Author

Topic: Bitcointalk history of MtGox and how a Bitcointalk post caught the MtGox hacker. (Read 1021 times)

legendary
Activity: 2464
Merit: 1145
Thanks for the work.


This story for sure will go into history books...
member
Activity: 140
Merit: 17

March, 2011, MtGox sold by programmer (Ripple co-founder) Jed McCalib to to French developer and bitcoin enthusiast 26 year old Mark Karpeles.
The exchange allegedly had already lost 80 000 bitcoins but this was not disclosed to the public.
McCaleb also said that Mark Karpeles had rewritten the MtGox codebase back in 2011 after the sale was completed.

Quote
Although I knew that 80,000 BTC were already missing from Mt. Gox when Jed McCaleb sold it to Mark Karpèles — McCaleb suggesting to Karpèles “maybe you don’t really need to worry about it” — hackers had already cleaned out Mt. Gox while McCaleb owned it. He had sold Karpèles an insolvent exchange.
https://davidgerard.co.uk/blockchain/2017/09/17/kim-nilsson-of-wizsec-how-the-bitcoins-were-stolen-from-mt-gox/

Is this ~80k BTC stored at https://blockchair.com/bitcoin/address/1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF ?

Relevant Tx: https://blockchair.com/bitcoin/transaction/e67a0550848b7932d7796aeea16ab0e48a5cfe81c4e8cca2c5b03e0416850114
legendary
Activity: 2114
Merit: 1693
C.D.P.E.M



April 18, 2013, Increased Trading Volume Breaks Mt. Gox BTC $181.66 over 10 days drops to $122.90

April 18, 2013,MtGox withdrawal delays [Gathering]
Customer complaints about long delays were mounting as of February 2014, with more than 3,300 posts in a thread about the topic on the Bitcoin Talk online forum.
https://bitcointalksearch.org/topic/mtgox-withdrawal-delays-gathering-179586

May 2, 2013 CoinLab filed a $75 million lawsuit against Mt. Gox, alleging a breach of contract

May 14, 2013, Mt. Gox Dwolla account frozen by DHS BTC $114.33 over 10 days rises to $128.80
On 15 May 2013 the US Department of Homeland Security  seized money from Mt. Gox's U.S. subsidiary's account with payment processor Dwolla asserting  that the subsidiary was not licensed by the US Financial Crimes Enforcement Network (FinCEN), was operating as an unregistered money transmitter in the US.

During the negotiations Karpeles’s attorneys allegedly brought up Silk Road . They said that Mark Karpeles was willing to give up Silk Road operator “Dread Pirate Roberts” if he “could get a walk on his charges.”



Fantastic post,
A movie should be made about the Mtgox debacle!

I think I found a typo (in red), It should say 2013 instead of 2014

cheers
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
This means that CSW can be held responsible for recovering the funds stolen in the first hack, but not the second one which would be irrelevant as the suspect for that one has already been caught. Since the hack happened during the time Jed McCalib owned the exchange, with no shares from Mark Karpeles, authorities should be asking McCalib the questions on what he was doing at the time of the hack, with the time the bitcoins being stolen known by virtue of the blockchain so only Mt. Gox events that happened before that time will be relevant to the situation.

Craig Wright just dug himself into a deep hole.

It would also be useful to know more details about how Mt. Gox was operating while McCalib owned it.
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
The Kleiman case against Craig S Wright has brought up a few new MtGox references.

Most notably the Claim by Craig S Wright that he is the owner of the bitcoin address where bitcoins from the first MtGox hack ended up.

This was followed by a letter sent by Craigs lawyers to blockstream claiming the addresses.








Last week the New Zealand police seized us$90 million in assets controlled by Alexander Vinnik. (The Russian accused of laundering the proceeds of the second MtGox hack ).

jr. member
Activity: 314
Merit: 6
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
Another update in the MtGox saga:

https://www.zdnet.com/article/us-loses-extradition-battle-with-russia-for-bitcoin-kingpin/

Quote
The case eventually reached Greece's Supreme Court, and today, it was decided that Vinnik should face charges in Russia, the suspect's native country, and where he expressed his desire to be trialed, mainly because of the thinner charges brought against him.

Quote
On the same day Greek authorities were arresting Vinnik, a team of researchers that also included Google staffers, presented findings at the Black Hat USA 2017 security conference, revealing that 95 percent of all ransomware ransom payments were cashed out and converted into fiat currency through Vinnik's BTC-e portal.

Also on the same day, a group of Bitcoin security specialists calling themselves WizSec published the results of an investigation that linked Vinnik's Bitcoin accounts to laundering funds stolen from the Mt. Gox exchange.

Researchers said that Vinnik was also involved in laundering funds stolen from other cryptocurrency exchanges, such as Bitcoinica, Bitfloor, and other platforms they did not name at the time.
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
Mt.Gox is one of the biggest disasters in Bitcoin history and the story is not yet complete.
Based on the available evidence, it appears that Gox lost a fairly modest amount of money (in terms of USD) in 2011 that compromises a decent bulk of the missing money. They were subsequently hacked a number of times that have been publicly reported, during which they likely lost some amount of money.

I am not entirely sure why the losses compounded over time, maybe Gox was not a profitable operation, and they took customer money to fund the losses.

Security did not seem to be a strength of Gox's. If they had been honest about the loss in 2011, it would likely have been not a very big deal, but Gox would have closed and some other exchange would have taken the spot of having the majority of trading volume.




That graph by WizzSec explains the losses quite well.

It appears that some hacks were discovered but others were not.
From accounts by former staff it doesn't appear that regular audits were done to ensure that the exchange ledger balance matched the total wallet balances.
copper member
Activity: 2870
Merit: 2298
Mt.Gox is one of the biggest disasters in Bitcoin history and the story is not yet complete.
Based on the available evidence, it appears that Gox lost a fairly modest amount of money (in terms of USD) in 2011 that compromises a decent bulk of the missing money. They were subsequently hacked a number of times that have been publicly reported, during which they likely lost some amount of money.

I am not entirely sure why the losses compounded over time, maybe Gox was not a profitable operation, and they took customer money to fund the losses.

Security did not seem to be a strength of Gox's. If they had been honest about the loss in 2011, it would likely have been not a very big deal, but Gox would have closed and some other exchange would have taken the spot of having the majority of trading volume.

I heard the bitcoin dump is not the first time on this June but also several weeks ago when Bitcoin is heading to reach USD 10,000. On that time, actually bitcoin is heading to exceed USD 10,000 but this Mt Gox releasing their bitcoin to the market in big numbers then impacted to price decreasing until less than USD 8,000. Now, they releasing other bitcoin to press bitcoin price to be lower than USD 7,000.
The Gox trustee did in fact sell a lot of coins on the market starting from the mid teen's down to near the February low.

In January the price was about $17k, and in Feb the low as $6k, and quickly bounced back to just under $12k. The trustee stopped selling before the price hit $6k, and the price has since declined back down to $6k multiple times, and breaching that low this past weekend. 
member
Activity: 325
Merit: 11
"In addition, the shared keypool of the wallet.dat file lead to address reuse, which confused MtGox's systems into mistakenly interpreting some of the thief's spending as deposits, crediting multiple user accounts with large sums of BTC and causing MtGox's numbers to go further out of balance by about 40,000 BTC. The majority of these funds were hurriedly withdrawn by their recipients rather than being reported."
That's pretty disturbing.Sad
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
Well is 40,000 bitcoin enough to suppress an entire global market, if theres 17 million bitcoins available I dont think thats significant enough by itself.   Perhaps only bitcoin float on exchanges is relevant in comparison for that figure and introducing 40,000 new coins previously considered 'gone' is the effect.    I dont think we can say it helps or is the majority of the reason for a trend.
Quote
while McCaleb owned it. He had sold Karpèles an insolvent exchange.
Thats a big deal and McCaleb is not sharing any responsibility apparently.  Is that legally correct because the sale was final I dont know

Quote
remained a minority owner in the company until its collapse in 2014
not final then

Good summary only thing is the price on each date is relevant and should probably be stated, explaining why previous losses can be repaid in full now

Thank you for your comments. I will work on adding more prices (I've started adding some already) and have found a good post byshadyrifles and some others that explains why the losses can now be repaid . I've tried to list the threads that provide detailed information rather than duplicating it. Some of the original threads that I've linked to show the frustration and opinions of the victims of MtGox.
STT
legendary
Activity: 3878
Merit: 1411
Leading Crypto Sports Betting & Casino Platform
Well is 40,000 bitcoin enough to suppress an entire global market, if theres 17 million bitcoins available I dont think thats significant enough by itself.   Perhaps only bitcoin float on exchanges is relevant in comparison for that figure and introducing 40,000 new coins previously considered 'gone' is the effect.    I dont think we can say it helps or is the majority of the reason for a trend.
Quote
while McCaleb owned it. He had sold Karpèles an insolvent exchange.
Thats a big deal and McCaleb is not sharing any responsibility apparently.  Is that legally correct because the sale was final I dont know

Quote
remained a minority owner in the company until its collapse in 2014
not final then

Good summary only thing is the price on each date is relevant and should probably be stated, explaining why previous losses can be repaid in full now
member
Activity: 294
Merit: 13
I heard the bitcoin dump is not the first time on this June but also several weeks ago when Bitcoin is heading to reach USD 10,000. On that time, actually bitcoin is heading to exceed USD 10,000 but this Mt Gox releasing their bitcoin to the market in big numbers then impacted to price decreasing until less than USD 8,000. Now, they releasing other bitcoin to press bitcoin price to be lower than USD 7,000.
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
<...>
This is an interesting archive fact finding chronological layout of the events that took place. Long but interesting to read. I recently read a nice post on the same topics by theyoungmillionaire called The Silk Road seized and the downfall of Mt.Gox (Bitcoin Discussion section), from early May 2018. Both approaches are different in style so reading both is no issue at all.


I read most of theyoungmillionaire posts. He has also translated one my posts into Filipino to prevent phishing scams.

Mt.Gox is one of the biggest disasters in Bitcoin history and the story is not yet complete.

For those that lost bitcoins in the Mt.Gox collapse it is only a disaster but for the bitcoin community some really valuable lessons were learned.  It also showed what speculative mania can do to the Bitcoin price.
legendary
Activity: 2240
Merit: 10532
There are lies, damned lies and statistics. MTwain
<...>
This is an interesting archive fact finding chronological layout of the events that took place. Long but interesting to read. I recently read a nice post on the same topics by theyoungmillionaire called The Silk Road seized and the downfall of Mt.Gox (Bitcoin Discussion section), from early May 2018. Both approaches are different in style so reading both is no issue at all.
legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
https://hacked.com/crypto-roundup-bitcoin-whales-eos-launch-and-mike-novogratzs-bullish-forecast/

The Tokyo Whale, (Mt. Gox trustee) has sold roughly 40,000 units of BTC and in my opinion is responsible for the bear market at the moment.

I doubt that the Coinrail hack had much of an effect on the bitcoin price.

legendary
Activity: 1274
Merit: 1924
฿ear ride on the rainbow slide
2010 Karpeles was accused of computer fraud before moving to Japan
Karpeles has been implicated in hacking and price manipulation before. In 2010,the Mt. Gox CEO was sentenced in a Paris court to a year in prison in absentia for hacking. He was living Tokyo and involved in Bitcoin at the time.

Under French law, Karpeles is not considered a criminal but rather “un délinquant,” a delinquent offender.
https://arstechnica.com/tech-policy/2014/08/why-the-head-of-mt-gox-bitcoin-exchange-should-be-in-jail/
http://gawker.com/does-mt-goxs-ceo-have-a-secret-history-of-online-payme-1534752110
https://www.documentcloud.org/documents/1227216-karpeles-english.html
https://www.documentcloud.org/documents/1227215-judgement-karpeles.html
https://bitcointalksearch.org/topic/m.5678671

I believe that this is how the attack was done: After the 2011 hack of the forum, the attacker inserted some backdoors. These were removed by Mark Karpelles in his post-hack code audit, but a short time later, the attacker used the password hashes he obtained from the database in order to take control of an admin account and insert the backdoors back in.

Mt. Gox Collapse
https://bitcointalksearch.org/topic/list-of-major-bitcoin-heists-thefts-hacks-scams-and-losses-576337

November 29, 2013. Mt Gox BTC price hits peak. (BTC $1132.26 drops over 10 days to $921.97)

February 7, 2014, Mt. Gox halts all bitcoin withdrawals.

MtGox issued a press release on February 10, 2014, stating that the issue was due to transaction malleability: “A bug in the bitcoin software makes it possible for someone to use the bitcoin network to alter transaction details to make it seem like a sending of bitcoins to a bitcoin wallet did not occur when in fact it did occur. Since the transaction appears as if it has not proceeded correctly, the bitcoins may be resent. Mt Gox is working with the bitcoin core development team and others to mitigate this issue.

February 17, 2014, with all Mt. Gox withdrawals still halted and competing exchanges back in full operation.


February 20, 2014, with all withdrawals still halted, Mt. Gox issueds another statement, not giving any date for the resumption of withdrawals.A protest by two bitcoin enthusiasts outside the building that houses the Mt. Gox headquarters in Tokyo continued. Citing "security concerns", Mt. Gox moved its offices to a different location in Shibuya. Bitcoin prices quoted by Mt. Gox dropped to below 20% of the prices on other exchanges


https://i.imgur.com/glFNsG8.png

February 23, 2014, Mt. Gox CEO Mark Karpelès resigned from the board of the Bitcoin Foundation and removed his twitter accounts. (since re-instated https://twitter.com/MagicalTux )

February 24, 2014, Mt. Gox suspended all trading, its website goes offline, returning a blank page. BTC $547.09 over 10 days $662.57

A leaked alleged internal document claimed that the company was insolvent – it had lost 744,408 bitcoins in a theft which went undetected for years.


I'm sorry I led people to trust Mtgox.
I'm sorry I allowed Mtgox to use me in this way.
I'm sorry I ever made that video to help Mtgox.  
It seemed like the right thing at the time.

But I'm sick of people claiming I said Mtgox was was solvent!
I NEVER SAID THAT, EVER!
Liquidity != Solvency

I chose my words very carefully.
That is why I read them from my own script.
I said Mtgox had lots of LIQUIDITY 7 months ago when I made that video.
That was certainly true, but is completely different from saying that they were solvent.


Transcript:
I'm Roger Ver, long time Bitcoin advocate and investor.
Today I'm at the Mtgox world headquarters in Tokyo Japan.
I had a nice chat with MTGOX CEO, Mark Karpeles, about their current situation.
He showed me multiple bank statements, as well as letters from banks and lawyers.
I'm sure that all the current withdrawal problems at MTGOX are being caused by the traditional banking system, not because of a lack of liquidity at MTGOX.
The traditional banking partners that MTGOX needs to work with are not able to keep up with the demands of the growing Bitcoin economy.
The dozens of people that make up the MTGOX team are hard at work establishing additional banking partners, that eventually will make dealing with MTGOX easier for all their customers around the world.  For now,  I hope that everyone will continue working on Bitcoin projects that will help make the world a better place.


Roger Ver

February 25, 2014,Mark Karpeles deaththreats?
Death threats are being received and such posts are causing a problem for Bitcointalk moderators.
https://bitcointalksearch.org/topic/mark-karpeles-deaththreats-486622



Some of the veiled threats got some sarcastic replies:

To whom it may concern,

 

This is a notice related to the bankruptcy proceedings of MTGOX Co., Ltd. (the Tokyo District Court 2014 (fu) no. 3830), which we are sending to you pursuant to the request from the Tokyo District Court.

 

On July 24, 2014, the Tokyo District Court 20th Civil Division issued an order to change the period for filing proofs of claims and the date for investigation of claims as follows
(please refer to the attached file.).

Detailed information for the filing of proofs of claims, including the form of the filing document and the process of the filing will be disclosed through the website of MTGOX Co., Ltd. at a later date. Your patience would be very much appreciated.

MtGox bankruptsy documents (Japan & US)
https://www.mtgox.com/img/pdf/20140618_order.pdf

(Old Date)

Period for filing proofs of claims:     until November 28, 2014

Date for investigation of claims:       February 25, 2015 10:00am

(New Date)

Period for filing proofs of claims:     until May 29, 2015

Date for investigation of claims:       September 9, 2015 1:30pm

 

This email address ([email protected] ) is used only for the purpose of sending messages, and we are unable to check and respond to any replies to this email address.

Since we plan to provide the information regarding the filing of proofs of claims and the bankruptcy proceedings by posting it on the website hosted by the bankruptcy trustee (http://www.mtgox.com/ ), please check this website.

 

Bankrupt MtGox Co., Ltd. Bankruptcy trustee Attorney-at-law Nobuaki Kobayashi

April 16, 2014, Mt. Gox gives up its plan to rebuild under bankruptcy protection, and asked a Tokyo court to allow it to be liquidated.

May 27, 2014, Coinlab files objection to re-opening MtGox
CoinLab, the former operations manager for Mt. Gox in the US and Canada, has filed an objection to the plan to revive the now-defunct exchange issued by Sunlot Holdings,
https://bitcointalksearch.org/topic/m.6976215

May 29, 2014, unlock codes for Mtgox yubikeys leaked
https://bitcointalksearch.org/topic/unlock-codes-for-mtgox-yubikeys-leaked-631044

July 30, 2014, [SCAM] The (fake) compensation process of deposits in Bitcoin market MtGox.com.
https://bitcointalksearch.org/topic/debt-repayment-of-the-company-mtgox-716917


Since its collapse, a number of Mt. Gox employees have spoken about how Mt. Gox was operating, with a picture being painted of a disorganized and discordant organization, with poor security procedures, serious issues relating to the source code of the website and a number of serious issues arising in relation to the operation of the business.

January 6, 2015 In a interview, Kraken bitcoin exchange CEO Jesse Powell discussed being appointed by the bankruptcy trustee to assist in processing claims by the 127,000 creditors of Mt. Gox.

January 16, 2015,Karpeles the real DPR?
Revealed in testimony in the Silk Road case.
Over time, the hacker regularly emptied out whatever coins they could spend using the compromised keys, and sent them to wallet(s) controlled by Vinnik. This went on for long periods, but also had breaks — a prominent second phase of thefts happened later in 2012 and 2013.
By mid 2013 when the funds spendable from the compromised keys had slowed to a near halt, the thief had taken out about 630,000 BTC from MtGox.
In addition, the shared keypool of the wallet.dat file lead to address reuse, which confused MtGox's systems into mistakenly interpreting some of the thief's spending as deposits, crediting multiple user accounts with large sums of BTC and causing MtGox's numbers to go further out of balance by about 40,000 BTC. The majority of these funds were hurriedly withdrawn by their recipients rather than being reported.
After the coins entered Vinnik's wallets, most were moved to BTC-e and presumably sold off or laundered (BTC-e money codes were a popular choice). In total some 300,000 BTC ended up on BTC-e, while other coins were deposited to other exchanges, including MtGox itself.
Some of the funds moved to BTC-e seem to have moved straight to internal storage rather than customer deposit addresses, hinting at a relationship between Vinnik and BTC-e.
The stolen MtGox coins were not the only stolen coins handled by Vinnik; coins stolen from Bitcoinica, Bitfloor and several other thefts from back in 2011 and 2012 were all laundered through the same wallets.
Moving coins back onto MtGox was what let us identify Vinnik, as the MtGox accounts he used could be linked to his online identity "WME". As WME, Vinnik had previously made a public outcry that coins had been confiscated from him (the coins in question coming from Bitcoinica).
There were other thefts and incidents explaining other missing funds from MtGox. More on that in later posts.
https://blog.wizsec.jp/2017/07/breaking-open-mtgox-1.html

Below is a summarized illustration highlighting the theft coin flow of September 2011 onwards:

The top area of the graph includes clusters unrelated to Vinnik, and appear to be part of a different theft.
Source: https://blog.wizsec.jp/2017/07/breaking-open-mtgox-1.html

August 03, 2017, MtGox Bitcoin Cash
Who owns that Bitcoin Cash?
Can it be sold to aid in the compensation of the MtGox users?

https://bitcointalksearch.org/topic/mtgox-bitcoin-cash-2062909

March 2018, the trustee Kobayashi said that enough BTC has been sold to cover the claims of creditors.
https://bitcointalksearch.org/topic/m.37684073

Critical of MtGox trustee dumping coins.

https://i.imgur.com/jSYVSfj.png
https://bitcointalksearch.org/topic/m.31806992

Creditors of the Mt Gox bankruptcy proceedings. We’re coordinating legal action to stop more than $2,000,000,000 surplus from going to the people responsible for the exchange when it was hacked, and instead have it shared among creditors who were victims of crime.
https://bitcointalksearch.org/topic/m.24392977
https://www.mtgoxlegal.com/

June 22, 2018,MtGox Trustee Halts Bitcoin Sell-Offs
Kobayashi: “The power and authority to administer and dispose of MTGOX’s assets is still vested exclusively in me, and I will implement the civil rehabilitation proceedings, including the administration of MTGOX’s assets and the investigation of claims, subject to the Tokyo District Court’s supervision,”
https://bitcointalksearch.org/topic/mtgox-trustee-halts-bitcoin-sell-offs-4517222


Mt. Gox official says they may start paying back their creditors as soon as next year. They claimed the initial discovery of the missing/hacked 850,000 Bitcoin in the year 2014, Mt. Gox has found 200,000 Bitcoin of them.

At the time of the Mt. Gox hack event in 2014, Bitcoin price was $483 which has a value of $96.6 mln for 200,000 Bitcoin.
The recovered funds have been frozen in the Mt Gox bankruptcy estate for four years, The recovered 200,000 Bitcoin is now worth an estimated $1.2 Bln in Bitcoin
 (at 1BTC=$6,100) without its forks, Bitcoin Cash.
Quite impressive investment, huh?

Kobayashi was responsible for selling vast tranches of Bitcoin reserves beginning Q4 last year to reimburse Mt. Gox users who lost money in the exchange’s mass hack in late 2013.

this is the only part of this all that matters! the START of the sale was last year DURING THE RISE. and people keep on focusing on the drop part. they literary started selling when price was $4000+ and while they were selling price kept on going up and reached $10k then $20k and all that time they were selling a lot of coins!

here is how it looks like:



Also, it might be noteworthy that for some time, DDOSing this forum coincided with dumps on then dominant Bitcoin exchange MtGox. I.e., you could DDOS this forum, which in turn made the price of Bitcoin drop. Market manipulation wild Wild West Cool

Lol, this is just toooooo funny

Kobayashi sells some bitcoins, price drops 10%
Kobayashi moves some bitcoins, price drops 10%
Kobayashi says he won't sell any coin anymore, price drops 10%

We should really be careful if this guy tweets he will go to the toilet we might see a drop of 20%

Main sources:
http://fortune.com/longform/bitcoin-mt-gox-hack-karpeles/
https://en.wikipedia.org/wiki/Mt._Gox
https://www.businessinsider.com/mt-gox-ceo-mark-karpeles-hacked-i-was-about-to-die-2018-3#OBDQt7MrmmMhr2Hh.99

This is an ongoing project and this post will be edited regularly. Corrections, additions and comments are welcome.
Jump to: