So ~30K of ~30K in BTC has been lost?
The amount totals to ~24K BTC.
Why was the majority of this not in a cold wallet?
How long under normal operation would it take for BitFloor to recoup the loss in the form of fees?
Topic: bitfloor needs your help! - page 42. (Read 177467 times)
The amount totals to ~24K BTC.
Why was the majority of this not in a cold wallet?
How long under normal operation would it take for BitFloor to recoup the loss in the form of fees?
I understand they can decrypt and use that coin tell me your website or even anything if u want me to secure 
email us we will investigate
[email protected]
email us we will investigate[email protected]
So ~30K of ~30K in BTC has been lost?
The amount totals to ~24K BTC.
Oh well that is worse by the description above I thought only the hot wallet funds were lost. So there was an online plaintext copy of the cold wallet?
So ~30K of ~30K in BTC has been lost?
So ~30K of ~30K in BTC has been lost?
How long, given average operation, would it take to regain the 25K in fees?
unencrypted backup 
Yes. It was made when I manually did an upgrade and was put in the unencrypted area on disk. I realize the details of the failure and attack are interesting but I am currently focused on user accounts and exchange status going forward.
unencrypted backup
Please quantify the amount of BTC lost as well as the total BTC owed.
What % of BTC were lost?
From the tx it looks like 30K BTC in outputs (although one involved two large outputs so it is unclear what is going on there).
What % of BTC were lost?
From the tx it looks like 30K BTC in outputs (although one involved two large outputs so it is unclear what is going on there).
This was almost all of the BTC.
Was there a loss of any USD funds?
No. All USD bank accounts are secure. And all records for the current status of the exchange (accounts, trades, etc) are all also secure.
Please quantify the amount of BTC lost as well as the total BTC owed.
What % of BTC were lost?
From the tx it looks like 30K BTC in outputs (although one involved two large outputs so it is unclear what is going on there).
Was there a loss of any USD funds?
What % of BTC were lost?
From the tx it looks like 30K BTC in outputs (although one involved two large outputs so it is unclear what is going on there).
Was there a loss of any USD funds?
As much as I regret the post I am about to write I feel that it is only fair and holding to the spirit of BitFloor that I disclose everything that is going on and make the information available. Please read the entirety of the post. As always, if you have any questions please post them here versus contacting support so that other users may benefit from the answer (unless it is private).
Last night, a few of our servers were compromised. As a result, the attacker gained accesses to an unencrypted backup of the wallet keys (the actual keys live in an encrypted area). Using these keys they were able to transfer the coins. This attack took the vast majority of the coins BitFloor was holding on hand. As a result, I have paused all exchange operations. Even tho only a small majority of the coins are ever in use at any time, I felt it inappropriate to continue operating not having the capability to cover all account balances for BTC at the time.
Due to the serious nature of what has happened I am currently evaluating options for BitFloor. One of the last things I want to happen is for BitFloor to shutdown and cause more panic in the bitcoin community. The platform itself is very valuable and provides an important and friendly service to many users.
BitFloor is very much focused on the end user and creating a reliable and trusted platform for everyone. Through exchange user support, I can continue to operate BitFloor. I believe that posting the exchange source and being even more transparent about operations would be a step in this direction if we were to continue operating. BitFloor is currently the #4 USD exchange and #1 in the US.
As a last resort, I will be forced to fully shut BitFloor down and initiate account repayment using current available funds. I still have all of the logs for accounts, trades, transfers. I know exactly how much each user currently has in their account for both USD and BTC. No records were lost in this attack.
I realize that saying that I appreciate everyone's understanding is a moot point, however I do wish to re-iterate that my goal is to find the best and most reasonable way forward for BitFloor customers and the exchange and not create more panic that the community has already seen time and time again.
I would like to keep this thread focused on evaluating ideas of BitFloor operation and will create a separate thread for discussion (see below) about the actual transactions and tracing the coin theft. I will not speak at detail about the actual breach at this time as my current focus is on the future and not the past.
In the intrest of information for tracking stolen coins:
https://bitcointalksearch.org/topic/bitfloor-coin-theft-details-105819
~Roman
Last night, a few of our servers were compromised. As a result, the attacker gained accesses to an unencrypted backup of the wallet keys (the actual keys live in an encrypted area). Using these keys they were able to transfer the coins. This attack took the vast majority of the coins BitFloor was holding on hand. As a result, I have paused all exchange operations. Even tho only a small majority of the coins are ever in use at any time, I felt it inappropriate to continue operating not having the capability to cover all account balances for BTC at the time.
Due to the serious nature of what has happened I am currently evaluating options for BitFloor. One of the last things I want to happen is for BitFloor to shutdown and cause more panic in the bitcoin community. The platform itself is very valuable and provides an important and friendly service to many users.
BitFloor is very much focused on the end user and creating a reliable and trusted platform for everyone. Through exchange user support, I can continue to operate BitFloor. I believe that posting the exchange source and being even more transparent about operations would be a step in this direction if we were to continue operating. BitFloor is currently the #4 USD exchange and #1 in the US.
As a last resort, I will be forced to fully shut BitFloor down and initiate account repayment using current available funds. I still have all of the logs for accounts, trades, transfers. I know exactly how much each user currently has in their account for both USD and BTC. No records were lost in this attack.
I realize that saying that I appreciate everyone's understanding is a moot point, however I do wish to re-iterate that my goal is to find the best and most reasonable way forward for BitFloor customers and the exchange and not create more panic that the community has already seen time and time again.
I would like to keep this thread focused on evaluating ideas of BitFloor operation and will create a separate thread for discussion (see below) about the actual transactions and tracing the coin theft. I will not speak at detail about the actual breach at this time as my current focus is on the future and not the past.
In the intrest of information for tracking stolen coins:
https://bitcointalksearch.org/topic/bitfloor-coin-theft-details-105819
~Roman
Jump to: