Author

Topic: MtGox stealing my BTCs? (Read 1986 times)

legendary
Activity: 1890
Merit: 1003
October 19, 2013, 03:45:57 PM
#29


Come on PuertoLibre, its posted by a guy with 4 posts, talking about his "friend" with a few screenshots.   Who knows what his "friend" did or who he gave access to via the API.   Its a little flimsy for be to believe anything this guy is saying.
Did he also fake the receiving address amounts at roughly the same time frame?


sounds like they went trough the API this would allow them to mess up the transaction fees.. the only transaction fee you can choose is a tick box of 0.005 so its either a server exploit of API exploit both of which could or couldnt be your friends fault but should be serious concern to mtgox..
legendary
Activity: 1890
Merit: 1003
October 18, 2013, 04:00:52 PM
#28
Quote

Links?, Proof?, anything that wasn't pulled out of yer arse?

it's called common sense something you clearly lack.

Ya, throw around unproven lame statements and I'm the one with no common sense.    Roll Eyes

https://bitcointalksearch.org/topic/mtgox-account-hacked-and-emptied-by-huge-mining-fee-312923

Umm, is that supposed to be proof that the exchange is the one stealing the money here?  Doesn't read that way.  Sounds like someone got bitten after not knowing how to secure their system correctly.

Okay, tell me, how do you arbitrarily set the withdrawal fee using MtGox's web interface? (to something like 2.2btc)

Okay, go...



Who says hackers use a web page?

https://en.bitcoin.it/wiki/MtGox/API/HTTP/v1#Withdraw_bitcoins
Withdraw bitcoins

https://data.mtgox.com/api/1/generic/bitcoin/send_simple

Send bitcoins from your account to a bitcoin address.

Parameters:

    Name    Value    Required    Example
    address    string    Yes    N/A
    amount_int    int    Yes    N/A
    fee_int    int    No    N/A
    no_instant    bool    No    N/A
    green    bool    No    N/A

Being ignorant doesn't make either of you right.
You can't use the Api without the keys. So that would not be likely.

{"result":"error","error":"Identification required to access private APINULL","token":"login_error_missing_rest_key"}

"Being ignorant doesn't make either of you right"
legendary
Activity: 1512
Merit: 1036
October 18, 2013, 03:50:30 PM
#27
Quote

Links?, Proof?, anything that wasn't pulled out of yer arse?

it's called common sense something you clearly lack.

Ya, throw around unproven lame statements and I'm the one with no common sense.    Roll Eyes

https://bitcointalksearch.org/topic/mtgox-account-hacked-and-emptied-by-huge-mining-fee-312923

Umm, is that supposed to be proof that the exchange is the one stealing the money here?  Doesn't read that way.  Sounds like someone got bitten after not knowing how to secure their system correctly.

Okay, tell me, how do you arbitrarily set the withdrawal fee using MtGox's web interface? (to something like 2.2btc)

Okay, go...



Who says hackers use a web page?

https://en.bitcoin.it/wiki/MtGox/API/HTTP/v1#Withdraw_bitcoins
Withdraw bitcoins

https://data.mtgox.com/api/1/generic/bitcoin/send_simple

Send bitcoins from your account to a bitcoin address.

Parameters:

    Name    Value    Required    Example
    address    string    Yes    N/A
    amount_int    int    Yes    N/A
    fee_int    int    No    N/A
    no_instant    bool    No    N/A
    green    bool    No    N/A

Being ignorant doesn't make either of you right.
legendary
Activity: 4690
Merit: 1276
October 18, 2013, 03:34:23 PM
#26
Beware of Mt. Gox - can't get Bitcoin out now without photo ID!

https://bitcointalksearch.org/topic/beware-of-mt-gox-cant-get-bitcoin-out-now-without-photo-id-313343

Now this...

Anyone have any charts that estimate MtGox's liquidity level?

I'd love to see one to, but I wouldn't hold my breath.  Mt. Gox has a long history which makes it probably impossible to come up with any meaningful estimates of what they might be sitting on.

It is interesting to watch whether liquidity comes off of the public order-book when large trades happen.  Some of these within the last few days did not seem to.  So it was either BTC that had not been on the market, was in a dark pool, or was newly arrived from quasi-whale contacts of theirs.  The most interesting thing to know would be whether they are burning through their own (probably) substantial pool which they've accumulated over the years.  These things can only be guessed at and inferred absent a whistle-blower, hack, or something like that.  Even then the info would have to be taken with a grain of salt.

legendary
Activity: 1890
Merit: 1003
October 18, 2013, 03:14:50 PM
#25
Beware of Mt. Gox - can't get Bitcoin out now without photo ID!

https://bitcointalksearch.org/topic/beware-of-mt-gox-cant-get-bitcoin-out-now-without-photo-id-313343

Now this...

Anyone have any charts that estimate MtGox's liquidity level?
legendary
Activity: 1890
Merit: 1003
October 18, 2013, 02:28:25 PM
#24
Quote

Links?, Proof?, anything that wasn't pulled out of yer arse?

it's called common sense something you clearly lack.

Ya, throw around unproven lame statements and I'm the one with no common sense.    Roll Eyes

https://bitcointalksearch.org/topic/mtgox-account-hacked-and-emptied-by-huge-mining-fee-312923

Umm, is that supposed to be proof that the exchange is the one stealing the money here?  Doesn't read that way.  Sounds like someone got bitten after not knowing how to secure their system correctly.

Okay, tell me, how do you arbitrarily set the withdrawal fee using MtGox's web interface? (to something like 2.2btc)

Okay, go...

legendary
Activity: 1890
Merit: 1003
October 18, 2013, 10:30:35 AM
#23
Quote

Links?, Proof?, anything that wasn't pulled out of yer arse?

it's called common sense something you clearly lack.

Ya, throw around unproven lame statements and I'm the one with no common sense.    Roll Eyes

https://bitcointalksearch.org/topic/mtgox-account-hacked-and-emptied-by-huge-mining-fee-312923
legendary
Activity: 1330
Merit: 1000
Bitcoin
October 18, 2013, 12:21:07 AM
#22
Quote

Links?, Proof?, anything that wasn't pulled out of yer arse?

it's called common sense something you clearly lack.
legendary
Activity: 1330
Merit: 1000
Bitcoin
October 17, 2013, 11:58:54 PM
#21
I believe you don't have 2FA? anyway bye bye 3 BTC. Most likely its hacker and not MTGOX Smiley

it's pretty well known that Mt.Gox is stealing Bitcoins from its users to pay for its insolvency.
newbie
Activity: 47
Merit: 0
October 17, 2013, 07:30:15 PM
#20
Hello,

All my bitcoins are gone from my bitcoin address... Received an e-mail 10 minute ago here:

Transaction reference: 27fb49c7-72d4-4e88-9bb0-d2646d403e97
Date: 2013-10-11 07:43:40 GMT
IP: 209.21.68.151

How is that even possible? I have a very strong password and no viruses... Can't be true!

The IP is in California and I am in Switzerland. Jeez....

Just did a quick check and this might help too, looks like a gmail user is connected to that IP for sending spam for the site discountflitflopshoes.com:

https://webcache.googleusercontent.com/search?q=cache:g2xvH6u5lVMJ:http://cleantalk.org/blacklists/discountflitflopshoes.com%2B209.21.68.151

legendary
Activity: 3472
Merit: 1722
October 16, 2013, 04:57:40 PM
#19
That would only protect you from common threats, which the highly specialiced trojans/keyloggers out for bitcoin exchange login data most definitely are not.
The only way to confidently deny the presence of bitcoin malware is if you'd exclusively accessed exchanges via a fresh and clean VM.

It wouldn't be enough if the host OS wasn't "fresh and clean" too.

It would probably be enough if he used the host OS exclusively for accessing exchanges and the guest OS for other Internet-interacting stuff. Though it may still be sometimes possible to compromise the host OS from the guest OS (or other guests if they aren't properly isolated).

http://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky-Cloudburst-PAPER.pdf
http://media.blackhat.com/bh-us-11/Elhage/BH_US_11_Elhage_Virtunoid_WP.pdf
sr. member
Activity: 392
Merit: 250
October 16, 2013, 08:02:01 AM
#18
I believe you don't have 2FA? anyway bye bye 3 BTC. Most likely its hacker and not MTGOX Smiley
legendary
Activity: 1358
Merit: 1001
https://gliph.me/hUF
October 16, 2013, 07:59:24 AM
#17
Did you have 2FA?
newbie
Activity: 40
Merit: 0
October 16, 2013, 07:12:23 AM
#16
Well, I actually know how to use a computer...

Anyways, complaint has been open at the FBI, hope they find the guy :-)

At least I have an IP address to start with...
member
Activity: 109
Merit: 10
October 11, 2013, 10:54:23 AM
#15
Their stealing their money because your to stupid to secure your shit?  Interesting.   How many btc were taken?  Was your password 1234?

