Topic: [CLOSED] BTC Guild - Pays TxFees+NMC, Stratum, VarDiff, Private Servers - page 21. (Read 903206 times)

It all stems most likely from the Bitcointalk hack that happened. Emails were gathered and now presumably malicious 3rd parties are attempting to brute force

Yes, I'm aware of that, thanks. I deliberately didn't lock them for a reason. lesson learned I suppose  

Edit: The issue here is not the lost BTC/NMC - I've not lost a large amount. The issue is that someone is able to access accounts in the first place.


 

I locked both long ago, its there for a reason!  Open a new account and clean your computer out.  Your account logging in and wallets should be stored on a computer that you dont browse with or look at emails.  Your running your own bank, start acting like it!

btw...my lesson cost me $2200

OK, following up to this, I have already PM'd Eleuthria & am awaiting a response - but feel that I should inform miners here about my problem in an effort to ensure that nobody else's accounts have been compromised & are losing their payouts without their knowledge, so here goes.

I have been using the Guild as one of my failover pool for some time now, but upon going through my various payments from different accounts at various pools I noticed that my payments from Guild had stopped. Upon logging in I saw that both my BTC & NMC accounts payout addresses had been changed & locked to payout at 0.01 each. Both these changes were made between 2014-08-2 & 2014-10-24, which was the date the first payment went out - yes, I know, two months ago - my fault for not keeping an eye out. However, it's happened. I have changed my password & email address on my account, but as both my payout addresses have been locked, I can only remove the Guild from my pool miners & raise the auto payout payout to avoid any more payments going to the "mystery" payout addresses, which are:

BTC  16tuzEarAgnASdwvUAxAhbd6df2nUo42UD
NMC   MxeA8Bq7LcKP9zWnGYUBbWu6ZvMD4hHjXY

Looking through the payments sent to the above addresses, I can see that there have been many payments of 0.01 to both of them over a period of months, far more than just my missing payments - so it looks like I'm not the only victim - but I do hope I'm wrong.

Until I hear from the good eleuthria, I would advise everyone to check to make sure their payout addresses have not been changed & locked immediately as a matter of precaution, as well as a change of password. I sincerely hope that this is purely an isolated incident, but can't know for sure until eleuthria has investigated the issue & contacts me.

Peace  

Edit: Updated dates.

Eleuthria, you got a urgent PM 

There was a bug introduced in the wallet confirmation email function last night that was just recently corrected.  If you've had problems changing your wallet in the last 24 hours, you will have to try changing it again on your Settings page to trigger a new email confirmation.

Gotcha

There's no way to legitimately get to that page in the UI, but if you force POST data into the page as if you clicked the button, it will still trigger the email, which is what happened in this case.  However, even clicking the confirmation link would not change your locked address (the code was validly generated, the email validly sent, but the actual change can't happen due to the lock).

Ok that calms me on all but one question: if indeed the change cod is valid, how would it have been generated if I've previously clicked on the lock address button?

Assuming the email is valid, the only way for that to happen is if somebody has your login credentials.  The code to generate a wallet change code and send off an email only works if there is a valid login.  I'm looking into that address, and it looks like there was a number of accounts hit by that address, but the percentage is so low (and the majority were accounts that had a 0 balance), that it's likely the end result of the login brute force attacks (using username+password leaks from other sites) that have been happening over the last year.  The current IP blacklist in fighting those repeated attacks exceeds 1 million unique IPs [and likely a <0.01% false positive].

https://blockchain.info/address/1NriPCsMh7svwqkb25gABJmS7CTAh1vaD2

So this little shit address is the culprit that tried to have my payout address swapped. When I noticed the email last night I used block chain to see how much was there (~2am EST) 0.0000BTC

Now in just 4 hrs, he's got 8 transactions(~0.06BTC) of all seemingly small amounts.

@Eluethria please take a look, worried something has happened to our Guild

@Eluethria, idk how this is possible since wallet is locked, but I've received a seemingly "valid" link and email from support@btcguild to modify it

Webpage settings confirm address is unchanged but can you confirm?

Figures. I decided I might as well try something new after the 28 1/2 hour block and then the orphan over at Slush's (The luck reading actually was ZERO for quite a while yesterday), and apparently the luck followed me!

I see things are picking up today, and I know it is best to stick with  it when the luck gets bad because it means there will be a turnaround soon, but I decided to relax and mine some titcoin and take the predictable yet slightly less than BTC predicted payout for a day....

P.S: Actually, I just ran my p2tit payouts for the last 6 hours and I am on track to be about a tiny little red some kind of hair over my BTC predicted payout. Just gotta dump em before everyone else I guess and the price nosedives, I know a lot of guys got disgusted in the last couple days and are hitting up the alt coins pretty hard today.

2nd worst.  We've had 2 blocks ever last more than 20 hours.  Yesterday's was 23 hours, the record was 25.

 I have been mining for a couple of months. I have two S3+ an S3, and two S1's and have mostly stuck to Slush's pool.  I have tried BTC Guild twice now. The first time was a couple weeks ago (for those who remember the Thanksgiving drought) and then yesterday:



My calculations based on the last 100 shifts said that there should be a ~5.9 average block payout per shift. For both of my test runs here I have seen the only cases where there was more than one Goose Egg in a row EVER!

Currently accepting "donations" to take my incredible "luck" elsewhere:

19ttvwxeLM6FZAJK6oVP7mjSsL4UdAHdvz

 

Was this the worst payout day ever on BTC Guild? 

My brother had the same problem but reversed. His S4 was running at about 80GH and his S3+s that he's had for quite some time remained running at their normal speed. Restarting didn't help. I updated the firmware on ALL the machines for him, shut everything down, started it back up, waited 30 mins and all was fine. Be careful when updating your firmware, you could brick your miner(s).

I have an Antminer S3 and an S4.

S3 came first and was running fine around 480-500 GH/s when I pointed to either Slush or BTC Guild.
At both Pools my S3 setting is set within their UI Worker tab to use 256 Min Diff.

Antminer S4 arrived ,setup, configured, pointed it to the Slush Pool and the S4 runs FINE at around 2.1TH/s at both Slush and BTC Pools.
Antminer S4 Done...

Now back to the S3… still running at 480-500 GH/s at the Slush Pool… at this point S3/S4 both are reporting 2.6TGH/s at Slush. Full expected power. Great!
HOWEVER, when I now point the “S3” to BTC Guild, it won’t run past 80GH/s (all chips show fine in the UI, no “x” or “-“)
Switch bask to Slush... 500GH/s... back to BTC Guild... 80GH/s... consistent test...
S3 was running 480-500 at BTC Guild before I added the S4...

Is there a problem running both an S4 and S3 on the same network pointing to BTC Guild? Works fine at Slush (I've not tried it anywhere else... my objective is to use Guild)

thanks for any help you can share

There was a bug this morning which was preventing users from changing a worker's difficulty manually through the website.  It has been corrected and now works properly again.

I do intent to keep mining in the pool, but I don't really like seeing dust left in the account after every payout. Even if you pay to the last bit it's still a whole in/out transaction. The transactions are not always in whole amounts so you still end up with bits.

It would be nice to be able to choose the way payments are made and I'm sure it won't be that hard to implement.

Anyways, Thanks for the fast answers and I hope you would consider giving the users the option to choose.

Please take discussions about GAW to an appropriate thread/subforum.  I'm not quite sure why they're being brought up on the BTC Guild thread.