Topic: Etherdelta was HACKED (Read 543 times)
I have used etherdelta a few hours ago, and it's safe, my advice if you want to import account do not use your main account, make a special eth wallet to trade in etherdelta or use add on metamask, still we have to be careful after the incident hacked yesterday
Is there any new from EtherDelta? They still hacked? or fixed the problem?
I got some tokens in my EtherDelta. I want my tokens back.
I got some tokens in my EtherDelta. I want my tokens back.
On December 22, they reported that everything was restored and the exchange started working in its regular mode in its Twitter account
EtherDelta @etherdelta
Dec 22
*IMPORTANT* We are also gonna make a series of educational effort and UI/UX changes to make sure users know how to identify phishing attempts in the coming weeks.
EtherDelta@etherdelta
Dec 22
*Announcement* EtherDelta is back!
EtherDelta @etherdelta
Dec 21
*IMPORTANT* Also note deposits can only be accessed through user's individual private key via the EtherDelta contract. If you had *NEVER* imported your key on the imposer's phishing site, your deposit should be safe.
EtherDelta @etherdelta
Dec 21
2/2 *IMPORTANT* Please note if you were using @metamask_io or hardware wallet on EtherDelta, your funds are completely *SAFE* from the phishing attack.
better use metamask to do all your ethereum dealing to avoid phishing attack usually imposing as MyEtherWallet.com, new release of firefox uses less memory to run, quit good to run metamask on it, brave also good minimalist browser with BAT wallet on it
etherdelta is back, you can use it again. i tried and there is no problem on my side. they changed dns servers it's working good now. check out their twitter for latest news.
Is there any new from EtherDelta? They still hacked? or fixed the problem?
I got some tokens in my EtherDelta. I want my tokens back.
I got some tokens in my EtherDelta. I want my tokens back.
On December 22, they reported that everything was restored and the exchange started working in its regular mode in its Twitter account
Is there any new from EtherDelta? They still hacked? or fixed the problem?
I got some tokens in my EtherDelta. I want my tokens back.
I got some tokens in my EtherDelta. I want my tokens back.
manchester93 may I ask where did you get information people still losing their Tokens?
On Twitter.
I just don't understand how to withdraw the ETH using MEW. When I use the "withdraw" function I get "Warning! Error encountered during contract execution [Bad instruction]" and the transaction doesn't confirm. Why?
The "deposit" function works fine, but obviously that just puts more in the smart contract.....
EDIT: Found the answer. Need to use proper unit. https://twitter.com/EthereumBlue/status/943925235098816519
Glad to have my funds safe now. I can finally sleep!
Of course, this is just to remind us that etherdelta isn't a wallet for you to store your coins but this is a trading platform. After you trade, kindly withdraw your coins and just store it in MEW and just deposit again if you wanna trade again and don't mind if there's any fee.
This hacking incident is just a wake up call to all of us that there's nothing safe anymore so be cautious enough with all our actions.
As at the time the hacking incident happened I had logged in to Etherdelta with my private key. At the moment I heard the news, I withdrew my last batch of tokens and logged out while the orderr was been processed. I got my tokens in MEW a day later and all my funds are intact as at now. But Im still scared, am I safe?
Same here, I also logged in on etherdelta with my private key and tokens but good thing that my balance is still there after the hacking incident has passed. I guess etherdelta is now safe and ok to use because I don't see any warnings on their site.
If I did not go to EtherDelta for 5-6 days, my deposit on the exchange as well as my MEW wallet is safe? Hackers just collected private keys from those who directly imported them to the phishing site, right?
it is stil safe but I think it is advisable to change your username and password on Ed,mew,metamask or any other wallets you use to link your Ed because hackers may have now access to Ed's database and they can now access every users credentials and account.
This is scary. A Exchange itself getting Hacked. Its one of the man platforms for Ethereum.
They should be ultra secured in their infrastucture. I hope the private keys of people are not stolen. That would be a disaster for ETH.
They should be ultra secured in their infrastucture. I hope the private keys of people are not stolen. That would be a disaster for ETH.
As at the time the hacking incident happened I had logged in to Etherdelta with my private key. At the moment I heard the news, I withdrew my last batch of tokens and logged out while the orderr was been processed. I got my tokens in MEW a day later and all my funds are intact as at now. But Im still scared, am I safe?
manchester93 may I ask where did you get information people still losing their Tokens?
On Twitter.
I just don't understand how to withdraw the ETH using MEW. When I use the "withdraw" function I get "Warning! Error encountered during contract execution [Bad instruction]" and the transaction doesn't confirm. Why?
The "deposit" function works fine, but obviously that just puts more in the smart contract.....
EDIT: Found the answer. Need to use proper unit. https://twitter.com/EthereumBlue/status/943925235098816519
Glad to have my funds safe now. I can finally sleep!
manchester93 may I ask where did you get information people still losing their Tokens?
On Twitter.
I just don't understand how to withdraw the ETH using MEW. When I use the "withdraw" function I get "Warning! Error encountered during contract execution [Bad instruction]" and the transaction doesn't confirm. Why?
The "deposit" function works fine, but obviously that just puts more in the smart contract.....
EDIT: Found the answer. Need to use proper unit. https://twitter.com/EthereumBlue/status/943925235098816519
Glad to have my funds safe now. I can finally sleep!
I got out most of my ETH and all my tokens. But I still have a couple ETH in the smart contract. How can I get it out? When I use the "withdraw" function in MEW, it only reads my wallet amount (~empty), not the amount in the smart contract.
You will need to open EtherDelta and withdraw from ED website. Second option is use MyEtherWallet to withdraw ETH from smart contract to wallet. here is a link to video tutorial: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
Is it safe to open ED right now? I saw the announcement on Twitter, but people are still reporting losing money.
In that case better if you wait. You can always withdraw Tokens using MyEtherWallet. I did withdraw 2 days ago all my Tokens worth 4ETH from ED smart contract. Took me 3h, and 30$ in fees (21,30,40 GWEI) but all Tokens are safe now. Normally I always buy Tokens and withdraw them from ED Smart Contract and transfer to MyEtherWallet address immediately. My MEW wallets I never Login or use private key and I store keys on offline PC encrypted with VeraCrypt. I check balances using ethereum explorer. Keep in mind that using couple wallet addresses is a good idea. I store Tokens this way in 6 different wallets.
manchester93 may I ask where did you get information people still losing their Tokens?
I got out most of my ETH and all my tokens. But I still have a couple ETH in the smart contract. How can I get it out? When I use the "withdraw" function in MEW, it only reads my wallet amount (~empty), not the amount in the smart contract.
You will need to open EtherDelta and withdraw from ED website. Second option is use MyEtherWallet to withdraw ETH from smart contract to wallet. here is a link to video tutorial: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
Is it safe to open ED right now? I saw the announcement on Twitter, but people are still reporting losing money.
I got out most of my ETH and all my tokens. But I still have a couple ETH in the smart contract. How can I get it out? When I use the "withdraw" function in MEW, it only reads my wallet amount (~empty), not the amount in the smart contract.
You will need to open EtherDelta and withdraw from ED website. Second option is use MyEtherWallet to withdraw ETH from smart contract to wallet. here is a link to video tutorial: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
I got out most of my ETH and all my tokens. But I still have a couple ETH in the smart contract. How can I get it out? When I use the "withdraw" function in MEW, it only reads my wallet amount (~empty), not the amount in the smart contract.
The error says I don't have enough funds. I have 0 ETH in my "wallet" and 1.16 ETH in the Etherdelta contract. Does the gas fee come from my wallet? Is that why I get the error, because I can't cover the gas?
The error says I don't have enough funds. I have 0 ETH in my "wallet" and 1.16 ETH in the Etherdelta contract. Does the gas fee come from my wallet? Is that why I get the error, because I can't cover the gas?
It proves that Etherdelta has a low on security.
too risky to put coins on that exchanger
too risky to put coins on that exchanger
You don't need to put coins, once you finish trading you move your Tokens from EtherDelta Smart Contract to Your wallet, if you want super security you can then transfer to another address (that's what I do) and then I check on Ethereum Network Explorer if the transfer is successful and balance is OK.
EtherDelta is a good ERC20 Token exchange, if someone lost Tokens in recent DNS hack it only proves more time is needed to learn and be more careful. Basically, when you open EtherDelta you should see your balance - the website should never ask you to login if you didn't "Forget / Logout". This should be the first red flag for you, I never clean history on my browser so I can open EtherDelta quick. Always try move coins after trading complete, never leave Tokens on exchange.
*** Official update from Reddit - EtherDelta ***
Site has been restored and secured. Official announcement soon.
Just to clear up a few things:
1) If you use Metamask, you're fine.
2) If you use a Ledger, you're fine.
3) If you didn't visit the site on Dec 20th or 21st, you're fine.
If you store your key in a cookie, and you might have visited the site over the last two days (even just loading it), you should assume your key is burned, and transfer Eth and tokens to a new address. Now's a great time to learn to use Metamask!
link:
https://www.reddit.com/r/EtherDelta/comments/7lf9ni/psa_site_has_been_restored_and_secured_official/
It proves that Etherdelta has a low on security.
too risky to put coins on that exchanger
too risky to put coins on that exchanger
Sad with what happened to etherdelta hopefully this problem is quickly over and no one is harmed by this problem
I agree with you, hopefully no one harmed by the problem of etherdelta because there are lots of user in etherdelta which are have a lot of tokens right now. I hope I manage to avoid it when I logged in last time.
This is the reason why is not advisable to keep bitcoin or altcoin on exchange site.
Yes, for now, EtherDelta is under investigation, it was DNS hack. For anyone who has left Tokens on EtherDelta Exchange Smart Contract (didn't transfer to wallet) I post list to YouTube how to withdraw Tokens from smart contract to wallet without using EtherDelta website: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
Thanks for this, ED isn't the most user friendly exchange, but gotta love the perks of dencentralized exchanges, this wouldn't be possible on centralized exchange...Also I wasn't even aware of deltabalances.github, and many people I know weren't either so this helped in more ways than one.
It's confirmed and some said that don't just log in for now or else your coins will affected by the hack. I don't know if our coins are safe there or not and I don't have any guts to check it out for now, I'm waiting for the directive of the etherdelta before checking them out again. Keep us posted here and I will check this thread from time to time on what are the progress with the hacking incident and I hope this storm calms soon.
I woke up to this news and the announcement, quite scary, as of yet is there any confirmation that anything was actually stolen or what it was that was infiltrated? From what I can gather it seems as though they just directed traffic.
Hacking is a bit over exaggerated word for this, I think it was some spoofing attack or may be some phishing attack. There are several types of attacks and most of them are done due to negligence of the people themselves. This is must for all the people to know about these types of attacks and also about the best practices on which they can be countered. Because the money is decentralized and you have to own it else people (Attackers) wont let you to have it. 
When You put multiple order in multiple coins, Etherdelta sucks. I hate EtherDelta as I don't even know which order consumed my ETH. It's not even in etherscan that I can know and transfer that coin. It just consumes my eth whenever I transfer to the exchange.
If I did not go to EtherDelta for 5-6 days, my deposit on the exchange as well as my MEW wallet is safe? Hackers just collected private keys from those who directly imported them to the phishing site, right?
"Just redirected" but still potentially hazardous if you imported your wallet + private key into the phishing site.
They apparantly created an almost identical replica, I already heard people talking about an Inside Job.
Anyway that's just speculaton, it's very concerning what is happing currently, just heard that also Poloniex is affected.
They apparantly created an almost identical replica, I already heard people talking about an Inside Job.
Anyway that's just speculaton, it's very concerning what is happing currently, just heard that also Poloniex is affected.
I woke up to this news and the announcement, quite scary, as of yet is there any confirmation that anything was actually stolen or what it was that was infiltrated? From what I can gather it seems as though they just directed traffic.
Yes, for now, EtherDelta is under investigation, it was DNS hack. For anyone who has left Tokens on EtherDelta Exchange Smart Contract (didn't transfer to wallet) I post list to YouTube how to withdraw Tokens from smart contract to wallet without using EtherDelta website: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
thank you for your advice, i will do it
and for other user i think you must move your eth or token balance to the ether add that you never sync it with ED
I don't use etherdelta much, last time i used etherdelta was a month ago. i hope everyone's tokens/ETH are safe.
I logged 24 hours into the ED yesterday. This morning I saw the ED message was hacked. OMG. I have a little token and eth. I hope not to lose them.
Did you import your private key or just opened ED? 
There was a strange behaviour on my wallet that still happening until now . Etherscan always shows new transaction to my address.
Some of my tokens were moving on it's own to but ended up fail (eventhough it was not deposit on ED) (fake transaction? how come). So for convenience, I transfer some tokens with value on my new ethereum address. The only affected address were those who are currently logged on ED before the hacked incident. Those address that being forgotten before are fine. Really weird.
Some of my tokens were moving on it's own to but ended up fail (eventhough it was not deposit on ED) (fake transaction? how come). So for convenience, I transfer some tokens with value on my new ethereum address. The only affected address were those who are currently logged on ED before the hacked incident. Those address that being forgotten before are fine. Really weird.
According to EtherDelta on Twitter, all deposits should be safe below is the official announcement from EtherDelta Twitter Account. I moved all Tokens "just in case" I am always a little paranoid with security. So far all my assets are split into 7 MEW wallets.
*IMPORTANT* Also note deposits can only be accessed through user's individual private key via the EtherDelta contract. If you had *NEVER* imported your key on the imposer's phishing site, your deposit should be safe.
https://twitter.com/etherdelta
*IMPORTANT* Also note deposits can only be accessed through user's individual private key via the EtherDelta contract. If you had *NEVER* imported your key on the imposer's phishing site, your deposit should be safe.
https://twitter.com/etherdelta
How will I know if my private keys are not stolen. I just login yesterday to sell a coin. Are there any reports of stolen tokens from Etherdelta users? This is so scary. They are hacking the dns of cloudflare to manipulate etherdelta.
It won't be the either way. Etherdelta never has access to the private keys of its users' wallets (except in the case if you haven't import keys to phising page as shown by hackers yesterday). It works in completely decentralized way which enables users to have complete privacy and freedom in operation. As a result, none user will find tokens stealing from their wallet.
However, where actual risk lies is in trading tokens on Orderbook as ED confirmed on Twitter that Orderbook has been compromised and there are fake orders on it. So it is better to wait for ED official announcement about recovery before commencing trading.
Yes I had the issue either.
I actually assumed it was my browser that had some exploit installed. But after clearing cookies, DNS, etc, it was still going to that site.
If you read their twitter they are confirming
https://twitter.com/etherdelta
However what doesn't make sense is why would they hack their DNS and not send to a phishing site instead of showing those ads, doesn't make sense.
Holy snap! That's scary O.o
I'm glad I never liked their site, I found it too confusing and ended up going to Binance. Little more hassle, but I like it.
I logged 24 hours into the ED yesterday. This morning I saw the ED message was hacked. OMG. I have a little token and eth. I hope not to lose them.
i do not know about etherdelta been hacked,although had problems logging in sometime ago,
thank God my token aren't lost
thank God my token aren't lost
Yes, for now, EtherDelta is under investigation, it was DNS hack. For anyone who has left Tokens on EtherDelta Exchange Smart Contract (didn't transfer to wallet) I post list to YouTube how to withdraw Tokens from smart contract to wallet without using EtherDelta website: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
Thanks for this which would really be helpful for those traders wont able to know on what would they do on getting out or transferring those coins out before its too late. I was little bit relieved that i did able to withdraw coins from ED to my MEW itself before the issue had arise. For those people who do have still balance you should took this step. If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
Really Etherdelta was hacked? It is bad news for me. Because i have some different tokens for exchange. However, i think it is very important to storng etherdelta's security.
in the EtherDelta telegram chat there are people who say that MyEtherWallets were emptied, apparantly they are some yotube videos of affected users. Not sure it's correct or just FUD, I could not find anything related to that yet. Still a good advice to move your tokens to another wallet that has not been imported to ED in recent days.
