Author

Topic: Users found at least 300k BTC of Mt Gox's "missing" coins (Read 4251 times)

hero member
Activity: 546
Merit: 500
Carpe Diem
I would think there is a way to find almost ALL of the coins, somewhere.  With the issue being no one knows who is in possession and control of the addresses.  But I assume it would take a long time to figure it all out...
legendary
Activity: 2114
Merit: 1040
A Great Time to Start Something!
it can be helpful law autohorites to come to find these m..fckers.

The Gov might have them already
sr. member
Activity: 266
Merit: 250
full member
Activity: 228
Merit: 100
This is not good for my Chi... Yifu
^^ Link please?

cheers,
kev
sr. member
Activity: 357
Merit: 250
really interesting... along with Loozik theory.

full member
Activity: 228
Merit: 100
This is not good for my Chi... Yifu
bump..
ppl need to read this

cheers,
kev
sr. member
Activity: 266
Merit: 250
Great work

We too support the effort to help find the money
https://bitcointalk.org/index.php?topic=492776.0;all
Woah not bad
legendary
Activity: 924
Merit: 1000
Gox has had a reputation of being shady for a long time which is why I never got involved with them. It was only a matter of time before something like this happened.
legendary
Activity: 2492
Merit: 1473
LEALANA Bitcoin Grim Reaper
The "holiday discount" was a last ditch effort to try to sucker more noobs into their blackhole of an exchange to keep the ponzi going.
legendary
Activity: 1918
Merit: 1570
Bitcoin: An Idea Worth Spending
newbie
Activity: 9
Merit: 0
Hope you're right there man, this would go a long way to restoring public confidence in crypto.

Unfortunately, this Mt. Gox debacle is scaring away a lot of new investors/miners and also presenting crypto in a negative light to those people that are hearing about crypto for the first time.
legendary
Activity: 1918
Merit: 1018
it can be helpful law autohorites to come to find these m..fckers.

I wish it could but I think that it isn't that easy to use and spend stol.en coins; the reddit member who was following mark.et sh.eep money understood that after days of investigation
It looks like we are close of the ones that stole but we are far away
sr. member
Activity: 266
Merit: 250
it can be helpful law autohorites to come to find these m..fckers.
legendary
Activity: 2044
Merit: 1055
Thank you for this!

The Mt.Gox theft could be more serious to us all than thought. Read this:

https://bitcointalk.org/index.php?topic=491181.0;topicseen

Maybe some of your precious bitcoins in your secure cold storage, which you bought at the very honest exchange bitstamp, with your very honestly and hard earned money, could be stolen and can be traced back to you...

FUD or real threat, I'm not sure about that...

 Shocked
sr. member
Activity: 266
Merit: 250
http://www.reddit.com/r/Bitcoin/comments/1za9sf/found_at_least_150k_btc_of_mt_goxs_stolen_coins/cfrvm76

Sorry for raw unformatted content

The focus of this analysis are two addresses. The first address is: https://blockchain.info/address/1AYtnRppWM7tWQaVLpm7TvcHKrjKxgCRvX[1]
I will call this the 400k address or just 400k
The second address is: https://blockchain.info/address/1KLahQtqDNAXvrjNyfvgSBtAhwco5ZxLp4[2]
I will call this the 432k address or just 432k
If the withdrawals of the 432k address are even briefly analysed it can be seen that it is broken into chunks of 50k which then go on to fund the proof transaction of 424k. There is no doubt therefore that the 432k address belongs to MT Gox.
The 400k address has two transactions on the 27th of January 2011, one for 250k and another for 150k. 85k, withdrawn from the 250k, ends up funding the 432k address. Around 50k from the 250k address, chunked of course, are still there.
There is more direct proof however that the 400k address belongs to Mt Gox: http://web.archive.org/web/20101007203437/http://mtgox.com/users/addFunds[3]
The donation address specified on this website goes on to fund the 150k address deep into its chunking. Furthermore, it connects directly with many of the addresses moved.
On the 27th of January 2011, 150k was withdrawn from the 400k address. This 150k is divided into chunks of £5k, then 2k. This happened between the 1st and the 2nd of March 2011. The divided chunks never moved further. They stayed at the address they were sent in March 2011 until they were moved, part of them on 21st of December 2013 and part of them on the 5th-6th of February 2014. All, that is, except for the last 5k which goes on to fund the 432k.
All of this 150k, albeit divided into smaller chunks, was moved, whether by the owner or the thief, just before the formal announcement by Mt Gox that withdrawals were halted.
It is possible that this 150k was retained by Jed McCaleb, the previous owner of Mt Gox, when he sold the company on or around March the 6th 2011. If that is the case then why did he move these ancient coins all at the same time?
There is evidence to suggest that these coins were not retained in ownership by Jed. There is one interesting address which comes up time and again: 1LXc28hWx1t8np5sCAb2EaNFqPwqJCuERD
The funding to this address comes mostly from the 150k, or is linked in this closed loop of addresses, which clearly can be seen from two or three 5k addresses. However, some of the addresses that immediately fund the 1LX are created after ownership of Mt Gox changed on March the 6th 2011. That does not preclude Jed himself creating these addresses at a later date than March the 2nd. It seems however more likely that Mt Gox owned these addresses as once ownership was changed then all the deposits would have had to be handed over to Mt Gox in order for Mt Gox to continue functioning as normal.
In any event, whether the thief moved them or Jed, this 150k – and there is more in addresses created on 28 February 2011 and moved on 21 December 2013 – belong to Mt Gox.
Edit: Yet no evidence whatever of Transaction Malleability ("TM") on the blockchain. Furthermore, it seems that Mark was aware of TM on October 2011 and had apparently either lost or spent a week's btc income on this problem:
that's a problem, but not the worst problem we ever faced all the broken withdraws have been re-issued just spent one week of BTC-only income
https://bitcointalksearch.org/topic/someone-fucked-up-and-lost-alot-of-money-50206[4]
Which strongly suggests that he would have solved the problem considering how much it had cost him.

[–]SirNeptune [+3] 63 points 11 hours ago* (72|8)
I posted this comment independently in the thread but wanted to reply to you so you could take a look at them, seems to be an additional 30k coins.
Just clicking through all these wallets and following transactions, what are these wallets:
https://blockchain.info/address/18BgWxZRdoCc21tdDPTNuEqREAofBnwG7M https://blockchain.info/address/16qBQ6cs4R76gwAF85XF8tdxscz8fGjoJr https://blockchain.info/address/1NN2bPz6gLYx7cquCscw918npUVBdD9Lmu
I haven't seen them mentioned elsewhere.
You can also follow another account.
It starts off big, splitting the pile around ~50/~50 into two accounts those accounts are splitting it ~50/~50 again, and those accounts are then splitting it ~50/~50 again, then those accounts has 6 transactions, 1 small, 4 exactly equal sized, 1 small (ex: https://blockchain.info/address/1HtGckJEZ1Cov2J7JiP9CQffm6QnXzQFfr and here https://blockchain.info/address/1CPbCUW2F9c8LsrNLoyen318jTZTB8VSzT and another https://blockchain.info/address/167ve5ZVH76ZD7DSQCcU7DbWx5Cu2SXguz)... this happens a few more times and it works itself down into about 1 thousand wallets each containing about 10 bitcoins each. wtf?
Looks like a long messy trail of accounts trying to hide something and being stashed into thousands of wallets in 10-100 BTC increments. Some of them then feed back into this account: https://blockchain.info/address/16ZbpCEyVVdqu8VycWR8thUL2Rd9JnjzHt
Here's another account that's suspect: https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T and another https://blockchain.info/address/13HuWUkzqK53EopX4Cs8QLdTe1k3agkLzy
All these accounts are highly suspicious without a lot of the major money being moved around on 2-24-2014. Evenly distributed accounts sitting around.
Edit 2: Another big wallet that follows the same splitting technique and then ends up at a big wallet on 2-22 with 40k bitcoins. https://blockchain.info/address/1DiHDQMPFu4p84rkLn6Majj2LCZZZRQUaa
permalinksourcesaveparentreportsave-RESgive goldreply
[–]SirNeptune [+3] 40 points 10 hours ago* (48|8)
I'm leaving the original post, but here's basically what I'm seeing. Following some shady accounts. I've found previously unmentioned wallets.
https://blockchain.info/address/18BgWxZRdoCc21tdDPTNuEqREAofBnwG7M https://blockchain.info/address/16qBQ6cs4R76gwAF85XF8tdxscz8fGjoJr https://blockchain.info/address/1NN2bPz6gLYx7cquCscw918npUVBdD9Lmu
Each of these with 10k coins total, totalling 30k coins.
These two have a bit more: https://blockchain.info/address/1DiHDQMPFu4p84rkLn6Majj2LCZZZRQUaa https://blockchain.info/address/16ZbpCEyVVdqu8VycWR8thUL2Rd9JnjzHt
With about 40k coins each, totaling 80k coins. All of them in 3 weeks leading up. All of them come to exist through a pattern that splits the money from a main big account through literally hundreds of different wallets, and back into a super account.
I've found a few more mega accounts, I'll sort them into groups.
(40k+ BTC): https://blockchain.info/address/1KiVwxEuGBYavyKrxkLncJt2pQ5YUUQX7f https://blockchain.info/address/18f1yugoAJuXcHAbsuRVLQC9TezJ6iVRLp https://blockchain.info/address/1PnMfRF2enSZnR6JSexxBHuQnxG8Vo5FVK https://blockchain.info/address/14e7XAZbepQp9MXXzjNG3fNLoAUpaBAXHW https://blockchain.info/address/1PnMfRF2enSZnR6JSexxBHuQnxG8Vo5FVK https://blockchain.info/address/194DnvmLR2HULRvxUsVag8mn2fm7dA3U2B https://blockchain.info/address/1DiHDQMPFu4p84rkLn6Majj2LCZZZRQUaa https://blockchain.info/address/16ZbpCEyVVdqu8VycWR8thUL2Rd9JnjzHt https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9 https://blockchain.info/address/1PB4xXUFyy4kSNqroCBVaQuCuw9VcN3be4 https://blockchain.info/address/1EBHA1ckUWzNKN7BMfDwGTx6GKEbADUozX
(~10k BTC):
https://blockchain.info/address/1M39YivicDwfXfv8ocStsoMpHsxKX5TmLZ https://blockchain.info/address/18BgWxZRdoCc21tdDPTNuEqREAofBnwG7M https://blockchain.info/address/16qBQ6cs4R76gwAF85XF8tdxscz8fGjoJr https://blockchain.info/address/1NN2bPz6gLYx7cquCscw918npUVBdD9Lmu https://blockchain.info/address/1M39YivicDwfXfv8ocStsoMpHsxKX5TmLZ https://blockchain.info/address/1AhTjUMztCihiTyA4K6E3QEpobjWLwKhkR https://blockchain.info/address/1G1AndHMczVQYLGfYJzqkDjXrFifpMsTaZ https://blockchain.info/address/1BySf6Lv39Vdn1NKRqcQU94CrnWv56VAa4 https://blockchain.info/address/1Gg9GGQWmRk1pp4vNkMqLaEiPVNdiNvz7E
(Smaller but out of the same link of interesting accounts): https://blockchain.info/address/1JVigWgue5hrMNb8RSYF98FmkoGX2ENjna
(Smaller and only loosely associated with suspect activity): https://blockchain.info/address/1BbHL19AgND8QxeitDZvjoUbP9hL9uyGeE https://blockchain.info/address/1HGTyJL7kWC4XoH7mKhiMGDAV3gcDGJd2C https://blockchain.info/address/1KvytPs2RrXWkV2xhgg3P8sLtxxYHUNtzk https://blockchain.info/address/1AFuQVMmoH7YwW8frGVfqS7ioxz8H2jnd https://blockchain.info/address/1AEegvjqn5K263Vo7r75wYKzaHefVkgM7S https://blockchain.info/address/14TDhQp2o2tfGS1YrKjKqV9KmFwERHnkFB https://blockchain.info/address/19H6RH9g3XBh2KFytUvYPFXGJyykQXJ7XS https://blockchain.info/address/1qFf82tpkAd1QvUBHoUYBi99pUWapWAL5
Edit: another suspicious one with ties to past thefts and gambling... currently has about 86k coins: https://blockchain.info/address/17ewBhK712mY2E4uPAbinThibdY2LRyabd
EDIT: I've made what I THINK is the finally update. This list seems pretty exhaustive, I've found dozens of accounts that dead end with 10-50k, hundreds with 1-9k, and thousands sub <1k. I've also found a few transactions that seem to be "tumbling in progress" that I'm going to keep an eye on.
What does this mean? Not too conclusive, truly, but they seem to been tumbled from https://blockchain.info/address/1Drt3c8pSdrkyjuBiwVcSSixZwQtMZ3Tew the pattern seems to have tumbled them using an formula with a few "RNG w/range" variables to make it more difficult to detect. Some threads are tumbled as many as 7 times, some as few as 3. If any of this means anything, it may help to figure out who owns this: https://blockchain.info/address/1G9BpYzPsDfVTRk3SjqqK97oVk5MSZ52p6
permalinksourcesaveparentreportsave-RESgive goldreply
[–]SirNeptune [+3] 24 points 8 hours ago* (21|2)
Another comment to break the wall of text, about 450k of the coins from what we've presumed to have been the stolen wallet are located above. I have an additional 90k that I'm following that I'm not posting yet, and about 50k seem to have been sold (thousands of small transactions totalling in the millions on one of the "tumble" threads) between 2-14-14 and 2-19-14.
Another dead end wallet: https://blockchain.info/address/1K3UzbJNy2iFXgvjK6zscuG7BHbfyBYe6A
Jump to: