Topic: Bitfinex Hacking (Read 16048 times)

μέρος από τα κλεμένα bitcoin του bitfinex άρχισαν να μετακινούνται, μόνο 153 btc αλλά η bitfinex προσφέρει 5% από αυτά αν μπορέσει κάποιος να βρει που θα καταλήξουν.

https://www.reddit.com/r/Bitcoin/comments/5qg60c/bitfinex_attacker_moved_153_btc_137_000/#oo

https://twitter.com/bitfinex/status/824924175198466050

δεν έχω διαβάσει κάτι. Μπορεί να έχουν στοιχεία για την ταυτότητα του?

ούτε που ξέρω. Του λένε έλα σε επαφή μαζί μας μέσω bitmessage και σου έχουμε μια πολύ ενδιαφέρουσα προσφορά να σου κάνουμε. Τώρα τι δεν το γράφουν.

Η bitfinex προσπαθεί να επικοινωνήσει με τον hacker γιατί όπως λένε έχουν να του κάνουν μια πολύ ενδιαφέρουσα προσφορα

http://blog.bitfinex.com/announcements/message-individual-responsible-bitfinex-security-incident-august-2-2016/#oo

Message to the individual responsible for the Bitfinex security incident of August 2, 2016
21 Oct 2016 at 08:02 PM (UTC) 0 Comments 
5 Likes
 Share
We would like to have the opportunity to securely communicate with you. It might be possible to reach a mutually agreeable arrangement in exchange for an enormous bug bounty (payable through a more privacy-centric and anonymous way).

ακόμα να βρούνε πως έγινε το hack

https://www.bitfinex.com/posts/135

πάντως από τι λένε σταμάτησαν και την συνεργασία τους με την bitgo.

We are beginning the process of bringing the platform online in a controlled and secure way. Currently the site is available on a read-only basis as we continue to work towards enabling full functionality. This means that users will be able to log into their accounts but trading, depositing, and withdrawing will remain disabled at this time.

Please be aware of the following changes required by the ongoing platform recovery:
Users will be required to reset their password.
Users will be required to reset their 2FA, if applicable.
Clef has been disabled for all accounts. We have reset our security keys with Clef, requiring users to re-enroll.
All API keys have been revoked. The creation of new API keys will be re-enabled within the next 48 hours.
Please take this time to log in and review your account and balances, taking note of the adjustments caused by the closing of open margin positions and the application of the Extraordinary Loss Adjustment. The loss adjustment is represented by your balance in “BFX” tokens which are priced at 1.00 USD until we are able to allow trading of that token, likely within the next week. The trading of BFX tokens may be restricted for US customers.
Full platform functionality will come online in progressive steps in the coming days. Withdrawing, depositing and exchange trading will come online first, with margin trading (for non-US customers) to resume sometime after that. Further announcements will be made when the schedule for turning on those features is finalized. Once again, we thank you for your patience.
The Bitfinex Team

 

Following the theft on August 2nd, the Bitfinex team has been working tirelessly towards bringing the platform back online in a secure and controlled manner. We have finalized the accounting of losses incurred and are currently coordinating strategic plans for compensating customers.

We intend to come online within 24-48 hours with limited platform functionality. Additional announcements will be made as we progressively enable more platform features and return to full operations. We appreciate that our customers and the public want this handled quickly, but it needs to be done a way in which all assets are secure and immune from vulnerabilities. Every resource is being leveraged to make that happen in a safe and optimal way.

As disclosed in earlier announcements, all withdrawals, open orders, and open funding offers have been cancelled and all financed positions have been settled. Exact settlement prices were published on August 3rd.

After much thought, analysis, and consultation, we have arrived at the conclusion that losses must be generalized across all accounts and assets. This is the closest approximation to what would happen in a liquidation context. Upon logging into the platform, customers will see that they have experienced a generalized loss percentage of 36.067%. In a later announcement we will explain in full detail the methodology used to compute these losses.

We are actively discussing various strategic options with numerous potential investors as part of our strategy to fully compensate our customers. Such discussions, however, are in early stages and will likely take time to play out. In the meantime, In place of the loss in each wallet, we are crediting a token labeled BFX to record each customer’s discrete losses. Tokens will be distributed without release or waiver. The BFX tokens will remain outstanding until redeemed in full by Bitfinex or possibly exchanged—upon the creditor’s request and Bitfinex’s acceptance—for shares of iFinex Inc. We are still sorting out many details on this; we will post further updates in the coming days.

Thank you for your continued patience and for the many generous offers of support that we have received over the last several days. Notwithstanding this attack, we continue to believe in the possibilities associated with bitcoin. We will continue to update our customers and the public as and when we can.

όντος αν πάρεις αυτά τα btc είναι σαν να έχεις κάνει αποδοχή κλεμμένων γιαυτό βάλε μια διεύθυνση που δεν την έχεις χρησιμοποιήσει ποτέ αν όντος αυτός ο τύπος λέει αλήθεια και δεν μας τρολάρει όλους. Τώρα αν κερδίσεις 1000btc υπάρχουν δεκάδες τρόποι για να τα εξαφανίσεις  και μετά να εξαφανιστείς μαζί τους

Investigating - We are currently in an ongoing process of restoring limited functionality in a secure environment, with full functionality coming afterwards in progressive stages. The first step is bringing the site online and allowing users to login and view the state of their accounts. Note that initially trading, deposits, withdrawals, and other core site functionality will be disabled.

To accommodate the relaunch, all withdrawals, open orders, and open funding offers will be canceled. Furthermore, in order to compute losses for relevant parties, settlement must occur in the affected accounts. Margin positions for all pairs will be settled and closed using the following prices, representing the midpoint of the bid and ask on August 2, 2016 at 18:00:00 UTC:

BTCUSD:   604.06000000
ETHUSD:   10.19050000
ETHBTC:   0.01689900
ETCUSD:   2.83700000
ETCBTC:   0.00471495
LTCUSD:   3.75180000
LTCBTC:   0.00621295

Further announcements about the next steps of the relaunch will be posted as progress is made. All significant changes to feature availability will be announced in advance. We will strive to keep you as informed as we can.

The Bitfinex Team

It's not meant to be reassuring. It's meant to be real. ANYBODY could be next. Unless your coins are at the bottom of the sea, they're at risk. There are no bailouts for bitcoin companies, no Federal Reserve to print off more coins when an exchange blows up, nobody to protect you from your own mistakes. THIS IS BITCOIN!!!

So far, Kraken hasn't lost any coins, which is more than can be said for most but nobody is invincible. Staying secure is a constant, ongoing battle. The hackers, thanks to their successes, are amazingly well financed and have an unlimited amount of time with which to mount their attack. We, on the other hand, need to provide an uninterrupted, perpetual, flawless performance.

If we weren't confident in our abilities, we wouldn't be in this business. There's a difference between being confident and being cocky though. If you don't think you could be next, you're next. Nobody has a lock on security but I think our record speaks for itself.

I'm not out there opportunistically trying to pump Kraken because I think it'd be in poor taste. Not only that, I'm too busy battening down the hatches to proactively capitalize on this disaster.

It's been a shitty day. I'm thinking about the Bitcoinica liquidation of 2012 that has not concluded, the MtGox liquidation of 2014, whose victims we've been helping for the past two years, that has not concluded, and the thousands of people who've had their lives destroyed. It seems that every two years we must relearn our lessons.

I apologize if I have not been reassuring. If you don't control the keys, it's not your bitcoin.

An Incident Update Has Been Posted
As it stands, we are continuing to investigate the hack and cooperating with authorities and the top blockchain analytic companies in the space to track the stolen bitcoins. In the meantime, we have been working on getting the platform up and running on a secure instance so that users can log in and see if their accounts have been affected as well as the state of their positions and orders. We hope to have an update with more substance later today UTC time.