Topic: [UNRESPONSIVE POOL OPERATOR] 50BTC.com - page 44. (Read 257839 times)

Here, here! best of luck, please keep us informed.

That is good news.

Thank you for the update.  I can't speak for everyone, but the more you communicate, the more likely you are to come back from this.

I do wish you the best.  That was a great explanation.

Status Update

After the attacks that we’ve experienced from August 2013 till the October we’ve lost user balances data and huge part of the funds. We still can not figure out the full list of vulnerabilities that have been used to perform the attack. One of the assumptions is physical unauthorised access to our servers which could take a place only if someone got an access to the hardware in datacenter.

Also we can’t rule out the possibility that someone found or create an exposure or backdoor in our billing software.

Currently we have few topics to deal with:

First thing that we’ve been able to figure out is that few fast miners have been cheating us using vulnerability in difficulty checking algorithm. This vulnerability is probably applicable to the other fair pools, so we will publish description in next few hours to help others avoid our fate. This difficulty fraud have led to the loss of the significant part of the funds.

Second thing is incessant DDOS attacks that started in early August and magically stopped in few days after billing was hacked (that seems to be the last stage of the attack).

Third thing is that we have weird jumping luck during August-September period which jumped from 40% to 120% daily and sharply increased hash rate of the few new users with abnormal large amount of stale shares. 

Obviously this couldn’t be a regular coincidence and obviously this can’t be applied by one certain user. In general all of this only make sense if one or few competing pools decided to eliminate 50BTC for whatever reason. We are exploring all available data to figure out if some users was not real users but the proxied shares from the evilpool.

When miner formally connects to the evilpool it actually goes to the 50BTC through a proxy to get a job, and after that evilpool proxies all shares except of winning ones back to 50BTC. This could cause total bad luck that we’ve faced in a last few weeks.

But this is for sure not only things we will find in the next few days, before we will get the confidence that funds in pools wallets are safe. Only after that we will put additional funds and will enable payouts.

Still we are looking forward into the future with a hope and working damn hard rewriting our billing subsystem and moving our hardware to the another datacenter.

For all our users who believe in us and for all those bullshit fuckers who think that 50BTC is dead and already celebrating their victory, we have one main message:

50BTC is alive and will get back fast and stable as a hell in next few weeks.

Stay tuned

I don't think so. Just look at it from an economic view. You can make lots of money more from the regular pool operation per year with that high hashrate the pool had. I don't think there is so much in the hot/cold wallets as many users are using regular automated payouts (why shouldn't they..)

 

Who is the owner of the 50btc?

I noticed 200+ BTC I didn't mine in my account tonight, I emailed support to let them know (I didn't realize it was system wide). I was just skimming over some of the posts and I can't help but notice they found no vulnerability. Sounds like an inside job. If I were the guys looking for the responsible person I would start with "Mr Sniffles" who is always coming in late after the weekend.

Just Sayin....




Good luck, I hope the pool recovers would love to get my actual balance restored!


Cheers.

They probably are getting spammed with messages have you ever thought about that? Stop being conceded give them a few more weeks they paid out last time they got hacked so stop the bitching.

My last post for today, I hope at least some of you find the information valuable.... look what Google returned for this bitcoin address:

For example, on March 30th 2013 the 3rd richest bitcoin address 1Co6UHJmGHevWEHAPraSPRVkfGgG46EHwe moved the lions share of funds, 45,000K+ BTC, to a new address 17UUsmejDsjJEtbRcotd289ADp7ZdanH5k (making it the 2nd richest bitcoin address). The majority of BTC sat in 1Co6U for about 6 months. Slowly accumulating from middle 2012 until end of 2012 by what appears to be mining operations.

http://vongesell.wordpress.com/2013/05/25/bitcoin-days-destroyed-post-april-bubble-retrospective/

I have found another interesting bitcoin address.... this seems to be kind of the cold wallet for 50BTC.

http://blockchain.info/address/1Co6UHJmGHevWEHAPraSPRVkfGgG46EHwe

It was used to equalize the balance on the other address

http://blockchain.info/address/1JVQw1siukrxGFTZykXFDtcf6SExJVuTVE

posted before where block rewards were collected and payouts were coming from. When the hot wallet balance was too high, bitcoins were withdrawn, when it got low bitcoins were sent. However in the last two month, there wasn't a lot to withdraw, but they needed to add funds to the hot wallet several times to keep it balanced, see transactions

10/17/2013 - 200 BTC - http://blockchain.info/tx/b4759c2afd33a054ebe3abca7b5950e3e01907705f55290486cc206aa99f0a3f
10/11/2013 - 200 BTC - http://blockchain.info/tx/0b3a089cac27461e0ff23bae3f8b9077dc387695a8c577c32867b74f2bc95393
9/27/2013 - 181 BTC - http://blockchain.info/tx/1674f8d33afb0ae9044ed80176de5c930c8c13c08222752088de208dc4f265d6
9/25/2013 - 200 BTC - http://blockchain.info/tx/cab3a14fa99061789faa9ce7ef302cc037a06354f42168be0f8e52d47db4450f
9/18/2013 - 300 BTC - http://blockchain.info/tx/fbe74561818642a54a0e0f73fb95afd5f43e8c2589bb4825781e8c53f370481d
9/16/2013 - 300 BTC - http://blockchain.info/tx/0c013ba89cdf434839ae31ec73f3bd7cb81e30be4a5d9a3c9fdd6015c2759603
9/13/2013 - 400 BTC - http://blockchain.info/tx/0ab28ee44fb7689c26873b3049b1622ff5d6961285d5b3e641f9309774a1d216
9/11/2013 - 400 BTC - http://blockchain.info/tx/08abd121f15a25e5d64b000bf62b315927db9fafc0ecc5acbbca0beba53703bc

So they were paying out more than they received as block rewards for several weeks. I still hope there are enough BTC available from the better times of 50BTC to make a payout of all the open balances. Once they are restored ;-)

I don't know. When I saw the buggy balances, I thought some hacker was able to manipulate the paid out sum to be able to do huge payouts to get as much as possible of the pool wallet. However neither did 50BTC post such transactions, nor have I been able find them. It rather looks like the pool wallet already was empty before the balances got corrupted.

Perhaps the system was not prepared for such an underflow of the pool wallet and did react in an unexpected way? Perhaps this happened when they tried to adapt the system to support DGM? I guess 50BTC needs to shed some more light on this. After all I do just look at the blockchain and take some guesses.

Take a look at the links... they are referring to an attack last year (October 2012) and seem to be unrelated to the current hack.

what about the transactions that 50BTC refer to in there post about the 1100BTC that got 'stolen'?

is this pool working now or not anymore?
i had some money there that i didnt pay out.

How would that cause the buggy balances we've been seeing?

I looked at the charts and transactions intensively and couldn't find any extraordinary transactions which may be related to an attack. Quite contrary, it looks like the pool wallet slowly starved out over the last two month until it was down to 0 BTC on the 17th.

Given the fact that the pool operators couldn't find any flaw in their billing system I think it could have been victim of a block solution withholding attack. On a PPS pool the damage of block solution withholding fully affects the pool owners, so a group of miners with enough hashing power (10% of the pool hashrate, so about 10 TH/s for 50BTC) would cause the pool to lose money over time, without having any loss themselves, as they get paid per share, even if they prevent block solutions to be sent to the pool.

This seems to be address used by 50BTC since April this year

http://blockchain.info/address/1JVQw1siukrxGFTZykXFDtcf6SExJVuTVE

and this is another temporary one, which was used on the 18th October

http://blockchain.info/address/121Tk3oKDU3GHWeCRnxguzeeM7Tm3XvUns

before they switched to the one posted before

http://blockchain.info/address/198i5jrY1B4xGnQwbiDVuQzcq17thzaH1s


Here are some older pool addresses since August 2012:

April 2013 to October 2013: http://blockchain.info/address/1JVQw1siukrxGFTZykXFDtcf6SExJVuTVE
December 2012 to April 2013: http://blockchain.info/address/145UHBQAmGRpdsXVKhdHtFndnJ8XN8fLjq
October 2012 to December 2012: http://blockchain.info/address/151z2eoe2D9f6cohGNNU96GsKAqLfYP8mN
August 2012 to October 2012: http://blockchain.info/address/13XgASZP7N6pTMeyS5Sq8JeuCAkNzefnT7

If this address really is related to 50BTC, this is the address they configured AFTER the attack and only contains all blocks solved after the hack. If someone could find the address used BEFORE the attack it would be much more interesting to see the amount of BTC and what happened to it.

LoL the pool is down to 250 gh/s Pool speed if the counter is even correct if anyone is even mining there anymore