No, I have a strong password. 3 BTCs were taken... Not that much but hey, that sucks...

oh, you have a strong password.  that is all you have to say?  now I know its your own fault and not theirs.  typical end user.  ya, they are going to risk it all to steal 3 btc from you.   change the thread title to I don't understand how to use a computer, game over.
newbie
Activity: 40
Merit: 0
October 11, 2013, 08:59:03 AM
#14
Their stealing their money because your to stupid to secure your shit?  Interesting.   How many btc were taken?  Was your password 1234?

No, I have a strong password. 3 BTCs were taken... Not that much but hey, that sucks...
member
Activity: 109
Merit: 10
October 11, 2013, 08:42:46 AM
#13
Their stealing their money because your to stupid to secure your shit?  Interesting.   How many btc were taken?  Was your password 1234?
legendary
Activity: 1316
Merit: 1000
Varanida : Fair & Transparent Digital Ecosystem
October 11, 2013, 05:23:29 AM
#12
Let me guess. No 2FA?

no viruses...

How would you even know that?

Because I ran a full check with 4 different anti malware / anti virus tools?

antivirus tools can not kill the real cracker's backdoors, your PC using habit is the best safeguard for you private information
hero member
Activity: 952
Merit: 1009
October 11, 2013, 05:15:24 AM
#11
Let me guess. No 2FA?

no viruses...

How would you even know that?

Because I ran a full check with 4 different anti malware / anti virus tools?

That would only protect you from common threats, which the highly specialiced trojans/keyloggers out for bitcoin exchange login data most definitely are not.

The only way to confidently deny the presence of bitcoin malware is if you'd exclusively accessed exchanges via a fresh and clean VM.
newbie
Activity: 40
Merit: 0
October 11, 2013, 05:01:22 AM
#10
Let me guess. No 2FA?

no viruses...

How would you even know that?

Because I ran a full check with 4 different anti malware / anti virus tools?
hero member
Activity: 952
Merit: 1009
October 11, 2013, 04:38:30 AM
#9
Let me guess. No 2FA?

no viruses...

How would you even know that?
legendary
Activity: 3038
Merit: 1032
RIP Mommy
October 11, 2013, 04:36:00 AM
#8
Well, it's not the first time it's been used... http://blockchain.info/address/155SfFNjcqVZdoHDM6M3uR1hSjJtuW3xRf

If I were MtGox, I'd log the accounts and IPs trying to withdraw to that address, and try to alert the account owners directly before the withdrawals are allowed to execute.
newbie
Activity: 40
Merit: 0
October 11, 2013, 04:28:35 AM
#7
By the way, it was sent to: 155SfFNjcqVZdoHDM6M3uR1hSjJtuW3xRf

If anyone can help finding back the guy, I'll reward!
newbie
Activity: 40
Merit: 0
October 11, 2013, 04:27:35 AM
#6
And I guess that MtGox will just tell me that it's my fault of course...
newbie
Activity: 40
Merit: 0
October 11, 2013, 04:22:33 AM
#5
No connections whatsoever outside of Switzerland...
donator
Activity: 1218
Merit: 1015
October 11, 2013, 04:08:51 AM
#4
I thought about that, but would be strange that the guy doesn't even change the password afterwards... And where would he have found my e-mail address?

That's too much to be true...
Email provider should let you check last few IP addresses which accessed your account so you can double-check. (Usually in a "tools" or sometimes "settings" tab - though with smaller providers, you' may have to email support)
newbie
Activity: 40
Merit: 0
October 11, 2013, 04:04:57 AM
#3
I thought about that, but would be strange that the guy doesn't even change the password afterwards... And where would he have found my e-mail address?

That's too much to be true...
donator
Activity: 1218
Merit: 1015
October 11, 2013, 04:01:12 AM
#2
Perhaps the credentials of your email account or password manager are compromised?
newbie
Activity: 40
Merit: 0
October 11, 2013, 03:55:42 AM
#1
Hello,

All my bitcoins are gone from my bitcoin address... Received an e-mail 10 minute ago here:

Transaction reference: 27fb49c7-72d4-4e88-9bb0-d2646d403e97
Date: 2013-10-11 07:43:40 GMT
IP: 209.21.68.151

How is that even possible? I have a very strong password and no viruses... Can't be true!

The IP is in California and I am in Switzerland. Jeez....
Jump to: