Author

Topic: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion - page 18336. (Read 26709367 times)

legendary
Activity: 2833
Merit: 1851
In order to dump coins one must have coins
but if bitgo auto signs every time BFX signs.... then all you really need is BFX keys and you can move the coins.

is this infact the reality of what was going on with this "shared key model." ? idk.. idk shit...

From everything I've read, that seems to be the case Adam. BitGo and BitFinex are both very keen to point out that none of the blame lies with BitGo. Finex apparently had a custom setup with BitGo, unlike any other BitGo customer.

Either BitGo simply signed everything requested by Finex, or the hackers were able to bypass/avoid any kind of security precautions that BitGo had in place.

In either case, it looks to me like BitGo is shit when it comes to security, which is supposed to be their job. They provided Finex with a system that had no security or their system was easily bypassed. Fail or fail.

Perhaps there is something else going on and I haven't read about it or it isn't public knowledge?

So far sounds to me like it's an implementation error. BFX forgot to check the "Limit maximum daily withdrawals to 5%" checkbox during account set up with BitGone 
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
shes growing

https://blockchain.info/address/35emx395afKAKAr72VoePVbu3FJvxLPVny

there is somthing strangely satisfying about watching unconfirmed TX accumulate
legendary
Activity: 2833
Merit: 1851
In order to dump coins one must have coins
its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

It seems like a very obvious thing to do. Suspicious activity should trigger a lockdown and require manual intervention to OK it. The system shouldn't just go "yeah, no problem" when somebody asks to empty out half the Bitcoin vault.

But the vault contained separate lockboxes. They were cleaned out one after another after another.

All lock boxes "belong" to single entity, the if >X% accounts get emptied and if overall > X% gets taken out go into lock down mode should be the basic thing for any kind of security company 
legendary
Activity: 1260
Merit: 1116
its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

It seems like a very obvious thing to do. Suspicious activity should trigger a lockdown and require manual intervention to OK it. The system shouldn't just go "yeah, no problem" when somebody asks to empty out half the Bitcoin vault.

But the vault contained separate lockboxes. They were cleaned out one after another after another.
legendary
Activity: 2842
Merit: 1511
its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

It seems like a very obvious thing to do. Suspicious activity should trigger a lockdown and require manual intervention to OK it. The system shouldn't just go "yeah, no problem" when somebody asks to empty out half the Bitcoin vault.
legendary
Activity: 1260
Merit: 1116
anyone know the address of where all the bitfinex coins got move to offhand? it would be fun to look at that TX  Tongue

https://blockchain.info/address/35emx395afKAKAr72VoePVbu3FJvxLPVny
no the hacked coins

Spokesman Zane posted a pastebin on Reddit. But it's a lot of addresses.
legendary
Activity: 1120
Merit: 1012
but if bitgo auto signs every time BFX signs.... then all you really need is BFX keys and you can move the coins.

is this infact the reality of what was going on with this "shared key model." ? idk.. idk shit...

From everything I've read, that seems to be the case Adam. BitGo and BitFinex are both very keen to point out that none of the blame lies with BitGo. Finex apparently had a custom setup with BitGo, unlike any other BitGo customer.

Either BitGo simply signed everything requested by Finex, or the hackers were able to bypass/avoid any kind of security precautions that BitGo had in place.

In either case, it looks to me like BitGo is shit when it comes to security, which is supposed to be their job. They provided Finex with a system that had no security or their system was easily bypassed. Fail or fail.

Perhaps there is something else going on and I haven't read about it or it isn't public knowledge?
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
this is a whale finally deciding NOT to keep 1000's of bitcoin on different exchanges?

oh the my bullishness is coming back on full force!

.. whats the price at? better double it!

It's Bitfinex moving the coins it has left to one address according to Zane Tackett on reddit. He says they are moving the coins to their control, which makes me think they have all the keys to that address and have abandoned the shared key model.

https://www.reddit.com/r/btc/comments/4wiw3q/bitfinex_has_725k_btc_left_or_someone_just_stole/

their implementation of "shared key model." is obviously not good enough.

its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

i dont understand why they used multi sig if bitgo would simply go ahead and auto sign off any/everything.

F i dont understand wtf this "shared key model." ment. oh well...


seems obvious.. it meant that if BFX was hacked, that everyone shares in the losses .
I mean i dont understand the mutil sigs detials

like

to move coins required BFX key and bitgo keys
but if bitgo auto signs every time BFX signs.... then all you really need is BFX keys and you can move the coins.

is this infact the reality of what was going on with this "shared key model." ? idk.. idk shit...
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
legendary
Activity: 1092
Merit: 1000


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
this is a whale finally deciding NOT to keep 1000's of bitcoin on different exchanges?

oh the my bullishness is coming back on full force!

.. whats the price at? better double it!

It's Bitfinex moving the coins it has left to one address according to Zane Tackett on reddit. He says they are moving the coins to their control, which makes me think they have all the keys to that address and have abandoned the shared key model.

https://www.reddit.com/r/btc/comments/4wiw3q/bitfinex_has_725k_btc_left_or_someone_just_stole/

their implementation of "shared key model." is obviously not good enough.

its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

i dont understand why they used multi sig if bitgo would simply go ahead and auto sign off any/everything.

F i dont understand wtf this "shared key model." ment. oh well...


seems obvious.. it meant that if BFX was hacked, that everyone shares in the losses .
legendary
Activity: 1260
Merit: 1116
anyone know the address of where all the bitfinex coins got move to offhand? it would be fun to look at that TX  Tongue

https://blockchain.info/address/35emx395afKAKAr72VoePVbu3FJvxLPVny
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
anyone know the address of where all the bitfinex coins got move to offhand? it would be fun to look at that TX  Tongue
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
this is a whale finally deciding NOT to keep 1000's of bitcoin on different exchanges?

oh the my bullishness is coming back on full force!

.. whats the price at? better double it!

It's Bitfinex moving the coins it has left to one address according to Zane Tackett on reddit. He says they are moving the coins to their control, which makes me think they have all the keys to that address and have abandoned the shared key model.

https://www.reddit.com/r/btc/comments/4wiw3q/bitfinex_has_725k_btc_left_or_someone_just_stole/

their implementation of "shared key model." is obviously not good enough.

its really TO BAD, that bitgo didnt have some stupid logic saying if bitfinex asks for >1000Coins to be moved reject it.

i dont understand why they used multi sig if bitgo would simply go ahead and auto sign off any/everything.

F i dont understand wtf this "shared key model." ment. oh well...
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
In order to generate customer confidence they do have to disclose enough information, so that customers are going to be sufficiently content as to continue to use their services...

This will be there biggest challenge, going forward, to figure out a way to keep their customers.



**Rant about what security model they should have used**

I always thought the multi sig wallet they used was so that customers would hold a PrivateKey of there own, so that when users did a BTC withdraw or created an order  from there bitfinex wallet, bitfinex required a signed msg from this PrivateKey that only the customer held  ( i was thinking the PrivateKey & signing was being done client side using some fancy node.JS bitcoin wallet behind the scenes )

I mean this would seem like the logical thing to do, no way in hell could any move any coins without compromising everyone's personal computer AND bitfienx's itself.

this is what i thought was happening at bitfinex when i over heard somthing about them using a multi sig wallet for added security.

maybe if they used this kind of approach, this would make customers feel more secure.

if you can mathematically PROVE that my funds held at finex will not move unless MY PK is compromised, and simply require a signed msg from that PK to move funds (along with all the other login credentials. ), i will be 100% sure i can safely store bitcoin on this platform.
legendary
Activity: 2842
Merit: 1511
It's Bitfinex moving the coins it has left to one address according to Zane Tackett on reddit. He says they are moving the coins to their control, which makes me think they have all the keys to that address and have abandoned the shared key model.

https://www.reddit.com/r/btc/comments/4wiw3q/bitfinex_has_725k_btc_left_or_someone_just_stole/

It's going to be interesting seeing how many coins that address ends up with. At present, their BTC loss stands at about 62%.
sr. member
Activity: 298
Merit: 253


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
this is a whale finally deciding NOT to keep 1000's of bitcoin on different exchanges?

oh the my bullishness is coming back on full force!

.. whats the price at? better double it!

It's Bitfinex moving the coins it has left to one address according to Zane Tackett on reddit. He says they are moving the coins to their control, which makes me think they have all the keys to that address and have abandoned the shared key model.

https://www.reddit.com/r/btc/comments/4wiw3q/bitfinex_has_725k_btc_left_or_someone_just_stole/
member
Activity: 89
Merit: 10


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?

Maybe...

 119,756 x (1-0.36067) = 76563.60348
legendary
Activity: 3948
Merit: 11416
Self-Custody is a right. Say no to"Non-custodial"
will bitfinex users accept a generalized loss percentage of 36.067% across all accounts and assets. or will we see a class action soon?

If your bank or my broker gave you a 36% haircut? But I bet you're right, people will vent a little, tire themselves out, take what they're given.


banks get bailed out.

altho, i have heard rumours that governments would stop doing this and bail-in's like Cyprus might be become the norm again ( i say again because apparently back in the day, banks were not "to big to fail" )

No, for cases like this banks have *insurance*. In US, that's FDIC. The bank might fail (3 have in 2016), but their customers, punters like you, lost exactly no money. None. Nothing to do with bailouts.

But let's forget banks. You'd take this haircut from your broker? I wouldn't take that shit ("Honest man, I got robbed") from my runner. People don't even know wtf happened, and they're already gushing with gratitude because they got some edit: got promised some of their money back. Even the dollar holders, whose shit wasn't affected. Amazing. No wonder people here always get robbed -- might as well hang a sign saying "ROB ME BRO, No consequences at all if you fuck up, and I'll be your best friend if you let me keep half. You can't lose!"

Enjoy bailing in BFX and "Socialized losses," lol.

isn't the FDIC just formalizing the agreement that governments will bail-out banks? oh wtv. i dont need to know how the legacy system works.

point is bitfinex has been hacked, shame on them for having a shitty p2sha wallet impl??, or maybe it was an inside job?? doesn't really matter, the end result is the same, (unless someone can prove it was an inside job and find the person responsible...)  but IMO they are handling it the best that they could.

i do believe that if this would go to court we would have the same result, liquidation of bitfinex and all accounts and assets getting a very similar % of their funds back, ( we saw this result with mtgox did we not?) but they wouldn't see there money for years, they would have to pay lawyers and bitfinex would be dismantled.

keeping this out of court and accepting bitfinex's settlement is probably in the best interest of everyone involved.




I agree overall that Bitfinex's settlement proposal is pretty decent, given various alternative possible outcomes, but making some kinds of arguments, that this is the best we can get based on settlement in court blah blah blah.. seems to be going a bit too far.. and also suggesting that this is amongst the best of the arrangements is going too far, too.  Ultimately, we gotta continue to take what Bitfinex says with a grain of salt and also to attempt to hold their feet to the fire in that hopefully in the long term the intent is for Bitfinex to attempt to provide full restitution to their users, and hopefully the bitfinex coin is intended, designed and will be implemented in such a way to strive towards the achieving of the long term restitution of existing customers (who are taking a haircut).

 Bitfinex cannot lose sight that they owe a duty to their customers, and they fucked up in some kind of way in allowing this to happen to such a considerable magnitude.

 
i guess your right, taking this to court might actually yield slightly more money for everyone.
but i think the courts would have bitfinex liquidated. and there simply isn't enough money in bitfinex to get users that much more money
maybe users would only have a 30% hair cut going with the courts?
its not worth it.
because the money would be tide up for a long time
because its not even guaranteed to get less of a hair cut

I think bitfinex idea of pretty much matching what the court would do was the only move they could have done to avoid going to court.

You seem to be misreading me, because I was not arguing that going to courts would be any kind of better solution, and in fact, I believe that Bitfinex proposing some kind of reasonable solution is likely going to lead to better outcomes.

I was mostly quibbling with what I perceived as your black and white framing of the matter, and your seeming suggestion that Bitfinex had chosen amongst the best of arrangements.

Accordingly, there are a lot of arrangements that they could tailor, and the public is not going to really find out actual details of their financial circumstances because they are not going to completely disclose all of their circumstances, unless they feel that they have to do so.

On the other hand, in order to generate customer confidence they do have to disclose enough information that customers are going to be sufficiently content as to continue to use their services...

In the end, all of this is a bit of a balancing act, and it is not black and white, and we need to continue to be skeptical regarding various aspects of the representations of Bitfinex.
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
this is a whale finally deciding NOT to keep 1000's of bitcoin on different exchanges?

oh the my bullishness is coming back on full force!

.. whats the price at? better double it!
legendary
Activity: 3948
Merit: 11416
Self-Custody is a right. Say no to"Non-custodial"


Who's address is this and what is happening?

It looks like an address that was just created today, and there are a lots of coins going into it from a variety of addresses... What does it mean?
Jump to: