^ Yes buyer has to fix it themselves. The problem is that the withdrawal code doesn't have a delay whereby duplicate withdrawal attempts can be detected. This instant withdrawal processing allows a hacker to make multiple withdrawal attempts simultaneously, and have all of them processed before the software can update the balance reductions from the other withdrawals being done concurrently, which allows the hacker to withdraw more than their balance.
Regarding trust, it depends on whether the buyer is going to cover the user's lost deposits.
Topic: [WTS] btctip.com - software, domain name, and Twitter handles (Read 387 times)
So what about the problem with that software.Buyer has to find it and fix himself? Also its hard to get users trust again into that thing.
Thank you for your words of support, I really appreciate it!
Sorry to hear about the hacking.
Hope you find a buyer to continue this fantastic business opportunity. Good luck with sale!
Hope you find a buyer to continue this fantastic business opportunity. Good luck with sale!
btctip.com, which was launched in March 2012 as the first social media bitcoin tipping service, was, sadly, hacked on March 12th 2014, resulting in all deposits (13.96160671 BTC) being lost. More about the hack can be read here:
http://btctip.com
Due to personal circumstances, that are explained in the notice linked above, I am not interested in fixing and continuing to run the site, and as such, I am looking to sell everything.
For sale is:
Please message me if you would like to inquire about a purchase.
http://btctip.com
Due to personal circumstances, that are explained in the notice linked above, I am not interested in fixing and continuing to run the site, and as such, I am looking to sell everything.
For sale is:
- the btctip.com domain - it has a Google pagerank of 4, and is composed of 'btc' and 'tip', two valuable Bitcoin-themed keywords
- the BTCTip software - this is the tipping software that reads Twitter statuses, and makes bitcoin transfers between users that are registered with BTCTip. It allows automatic login and account creation using Twitter accounts, and bitcoin deposits and withdrawals. There is a security hole in the withdrawal feature that allows a malicious party to withdraw more than their balance by making multiple withdrawal requests simultaneously. If anyone buys the software, they will need to fix this. The software is built on the Drupal CMS
- the @btctip Twitter handle, which has 3,955 followers, as well as @btctip’s helpers, which have been used to send tips on Twitter: @peepbitcoin (2,278 followers), @mightybitcoin (497 followers), and @sonarbitcoin (2,123 followers). These are all real followers, developed organically.
Please message me if you would like to inquire about a purchase.
Jump to: