFockBro pays 50 XCP for 10 tickets, DaFockBro gets lines 1-10 reserved in the google doc
- halfcab123 pays 0.2 BTC for 4 tickets, halfcab123 gets lines 11-15 reserved in the google doc
- PhantomPhreak or xnova generate random number to select winning number that corresponds to line in google doc
- 50% of BTC/XCP goes to winning ticket holder, 50% of BTC/XCP goes to busoni.
February 21, 2014, 10:33:42 PM
God this is such a mess -____-
February 21, 2014, 10:31:48 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This feels like a good idea that could make-up all or part of the solution.
If we can get a good assortment of "+ 1s" on this idea maybe we can take this as symbolic of a community mandate . And then to implement maybe the Dev team could nominate a trusted member of the community to run the XCP Powerball Lottery (haha), say, once per week or once every two weeks with advertising all over Reddit and the other boards!
+1
+1
+1
Now someone trustworthy to handle the details
And how will you know the lottery was provably random?
Which is why I said someone trustworthy. I pretty much would only trust one of our devs for this.
February 21, 2014, 10:30:29 PM
On a related note, Busoni don't you have identification information for the users who took advantage of this situation?
You have email addresses, IP addresses, BTC addresses, etc.
Could you not use this to publicly shame those involved and ask that they do the right thing and return the XCP to their rightful owners?
They are only stealing from the community. This is not a victimless crime like stealing from a bank.
We should not be using community funds to recover those funds which were depleted by malicious actions. This is a inefficient way of operating; like paying off one credit card with another credit card. We would basically be causing damage to the community to repair damage caused to the community.
Give me the emails and ip addresses if you don't want to do it.
You have email addresses, IP addresses, BTC addresses, etc.
Could you not use this to publicly shame those involved and ask that they do the right thing and return the XCP to their rightful owners?
They are only stealing from the community. This is not a victimless crime like stealing from a bank.
We should not be using community funds to recover those funds which were depleted by malicious actions. This is a inefficient way of operating; like paying off one credit card with another credit card. We would basically be causing damage to the community to repair damage caused to the community.
Give me the emails and ip addresses if you don't want to do it.
This is a very not good idea. I agree those who now knowing what happened and got cheap xcp at the expense of XCP depositors or busoni himself should
be ashamed of themselves if they don't return them. But some of them may not read this thread and just think they got lucky. And some might see it as
hey its not my fault all I did was trade according to the rules and withdrew my balance. These lucky sob's were not the hackers just got lucky. Posting their
info is immoral if not illegal.
These people bought XCP at dirt cheap prices and then immediately withdrew them. Let's stop kidding ourselves, they saw an opportunity and took advantage of the situation. Why else would they withdraw them so suddenly?
Furthermore, how is posting someones email address without a name illegal. The answer is it's not.
You know whats more immoral than posting someones email on some forums?
Keeping stolen goods at the expense of others.
Let's just put this in perspective:
Whether those who bought XCP because of the dump knowingly or unknowingly took advantage of the situation is IRRELEVANT.
The site was hacked, those orders shouldn't have been filled.
The only reason they haven't been rolled back is because they were withdrawn.
This is not a "let them decide if they want to" kind of situation. If you don't send the funds back you are acknowledging that you received funds through illicit means and you accept that you are keeping the ill-gotten gains at the expense of the community. Period. I don't see why that is unclear to some people?
IMAGINATION TIME!
You own a store. Someone robs an old lady and uses that money to buy something from your store. When the police say "hey we've got an item to return that was purchased with stolen money" are you really going to say "no thanks, I think I'll just keep the stolen money!". You wouldn't fucking say that would you? You get your item back and the old lady gets her money back, no one suffers. So why is it any different now?
Poloniex needs to put a notice up on the site saying:
Quote
We kindly ask if you are one of these people who's order was filled that you return your XCP and let Poloniex refund your BTC. You are not out any money and you will be helping the community repairs itself.
Busoni why aren't you contacting those who made withdrawals after the hack and asking them to return the XCP instead of soliciting the community for damages? All it would take is one mass email. This should be your first method of repairing the damage. I think there are many members who if they knew what was going on would return the XCP for a refund. The least you could do is try.
February 21, 2014, 10:27:35 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This feels like a good idea that could make-up all or part of the solution.
If we can get a good assortment of "+ 1s" on this idea maybe we can take this as symbolic of a community mandate . And then to implement maybe the Dev team could nominate a trusted member of the community to run the XCP Powerball Lottery (haha), say, once per week or once every two weeks with advertising all over Reddit and the other boards!
+1
+1
+1
Now someone trustworthy to handle the details
And how will you know the lottery was provably random?
February 21, 2014, 10:26:08 PM
Hi,
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
I just handled flayway's donation to the bug bounty fund. I'll be happy to handle donations for other people who don't have counterpartyd running as well.
February 21, 2014, 10:06:32 PM
anyone could start the lottery right ? someone start it and let us know the conditions
February 21, 2014, 09:57:35 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This feels like a good idea that could make-up all or part of the solution.
If we can get a good assortment of "+ 1s" on this idea maybe we can take this as symbolic of a community mandate . And then to implement maybe the Dev team could nominate a trusted member of the community to run the XCP Powerball Lottery (haha), say, once per week or once every two weeks with advertising all over Reddit and the other boards!
+1
+1
+1
Now someone trustworthy to handle the details
February 21, 2014, 09:49:44 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This is flopping GENIUS!!
Yeah thats pretty darn neat.
February 21, 2014, 09:40:52 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This is flopping GENIUS!!
February 21, 2014, 09:39:45 PM
We could also do a lottery. Busoni keeps 50% of lottery pot, winning lottery ticket keeps the other 50%
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
The possibility of hitting the jackpot could be a good incentive for people to buy lottery tickets (donate).
This feels like a good idea that could make-up all or part of the solution.
If we can get a good assortment of "+ 1s" on this idea maybe we can take this as symbolic of a community mandate . And then to implement maybe the Dev team could nominate a trusted member of the community to run the XCP Powerball Lottery (haha), say, once per week or once every two weeks with advertising all over Reddit and the other boards!
February 21, 2014, 09:38:55 PM
Though I didn't trade through Poloniex, I will send some XCPs but not immediately. I burnt my BTC through blockchain.info. I will do it when everything settles down and the procedure is safe and easy. Large XCP holders like cityglut shall contribute a decent amount.
But, I want Busoni to restore BTC/XCP trades.
But, I want Busoni to restore BTC/XCP trades.
Jump to: