Pages:
Author

Topic: [WARNING] Sol Noctis Bull Coin Keys Compromised / Scam - page 4. (Read 4345 times)

legendary
Activity: 1456
Merit: 1242
I would only consider the Bulls compromised. 

I would not consider the Eagles compromised unless proven otherwise. 

I'd think the Polish Mint, who only made the Eagles, would have been careful in this process. 

Now Mint 21, the place that made the Bulls, I have ZERO faith in. 

The holograms are different on the Eagles and the Bulls.  The Eagle's holograms are much higher quality. 

The private keys are standard on the Eagles.  They are cocked up on the Bulls.  ( thanks cwil for the work around Wink )

My 2 bits on the matter.

legendary
Activity: 2282
Merit: 3014
I'm still not convinced myself. I mean one coin so far?

I would be hard-pressed to say the Eagles were a scam coin, as noone has ever seen any issues there.

The other thing I was thinking about - These coins are really awesome looking but are fairly low-denom. That probably means less get peeled by people, but then again, without lists of addresses, there would be no way to tell en masse.

Personally, I'm not going to worry or care much about losing .001 on the Bulls if indeed they are a scam, as I only own about 5 of them lol.... Either way, they remain one of my favorite coin designs/holograms out there. Wink

Cheers

But- How many Casascius or Lealana coins have moved under a hologram? I’m not necessarily calling them a scam, as I am “compromised” (SORTA like Microsoul). Eagles and Bulls both funded by same outlet apparently.

Do we have an address list? Who made the keys? Why did they make the redemption process like they did?  Will TWC share this info with us?

I think we have to let this play out further. They’ve done nothing to prove the coins aren’t compromised at this point. Let’s see how they respond when they receive the coin.  With such low funding, who’s to say they (or key maker, if actually not one in the same)) aren’t waiting for BTC to hit much higher numbers then bam one day all coins have moved.  ( I agree 🦉, gorgeous and very unique coins. One of my favorite. Not highly funded. But, still, compromised).
legendary
Activity: 3570
Merit: 1959
I'm still not convinced myself. I mean one coin so far?

I would be hard-pressed to say the Eagles were a scam coin, as noone has ever seen any issues there.

The other thing I was thinking about - These coins are really awesome looking but are fairly low-denom. That probably means less get peeled by people, but then again, without lists of addresses, there would be no way to tell en masse.

Personally, I'm not going to worry or care much about losing .001 on the Bulls if indeed they are a scam, as I only own about 5 of them lol.... Either way, they remain one of my favorite coin designs/holograms out there. Wink

Cheers
legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
legendary
Activity: 2282
Merit: 3014
I don't know if this has been mentioned, but this could be a case of a mistake by coin maker where they put the wrong private keys under the hologram. So maybe 2 coin's private keys were swapped. I would be interested to find out what private key is behind this hologram.

This is an interesting point Satoshi Lite.  Still, shows a lack of proper key generation.


Lesbian Cow-  Thanks for all your work on this!  I know you've spent a lot of time working on all this, and it is much appreciated!  At this point, there really isn't anything positive that could be said from TWC.  If anything they get the coin and try and claim it's tampered ( I wish LC hadn't needed to send the coin back to them but there was no other way to move forward with this).  

Sol Noctis coins are compromised, and they sadly belong firmly in Krogo's  Scam Coin Maker thread at this point.  I am personally disgusted by TWC's response to this.  They recently ( 2 weeks ago I believe ) held a raffle for a Sol Noctis Bull on their Instagram Account.  I was tagged by a friend on the post and wrote  "All things considered, I think it's pretty messed up they are even hosting this raffle".  My post and my buddies reply were deleted. I believe they then deleted the post after my buddy called them out for it ( shady behavior !!).  I think a legit company would suspend sales and notify all 3rd party vendors at minimum until this is all cleared up.  

Just my 2 satoshis.
legendary
Activity: 3066
Merit: 1757
I don't know if this has been mentioned, but this could be a case of a mistake by coin maker where they put the wrong private keys under the hologram. So maybe 2 coin's private keys were swapped. I would be interested to find out what private key is behind this hologram.

That has not been pointed out and is a possibility however the fact that someone then put the original 0.001 btc back on the coin would still be hard to explain.
donator
Activity: 1654
Merit: 1354
Creator of Litecoin. Cryptocurrency enthusiast.
I don't know if this has been mentioned, but this could be a case of a mistake by coin maker where they put the wrong private keys under the hologram. So maybe 2 coin's private keys were swapped. I would be interested to find out what private key is behind this hologram.
legendary
Activity: 3066
Merit: 1757
Hello Everyone,

As mentioned in my previous update, I have been communicating with TWC regarding what appears to be a compromised private key on a Sol Noctis Binary Bull.  TWC believes all private keys were destroyed and that the only way this can have occurred is thru tampering with the hologram.  I have examined the hologram and see no signs of tampering.  TWC understandably would like to examine the coin as well and have asked I send the coin back to them.  I was not too keen on this however after much thought I have come to the conclusion that without sending the coin to them it is impossible to move any further.  Below are several photos and a video of the hologram taken today prior to shipment of the coin.  

My thoughts are as follows:

1)  Assume private keys are compromised.  Do not over fund the coins

2)  If there was a significant amount of funding on these coins I would suggest immediately peeling and sweeping the private key but given the approximate 9 usd in funded value I am not so sure that is wise.

3)  If you purchased a Sol Noctis Binary Bull FROM ME and your 0.001 btc in funding is swept with the hologram in tact I will refund you the 0.001 btc.  

4)  I have more than 10 and less than 100 Bulls left and have suspend sales most likely indefinitely.  I currently have no plans to peel the coins left in my possession.

Public address of compromised coin:  https://www.smartbit.com.au/address/1Lh975rtt1RwDJ1SHGX8mn1iHwe7kaVfMQ

Video of compromised coin hologram:  https://youtu.be/uLEK2mppJt0

Photos Below:













legendary
Activity: 2520
Merit: 3238
The Stone the masons rejected was the cornerstone.
Any updates on this?
legendary
Activity: 2676
Merit: 2203
BitcoinPenny.com
Thanks for doing this, LC.

Regards,
Chris
legendary
Activity: 3066
Merit: 1757
Hello everyone,

My update is not much of an update. 

I have had several emails with my contact at Top World Coins which, like the previous Sol Noctis Binary Bull, was the company/distributor that commissioned the coins and distributed them.   They have assured me they are looking into how the coin in question was compromised. 

I learned that the hologram and assembly was done by "another firm" but that is all I know. 

My last reply from TWC was on 07 April. 

I will update here when I hear more from them. 
member
Activity: 495
Merit: 12
EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.

It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.

Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:

Code:
const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');

let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);

I've swept the key, please provide an address to which you'd like to receive your funds.
I appreciate this cwil.
legendary
Activity: 3500
Merit: 6320
Crypto Swap Exchange
Everyone has been silent as far as I can tell.
The funding on mine is fine, sorry for not reporting. And I assume the code that cwil posted above will work if I ever have to clam it.

With that being said, this is why I have posted a few times about the issues with loaded coins.

Stay safe.

-Dave



full member
Activity: 1318
Merit: 184
Krogothmanhattan alt account
Any further information on this?
legendary
Activity: 3066
Merit: 1757
Bump,
Any update ?

The coin was shipped to Lesbian Cow and arrived per the tracking number. I haven't heard anything else.

Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

The extra funds are still sitting in an address the coin creator swept them into on 2/20/20 and haven't moved since.

Hello all,

I have the coin in question and have contacted Top World Coins which is where I originally purchased quite a few of them.  Due to travel and real life business issues occupying my time I did not contact TWC until this weekend just past.  That said, I woke up this morning with a reply from them.  They seem genuinely concerned and are looking into their key generation/funding process.  I have checked all the Sol Nocti I have and they remain funded, I would appreciate it if anyone with a Sol Noctis could check their funding and report back to me.

I will update here when I have more information from TWC.

Cheers!
copper member
Activity: 100
Merit: 18
Bump,
Any update ?

The coin was shipped to Lesbian Cow and arrived per the tracking number. I haven't heard anything else.

Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

The extra funds are still sitting in an address the coin creator swept them into on 2/20/20 and haven't moved since.
member
Activity: 143
Merit: 21
Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

legendary
Activity: 2114
Merit: 1693
C.D.P.E.M
Bump,
Any update ?
legendary
Activity: 2198
Merit: 1989
฿uy ฿itcoin
Seeing these posts reminds me why I love physical bitcoins and its community.
member
Activity: 369
Merit: 29
Response from topworldcoins...after i linked this thread and explained issue...so the last email.

Hello,

We are responsible for the coins we sell to our buyers and issues with our coins. For others, we can't help, because we don't know how it was purchased.

Kind regards,
Helen

Not a very good PR

imagine the following answer from Ford :
"we are only responsible for the car we sell directly to our clients. For Ford car owners that didn't purchase brand new from us we can't help (even if we fucker up as a car manufacturer) because we don't know how it was purchased"

just my 2 cents



Good analogy guigui. Takata comes to mind. this was my email/response on the 16th:

Hello,
Please, let us know your order number that we can find it on our website.
Kind regards,
Helen

    Hi,
    Please respond to this thread on bitcointalk.org
    https://bitcointalksearch.org/topic/warning-sol-noctis-bull-coin-keys-compromised-scam-5231305
    It is becoming apparent there may be issues with the key generation of the Binary Bulls
    Specifically how to sweep this key.
    public key: 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a
    private key under hologram: EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9
    Any explanation will help put the collecting community at ease.

    Thanks.
Pages:
Jump to: