Pages:
Author

Topic: Bitcoinica lost 43,554 BTC from Linode compromise, suspicious TXIDs publicized - page 4. (Read 56416 times)

hero member
Activity: 686
Merit: 500
Wat
My condolences for the theft mate Sad
hero member
Activity: 910
Merit: 1005
Sorry to hear about this zhoutong,

This will be a test of whether bitcoin is truly anonymous and un-blockable. Will the hacker be able to successfully launder and exchange this volume of stolen coins? I don't know if it is better if they are successful or not.
donator
Activity: 980
Merit: 1000
I'm a bit surprised that this whole turn of events hasn't hit the market more, to be honest.

Just goes to show how successful a short, directed attack can be. 1/4M from a bunch of accounts in a matter of minutes, and the perp is nowhere to be found...

At the end of the day, a VPS is an untrusted party and you cannot put your private keys there. They stop being private at all. Single point of failure and all that jazz...
sr. member
Activity: 321
Merit: 250
Bitbuy.nl!
Tough hit Zhou! I hope P2SH will leave major hacking incidents behind us, another great lesson learned here.

I actually don't understand why everybody seems to be surprised Zhou is able to cover these losses. If you look at their volume and fees I think they easily covered this, huge hit nonetheless.
legendary
Activity: 1764
Merit: 1015
Zhous got the fucking dough WOW!  Cheesy
sr. member
Activity: 270
Merit: 250
The question now is were user passwords compromised?  I would assume an affirmative answer to this, even if they were encrypted - this is only a matter of time.  Just like with the historical MtGox hack bitcoinica now should shutdown and go through a round of account claiming.

The way I understood it only a machine with the hot wallet was hacked, not machines holding user data.
sr. member
Activity: 270
Merit: 250
are deposits working?  I deposited 0.1btc's from mining a while ago that still aren't showing up, 13confirms so far.
zby
legendary
Activity: 1592
Merit: 1001
The question now is were user passwords compromised?  I would assume an affirmative answer to this, even if they were encrypted - this is only a matter of time.  Just like with the historical MtGox hack bitcoinica now should shutdown and go through a round of account claiming.
hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
However, now we have concluded that we lost 43,554 BTC from this incident and we will reimburse our customers for the full amount.

I'm sincerely impressed by your good behavior here. Congratulations.

Can't you try to sue Linode or something? This is mainly their fault. I wouldn't be surprised at all if the attacker is a rogue employee of theirs.

Unofficially, already working on it.

Officially, I'm not working with Bitcoinica and can't comment.
vip
Activity: 166
Merit: 100

This comment is oddly prophetic.

Quote from: jerf
I'm going to pitch a different take than a few others: Yes, great initiative, please keep trying things and building things, but end this project now. There are no probable outcomes where you do not end up having to explain where thousands of dollars of other people's money went to some angry people.

I do wonder how an 18 year old is going to come up with $200,000 worth of bitcoins as reimbursement. I don't know how profitable bitcoinica has been, but that much money seems too much to overcome.
legendary
Activity: 1106
Merit: 1004
However, now we have concluded that we lost 43,554 BTC from this incident and we will reimburse our customers for the full amount.

I'm sincerely impressed by your good behavior here. Congratulations.

Can't you try to sue Linode or something? This is mainly their fault. I wouldn't be surprised at all if the attacker is a rogue employee of theirs.
legendary
Activity: 2198
Merit: 1311
I'm impressed with the way Z has handled this so far.  Sufficiently impressed that I've decided not to withdraw the bitcoin I have in bitcoinica.  Hopefully, like MtGox, bitcoinica will emerge from this more secure than ever.
full member
Activity: 199
Merit: 100
Sorry for your loss zhoutong!

To be honest, this incident brought Bitcoinica to my attention for the first time.

Really great service, i just registered and made a deposit!

Wish you the best and good luck for the future.
legendary
Activity: 1316
Merit: 1000
Varanida : Fair & Transparent Digital Ecosystem
hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
We didn't have the opportunity to scan our whole system for suspicious transactions that were not initiated from our customers because we had to shut down the system immediately after we've discovered the huge loss. We did get a rough estimate and we published a press release to warn our users about the deposit address replacement.

However, now we have concluded that we lost 43,554 BTC from this incident and we will reimburse our customers for the full amount. For transparency, we would like to disclose all the suspicious transaction ids in this incident:

I hope you get insurance next time to account for any losses due to theft.

Doesn't exist.

You could only have the USD insured.
newbie
Activity: 49
Merit: 0
This is very sad to hear. I wish you the best of luck with whatever you decide to do now.
hero member
Activity: 714
Merit: 500
hero member
Activity: 532
Merit: 500
We didn't have the opportunity to scan our whole system for suspicious transactions that were not initiated from our customers because we had to shut down the system immediately after we've discovered the huge loss. We did get a rough estimate and we published a press release to warn our users about the deposit address replacement.

However, now we have concluded that we lost 43,554 BTC from this incident and we will reimburse our customers for the full amount. For transparency, we would like to disclose all the suspicious transaction ids in this incident:

I hope you get insurance next time to account for any losses due to theft.
legendary
Activity: 1330
Merit: 1000
Bitcoin
half on SR the other half on the armoury...

Scarface...

naaassttyyy......
Pages:
Jump to: