Topic: BTC Stolen from Poloniex - page 16. (Read 167444 times)

Wow Tristan! You made the front page headlines on Coindesk maybe not how you wanted it to be, but was well written in explaining your issue and your resolve. hang in there!

This was my thought too.  At the risk of simplifying things too much, a fix for this might be something like (pseudo-codey):

BEGIN TRANSACTION
INSERT INTO Ledger ...
UPDATE UserBalance SET balance = balance + @amt WHERE user_id = @id AND (balance + @amt) > 0
// if previous update didn't update any rows, rollback
INSERT INTO WithdrawalQueue ...
COMMIT

Bonus points if you digitally sign the records in the database with a private key known only to your application to help guard against direct database manipulation.

But as someone writing financial software, he should have known this already.  Of course it could just be an oversight on his part (everybody makes dumb mistakes sometimes), but if there are bugs like this, there are likely other data consistency bugs that can be exploited as well.

In reference to the ^^^above^^^ Tristan (Busoni) already stated that he will implement this feature soon. See here: https://bitcointalksearch.org/topic/m.5519238


Yes absolutely, your BTC was stolen!

The moment you handed over your Bitcoin for someone else to control (Poloniex) you donated your Bitcoin to that person, (in return for an IOU note) so that you could trade with it, and then it was stolen from that person by a third party. Theft, pure and simple!

Now, what are you going to do about it? Whine about it, and say that you want interest from someone who can't (or won't) pay it?

My Proposal For Moving Poloniex Forward

Poloniex has now been hacked twice in a few weeks and significant amounts of BTC and XCP were stolen during these thefts. The first time it was only partly Tristan's fault since there was a major security hole in the Counterparty protocol allowing the theft to take place. Poloniex could have had security measures in place to have prevented it though, but didn't. Now it has happened again with BTC.

It is clear to me that Tristan (and/or the programmers he currently works with) does not have the programming/security knowledge required to operate an exchange without other competent coders/security experts to help him. I hope that he is able to see this, even if it hurts on a personal level to accept it. I have employed many programmers in the past and I have often found that they are overconfident in the work they deliver, until someone more competent points out the flaws...

Having said the above I also think that Tristan has shown great honesty and integrity during this incident, (and during the XCP incident), by holding up his hand and admitting that it was his mistake that led to the exchange being hacked. He has also been very pragmatic in the way he is dealing with the problems at hand and trying to find the best solution for moving forward.

In my personal opinion I value honesty and integrity higher than technical competence when dealing with companies in the Cryptocurrency business. You can hire technically competent people, but without honesty and integrity we are always screwed in the end anyway!

Since I believe that Tristan is honest and has integrity (and is pragmatic) I also believe that Poloniex could be become a huge success under his ownership, despite this unfortunate incident, but only if he deals with things the right way from here on.

From my personal experience and 25 years of business experience, if I was the owner of Poloniex this is what I would do now:

1. Post the stolen balance on each users account so they know what is owed to them. (He has already said he will do this, before it was even suggested)

2. Post a new document on the website detailing all events regarding the hacking of the site and the resulting theft.

I mean things like:

a) The exact time the attack happened.
b) The IP address of the hacker.
c) The exact amount of BTC stolen and the address it was sent to. I know this information is floating around, but I would like to see it posted on the site from Tristan himself.
d) Any other information pertinent to the attack and outlining his proposals for how he plans to deal with the situation.
e) Link this document from the home page so that all users understand what is going on and what is being proposed and/or done.
f) Keep this document updated with new information as it is decided, rather than relying on all his users to have to go through pages and pages with posts on an external forum...

3. Calculate exactly how much BTC he will need to do all of the following (and then add an extra 15% for safety):

a) Reimburse all the stolen BTC from his customers.

b) Hire 2-3 excellent programmers/security experts to help him do an extensive review of his code and operating procedures and come up with solutions to improve the security of the site. (I would suggest trying to get people like Mike Hearn: https://bitcointalk.org/index.php?action=profile;u%3D2700 involved). Judging from some of the comments in this thread it appears as if Poloniex is making some serious mistakes when it comes to security, even in regards to the patches that are currently being implemented.

c) Setup an initial "insurance fund" of let's say 100 BTC (to start with, this will grow, see below) that is kept in cold storage and requires multignatures to release any money from cold storage (Tristan and one more person out of two trusted individuals from the Bitcoin community).

d) Hire a security expert on an ongoing part time basis who will constantly monitor the site and look for any unusual behaviour, as well as keep himself informed of all other hacks and security breaches on other exchanges. This person will setup SMS and email alerts for him and Tristan to immeditaly get informed of anything suspect happening on the site, and constantly monitor and try to improve the security on the site so that Tristan can focus mainly on the building the business.

4. Once he has calculated the funds required to do all of the above, (which I am guessing could be in the 200-300 BTC range), calculate what would be a reasonable percentage of the exchange for Tristan to sell in an IPO, in order for investors to get a decent ROI on their investment.

I don't think this has to be overly generous in order to be successful, assuming that Tristan can show that he is willing to build this business into something big...

Here is a sample calculation of what I mean:

a) Let's say that the average daily turnover on the exchange is currently around 500 BTC and the fees are only bringing in 30 BTC per month. The IPO document may very well state that in order for them to get a good return the exchange has to grow to 2000 BTC turnover and 120 BTC monthly income.

Let's see how an IPO where 40% of the Poloniex is sold in order to raise 200 BTC could look, (assuming that investors believe the exchange can grow to 2000 BTC per month turnover, which I do):

Monthly income: 120 BTC
Monthly operational costs (with new security measures in place, Cloudflare, part time security expert, secure hosting etc.): 60 BTC/month
Monthly return to owners (including Tristan): 60 BTC, of which 40% or 24 BTC/month in this scenario goes to the investors as dividend.
Monthly dividend on a 1 BTC investment (assuming the site can grow to 2000 BTC/month turnover) would be: 0.12 BTC

It would take less than 9 months for an investor to get the entire investment back in the above scenario. If you also assume that Poloniex is still standing and successfully operating in 9 months the value of the shares might also have increased to 1,5 BTC (or more) by that time.

5. In regards to the "insurance fund" mentioned above I suggest that this is something volountary and only for those users who want to take part in it, since it is not a standard feature on any of the current Crypto exchanges as far as I know.

Each user of the site would have the possibility to opt-in to take part of insurance feature anytime they want to, but there would be certain conditions.

Your entire funds may not be insured for example. The total of the fund kept in cold storage will be shown on the "insurance page" and also the amount of BTC that is currently being insured with a percentage shown. So it may very well be that only 55% of your funds are currently insured, but at least then you know that even in a worst-case-scenario where Poloniex is hacked that is the maximum you could lose, quite different from MtGox for example...

There would be conditions imposed on the insured accounts and every insured user would have to follow certain security procedures in order to take part in the insurance scheme.

I mean things like the following:

a) Insured users would have to pay a 50%-100% premium on all trading fees, (0,3% instead of 0,2%).

b) Or perhaps an average of their BTC holdings would be calculated each night and a small percentage of that would be deducted as an insurance fee? This would help reduce the number of people who hold large balances on their accounts for long periods of time without trading it, which would also reduce liability for the site in case of an attack.

b) Every insured user would be required to use 2-factor authentication and a minimum 12 character password.

c) Perhaps insured users would be required to submit the IPs (or at least the IP ranges) that they wish to use to login to their accounts.

d) Whatever other security measures can be implemented to make it as secure as possible.

It is clear that after two successful attacks against Poloniex it will continue to be a prime target for hackers and thieves. Tristan needs to have security as the #1 concern for Poloniex from here on, because regardless of how honest he is and how much integrity he has Polniex may not survive another attack...user confidence will disappear eventually. 

The fact that he has been transparent and forthcoming about the mistakes and what happened, as well as pragmatic in his way of solving it, tells me that there is a good chance this could turn into a great business, but only if he takes the right steps from here and puts security at the forefront of everything from here on...

Tristan, bring in the right people to help you secure the site. You have our confidence that you are honest and trustworthy. Now show that you are also capable of admitting your own weaknesses and bring in the right people to help you.

Just imagine how good we would feel if people like Mike Hearn who said this upthread:


Imagine if he would come back after your have done the improvements to security and reviews the site and says something along the lines of:



Mike is a security specialist at Google so obviously his demands for what is secure and what is not are going to be fairly high... These are the type of people you need to ask for help in securing Poloniex and making it into one of the top Cryptoexchanges.

I believe in you and I think you can do it!

Good luck!

Yes, I'm socialist, and your money will be mine, that's my basic natural human right.

corect me if i am wrong but he could just pause trading for a day when he understood the theft stating that the website is undergoing some major upgrades. after all he said that poloniex was getting bigger and bigger every day...

then there would be no big withdrawal and i believe he could have earned the lost coins in a few weeks from the fees. And noone would ever notice.

Instead he choose to tell all what happened and he accepted that it is his fault and that he will pay back. +1 to him for that.

Now of course we have to wait and see if people really will get back their btc... but personally i thought i had lost all of my Darkcoins but i got them back just fine.

 
P.S. Of course using whichever centralized exchange has the same risks. I mean would anyone believe that MtGox will ever say that it lost 500m in bitcoins in the course of years and never realised that?

It's not good news - unfortunately, but nevertheless
+1 for being more Transparent than Major Exchanges (Bitstamp, MT. Gox, BTC-E) 

It will survive. It's a good exchange site, let down by poor programming and theft by poor solutions to the recent hack.

So when someone robs your bank....do the bank deduct the losses from your bank account?

Do the bank say, "You should try to get whatever you can instead of crying like a idiot. You always know the risks with these banks and you put your money in them."

Please do think on a higher level of intellect like some humans are capable of.....but i know you are not.

How does this ever get better?
Do you think they can recover fully and grow again?

Why did you edit out the first line when re-quoting me?

The 1st line is "You are not alone. Read my post 227."

So instead of asking me a question.....read post 227......simple as 1+1=2

You should try to get whatever you can instead of crying like a idiot. You always know the risks with these new exchanges and you put your money in them.

Yesterday I withdraw some btc from my account. After that I receive a confirmation mail. But when I click the confirmation link, it says "Invalid confirmation URL."

But my balance is deducted and never receive it to sended account.

Any help?

So exactly what do you suggest, genius?

What is situation with XCP's? Are all safe in poloniex account or is there some new problem and coins gone? Without answers you make only users more confused. Two days freezed cashouts and now errors without any explanation for this?

Fecking socialist.

Busoni?

I had about 0.36 BTC and 0.15 BTC in order for PMC. Now I canceled the PMC order and have only 0.1666 BTC?

Please help.

rot in hell

 

Perhaps you do not understand basic natural human right, not man-made Mickey Mouse human rights, called 'voluntary contract'.

rot in hell