Why is there no notice on the Poloniex website of this? Did I miss it?
Notice was on twitter box, right side of site.
Topic: BTC Stolen from Poloniex - page 30. (Read 167480 times)
Notice was on twitter box, right side of site.
BUT I CAN WITHDRAW NOW OR NOT???
Why is there no notice on the Poloniex website of this? Did I miss it?
No way somebody can trust an exchange that has been proven weak.
Pay your debts, close your exchange -and search for a regular job. Poloniex is burned now.
Pay your debts, close your exchange -and search for a regular job. Poloniex is burned now.
Yes let's all move to a new exchange which isn't transparent so we can all get burned with no come back. Great Idea.
Bussoni, keep up the good work and transparency, and send me a BTC address, I'll contribute something from my personal holdings
any eta from now to open market again ?
No way somebody can trust an exchange that has been proven weak.
Pay your debts, close your exchange -and search for a regular job. Poloniex is burned now.
Pay your debts, close your exchange -and search for a regular job. Poloniex is burned now.
The major problem here is that the auditing and security features were not explicitly looking for negative balances. They add deposits and withdrawals and check that accounts are in balance. If you have 2 BTC, withdraw 10 BTC, and are left with -8 BTC, the software would see that you deposited 2, withdrew 10, and have exactly what you should: -8.
This is pathetic. Any programmers would not have allowed this to happen in the first place. It's basic programming level. If you have 2 BTC, withdraw 10 BTC, then "withdrawal rejected due to lack of funds."
This is pathetic. Any programmers would not have allowed this to happen in the first place. It's basic programming level. If you have 2 BTC, withdraw 10 BTC, then "withdrawal rejected due to lack of funds."
I think you've misunderstood. The problem wasn't that it didn't check for negative balance. If you had 2 BTC, it would not let you withdraw a single amount of 10 BTC. The problem was that the withdrawals did not have atomicity, meaning that you could withdraw 10 BTC from a balance of 2 BTC by spamming lots of withdrawals for 1 BTC in a very short space of time.
And this is very silly... Running an exchange without to know transactions and atomicity...
Busoni, if you want to continue this business, pay some serious programmer to review all your transactions code. This is more important than that 12.3% .
Good work and good luck
Wow, I really hope the thief gets a good dose of karma
There were a lot of hacks recently. Maybe we should try to look for different way of store and work of exchange. Or maybe finally people would use insurance or realize not everyone can just run a company that stores people bitcoins without protection.
How to return the sent BTC (((
Did not hold BTC at Poloniex, but other altcoins - does this mean my balance will be reduced as well?
EDIT: from website:
Poloniex Exchange @Poloniex
Only BTC was taken, and only BTC will be deducted.
Meanwhile, all markets there are frozen.
EDIT: from website:
Poloniex Exchange @Poloniex
Only BTC was taken, and only BTC will be deducted.
Meanwhile, all markets there are frozen.
hey hacker Share some of the Spoils 
1KV2pUFZrSprrBsMVyA8EgAyHRi8GDYtFZ THANKS so much easy come Easy Go right 
will still support poloniex
i deposit 5 btc 1 hour ago and what next?
my btc are frozen in network
and where exactly does it say please don't make any btc deposits!!!!!
my btc are frozen in network
and where exactly does it say please don't make any btc deposits!!!!!
+1
i deposit 5 btc 1 hour ago and what next?
my btc are frozen in network
and where exactly does it say please don't make any btc deposits!!!!!
my btc are frozen in network
and where exactly does it say please don't make any btc deposits!!!!!
+1
Fairly embarrassing oversight, but kudos for being so honest about the situation and updating everyone so quickly.
I was not aware of this theft, and I stupidly sent in 10 BTC about 7 hours after your twitter announcement
https://blockchain.info/address/16CBhYouzdB4xgxeZ76RjF8wBRimtvMB2k
https://twitter.com/Poloniex/status/440734781689446400
I expect to get the entire 10BTC balance back, and NOT 12.3% less, as I would've expected you to block deposits as well, or at least put up a sign on the front page of the site waring about the hack.
Please confirm that you agree and will do so. Thank you.
https://blockchain.info/address/16CBhYouzdB4xgxeZ76RjF8wBRimtvMB2k
https://twitter.com/Poloniex/status/440734781689446400
I expect to get the entire 10BTC balance back, and NOT 12.3% less, as I would've expected you to block deposits as well, or at least put up a sign on the front page of the site waring about the hack.
Please confirm that you agree and will do so. Thank you.
This is why I asked about orders already placed. Those funds should be locked, just as funds that haven't been deposited.
I'm still curious about that.
You case is very clear cut - there's no reason to garnish 12.3% there. My case for funds on orders... not so clear cut...
busoni, you need to shut down Poloniex now and try to make your users whole from your own funds and debt. Do not continue trying to run an exchange. Your post mortem indicates that you do not have sufficient programming ability to handle other peoples money - no mention was even made of database transactions, which are a basic "database programming 101" topic. Your proposed fix of checking for negative balances is wrong and indicates that your code is almost certainly riddled with other exploitable bugs.
Please do the right thing and refund everyones outstanding balances, then wind up your operation.
Please do the right thing and refund everyones outstanding balances, then wind up your operation.
I believe paying every one affected with shares as an option will benefit both parties, one, the amount of shares should be enough to make people get their money back within 3 months and start benefiting, the second thing is you benefit having all those people stick with your exchange
I sent two hours ago BTC from a purse - didn't reach yet. They were gone?
The daemon is down. They will probably show up after he has fixed the problems.
Jump to: