BTC-E.COM NICE RECOVERY FROM THE HACK! =) - page 14.

dree12

legendary

Activity: 1246

Merit: 1077

Quote from: TTBit on July 30, 2012, 09:45:28 PM

Quote from: TTBit on July 30, 2012, 09:12:22 PM

Quote from: jwzguy on July 30, 2012, 09:01:53 PM

Quote from: TTBit on July 30, 2012, 08:50:17 PM

Um... no. 2.18 of it to: 12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav

http://blockexplorer.com/address/12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
0BTC
Did you get any out successfully?

No, that is first few. Waiting for some confirms.

1 confirm on the withdraws. Still 20 bid for 13.45, but able to sleep now.

If it is true that there is no cold wallet, you should definitely get all BTC back (as long as there was no fractional reserve). There shouldn't be a shortage of BTC because none was hacked in.

USD, on the other hand, was injected. It's a race to sell the USD as fast as possible now.

Quote from: ThiagoCMC on July 30, 2012, 09:46:59 PM

Quote from: finkleshnorts on July 30, 2012, 09:09:55 PM

Quote from: ThiagoCMC on July 30, 2012, 08:54:07 PM

OMG... I had 180 Bitcoins there... Jesus...

My latest withdraw at btc-e webpage says "confirmed", but nothing reached my wallet yet.

40 Bitcoins was "sold" there... And 140 Bitcoins are stucked at some point there... In Russia... Damn!

Jesus no, please no...

Please... no... Oh God... lol

My documentation:

https://bitcointalksearch.org/topic/m.1066779

I have screenshots... To remember... Damn... :-/

Your bitcoin, as long as you withdraw it, should still arrive. Good luck.

Unfortunately, you might have to write off your USD, or sell it at a massive loss. There is no way BTC-E has enough to pay out the USD.

Cranky4u

hero member

Activity: 810

Merit: 1000

Btter hope this does not hit mainstream media...another BTC robbery will only shake the BTC tree more and eventually result in a collapse

DeathAndTaxes

donator

Activity: 1218

Merit: 1079

Gerald Davis

Quote from: bitcool on July 30, 2012, 09:33:17 PM

Not really. I was able to withdraw from btce many minutes after the price spiked to 40s.

You are like the guy who says riots are good because he got a free TV.

Sure some withdraws may have made it through before the attacker emptied the hot wallet but 99% of people who tried to capitalize on $40 BTC are stuck with worthless $40 IOUs. You may have lucked out but that doesn't mean a massive amount of economic damage didn't occur.

Plus I am pissed because I had 0.0087382 BTC stuck there from months ago because it was below the withdraw limit. DAMN YOU HACKER!

ThiagoCMC

legendary

Activity: 1204

Merit: 1000

฿itcoin: Currency of Resistance!

Quote from: finkleshnorts on July 30, 2012, 09:09:55 PM

Quote from: ThiagoCMC on July 30, 2012, 08:54:07 PM

OMG... I had 180 Bitcoins there... Jesus...

My latest withdraw at btc-e webpage says "confirmed", but nothing reached my wallet yet.

40 Bitcoins was "sold" there... And 140 Bitcoins are stucked at some point there... In Russia... Damn!

Jesus no, please no...

Please... no... Oh God... lol

My documentation:

https://bitcointalksearch.org/topic/m.1066779

I have screenshots... To remember... Damn... :-/

TTBit

legendary

Activity: 1136

Merit: 1001

Quote from: TTBit on July 30, 2012, 09:12:22 PM

Quote from: jwzguy on July 30, 2012, 09:01:53 PM

Quote from: TTBit on July 30, 2012, 08:50:17 PM

Um... no. 2.18 of it to: 12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav

http://blockexplorer.com/address/12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
0BTC
Did you get any out successfully?

No, that is first few. Waiting for some confirms.

1 confirm on the withdraws. Still 20 bid for 13.45, but able to sleep now.

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: Bitcoin Oz on July 30, 2012, 09:43:17 PM

The hacker injected fake usd ? My money is on Ben Bernanke.

...or his Russian doppelgänger.

Bitcoin Oz

hero member

Activity: 686

Merit: 500

Wat

The hacker injected fake usd ? My money is on Ben Bernanke.

Herodes

hero member

Activity: 868

Merit: 1000

Quote from: dree12 on July 30, 2012, 09:37:56 PM

Quote from: BkkCoins on July 30, 2012, 09:37:22 PM

Hmmm. Let's see. What's the time zone in Russia. I'm guessing about 4AM roughly.
Anyone know who to call to wake them up and freeze the exchange?

It is 6:37 in Moscow.

Time for the first vodka of the day then ! Grin

dree12

legendary

Activity: 1246

Merit: 1077

Quote from: BkkCoins on July 30, 2012, 09:37:22 PM

Hmmm. Let's see. What's the time zone in Russia. I'm guessing about 4AM roughly.
Anyone know who to call to wake them up and freeze the exchange?

It is 6:37 in Moscow.

BkkCoins

hero member

Activity: 784

Merit: 1009

firstbits:1MinerQ

Hmmm. Let's see. What's the time zone in Russia. I'm guessing about 4AM roughly.
Anyone know who to call to wake them up and freeze the exchange?

Shadow383

sr. member

Activity: 336

Merit: 250

Quote from: bitcool on July 30, 2012, 09:33:17 PM

Quote from: Aggro on July 30, 2012, 09:27:37 PM

This is probably not good news, but check on the spike on the picture, and the timing of it:

Somebody is cleaning house I believe. I think those trying to deposit and speculate are in for a rude awakening.

Not really. I was able to withdraw from btce many minutes after the price spiked to 40s.

Suggesting that they probably don't have cold storage in place - sounds an awful lot like the maximum amount that can be withdrawn is everything on the exchange.

Are people still getting BTC out?
Does anyone there even still have any? Cheesy

dree12

legendary

Activity: 1246

Merit: 1077

Quote from: EnergyVampire on July 30, 2012, 09:33:11 PM

Assuming the chat image pasted earlier was the real hacker comments, then the entire database is going to get purged. So if BTC-e didn't back up regularly, this is going to burn a ton of people.

They are probably not.

I believe this was a SQL injection. There are a few telltale signs:

The event was sudden.
The hacking was weak. If the hacker had access to the server, they may be able to empty the hot wallet directly. Instead, the hacker had to rely on BTC-E withdrawal.
The hacking seemed to involve a simple UPDATE of the USD value.

bitcool

legendary

Activity: 1441

Merit: 1000

Live and enjoy experiments

Quote from: Aggro on July 30, 2012, 09:27:37 PM

This is probably not good news, but check on the spike on the picture, and the timing of it:

Somebody is cleaning house I believe. I think those trying to deposit and speculate are in for a rude awakening.

Not really. I was able to withdraw from btce many minutes after the price spiked to 40s.

EnergyVampire

full member

Activity: 210

Merit: 100

Assuming the chat image pasted earlier was the real hacker comments, then the entire database is going to get purged. So if BTC-e didn't back up regularly, this is going to burn a ton of people.

Edit: this post of the comments: https://bitcointalksearch.org/topic/m.1066651

ydenys

member

Activity: 96

Merit: 10

Quote from: DeathAndTaxes on July 30, 2012, 09:22:58 PM

Quote from: ydenys on July 30, 2012, 09:20:16 PM

While mildly exiting, it is actually no fun. Are you, guys, saying that someone can ‘inject’ fake btc into major exchange/service provider, then exchange between the currencies/withdraw and the surplus of the coins would be recorded into the blockchain?

No. Any "faking" of USD or BTC would be on BTC-E books. The bad news is that the victims are now left with more coins on the books (BTC-e internal books) than actual coins. No amount of hacking can produce BTC from nothing.

Yep, thanks D&T, i was worried there for a while – late hour here, wine. So, basically, both owner's and user's accounts were promptly emptied by the hackers, and then some remaining users emptied each other's accounts out of pure greed, plus all who was awake withdrew all funds. No more BTC-e.

I guess their withdrawal limits were too high then.

bitcool

legendary

Activity: 1441

Merit: 1000

Live and enjoy experiments

Quote from: DeathAndTaxes on July 30, 2012, 09:22:58 PM

Quote from: ydenys on July 30, 2012, 09:20:16 PM

While mildly exiting, it is actually no fun. Are you, guys, saying that someone can ‘inject’ fake btc into major exchange/service provider, then exchange between the currencies/withdraw and the surplus of the coins would be recorded into the blockchain?

No. Any "faking" of USD or BTC would be on BTC-E books. The bad news is that the victims are now left with more coins on the books (BTC-e internal books) than actual coins. No amount of hacking can produce BTC from nothing.

book entries vs cash on hand.

Ironically over there at btc-e, because too much fake usd was injected into the system, no one wants dollar and everybody try to get some BTC or LTC. It's what to come in the future.

btc-e is just ahead of us.

JoelKatz

legendary

Activity: 1596

Merit: 1012

Democracy is vulnerable to a 51% attack.

Quote from: hazek on July 30, 2012, 09:22:41 PM

New theory: hacker emptied the BTC-e BTC wallet first and all that's happening now is him having some fun with the other users..

Close. He's using the high price to induce others to refill it with real BTC deposits.

Aggro

donator

Activity: 296

Merit: 250

This is probably not good news, but check on the spike on the picture, and the timing of it:

Somebody is cleaning house I believe. I think those trying to deposit and speculate are in for a rude awakening.

BkkCoins

hero member

Activity: 784

Merit: 1009

firstbits:1MinerQ

Only 36 BTC left. Game over soon... who's selling the last 5 BTC @ 99 each?

Maybe they don't have a COLD wallet. Maybe any amount of BTC you can buy in your account can be transferred out immediately. Maybe later today we'll hear that everyone who sold their BTC for super high was in fact giving them away because there are no USD anywhere to be found.

DeathAndTaxes

donator

Activity: 1218

Merit: 1079

Gerald Davis

Quote from: ydenys on July 30, 2012, 09:20:16 PM

While mildly exiting, it is actually no fun. Are you, guys, saying that someone can ‘inject’ fake btc into major exchange/service provider, then exchange between the currencies/withdraw and the surplus of the coins would be recorded into the blockchain?

No. Any "faking" of USD or BTC would be on BTC-E books. The bad news is that the victims are now left with more coins & dollars on the books (BTC-e internal books) than actual coins. No amount of hacking can produce BTC from nothing. The attacker merely transfered the real wealth of victims with fake balances on BTC-e books.

The "good news" is hopefully BTC-e wasn't totally stupid and after Bitcoinica reduced the size of their hot wallet. If the attacker cleaned out the hot wallet then the % that users will lose is the % that the hot wallet makes up of total funds.

Example (numbers out of my ass):

Say prior to the hack BTC-e had
5,000 BTC in hot wallet
50,000 BTC in cold wallet (plus all new deposit going directly to cold wallet)
50,000 BTC equivelent in USD.

The 5,000 BTC may be gone but victims should still get $0.90 on the dollar of their combined BTC/USD balances. Now if BTC-e ran one giant hot wallet with all incoming deposits going directly into the hot wallet then victims may have lost everything.

Topic: BTC-E.COM NICE RECOVERY FROM THE HACK! =) - page 14. (Read 51047 times)