Pages:
Author

Topic: Cannabis Road hacked despite using 3 levels of multi sig, 200 BTC hacked - page 3. (Read 2864 times)

legendary
Activity: 1148
Merit: 1014
In Satoshi I Trust
maybe its just a lie and they ran off with the money
sr. member
Activity: 254
Merit: 1258
Drug sites like the one in the OP should be expected to get hacked, they can't try to come after the person legally if they even know who it is and anyone dealing in this activity should have expected it as every one of these sites get hacked or taken by the feds.
member
Activity: 69
Merit: 10
That hacker should be hired by some big company like google or microsoft (after some years in jail of course).
hero member
Activity: 700
Merit: 500
So how does this happen then? Was their server where the main hot wallet was storing bitcoins not multisig for protection or how does that work? Things that make you go hmmm.

http://www.coindesk.com/black-market-cannabis-road-hacked-loses-100000-bitcoin/ 

Quote

Multisig employed

The success of the attack is particularly notable given that Cannabis Road had moved to integrate safeguards aimed at better protecting user funds through multi-signature technology, an evolution of the traditional wallet offering that introduces an arbitrator to the transaction process.

In a May interview with DeepDotWeb, Crypto indicated that Cannabis Road was using a hybrid version of multisig, however, in part to make the technology easier for its customers to use.

At the time, he indicated that Cannabis Road had added three levels of multisig in response to a rise in attacks against illicit websites, explaining:

    “All three levels start off the same, asking for public keys of the buyer, vendor and market to create the shared (multisignature) address. The buyer sends funds to the shared address. Once the buyer is happy, the buyer agrees to finalize the order, this is where the three levels are offered.”

Two more advanced levels were added on top of this service, both of which put restrictions on the situations in which users would be asked to send their private keys.

Pages:
Jump to: