Pages:
Author

Topic: How I found a flaw with zen-cloud payout system and more. (Read 3482 times)

sr. member
Activity: 703
Merit: 272
I applaud your efforts in finding this flaw with zen-cloud and hashlet pool payouts.

Not like many well known companies have done this when a real problem was shown to them.  


"You're not mining it right"..  Shocked

 Grin
legendary
Activity: 4116
Merit: 7849
'The right to privacy matters'
I applaud your efforts in finding this flaw with zen-cloud and hashlet pool payouts.

Thank you.  Please remember that Josh and Eric of zen when faced with the news did the correct thing.

Not like many well known companies have done this when a real problem was shown to them.  They did not deny it and in under a few hours time  were working to fix it.

This would have been nice in the case of General Motors when they found out they had a safety issue they delayed  the fix and cost lives.  

Zen- Gaw were quick  to fix and saved customers money .  It would be nice that when faced with a problem more companies did this.
newbie
Activity: 36
Merit: 0
I applaud your efforts in finding this flaw with zen-cloud and hashlet pool payouts.
legendary
Activity: 4116
Merit: 7849
'The right to privacy matters'
Surpised this didnt get more attention

Yeah it is like  more then 100,000 10 gh hashlets  sold , plus  a 1,000,000 order was placed for s-3's  from bitmaintech.  that would be 2000 of them.

plus a lot of nicehash hashlets sold.     So it was a lot of money at stake.   Biggest thing I ever found out first.  or at least reported it first as some very large payouts were inflected  on nicehash over the last 60 days. Others may have figured it out and that is why prices popped so high every once in a while.

I figure it affected 2 million usd in their  products or  maybe a  lot more.  


 Not that 2 million usd was overpaid.  but that 2 million worth of miners needed to moved off the nicehash pools.

It was not a fun thing for me  to tell someone to alter 2 million plus usd  of their product.


That 2 million is an educated guess.  Based on something I read about bitmaintech purchased by zen-gaw on the fourm and based on the champ listings. Of sha256 and hashlets gh.  If anything it is low not high. 

  The product still has plenty of value. It is just altered a bit.  certainly to a much safer place in the hashing world.
hero member
Activity: 569
Merit: 507
Surpised this didnt get more attention
legendary
Activity: 4116
Merit: 7849
'The right to privacy matters'


Ok, things are more clear now, sorry i didnt come back earlier, it was bath time for the kids...
Glad things worked out, but now you are the villain in front of 90% percent of gaw customers. For the other 10% like me, we really appreciate every bit of info, as we are looking for both good and bad info, as long as it is true.
But like i said, more than a flaw, you uncovered something important in GAW`s strategy

  Ah shit happens I read hundreds of comments on hashtalk.  I knew when I found this it was a big deal.
So many people mining had no idea how they were making the system work. by the way it still works  with every pool but nicehash.  I do believe there are workarounds for nicehash to be brought back. but it will not be as seesaw in payoffs.  they may adjust payments over a 5 or 10 day time period not 1 day. 

 I knew if I kept my mouth shut it would have been wrong  many people  could lose money that they could not afford to lose. 
hero member
Activity: 569
Merit: 507
yeah I rather an attempt at honesty then all of us cutting throats over coins.



Phil,thanks again for all the info. I honestly appreciate it. One thing I brought up over there is that I do not believe you handled this appropriately
let me quote myself
"in that sense I disagree with him (Phil). I don't think GAW ever offered a bounty, so he has no right to demand one. I honestly believe that. If GAW then decided to give him a bounty, fine, but he has no right to demand a bounty. What he did in fact was borderline blackmail and I do not condone such behavior. let me post that over there as well"
However, I do understand you regret some of what you did and you confessed that it was late, were upset, etc

I commend people that look for the truth and I also believe GAW should take another step forward towards transparency


Ah I found it in the middle of last night  and this were complicated by too much coffee pm's email's yada yada yada



I just posted this. here https://bitcointalksearch.org/topic/m.8768366

"Okay Josh the  ceo   of zen-gaw and I had a long talk via pm.  He paid me 1.75btc .

0.75btc   was to repay the money I spent to figure the nicehash issue out.

1.0btc was a finders fee  for saving his company a possible huge financial  setback  if this was done after the large fri sha256 was done.

 I wish I had been able to explain this easier and simpler and not caused the drama that has occurred.

  But plain and simple  If I had figured out Mt Gox 1 week sooner and saved that day I would have.
If I figured out BIPs in advance and saved 1000 lost coins I would have.
 If I had been able to do this for trade fortress I would have.

I also think in each case I would have pissed off a lot of people.  No matter how I had done it.  


I know that I pissed off people here that  was not my intent.  I still have an S-3 mining in the zen cloud and it will earn less.  I want to point out they stopped the problem and knowing them they will come up with a better idea.
   I still feel like I walked up to them and said your left nut is bad it has to go.  Or if you arer\ a girl your left ovary is bad time to cut it out. the pain today is real but in the long run you will survive.
   To their credit they did give me a bounty and did not fluff off the problem.  If they were MT Gox they would have run.

Josh thank you for being a stand up guy. Plus a man of your word."



THIS IS NOT SOMETHING I WAS LOOKING FOR .

In retrospect I was a bit afraid that I found something this big.

  I got a bit paranoid  and I rushed it to print so to speak.  
Don't drink coffee and sit at  a pc for 20 hours out of 24 .  If you find something important you may handle it stupidly.
If I ever find a large problem like this again.  
I will handle it differently.

I do believe I stopped a lot of money from being stolen from zen-gaw which ultimately helps their customers.





Ok, things are more clear now, sorry i didnt come back earlier, it was bath time for the kids...
Glad things worked out, but now you are the villain in front of 90% percent of gaw customers. For the other 10% like me, we really appreciate every bit of info, as we are looking for both good and bad info, as long as it is true.
But like i said, more than a flaw, you uncovered something important in GAW`s strategy
legendary
Activity: 4116
Merit: 7849
'The right to privacy matters'
yeah I rather an attempt at honesty then all of us cutting throats over coins.



Phil,thanks again for all the info. I honestly appreciate it. One thing I brought up over there is that I do not believe you handled this appropriately
let me quote myself
"in that sense I disagree with him (Phil). I don't think GAW ever offered a bounty, so he has no right to demand one. I honestly believe that. If GAW then decided to give him a bounty, fine, but he has no right to demand a bounty. What he did in fact was borderline blackmail and I do not condone such behavior. let me post that over there as well"
However, I do understand you regret some of what you did and you confessed that it was late, were upset, etc

I commend people that look for the truth and I also believe GAW should take another step forward towards transparency


Ah I found it in the middle of last night  and this were complicated by too much coffee pm's email's yada yada yada



I just posted this. here https://bitcointalksearch.org/topic/m.8768366

"Okay Josh the  ceo   of zen-gaw and I had a long talk via pm.  He paid me 1.75btc .

0.75btc   was to repay the money I spent to figure the nicehash issue out.

1.0btc was a finders fee  for saving his company a possible huge financial  setback  if this was done after the large fri sha256 was done.

 I wish I had been able to explain this easier and simpler and not caused the drama that has occurred.

  But plain and simple  If I had figured out Mt Gox 1 week sooner and saved that day I would have.
If I figured out BIPs in advance and saved 1000 lost coins I would have.
 If I had been able to do this for trade fortress I would have.

I also think in each case I would have pissed off a lot of people.  No matter how I had done it.  


I know that I pissed off people here that  was not my intent.  I still have an S-3 mining in the zen cloud and it will earn less.  I want to point out they stopped the problem and knowing them they will come up with a better idea.
   I still feel like I walked up to them and said your left nut is bad it has to go.  Or if you arer\ a girl your left ovary is bad time to cut it out. the pain today is real but in the long run you will survive.
   To their credit they did give me a bounty and did not fluff off the problem.  If they were MT Gox they would have run.

Josh thank you for being a stand up guy. Plus a man of your word."



THIS IS NOT SOMETHING I WAS LOOKING FOR .

In retrospect I was a bit afraid that I found something this big.

  I got a bit paranoid  and I rushed it to print so to speak.  
Don't drink coffee and sit at  a pc for 20 hours out of 24 .  If you find something important you may handle it stupidly.
If I ever find a large problem like this again.  
I will handle it differently.

I do believe I stopped a lot of money from being stolen from zen-gaw which ultimately helps their customers.



sr. member
Activity: 462
Merit: 251


I am not surprised to be honest, will be a lot of unhappy people.


No wonder you aren't surprised, mistakes are what competition always awaits.
hero member
Activity: 569
Merit: 507
yeah I rather an attempt at honesty then all of us cutting throats over coins.



Phil,thanks again for all the info. I honestly appreciate it. One thing I brought up over there is that I do not believe you handled this appropriately
let me quote myself
"in that sense I disagree with him (Phil). I don't think GAW ever offered a bounty, so he has no right to demand one. I honestly believe that. If GAW then decided to give him a bounty, fine, but he has no right to demand a bounty. What he did in fact was borderline blackmail and I do not condone such behavior. let me post that over there as well"
However, I do understand you regret some of what you did and you confessed that it was late, were upset, etc

I commend people that look for the truth and I also believe GAW should take another step forward towards transparency
hero member
Activity: 569
Merit: 507
now the problem at hand is the following:
if nicehash was paying well over BTCGuild and Josh now admmited that they didn't point their hashes to nicehash because it would destroy the market (because of surplus) then where all/were all the hashest going to? even if all hashes were in btcguild, the delta between nice and btcguild had to come from somewhere.
this is the reason why we need transparency
hero member
Activity: 569
Merit: 507
hero member
Activity: 569
Merit: 507
thanks OP for posting the whole thing
legendary
Activity: 4116
Merit: 7849
'The right to privacy matters'
yeah I rather an attempt at honesty then all of us cutting throats over coins.



I went for my swim and further developed  how cheap it was to do this. the case example below is made up but very easy for anyone to do.
_______________________________________________________________________________ _____

Lets say I am Lee from china and run this thread. I am not him  and he did not do this.

https://bitcointalksearch.org/topic/wwweasy2minecom-340-the-group-buy-of-antminer-s5psu-included-514758

Zen-Gaw is a rival to me.  I have tons of hashpower in my data centers and Zen-Gaw  drains customers from me.
How can I fight back?

So In lee's mind he says I have 66 1.5th  not sold or hosted that is 100th.  I have them pointed at ghash and I get normal luck so my 100th is getting 1.9 btc before the power bill.

He points the 100th at nicehash ands sells his hash at 0.0310  way too high.

He has a friend open an account at westhash buying 100th at 0.0311  also way too high.

so 100 x 0.0310 = 3.10btc  so 100 x 0.0311 = 3.11btc   he is getting  to jump the going price from 0.019 to 0.030
for .001 btc and  a 2 percent fee which is .02 x 3.1 or 0.062  and .02 x 3.11 which is 0.0622 that means .
0.0622
0.0620
0.001
_________
0.1252   btc spent

  to rise  the payout from say .010 an s-3 to .015 and s-3 and all other gear following nicehash sha256

It is legal to do this and in the end Lee would still have his 100th earning the 1.9 btc - .1252 and his bottom line would be only  60 usd worse off...  each day he did it.
__________________________________________________________________________

Zen-gaw would lose 4 to 10 btc for each 1 day attack.   just guessing but I think I am correct. Since the loss for just the top ten champions was about 1 btc yesterday.

I have been thanked via pm from  GAW Miners_Ceo

he promised me a btc bounty.  So I spent .75btc to find the problem  I guess he will send me 1.75btc

that would be a btc bounty plus the .75btc in expenses

 I will post on that when he  sends it.

I am taking Off for some pizza at the jersey shore.  be back later.

At collider. I deleted your post but I have saved a copy of it.

to all please read  top of thread

https://bitcointalksearch.org/topic/how-i-found-a-flaw-with-zen-cloud-payout-system-and-more-777194
sr. member
Activity: 420
Merit: 250
Nice and West down for maint.

ps: both of them back up now.
legendary
Activity: 910
Merit: 1000
sr. member
Activity: 420
Merit: 250
I locked the first try at writing this thread  I decided I want to be able to moderate the thread.

I had 4 s-3's they mined at westhash and at nicehash. I sometimes would get huge spikes in price on Nicehash and westhash.  Often getting 2x normal payouts. I did not understand why but noted it as something I would look into. I did not understand why anyone would pay for sha256 hash at 2x the going rates.
I sold off my s-3's . I purchased 2 asicminer tubes.

 I was mining at mmpool.org with a pair of asic miner tubes. Why a small pool because asicminer tubes have pool choice limits if you use the stock controller (thanks fried cat).
So two days ago I thought I saw a flaw in mmpool.org's method of running the pool.  The pool is small around 50th.  I decided to test my idea out.  It involved buying large hash from westhash (a nicehash partner)  I purchased blocks of 30 th or 50 th even  100 th on and off from westhash and pointed them at mmpool.org  sometimes the mmpool.org got up to 130th of which 80th was all mine.
   After 30 hours of testing I spent about .75btc doing the tests I decided my idea that mmpool.org was flawed was wrong.  I did raise my btc due if it ever hits a block and would kind of break even if the block is hit soon.  The result I was looking for did not happen.  Sometimes an experiment can give a different result then you were looking for.
 I drove the price up from about .0245btc to .0307 btc on both westhash and its partner nicehash.  After I stopped the btc spending price dropped down to about .025btc




I realized this has other results.  I own an s-3  hosted on zen-cloud   and point it at nicehash.
here are scheduled payoffs for all zen gear pointed at nicehash


Payoff are .0307 per th.      now for 1 zen cloud s-3  this means you get .0145 instead of .0095   a gain of about .0050btc so no one would spend .7500 btc to gain .0050 btc.  But If I had pointed the extra hash at cex.io/ghash   my .75btc would have paid back around .5btc  so I would be spending around .2500 btc to earn .0050  now we all know  that makes no sense at all spending 50x the btc units to get 1 btc units for the 1 s-3 is silly a waste of money.

But zen cloud is full of gh in the sky.
the top ten are more then 100th total


 Those people would be paid  100 x .0307 = 3.07 btc  instead of standard 1.9 btc - 2.1 btc    so that is around 1 btc extra on just the top ten sha256 miners.  This could have cost zen-gaw big bucks. I like or should I say liked this company or maybe I should say I have had a hot and cold relationship with the company.  They have been very nice to me and at time really fucking stupid.
I am basically an honest guy so I decide to post a thread to them.  I fear they have been robbed more then once by manipulation on nicehash by someone buying on westhash.  I have seen huge over paid sha256 hash and could not understand why people would overpay for  sha 256 hash.  This reason is really good reason.  

So I do the right thing. I posted this thread.



I have more to say but I am going for a swim.  Be back in a few hours.

  I think GAW should thank you for bug and save them big BTC also this Friday Prime switch to SHA256 that big hash if no one catch it but you piss off miners.
legendary
Activity: 910
Merit: 1000

I am not surprised to be honest, will be a lot of unhappy people.

legendary
Activity: 3654
Merit: 8909
https://bpip.org
Pages:
Jump to: