Dear Waves Community and Waves Team;As you know I am founder of digilira; Turkish Lira Gateway. We are operating Turkish Lira gateway on Waves Platform since December 2017. We have managed more than 8K deposits and withdraws which is more than 13 Million Turkish Liras.
We are proud of our fast service, easy integration and I am sure that Waves Team didn’t get any ticket about complaining our service so far.
Unfortunately, on 26.06.2018 and 27.06.2018 we have faced with fraud actions by using our gateway service. I will explain the details about Coinomat related part which was happened on 26.06.2018.
On 26.06.2018 digilira had encountered a fraud money transfer. The transfer took place as an ordinary money deposit request. But soon after the corresponding bank informed us that it was a fraud transaction and request us to send money back to victim.
Note: Scammer somehow got victim’s National ID, went to the telecommunication store and claim that he lost his sim card and gets new sim card. After he got that sim card he called bank and claim that he is victim and gave the whole info about victim and got access to his bank account. He signed up our gateway by providing his cell phone, uploading National ID etc. Went throught KYC process. He made a request to deposit 37K Turkish Lira and sent from victim’s bank account.
Scammer transferred money to digilira’s bank account and our system checks and everything seems ok at that time then sends WTRY token to scammer automatically.
We traced suspect’s wallet history and find out that the suspect exchanged WTRY to WAVES and then WAVES to WBTC. (Exact amount is 1.15864958 WBTC) We informed Waves Team and Coinomat that he will use Coinomat gateway to withdraw BTC.
We were so happy that Coinomat closed gateway service and got the scammer. They claimed that they will resend WBTC back to us instead of scammer.
We refunded the victim’s money (37K Turkish Liras)
But guess what? Coinomat didn’t refund the stolen WBTC. They are still keeping our 1.15864958 WBTC . They closed the gateway, got scammers WBTC but still keeping it for themselves.
I am asking support from Waves Community and Waves Team to make pressure on Coinomat and let them give back our stolen WBTC.
To read more details and see proofs check reddit: https://www.reddit.com/r/Wavesplatform/comments/9yqxm9/coinomat_issue_they_are_still_keeping_our_wbtc/I am asking support from Community and Waves Team.
Thanks..
This situation remained unclear for many users so we asked Coinomat to give some clarifications concerning it Here's their response regarding this:Taking into account that ELITE WAY DEVELOPMENT LLP, referred to as Coinomat is a private company we still believe that some clarifications on Digilira fraud transactions matter are required.
As mentioned above, due to Digilira gateway’s fast speed the scammer managed to deposit 37 000 TRY (approx. 6 800USD) and 100 000 TRY (approx.18 500 USD) the very next day.
Deposit 1:
https://wavesdesk.com/tx/7B9yMfLMEDTuBrxuGaCoN8eEMicUWD2qBbTqT7idJfSPDeposit 2:
https://wavesdesk.com/tx/FD2Dd2K17DqhjGiiUVCwLjYn9GroSsnkV4Lops6jSyyGHere at Coinomat, we apply several security methods to prevent such situations, including but not limited to block generation time, several confirmations on the blockchain and many others.
Since Coinomat provides services to the Waves Platform and within the client, we decided to provide assistance to the Digilira Gateway as they informed us of this fraud transaction, despite the fact that we don’t have any business relations with Digilira.
If you look through the first fraud transaction recipient address, you can see that he bought Waves and wBTC for deposited wTRY
https://wavesdesk.com/account/3PGTVJDuHc1Tdg8aGgbzTSXHJtpBsKvVFGs [see Trade History tab] and made an attempt to withdraw the wBTC later that day:
https://wavesdesk.com/tx/3aG3UFcK8FQApEknKAD9rQk8z2KKTEAGxka8gkAK5DdQ We were able to stop this attempt as per point 6.1.4 of our Terms of Services:
6.1.4 Unilaterally terminate the provision of Services to the User by cancelling the Agreement and/or blocking access to the System in the following cases:
in the case of the identification of User transactions that contain signs of suspicious operation in accordance with the applicable law, law in User country of residence, international law and in accordance with AML policy, and if the Company has suspicions that the operations are carried out in violation of the requirements of the applicable law or are fraudulent in nature;
Unfortunately, we were not able to do the same for a later and larger transaction, as this time the recipient didn’t make any attempts to use our services.
Currently, the wBTC is frozen on the gateway and we’re planning to keep it that way. wBTC, just as wTRY is emitted asset, which means it is strongly bound by the amount of actual BTC and TRY on gateway’s accounts. The initial bank TRY deposit was recalled, thus making wTRY not backed by anything. Digilira is asking Coinomat to refund BTC for emitted wTRY asset which is not backed by FIAT.
In view of the aforementioned, Coinomat cannot be held responsible for third party information security system malfunctions. As per our Terms of Service any questions or uncertainties, as well as claims or the provisions of the use the Services, the user may contact our support service by email
[email protected].
For further discussion please use the provided mail.