Hello inbox,
I have trouble believing you did not knew this transaction was showed valid / invalid on different implementation :
http://mastercoin-explorer.com/transactions/75d9753917c9e1c31bf9c4151675724e62bc977e6b832edbd3f8c6c04d2eab08
You did it from yourself to yourself, were you not aware it could be an issue ?
You made the first deposit into our exchange more 1 hour later.
Also,
"they were notified that I did indeed create the fake account" => You never notified us, someone else did and after we froze this account we discovered it was you as well (since the IP was the same).
Only after we did the first batch of withdrawals where we froze yours did you actually told us that you are "glad that we found about the duped 300 msc"
This could still a misunderstanding after all. We just do not want to rush anything, and we will maybe ask a third party for resolution once we have reconstructed the whole timeframe.
We ask for your personnal identification. We wont share it. (ID card, proof of residency, and some kind of proof that those are indeed yours)
Had we not both caught onto you and manual withdrawals, you could have withdrawned hundreds of fake MSC, if of course you were having ill intentions.
I have trouble believing you did not knew this transaction was showed valid / invalid on different implementation :
http://mastercoin-explorer.com/transactions/75d9753917c9e1c31bf9c4151675724e62bc977e6b832edbd3f8c6c04d2eab08
You did it from yourself to yourself, were you not aware it could be an issue ?
You made the first deposit into our exchange more 1 hour later.
Also,
"they were notified that I did indeed create the fake account" => You never notified us, someone else did and after we froze this account we discovered it was you as well (since the IP was the same).
Only after we did the first batch of withdrawals where we froze yours did you actually told us that you are "glad that we found about the duped 300 msc"
This could still a misunderstanding after all. We just do not want to rush anything, and we will maybe ask a third party for resolution once we have reconstructed the whole timeframe.
We ask for your personnal identification. We wont share it. (ID card, proof of residency, and some kind of proof that those are indeed yours)
Had we not both caught onto you and manual withdrawals, you could have withdrawned hundreds of fake MSC, if of course you were having ill intentions.
This is indeed the transaction that created the bug in mastercoin explorer. I hope Tachikoma can explain the bug better than I can. By accident I sent 50msc to myself instead of sending to your exchange. Mastercoin explorer didnt add the 50msc to the balance which showed a 212msc instead of 212+50msc deposited. So when I sent 262msc to your exchange it showed up as invalid, however this tx was valid and showed up as valid on all other blockchains.
Yes it took me time after this tx to make a deposit, sending mastercoins is still a task for me with the setup I have. My intentions were to send 50msc to your exchange, which would have showed as valid, but I trusted your exchange with the full 262msc and at this point I had already spent 1h trying to figure out what was wrong with the balance so I sent the full amount 262msc instead of 50. This is when i sent the 262msc which showed up as invalid (BUT WAS VALID!) and I had no idea it would show up as invalid.
It is true I notified you about the fake account after it had been frozen, in fact it was when I woke up and noticed your email. You are right, I should have emailed you about it when I created it. I regret this but I had no prior experience with bug reporting. I knew the account would be discovered since you would audit all deposits to see if the someone found out about this before me.
I am reluctant giving you my personal identification, because I feel like this whole event was misinterpreted and my real life identity will be plastered on this forum as a scammer. How can I guarantee this will not happen and please tell me how knowing my information will help with the resolution.
I thought all withdrawals were manual, however the withdraw i did for the 212msc were technically mine. If it did pass, I would have still been entitled to 50msc that was still owed to me. (262msc-50 =212)
I hope this clears up some misunderstanding. Again, I had no ill intentions especially since you were holding my 262msc all along.
"And saying all that, I am not even starting on the fact that you created an "admin" account and searched for a hypothetical admin page."
This is true, I build website so I am curious about these things. I was interested how the website was built. I'm impressed by the speed and nice looking site. I was surprised that the admin page was "admin.php". Yet again, I did not try to bruteforce, I just saw it, and left a few s later. Remember the exchange had 262 of my msc which they did not acknowledge the existence of. It made me very uneasy.