Maybe they were hacked its because they visit the site even if there was a warning of unsafe site. But right now etherdelta is back.
Warning message appears when I visit ED but I just ignore it because ED has not provided a solution on their twitter
I think all crypto currency exchange need to up grade there security system because the issue of exchange been hacked is happening simultaneously and this will be the third time this month. However, This is the reason why is not advisable to keep bitcoin or altcoin on exchange site.
Can not check now, but i hope all my coins are on the wallet)) I used metamask and smart contracts, so as I know all should be okay.
Sad with what happened to etherdelta hopefully this problem is quickly over and no one is harmed by this problem
I can not get into etherdelta all day. I still have 5 eth and quite a lot of token in the myetherwallet wallet so safe? Hopefully etherdelta will fix it.
I heard that if i've worked with Etherdelta with metamask plug-in, i'm nothing to worry about. Is it true, and how metamask protected my private keys?
in the EtherDelta telegram chat there are people who say that MyEtherWallets were emptied, apparantly they are some yotube videos of affected users. Not sure it's correct or just FUD, I could not find anything related to that yet. Still a good advice to move your tokens to another wallet that has not been imported to ED in recent days.
Maybe they were hacked its because they visit the site even if there was a warning of unsafe site. But right now etherdelta is back.
Well, it had issues on operations and withdrawals, this was an announcement which one can expect afterwards.
in the EtherDelta telegram chat there are people who say that MyEtherWallets were emptied, apparantly they are some yotube videos of affected users. Not sure it's correct or just FUD, I could not find anything related to that yet. Still a good advice to move your tokens to another wallet that has not been imported to ED in recent days.
I spend last 3 hours moving all my Tokens from EtherDelta Smart Contract to Wallet and then from Wallet to Private wallet never used with ED or anywhere else. It's a bit my fault I should transfer Tokens after purchase not stack them on the pile with 2 different EtherDelta accounts. All together was nearly 4 ETH to move around in 6 different Tokens, but lucky me I didn't lose a single coin.
in the EtherDelta telegram chat there are people who say that MyEtherWallets were emptied, apparantly they are some yotube videos of affected users. Not sure it's correct or just FUD, I could not find anything related to that yet. Still a good advice to move your tokens to another wallet that has not been imported to ED in recent days.
Yes, for now, EtherDelta is under investigation, it was DNS hack. For anyone who has left Tokens on EtherDelta Exchange Smart Contract (didn't transfer to wallet) I post list to YouTube how to withdraw Tokens from smart contract to wallet without using EtherDelta website: https://www.youtube.com/watch?v=slru097RrfM&feature=youtu.be
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
If you been using ED in last 24h clear your DNS cache:
1. Open CMD with administrator privileges (Run as administrator)
2. Type: ipconfig /flushdns
3. Restart Windows and Router
How will I know if my private keys are not stolen. I just login yesterday to sell a coin. Are there any reports of stolen tokens from Etherdelta users? This is so scary. They are hacking the dns of cloudflare to manipulate etherdelta.
Yes I had the issue either.
I actually assumed it was my browser that had some exploit installed. But after clearing cookies, DNS, etc, it was still going to that site.
If you read their twitter they are confirming
https://twitter.com/etherdelta
However what doesn't make sense is why would they hack their DNS and not send to a phishing site instead of showing those ads, doesn't make sense.
Yes I had the issue either.
I actually assumed it was my browser that had some exploit installed. But after clearing cookies, DNS, etc, it was still going to that site.
If you read their twitter they are confirming
https://twitter.com/etherdelta
However what doesn't make sense is why would they hack their DNS and not send to a phishing site instead of showing those ads, doesn't make sense.
Yes I had the issue either.
I actually assumed it was my browser that had some exploit installed. But after clearing cookies, DNS, etc, it was still going to that site.
If you read their twitter they are confirming
https://twitter.com/etherdelta
However what doesn't make sense is why would they hack their DNS and not send to a phishing site instead of showing those ads, doesn't make sense.
Jump to: