Topic: [OFFICIAL]Bitfinex.com first Bitcoin P2P lending platform for leverage trading - page 210. (Read 723903 times)

same here.

yes, exactly the same here. Maybe some hours of intrest will be paid tomorrow, was already the case once iirc-

My 'swap payment' appears to be significantly (~20%) short this morning. Rates haven't dipped that much, and my funds have been fully lent throughout the prior day.

Is there an issue with swap payments related to the security issues yesterday??

Anyone else see discrepancy with their swap payment this morning?

Hear ye, Hear ye !

Whatever doubts I might have had
Regarding BitFinex's Support have
been diseminated today by:

Raphael
CTO
Bitfinex team

First my 2FA for some reason was not working,
and he quickly applied a Fix to that, secondly,
Qt-Trader had SSL cert problems, and he also
quickly "Fixed" / Resolved that also, incredible.

I'm here to say that "Raphael" is one "Sharp" cookie.

Keep up the "Good Work",
we most surely "Appreciate" you !

Seriously !
Thank-You,   

We are aware that the password form is far from perfect, it will be improved shortly.

On another note, those who have issues verifying their audit information balance can contact us at [email protected].

Raphael

The password changing system is not standard and confusing.

I tried typing in my old password in the two fields...

TwinWinNerd, we will.

To everyone,

We have re-enabled Incapsula with a new SSL certificate.

We have re-enabled withdrawals. However, all users who have a pending withdrawals will need to confirm it by sending us an email at [email protected]

So far, no malicious withdrawals seems to have happened, as either 2-factor authentication or email confirmations allowed you to prevent/cancel them for the few accounts that got compromised. This is a very good thing.

We will continue to monitor the situation and keep even lower than usual amount on our hot wallets (so bear with us if your withdrawals are delayed in the following hours).

Have a good day
Raphael

Can you please change the format of your password change design.

It is so confusing.

Every site uses this standard:

Old password
New password
Confirm new password

Hello everyone,

So a few updates about the current situation.

If you did not know that, a major vulnerability was discovered on OpenSSL version that we were using. Our systems have been fixed. We have moved to Cloudflare while Incapsula do their job and fix their systems. This means that Chinese users can not access our platform for now. We are very sorry about this and hope to be able to switch back as soon as possible.

All user sessions have been reset, which is why you got all logged out forcibly. Nothing to worry about with this.

Our SSL certificates have been re-generated, just in case.

You can now safely access Bitfinex again.

Considering that this vulnerabilities was open for 2 years, we strongly suggest that you reset your password here: https://www.bitfinex.com/user/edit

No hot wallets or sensitive access was compromised, as those information/systems are not on our front-end servers.

We will enable back withdrawals within a few hours, but we want to make sure everyone secure their account before that. Security comes first

Thank you for your understanding and have a good day
Raphael
Bitfinex team

It says "password" and "password confirmation" right below these fields...

Maybe it's obscured like that on purpose
to make it harder to find for intruders.

Just Guessing.

Searching the site everywhere, but can't find the option to change my password.  How the hell do I do this?

Thanks in advance.

Update: found the option by process of elimination.  It's not intuitive or marked what so ever, and I would suggest adding a change your password heading.

Under "account settings" under "To change username or email, please contact us at ...."
there are two empty fields that you can type in a new password, then click update at the bottom and it's done.

Peace

It should be normal for suddenly logged out of bfx site.


Since they must restart the web server in order to use the updated version of openssl library. And all the web session should have gone after they restarted the web server.

Check again.  https://www.bitfinex.com/pages/announcements; the link is on the bottom of the page. You were logged out so you could create a new secure session. Bitfinex sent out an email about the fix, and also suggests you change your password (which is a good practice to do regularly anyway.)  Everything is normal on the site.

I hope it's just bad timing on Bitfinex's part, but i read about an openssl vulnerability, then i'm suddenly logged out of the bfx site (this normally never happens) and the front page looks different. The combination of those things makes me a bit nervous and i hesitate to log back in. Also on the front page i don't see a link to the announcements anymore, unless i missed it.

Thanks for the update and quick response to the vulnerabilities.

bitfinex tweeted change your credentials does this mean email & password?

should we change the 2fa to a fresh one?

Welcome.

You have complete control over how much you lend.. You can offer all you have, or nothing at all. If you want to lend, transfer the USD to your deposit wallet ("manage wallets" button), then go to the lending tab (called "total return swaps") and there you can enter your offers in USD, BTC or LTC (choose one of the currencies at the top and then click on the "offer swap" tab below.

As was already mentioned http://charts-bfxdata.rhcloud.com/bitfinexLiquidityUSD.php is very useful. It helps to decide at which % to place your offer. For example, if the first chart shows a pattern like in right side of this screenshot, you could offer at 0.10% and be the lowest offer (and get taken quickly), but you'd shoot yourself in the foot. Instead it would be better to offer at 0.2%-0.22%. It may take an hour longer before your offer is taken, but your profit will be higher.


The third chart is also important for maximizing your profit. The example below is from today. There's a big offer "wall" at 0.14% here (that's all the lenders who choose the flash return rate). If a trader wants to borrow a large amount, say more than 300K, they'll have to pay at least 0.14%, so setting your offer at 0.12% here would not make much sense.


If you have time to monitor and adjust your offers regularly (once or twice a day), it would be nice if you didn't put it in flash return rate (the "set it and forget it" option for interest rate, the average of all active swaps)). The FRR unfortunately has the effect of dragging the interest rate down because there are always people who undercut it and if the amount in the FRR is huge (like today) there's no reason for traders to pay more than the FRR. So the more people use FRR, the lower the interest rates get.

Yes thanks Bitfinex team it seems from some of the replies here that they black hats jumped on this as soon as it was announced. 2FA and email withdrawals have probably saved a few peoples skin.

Confirmed. Earlier today, http://filippo.io/Heartbleed/#bitfinex.com said "vulnerable", now says "fixed".

I just got a reply from Raphael. They are finished with fixing their servers. For now, all withdrawals are on hold. They are regenerating the ssl keys at this very moment.

Thank you, BitFinex team!

Ente