Pages:
Author

Topic: bitstamp 18,000 bitcoins stolen? -confirmed - page 10. (Read 15061 times)

sr. member
Activity: 378
Merit: 250
newbie
Activity: 34
Merit: 0
We don't know if it's a hack or a technical problem, anyway.

I am trying to reach Nejc Kodrič, Bitstamp CEO, because if it's a hack, I may be able to help.
I did help a lot with the BTer's hack of 51M Nxt, and that experience may be profitable.

But I don't know how to contact him. Anyone has an idea?
hero member
Activity: 560
Merit: 504
Still all talk and no proof. We have address signing, time to make use of it.
Unless it's 100% clear what happened and what parts of the system were compromised, I don't think
it's a particularly good idea to load the cold private keys onto any electronical system (and, so, make
them hot) just to sign a message and calm people down. That the cold private keys remain private
is the most important thing now.

You don't have to load your private keys to an online system in order to sign a message for an address. You could just as well sign that message on a computer not connected to the Internet whatsoever and then just publish the message, the address, and the according signature.
Certainly, but any computer in the vincinity of any person affiliated with bitstamp is to be considered a possible attack vector (even the
smartphone of the cleaning lady) until it's 100% cleared up what happened. They could buy a new computer in a local shop, take out the
wifi module and then do all the signing by hand and later destroy the computer. That would be ok. But I still think the marginal benefit simply
doesn't justify the risks involved with loading the privkey to any computer at this moment.
full member
Activity: 130
Merit: 100
Tipsters Championship www.DirectBet.eu/Competition
I guess thieves would mix the coins then sit on them for a while.

A big dump after a security breach would looks very suspicious and they risk having their funds frozen before they can withdraw
sr. member
Activity: 350
Merit: 250
Honest 80s business!
Wow,

Could this be the reason for the dump? The thieves want to convert to fiat as quickly as possible, they clearly dont wanna be caught with their pants down! Stuff of pot boilers but just may be true. Just maybe Bitstamp is also playing a game here, after the great Gox debacle, this would have to rank as the next big heist in BTC history. Ofc this is excluding the greatest robbery ever - USMS stealing SR bitcoins!  Grin

If the address with 18k BTC is indeed an address held by the attacker, then they definitely haven't dumped the coins yet. How could they? At least the price-decline over the past few days didn't have jack to do with this incident.
legendary
Activity: 1061
Merit: 1001
not good, not good at all

bitstamp do appear a very professional exchange though, so am sure anyone with losses will get reimbursed

wondering if hackers will sit on coins or immediately dump, as that will crash price further
legendary
Activity: 1232
Merit: 1011



"the bulk" meaning some coins are indeed missing.

so it is confirmed.   Grin


0.1 btc fee is huge for any transaction.

also, I noticed that only addresses who had bitcoins deposited in the last 24 h are on the list. so I guess those addresses were compromised.
legendary
Activity: 1022
Merit: 1005
Wow,

Could this be the reason for the dump? The thieves want to convert to fiat as quickly as possible, they clearly dont wanna be caught with their pants down! Stuff of pot boilers but just may be true. Just maybe Bitstamp is also playing a game here, after the great Gox debacle, this would have to rank as the next big heist in BTC history. Ofc this is excluding the greatest robbery ever - USMS stealing SR bitcoins!  Grin
sr. member
Activity: 350
Merit: 250
Honest 80s business!
Still all talk and no proof. We have address signing, time to make use of it.
Unless it's 100% clear what happened and what parts of the system were compromised, I don't think
it's a particularly good idea to load the cold private keys onto any electronical system (and, so, make
them hot) just to sign a message and calm people down. That the cold private keys remain private
is the most important thing now.

You don't have to load your private keys to an online system in order to sign a message for an address. You could just as well sign that message on a computer not connected to the Internet whatsoever and then just publish the message, the address, and the according signature.
jr. member
Activity: 52
Merit: 1

not true.

the fees have nothing to do with the number of coins.

With size of transaction, many addresses -> large size.
legendary
Activity: 1232
Merit: 1011
no panic dude, that address was collecting bitcoins from compromised bitstamp addresses for 24 h.

Maybe a typo then or just generosity, either way it says nothing about who the wallet's owner is.


well, we do know that stamp uses standard fees 0.0001 when moving coins.

here we have some transactions with 0.55, 1 BTC, 0.1 BTC fees.


You can't use standard fees when moving that many coins from that many addresses in one go
Gonna take too much time to confirm




not true.

the fees have nothing to do with the number of coins.
hero member
Activity: 560
Merit: 504

You can't use standard fees when moving that many coins from that many addresses in one go

But no way you need 1 BTC. There's only one reasonable explanation: Someone was in a rush.
newbie
Activity: 42
Merit: 0
no panic dude, that address was collecting bitcoins from compromised bitstamp addresses for 24 h.

Maybe a typo then or just generosity, either way it says nothing about who the wallet's owner is.


well, we do know that stamp uses standard fees 0.0001 when moving coins.

here we have some transactions with 0.55, 1 BTC, 0.1 BTC fees.


You can't use standard fees when moving that many coins from that many addresses in one go
Gonna take too much time to confirm

legendary
Activity: 1232
Merit: 1011
no panic dude, that address was collecting bitcoins from compromised bitstamp addresses for 24 h.

Maybe a typo then or just generosity, either way it says nothing about who the wallet's owner is.


well, we do know that stamp uses standard fees 0.0001 when moving coins.

here we have some transactions with 0.55, 1 BTC, 0.1 BTC fees.
legendary
Activity: 1246
Merit: 1000
no panic dude, that address was collecting bitcoins from compromised bitstamp addresses for 24 h.

Maybe a typo then or just generosity, either way it says nothing about who the wallet's owner is.
hero member
Activity: 560
Merit: 504
Still all talk and no proof. We have address signing, time to make use of it.
Unless it's 100% clear what happened and what parts of the system were compromised, I don't think
it's a particularly good idea to load the cold private keys onto any electronical system (and, so, make
them hot) just to sign a message and calm people down. That the cold private keys remain private
is the most important thing now.
newbie
Activity: 42
Merit: 0
Someone posted this address in a comment on some article. He said that was the address where his bitcoins were sent to. from his bitstamp address. (something like that).

1L2JsXHPMYuAa9ugvHGLwkdstCPUDemNCf

So thief as 18,000 bitcoins from the alleged theft of bitcoins from bitstamp?

Is this true or not?

Article:
http://www.coindesk.com/bitstamp-reports-hot-wallet-issue-tells-customers-not-deposit-bitcoin/

That's a cold storage address of bitstamp.
They started to move coins as soon as they found the hack.
They moved the last coins as soon as they closed the website.
legendary
Activity: 1232
Merit: 1011
That 18k BTC wallet could also be Bitstamp moving coins around or to safety, where's the proof those coins are in the hands of the supposed hacker?

timestamps of the transactions match perfectly with the attack

huge and non standard miner fees

That's not proof. Stamp could have set high fees also to move those coins as quickly as possible after they discovered the breach.
So there's two possibilities:

1) Bitstamp are being stupid
2) Bitstamp were hacked by someone stupid

Well, that's encouraging. Cheesy

Well people generally act stupid in a state of panic. A wallet breach sure must have sent Stamp owners' heart rates to new all time highs. Tongue


no panic dude, that address was collecting bitcoins from compromised bitstamp addresses for 24 h.
legendary
Activity: 1246
Merit: 1000
That 18k BTC wallet could also be Bitstamp moving coins around or to safety, where's the proof those coins are in the hands of the supposed hacker?

timestamps of the transactions match perfectly with the attack

huge and non standard miner fees

That's not proof. Stamp could have set high fees also to move those coins as quickly as possible after they discovered the breach.
So there's two possibilities:

1) Bitstamp are being stupid
2) Bitstamp were hacked by someone stupid

Well, that's encouraging. Cheesy

Well people generally act stupid in a state of panic. A wallet breach sure must have sent Stamp owners' heart rates to new all time highs. Tongue
legendary
Activity: 1232
Merit: 1011
That 18k BTC wallet could also be Bitstamp moving coins around or to safety, where's the proof those coins are in the hands of the supposed hacker?

timestamps of the transactions match perfectly with the attack

huge and non standard miner fees

That's not proof. Stamp could have set high fees also to move those coins as quickly as possible after they discovered the breach.


no. coins will not move any faster if you put 1 btc fee.

someone was generous with the fees.
Pages:
Jump to: