Topic: [ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread - page 470. (Read 1276923 times)

The development team has extended a 12 BTC reward to the hacker for finding the security flaws, contingent upon returning the missing BTC. We are waiting to hear back.

We have offered these BTC out of our pockets, but, beyond that, we hope the community can pull together to make things right. As a reminder, the donation address for the security bouty is: <14Tf35AovvRVURzd623q5i9kry2EW8WzyL>.

What we do next depends on what the hacker does.

Regarding the discussion on a XCP "tax" or "re-burn", we can state this: The strength of Counterparty's community helps differentiate us from other projects, and it is precisely that strength which makes it clear it is best not to introduce a new burn period.

While the protocol will become more secure and robust as time goes on and our community grows, it is also the case that if there are serious bugs in the future, more people will be affected, and, as a project, Counterparty will have more to lose. Our decisions now will determine how the community evolves, and by demonstrating our collective firmness, we are setting important precedent for the future: those who invest in XCP are investing in a currency with a stable money supply, the integrity of which will be maintained even in difficult circumstances.

Take Bitcoin as an example: there have been times in Bitcoin's history where a serious bug could have been dealt with by, for example, increasing the total number of Bitcoins. If this had happened, would Bitcoin still be seen as an example of stable money supply and good store-of-value?

The seriousness of this bug should not be underplayed, but by taking our growing pains in their stride, we are strengthening Counterparty for the future.

So true. This is alpha level software. It is weeks old. Those things have to be expected, and it would be even scarier and no one found any bugs. If someone is selling you a brand new Ferrari for 1000 USD ? What would you do ? Buy it and then complain to an official retailer ? Don't you see anything fishy?

But some people were fine buying XCP at a fifth (20%) of the actual value... Of course...

And now they are crying like a bunch of french girls? This is insane. Those people with some skill for crying, I am sure, would have been more than happy to share the profits of their cheap coins if everything was fine, right? It is always easy to complain when you make mistakes. And now they want everyone to tip in, or create more coins ? Do you think you are Bernanke ?

Just man up, take the loss, start a petition to get your money back or cure cancer if you want, but let's just move on. We have kickass devs that fixed the reported issues in a matter of hours, and are still working on it as I type right now. And no one really cares to be on coinmarketcap or whatever at this stage. Are you in XCP just for a few weeks ? Really ? Good things will come in time if greedy french drama queens can stop their whining.

Hi,

I strongly believe in XCP and its future. Just to say that I burned from Blockchain.info and I dont have enough skills to implement the client...I will donate 100 XCP when I can (when something simplier works). It is not just a excuse to delay, else I will not bother to mention it publicly...Generally, If there was a GUI client, there would be more donations.

My thought is I prefer XCP not to be traded anywhere because it is obvious it is not ready today for mass adoption, especially for assets and shares. It has been removed from coinmarketcap and it is better. When it comes back in a near future, it must be bulletproof and enter with a 100 M$ cap at least, and not this """insignificant""" 15 M$ cap we had yesterday, not better than Quarks, nor in the TOP 10 !

People are so good at spamming about donations when it comes to bailing out their own money.

Ok so we know Led_Lcd is one of em' lol, jk.

I totally agree. I just don't want people getitng the wrong ideas  

Busoni,  

When does Poloniex plan to restore the BTC balances on those accounts, that have had XCP removed from the balance?

Good idea.

First user who receive 3568.9 XCP link to https://bitcointalksearch.org/user/zxczxc209-204419 or a
[email protected], but also connected to some previous thefts.

I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002)
but now we do know exactly what happened.

If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback?

the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap.
 

I know you mean well and recovering the XCP would be good for the community at large.

There is no reason to think that these users knew that there was something malicious going on when they took their gains.

Allow the users to make the choice themselves without being coerced.

These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"):

Tx    Block   BlockTime   Destination    Amount  
4638   286727   1NCsouKcyJUsTMKtFastR6R5epE9GeYT91   Received 200 XCP  
4637   286727   1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP  
4636   286727   1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP  
4635   286727   1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP  
4634   286727   1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP  
4633   286727   18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP  
4632   286727   1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP  
4629   286726   17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP  
4628   286726   1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP  
4627   286722   1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP  
4625   286722   18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP  
4624   286722   1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP  
4623   286722   17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP  

I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell)

these three address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP  
                               1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP
                               1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP

withdrew total of 6692XCP = 95.6% of the total xcp "missing"  

I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex

(edit: in my original post i "forgot" to include the 3rd "big" address thats why I posted this again)
(edit 2: i will give 0.1 btc to the "investigator" that succeeds in the matching the 3 "big" addresses )

not necessarily, maybe some will, some won't. At least it's something, I mean, what else can people say or do right now without seeing what will happen to thier xcp balance when it comes back

Agree on this.

Also if there are any loss after this, it can be shared between poloniex, xcp developers, community and poloniex account holders

And now 70 peoples repeat this and when its back forget it..?

I'll donate 5% of xcp if it comes back on poloniex

+ 10

If the individuals who hold these addresses do not return the ill-gotten gains to Busoni, they are much worse then free-riders as they are profiteering from the hack at the expense of others in this community.

I will donate 500 when jimhsu have help me out to donate that from privatekey, because i dont have counterparty. I think he can help every other who dont know how use counterparty also..? 500 is over 7% what we need if only 7000xcp.. Its much, that is really much in money and from my burned coins and that hurt me. But everyone must remember this situation hurt coin and community more if we dont solve this fast and only fighting. You all who have burn btc are now +10x profit maybe more. Dont be selfish, use your profit, what ever you can, im sure if we collect this fast its pay us later back in xcp value. Other coins users and investors have ask why we burn money, now they they ask is that nice that money is gone, what they do in same situation, maybe use second time invested money? We dont use, we solve this with profit so everyone now who have invest please donate.

Message to the Hacker:

Please understand that the longer this incident continues without a resolution, the more costly it is becoming to our Devs, Busoni, and our entire community.  

For example, my project to issue real assets on top of Counterparty has been setback by approximately one week.

If you are planning to return the 80 BTC, then please do so quickly so that we can all move on and put this matter permanently behind us.

If you are planning to choose a legacy of being a thief, blackhat, evil-doer, then please let Busoni know so that as a community we can have finality and closure.

It is not to late to redeem yourself, but our window of tolerance has its limits.

These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"):

Tx    Block   BlockTime   Destination    Amount   
4638   286727   1NCsouKcyJUsTMKtFastR6R5epE9GeYT91   Received 200 XCP   
4637   286727   1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP   
4636   286727   1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP   
4635   286727      1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP   
4634   286727   1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP   
4633   286727   18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP   
4632   286727   1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP   
4629   286726   17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP   
4628   286726   1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP   
4627   286722   1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP   
4625   286722   18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP   
4624   286722   1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP   
4623   286722   17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP   

I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell)

these three address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP  
                                       1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP
                                       1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP

withdrew total of 6692XCP = 95.6% of the xcp "missing"

I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex

I think this is a very good point. Give these folks the option to send the XCP back. They need to understand that by holding onto the cheap winnings, they are actually helping to hurt XCP in the long run. In other words they may actually bring down the price of there own holdings, not to mention everyone else's...