EtherDelta: Might Have Been Compromised

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: beerlover on December 28, 2017, 06:40:47 AM

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

It is really a crazy thing and I am sure a lot of people won't still have got hold of this news ? What is the latest now ?
Has anything been done so far ?

Looking at the hackers address, I really imagine what these guys are always thinking when doing stuffs like this but it is their world. A lot has been stolen already and I hope they end up not getting to steal a lot more.

Anyway, thanks for the warning OP. I hope something is being done about it. That is crazy as these guys are really just busy trying their hands on every strong account they can get to and I imagine how many people are going to end up losing their funds in this process. How can we even be safe anymore and I can imagine not getting this news and making a huge transaction.

Man, even weeks after the hack the people are still afraid about what might happen if they use ED even after they themselves said that it's okay now. I transferred all my funds to MEW. Just so you know you can always do that.

Etherdelta has been a very convenient place to trade tokens but now that people lost a lot of money, they just can't get back community's trust anymore.
As you can see here they've been doing their best to reconstruct/upgrade the whole system: https://twitter.com/etherdelta/status/944175650767810560

spngebob

sr. member

Activity: 770

Merit: 254

Decentralized exchanges should be safe.
It wouldn't surprise me if this was inside job.
Etherdelta has all tokens listed but i think they will need lots of time to gain trust from people again. Problem is that most tokens can't be traded anywhere except ED.

beerlover

legendary

Activity: 3052

Merit: 1188

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

It is really a crazy thing and I am sure a lot of people won't still have got hold of this news ? What is the latest now ?
Has anything been done so far ?

Looking at the hackers address, I really imagine what these guys are always thinking when doing stuffs like this but it is their world. A lot has been stolen already and I hope they end up not getting to steal a lot more.

Anyway, thanks for the warning OP. I hope something is being done about it. That is crazy as these guys are really just busy trying their hands on every strong account they can get to and I imagine how many people are going to end up losing their funds in this process. How can we even be safe anymore and I can imagine not getting this news and making a huge transaction.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: squatter on December 24, 2017, 06:39:51 AM

Quote from: TyrellWellick on December 23, 2017, 09:09:35 PM

Quote from: Murloc on December 23, 2017, 08:53:51 PM

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

I suspect he didn't properly clear DNS resolver cache or was otherwise compromised. Many people have been using Etherdelta without issues since the announcement was made. If you're using a site like this, you should be protecting yourself with something like MetaMask (which would have prevented this).

Quote from: squatz1 on December 23, 2017, 09:51:43 PM

Quote from: jpdorn on December 22, 2017, 11:28:12 PM

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

The safest route was to use MEW to remove all ETH and tokens from the contract while the site was compromised. The reason you can do that is because the contract doesn't give them control of your coins. Everyone trading on Etherdelta controls their keys; the question is who is getting phished and who isn't?

The DNS compromise is plausible if we assume that these guys are amateurs. Everything about the site suggests they are. The contract is/was secure, though. I got all my funds out without issue.

Me too sir, the moment I knew about what happened, I deleted my 'bookmarked' page of ED. Since, then it's very advisable to use other wallet means, like MEW for example.

bayu7adi

hero member

Activity: 1470

Merit: 555

dont be greedy

etherdelta may be the last option if the available exchanger does not receive my KYC verification jajajaj
the price is a bit different, but it is not a problem for a exchanger that is not complicated ... just need GAS GAS GAS and GAS

h0lybyte

hero member

Activity: 924

Merit: 511

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using etherdelta was never crazy and it is no one's fault to use etherdelta like complex but good exchange because this hack can happen even with those exchanges whom you trust. Fortunately my coins are still safe with etherdelta, i can say this is one of the greatest exchanges in the market.
I have been using it since a year and never faced any suspecious activities with my account, my friends also like etherdelta

squatter

legendary

Activity: 1666

Merit: 1196

STOP SNITCHIN'

Quote from: TyrellWellick on December 23, 2017, 09:09:35 PM

Quote from: Murloc on December 23, 2017, 08:53:51 PM

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

I suspect he didn't properly clear DNS resolver cache or was otherwise compromised. Many people have been using Etherdelta without issues since the announcement was made. If you're using a site like this, you should be protecting yourself with something like MetaMask (which would have prevented this).

Quote from: squatz1 on December 23, 2017, 09:51:43 PM

Quote from: jpdorn on December 22, 2017, 11:28:12 PM

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

The safest route was to use MEW to remove all ETH and tokens from the contract while the site was compromised. The reason you can do that is because the contract doesn't give them control of your coins. Everyone trading on Etherdelta controls their keys; the question is who is getting phished and who isn't?

The DNS compromise is plausible if we assume that these guys are amateurs. Everything about the site suggests they are. The contract is/was secure, though. I got all my funds out without issue.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: squatz1 on December 23, 2017, 09:51:43 PM

Quote from: jpdorn on December 22, 2017, 11:28:12 PM

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

Yes, indeed. It's a risk and an opportunity as well this is the nature of crypto. But first and foremost we all should have our keys backed up at all times.

squatz1

legendary

Activity: 1666

Merit: 1285

Flying Hellfish is a Commie

Quote from: jpdorn on December 22, 2017, 11:28:12 PM

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: Murloc on December 23, 2017, 08:53:51 PM

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

Murloc

full member

Activity: 322

Merit: 103

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: CyberKuro on December 23, 2017, 09:13:34 AM

Quote from: TyrellWellick on December 20, 2017, 07:40:08 PM

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Unfortunately for those who have been hacked and heard it was better not to move your coins during the hack attempt as the hackers may use phishing-links to access your coins. Exchanges aren't a safe place to keep your portfolio for a long-term obviously, as exchange is the main target for hackers to get big fish in there and there are some cases which exchanges got hacked recently such as South Korean exchange Youbit. However, Etherdelta devs have stated the site is clear to be used since yesterday. https://twitter.com/etherdelta/status/944174879775055873

Thank you for being informative sir. I was away for 3 days, I was not able to update the thread.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: jpdorn on December 22, 2017, 11:28:12 PM

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

Idk man, maybe they got excited. Lmao

CyberKuro

hero member

Activity: 798

Merit: 506

Quote from: TyrellWellick on December 20, 2017, 07:40:08 PM

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Unfortunately for those who have been hacked and heard it was better not to move your coins during the hack attempt as the hackers may use phishing-links to access your coins. Exchanges aren't a safe place to keep your portfolio for a long-term obviously, as exchange is the main target for hackers to get big fish in there and there are some cases which exchanges got hacked recently such as South Korean exchange Youbit. However, Etherdelta devs have stated the site is clear to be used since yesterday. https://twitter.com/etherdelta/status/944174879775055873

audaciousbeing

hero member

Activity: 1330

Merit: 569

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

There is nothing wrong in using an exchange because you cannot just do without them. If you don't use EtherDelta, you would use another one which makes it a subject of attacks. The most important is not using the exchange sites to serve the purpose of a wallet the moment you do that, you are only making yourself vulnerable to no fault of yours. Trade, make profit and withdraw to a more secure wallet where you can control everything that happens to your wallet.

With that, you are good to go, I have used EtherDelta before but only for trade so when news like this filtered the airwaves, I am at peace with myself rather than searching all through the internet looking for answers and solutions.

jpdorn

sr. member

Activity: 429

Merit: 259

*new owners*
*hacked 1 hour later*
This looks suspicious as fuck

rasho321

member

Activity: 140

Merit: 10

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

You don't need an account to trade there...

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: RamonBTC on December 20, 2017, 11:09:12 PM

This December many hackers seem so desperate to have easy money and this really worrisome on some point but I think etherdelta is on this matter already. So I’ll make an assumption that this issue of hacking is isolated but that is the reason why I’m not using exchanges for storing my coins.

Actually there's nothing to worry about, just at least don't go to ED and try to import your account for now, your funds is still safe provided that you didn't log in before the hack happened.

Yes, I think etherdelta is on this already.
Stay updated.

RamonBTC

full member

Activity: 392

Merit: 106

This December many hackers seem so desperate to have easy money and this really worrisome on some point but I think etherdelta is on this matter already. So I’ll make an assumption that this issue of hacking is isolated but that is the reason why I’m not using exchanges for storing my coins.

TyrellWellick

newbie

Activity: 98

Merit: 0

Damn, see the update of the current state of the hacker's wallet.

Mygod, there still victims just seconds ago.

There's still uninformed ppl out there. Man, pls. Just stop logging into ED already!

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: jtipt on December 20, 2017, 09:59:07 PM

Quote from: TyrellWellick on December 20, 2017, 07:40:08 PM

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Etherdelta compromised, shit. I think a lot of people have ETH and tokens there, hell even I had few tokens about a month ago, good thing I withdrew them in ETH when it's price was increasing. Are there any reports of anything stolen yet?

I don't know particularly but the hacker is using some kind of auto transfer script wherein whenever you import your public and private address, all your funds would be transferred to the hacker's address.
But your wallet itself is safe, because you see 'smart contracts' immutable, basically their website domain has been hacked and replaced by the phishing site whenever you navigate to their site, your browser directs you to their phishing site. Hence, that.

When you accessed ED before it was hacked, your wallet is safe. No need to worry. Just have to transfer it.

You can find out more here:

https://www.reddit.com/r/ethtrader/comments/7l46ng/alert_ether_delta_hacked/

Transferring account to MEW:
https://www.reddit.com/r/EtherDelta/comments/6hrxjw/etherdelta_guides_for_first_time_users/dn6heno/

jtipt

hero member

Activity: 1050

Merit: 529

Quote from: TyrellWellick on December 20, 2017, 07:40:08 PM

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Etherdelta compromised, shit. I think a lot of people have ETH and tokens there, hell even I had few tokens about a month ago, good thing I withdrew them in ETH when it's price was increasing. Are there any reports of anything stolen yet?

squatter

legendary

Activity: 1666

Merit: 1196

STOP SNITCHIN'

Quote from: GoldenOrder on December 20, 2017, 09:17:56 PM

Follow the tutorial, you can take your tokens out even if they are locked in the smart contract.

Thanks, that was more useful than I thought. But there's no instructions on how to withdraw the ETH that's in the smart contract. That's the majority of my stuck funds. Any thoughts on how to get those out?

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: andthereyou on December 20, 2017, 09:16:05 PM

I have used twice etherdelta it is a nice exchange however to be on the safe side. Let us stay away for a while. Grin

Great that I have found this thread. I am planning to buy tokens using Etherdelta this week.

Always happy to help sir.

We're a community after all.

GoldenOrder

member

Activity: 119

Merit: 10

Quote from: squatter on December 20, 2017, 09:12:48 PM

Quote from: GoldenOrder on December 20, 2017, 08:44:35 PM

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

Follow the tutorial, you can take your tokens out even if they are locked in the smart contract.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: squatter on December 20, 2017, 09:12:48 PM

Quote from: GoldenOrder on December 20, 2017, 08:44:35 PM

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using EtherDelta is crazy, why? I've done well trading there, and even when the site was compromised today I was able to remove most of my funds safely because I control the keys. The smart contract is intact; no funds have been removed.

True story, despite what happened we at least are able to salvage our funds.

andthereyou

full member

Activity: 616

Merit: 102

I have used twice etherdelta it is a nice exchange however to be on the safe side. Let us stay away for a while. Grin

Great that I have found this thread. I am planning to buy tokens using Etherdelta this week.

squatter

legendary

Activity: 1666

Merit: 1196

STOP SNITCHIN'

Quote from: GoldenOrder on December 20, 2017, 08:44:35 PM

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using EtherDelta is crazy, why? I've done well trading there, and even when the site was compromised today I was able to remove most of my funds safely because I control the keys. The smart contract is intact; no funds have been removed.

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: bL4nkcode on December 20, 2017, 08:51:23 PM

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Hot damn, imagine all your hardships scraping those coins and it'll just be hacked eventually oh man that's tough.

bL4nkcode

copper member

Activity: 2142

Merit: 1305

Limited in number. Limitless in potential.

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

TryNinja

legendary

Activity: 2758

Merit: 6830

I believe that Etherdelta itself is safe. It looks like only the DNS was compromised and because of that, the domain was hijacked and it's pointing to a phishing site.

Quote

WARNING: If you are holding funds on EtherDelta. Do NOT open the site. The EtherDelta site is compromised and opening it may result in lost funds. If you are using BLUE beta, MetaMask, or a Ledger you should be safe. But we still do not recommend visiting ED until it's resolved.

https://twitter.com/EthereumBlue/status/943582980538281985

Quote

Because the official domain is pointing to a phishing site, after the DNS credentials were compromised. (We think)

https://twitter.com/EthereumBlue/status/943583739107561472

Quote

It's the DNS servers, not the SC keys. If the SC keys get compromised folks will have a much bigger problem.

https://twitter.com/EthereumBlue/status/943591507013111810

GoldenOrder

member

Activity: 119

Merit: 10

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

TyrellWellick

newbie

Activity: 98

Merit: 0

Quote from: legoplayer245 on December 20, 2017, 07:41:08 PM

Heard this already, was actually compromised. Look at the hacklers wallet with the cash flowing : https://etherscan.io/address/0x3f8a37bde9b15b65c82f9cdd00192e0ba36cc5fc

mygod, idk what to feel right now. Man, when I saw the news I was about to open etherdelta, but then I was hesitant so I didn't. Damn, it's like eating a whole damn elephant piece by piece.

legoplayer245

newbie

Activity: 50

Merit: 0

Heard this already, was actually compromised. Look at the hacklers wallet with the cash flowing : https://etherscan.io/address/0x3f8a37bde9b15b65c82f9cdd00192e0ba36cc5fc

TyrellWellick

newbie

Activity: 98

Merit: 0

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Topic: EtherDelta: Might Have Been Compromised (Read 281 times)