NEWS FLASH: Stolen NXT On The Move
To catch a thief, follow themoney NXT
Huh, nothing like a big price rise to make a thief break cover.
I just got a PM from plasticAiredale, who has been looking longingly at his lost/stolen NXT in its bandit/darkNXT/who-knows-what account.
What an amazing coincidence, the price of NXT skyrockets and that NXT has now apparently been transferred into Dgex.
Guess that wasn't darkNXT after all - SOMEBODY had a code to move it around...
For the record, where we left the EpicThomas saga in our last chapter:
13643712185318669838 contains 100088 NXT taken from Framewood's 697109629372813510
15182566201738727933 contains 18665 NXT taken from plasticAiredale's 8439060069775407509
9793828175536096502 contains 18197 NXT taken from newcn's 16886318053889080545
12152013998194592943 contains 147690 NXT taken from sparta_cuss's 11794318797680953099
16204974692852323982 contains 7808 NXT taken from PaulyC's 16821029889165561706
...with 16204974692852323982 containing transfers in of an additional 1155NXT from four other transfers on 29.12.2013 08:19:00 thru 08:21:32, and EpicThomas claiming he never touched any of these accounts and the transfers just sort of happened on their own as part of some software bug or piggy-back hacker, and me showing a little mercy...
Now, the saga continues:
13643712185318669838 has transferred Framewood's 100,087 NXT to 2647797480528736696 at timestamp 20.01.2014 00:12:24
15182566201738727933 has transferred plasticAiredale's 18,663 NXT to 2647797480528736696 at timestamp 20.01.2014 00:13:55
9793828175536096502 has transferred newcn's 18,196 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:24
12152013998194592943 has transferred sparta_cuss's 147,690 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:59
16204974692852323982 has transferred PaulyC's 8,962 NXT to 7434018619814562489 at timestamp 19.01.2014 23:44:52
7434018619814562489 has transferred 61,372 NXT total to 12407220479703463755 at timestamp 19.01.2014 23:44:52
Note:
7434018619814562489 has previously received 9,527 NXT from 6164081464868000542 at timestamp 19.01.2014 23:44:05 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,194 NXT from 16143592223796100493 at timestamp 19.01.2014 23:42:11 ; is this stolen NXT from a previous heist ?
7434018619814562489 has previously received 24,648 NXT from 17670462608804215164 at timestamp 19.01.2014 23:41:31 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,042 NXT from 14527793117125736279 at timestamp 19.01.2014 23:40:35 ; is this stolen NXT from a previous heist?
2647797480528736696 has previously received 1,226 NXT from 11093204588975801957 at timestamp 20.01.2014 00:15:50 ; is this stolen NXT from a previous heist?
So... known stolen NXT from five known heists plus possible stolen NXT from five other possible heists are now in two brand-new "CLEAN NUMBER" accounts:
12407220479703463755 containing 61,372 NXT currently worth approximately $6,500 USD (PaulyC)
2647797480528736696 containing 285,859 NXT currently worth approximately $30,000 USD (Framewood, plasticAiredale, newcn, sparta_cuss)
Now the NXT is in "clean" new NXT accounts, time for the thief to send it to exchanges for BTC:
12407220479703463755 has transferred 61,371 NXT total to 10715382765594435905 at timestamp 19.01.2014 00:18:44
10715382765594435905 is a huge trading account, 1,340+ transfers, currently with 21M NXT ; salsacz thinks this is Bter?
2647797480528736696 has transferred 284,634 NXT to 6635869272840226493 at timestamp 20.01.2014 00:18:44
6635869272840226493 is definitely DGex
I have sent numerous emails and PMs to Graviton asking him to freeze trading on 2647797480528736696 and ID the user
I will send the same to Bter about 12407220479703463755.
EpicThomas, if I find out this is you and that you have played me for a fool, I am going to take vacation days from work and come to visit my sister in Florida and do a ride-along with the Orlando FBI when they come to put handcuffs on you.
To catch a thief, follow the
Huh, nothing like a big price rise to make a thief break cover.
I just got a PM from plasticAiredale, who has been looking longingly at his lost/stolen NXT in its bandit/darkNXT/who-knows-what account.
What an amazing coincidence, the price of NXT skyrockets and that NXT has now apparently been transferred into Dgex.
Guess that wasn't darkNXT after all - SOMEBODY had a code to move it around...
For the record, where we left the EpicThomas saga in our last chapter:
13643712185318669838 contains 100088 NXT taken from Framewood's 697109629372813510
15182566201738727933 contains 18665 NXT taken from plasticAiredale's 8439060069775407509
9793828175536096502 contains 18197 NXT taken from newcn's 16886318053889080545
12152013998194592943 contains 147690 NXT taken from sparta_cuss's 11794318797680953099
16204974692852323982 contains 7808 NXT taken from PaulyC's 16821029889165561706
...with 16204974692852323982 containing transfers in of an additional 1155NXT from four other transfers on 29.12.2013 08:19:00 thru 08:21:32, and EpicThomas claiming he never touched any of these accounts and the transfers just sort of happened on their own as part of some software bug or piggy-back hacker, and me showing a little mercy...
Now, the saga continues:
13643712185318669838 has transferred Framewood's 100,087 NXT to 2647797480528736696 at timestamp 20.01.2014 00:12:24
15182566201738727933 has transferred plasticAiredale's 18,663 NXT to 2647797480528736696 at timestamp 20.01.2014 00:13:55
9793828175536096502 has transferred newcn's 18,196 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:24
12152013998194592943 has transferred sparta_cuss's 147,690 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:59
16204974692852323982 has transferred PaulyC's 8,962 NXT to 7434018619814562489 at timestamp 19.01.2014 23:44:52
7434018619814562489 has transferred 61,372 NXT total to 12407220479703463755 at timestamp 19.01.2014 23:44:52
Note:
7434018619814562489 has previously received 9,527 NXT from 6164081464868000542 at timestamp 19.01.2014 23:44:05 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,194 NXT from 16143592223796100493 at timestamp 19.01.2014 23:42:11 ; is this stolen NXT from a previous heist ?
7434018619814562489 has previously received 24,648 NXT from 17670462608804215164 at timestamp 19.01.2014 23:41:31 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,042 NXT from 14527793117125736279 at timestamp 19.01.2014 23:40:35 ; is this stolen NXT from a previous heist?
2647797480528736696 has previously received 1,226 NXT from 11093204588975801957 at timestamp 20.01.2014 00:15:50 ; is this stolen NXT from a previous heist?
So... known stolen NXT from five known heists plus possible stolen NXT from five other possible heists are now in two brand-new "CLEAN NUMBER" accounts:
12407220479703463755 containing 61,372 NXT currently worth approximately $6,500 USD (PaulyC)
2647797480528736696 containing 285,859 NXT currently worth approximately $30,000 USD (Framewood, plasticAiredale, newcn, sparta_cuss)
Now the NXT is in "clean" new NXT accounts, time for the thief to send it to exchanges for BTC:
12407220479703463755 has transferred 61,371 NXT total to 10715382765594435905 at timestamp 19.01.2014 00:18:44
10715382765594435905 is a huge trading account, 1,340+ transfers, currently with 21M NXT ; salsacz thinks this is Bter?
2647797480528736696 has transferred 284,634 NXT to 6635869272840226493 at timestamp 20.01.2014 00:18:44
6635869272840226493 is definitely DGex
I have sent numerous emails and PMs to Graviton asking him to freeze trading on 2647797480528736696 and ID the user
I will send the same to Bter about 12407220479703463755.
EpicThomas, if I find out this is you and that you have played me for a fool, I am going to take vacation days from work and come to visit my sister in Florida and do a ride-along with the Orlando FBI when they come to put handcuffs on you.
great job!
I focused on some of the accounts in the early days when I was stolen, but I didn't check them recently.
thank you rickyjames, and other people who helped discovering the case.
Let me give my final update on this topic by reaching out with an open hand to two outstanding NXTers.
I could not have done what little I have done regarding EpicThomas without the real detective work by all the folks mentioned in this post by Salsacz :
https://bitcointalksearch.org/topic/m.4651128
...and most importantly by detective work by Salsacz himself. I believe in giving credit where credit is due, and Salsacz deserves A LOT of credit for his work on this site in MANY areas - advertising and hacker tracking and much more. I may have made a big splash in the past few weeks chasing EpicThomas with big words and big graphics, but I never intended for that to overshadow the real work and real dedication and real effort by others who deserve praise for their actions that further the cause of NXT a lot more than I do. If I've ruffled any feathers with my bluster, I apologize for that.
Secondly I would like to clarify something I said above about Graviton. I mentioned that I had sent numerous PMs and emails to him to inform him of the movement of stolen NXT thru DGex. This was not meant to imply that he was unresponsive and needed prodding from repeated communications from me. Just the opposite - I sent one email to many locations simultaneously, to reach him as quickly as possible, not knowing which would reach him first, and he responded back to me very quickly. Graviton has taken a lot of heat over Dgex lately, and I do not want to add any further fuel to any of the fires around him. He has always given me good service at Dgex and has always been responsive to my direct communications with him. I consider Graviton to be an honorable man trying hard to provide not one but two vital services to the NXT community, both with his forum and with his exchange. As with Salsacz, Graviton's service to the NXT community far exceeds my own in chasing EpicThomas.
And with that, let me pass on what information I have received from Graviton:
*********** BEGIN GRAVITON COMMENTS**********************
"The BTC from the apparently stolen NXT were cashed out yesterday morning, so what I have left is some info if anything....
10715382765594435905 is not a DGEX account.
We had a moderately large deposit two days ago from 2647797480528736696, washing it quickly through instant withdrawals to BTC.
The owner of the account is a well known and reputable NXT community member."
*********** END GRAVITON COMMENTS**********************
If the owner of 2647797480528736696 is "a well known and reputable NXT community member", then it's not EpicThomas.
Guess I'm not going to Florida to see my sister Connie.
Instead, it looks like maybe darkNXT can be harvested, or maybe (to quote Hamlet) something is rotten in the state of Denmark, or maybe something else is going on that I don't understand and that's way beyond me.
I think I will pull the brim of my fedora down over my eyes and walk away down the dark street now, becoming increasingly distant in bright pools of light laid down by the streetlamps.
See y'all.
.
