Topic: BIPS Wallet security breach - page 6. (Read 11504 times)

ghenghis - I have signed up to your list.  As I suspected it is all gone.  As BIPS is listed as one of the 'preferred' web wallet options in bitcoin.org (alongside Blockchain and Coinbase) I would have thought they were a little better prepared - they are not exactly a newly established exchange in E Europe. And what are they doing with their site up?  They don't seriously expect to continue in the merchanting business after this do they?

I hope everyone gets their money back.

How are you able to look this info up?  I have the BIPS address I used to deposit the coins a few days prior to the heist...

I am out about .39 btc  but my money was in the address up to the 20th and was not pulled out until later then the crash.  my money was pulled out at about 23:39 pm the 20th of nov Greenwich time.


https://blockchain.info/address/1AyWHY6kCMi4F221J7aPheiYdAvkDbcdPp

https://blockchain.info/tx/4d6bc489bdb2f32d397eb2aa3844f2e6711b934399af5f62b11c9ded8c84edbf

My guess is the money above was saved by bips  if you look at it the amounts were tiny

the highest was 1.2 btc the lowest was under .1 btc


What annoys me is not the .39   but I have an account with cloudhasher  and they are going to continue to put money into that address over the next 9 months.  I am really fucking annoyed.  But my losses may only be .7 or .8 btc when all is said and done.

  Now for someone with 90 coins oh that hurts.  good luck to you ghengis34

Not a "whale" but I consider the potiential value of 3 coins to be very significant...  90 coins.. I'd be crying literialy....

OK people. I'm one of the unlucky "whales" who stored a lot of bitcoins with bips.me.  I lost about 90 bitcoins. They haven't contacted me yet, but from what I glean from these forums, my bitcoins have already gone and been spent on Russian hookers.

So. I'm willing to accept that I will never get these bitcoins back, but I'm not willing to accept that bips.me will continue on to glory, handling bitcoin transactions for merchants, getting (more?) venture funding, etc. 

In my mind, it's 'either or' - either I get my bitcoins back, or bips.me takes their website down and opens up under a completely new name. But not both.

With this in mind, I'm seeking out other 'whales' - people who lost significant numbers of bitcoin on bips.me.  If there's enough of us, what we do is get together and hire a lawyer in Denmark, and start from there. It will be worth it.

Here is a signup form:

https://docs.google.com/forms/d/1v8AL3scMErzSLPRSOhGuGXn9pzHjWNTrSE2YWEQIpxs/viewform

I am the first person to sign up, with my 90 missing bitcoins.

If nobody else signs up, or if the total number of signups doesn't add up to more than 250 bitcoins, I'll give up.

Also. I very much doubt that this was an 'inside job' or some kind of fraud. Danish people don't do those sorts of things. They just don't. However, that doesn't mean that these guys shouldn't have to start from scratch again.

https://bitcointalk.org/index.php?topic=252308.80

"It is imperative to understand that everything was wiped out from our servers and getting functionality back is priority #1.
The wallet part of BIPS was a free service to make payments easier for users.
Web Wallets are like a regular wallet that you carry cash in and not meant to keep large amounts in.
Hence we offered a paper wallet as a cold storage alternative for those who wanted a safe storage solution.
We will be contacting all affected users as already proclaimed.
We will need their consent to hand over information to the authorities for further investigation, which hopefully can assist in catching the thief.
Those who were not affected and have a bitcoin balance will also be contacted.
Most balances left are minuscule, but if you had more than a few satoshi’s in your wallet you are affected, and will be contacted.

Another priority is doing forensics data recovery to be able to investigate and assist authorities in finding the attacker.
Technical information will not be disclosed for security reasons.

Stolen coins have been isolated and server logs have been retrieved from data recovery:
https://blockchain.info/address/1LuG91tcSQxKj32BsCoRkX7yQLfj9LtkCs

Please be advised that attacks are not isolated to us and if you are storing larger amounts of coins with any third party you may want to find alternative storage solutions as soon as possible, preferably cold storage if you do not need immediate access to those coins:
www.coindesk.com/hacker-attack-polands-bitcoin-exchange/
www.coindesk.com/czech-bitcoin-exchange-bitcash-cz-hacked-4000-user-wallets-emptied/"


From Kris at bips... not a great way to start my Friday...

I chose BIPS because of their reputation and the services they could provide. I am a company director and entrusted them with 4.8 bitcoins and  transfered £..... To purchase more just before the ddos. I am very dissapointed at their lack of response to my emails and their apparent lack of concern about what has happened. For them to mention in their latest announcement that the wallets were a free service means nothing. To say they are passing details on to the authorities sounds like they are taking the first steps to absolve themselves of any responsibility. If BIPS wants to be a large respected company in the future, the should stand up now and be counted. Offer all those that lost coins compensation.

They do look good! Checked the site out. I'm not really much of a puzzle enthusiast though.

Thanks man.  Don't suppose you want to buy some really nice puzzles? I take BTC

www.cubicdissection.com

So sorry! Hope you recover it all!

Crossing fingers again tonight it seems..  Quite stressfull... Anyone know if I can sell my kidney to replace my coins?

I got this PM from Kris yesterday:


I'm just hoping its a simple filesystem wipe out which can be backed up easily. I'm trusting and believing still, hoping I get the coins back. Have always supported BIPS since its inception (see my sig) and have also helped fix bugs (got rewarded for it too) and also open-sourced an API client for free. Trusted because I knew the owner was not anonymous and wouldn't possibly be stupid enough to do a TradeFortress. It'll be great if Kris is open about his problems with the community.

Dominic, not so far.  Kris Henrikson is the owner and he's not saying much at all.  I had literally that day (the 15th) written in my planner to move my BTC to a more secure place.  I got home that night, researched paper wallets, set one up, went to log in to BIPS and boom they're down.  I earned those BTC selling puzzles on my website back when they were around $100.  Can't afford to replace them at todays prices.  Feel sick...this is a loss of more than just BTC, it's my hopes for the long term value that's down the drain.  I'm gonna go smoke a Rocky Patel I've been saving and see if that helps :-/

Is there an amount yet announced?

I've emailed and PM'd them with no reply.  The silence is disconcerting, as is the timing of the "hack". It would be foolish to simply take things on their word and and walk away from thousands in BTC.  Who's to say they didn't simply walk away with the funds?   

I'm not saying "theft" yet, but if BIPS wants me to believe they got hacked, the burden of proof is going to be on them to prove it.  If they will not, or if they continue this silence, I and others will get law enforcement involved.  I'm already in touch with other BIPS users, some of whom are in Denmark and have easy access to the police there.

hm, that sucks.  When I was a newbie I sent 0.05 BTC out to another wallet, and it never arrived.  It just said "Claim Email'.  I never got my coins back, and support never answered nor worked on their site.  Hopefully they'll go up again...

I got a vague email from BIPS this morning letting me know about the statement they released on November 19th..  No details about what they plan to do yet...

Security is key with these things. So much things to worry about.

blockchain is a good choice for a wallet when you need to transfer what not. I personally don't store any online unless I am planning on immediately transferring.