Bitcoin Forum

Alternate cryptocurrencies => Service Discussion (Altcoins) => Topic started by: vuulo on July 20, 2015, 04:41:44 PM



Title: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: vuulo on July 20, 2015, 04:41:44 PM
After playing around with cryptsy  auto exchange api i found a bug this afternoon that allows users to withdraw 1.00000001Btc after executing a forced trade with the database...

Unfortunately this bug seems to be a loophole and works for users who trade bitcoin against litecoin ...

The bug allows users withdraw 100.00000001Btc after completing a trade on the Ltc/Btc exchange page at Market: LTC/BTC (ID: 3)...

the bug is being executed by selling Ltc for Btc... in the Price Per LTC box erase the whole set of digit that appear there and paste in 0.00000001 ,Then paste 100.00000001 in the Amount LTC box after this click Submit Sell Order and you'll get a pop up that says

IMPORTANT PRICE ALERT!

Your SELL price of
0.00000001 BTC
is lower than the current top buying price of
0.01370000 BTC
All Trades Execute At Best Possible Price

once the pop up appears click This is Correct - Continue.
then you get a trade completed popup...refresh the page and you go straight to the balance page where you'll select bitcoin and withdraw bitcoin in the  Amount BTC (Min: 0.01000000 Max: 300)
 which asks the amount of bitcoin you want to withdraw simply paste in 100.00000001 the the Net Withdrawal will change to 99.99900001 BTC,immediately after this input your bitcoin wallet address and password then enter the captcha correctly then click Process Withdrwal...and there you are you've gotten 99.99900001 BTC sent to your bitcoin wallet...for this bug to work you must have at least 105 litcoins in your wallet....


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: ocminer on July 20, 2015, 04:44:45 PM
lol nice, you want ltc, huh :) at least 100.., not bad :)

EDIT: As soon as you click on "Yes, this is correct", you LOST your LTC (you sold it for 0.00001...)


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: leps on July 20, 2015, 04:45:45 PM
i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: ocminer on July 20, 2015, 04:46:01 PM
i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: leps on July 20, 2015, 04:47:33 PM
i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above

Was writing same time:)
I dont think ppl with 100ltc buy this scan attempt and i hope they wont believe it:)


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: vuulo on July 20, 2015, 04:48:53 PM
lol nice, you want ltc, huh :) at least 100.., not bad :)

EDIT: As soon as you click on "Yes, this is correct", you LOST your LTC (you sold it for 0.00001...)

Just try it and you see it's a bug that's a unfixed loop of the previous cryptsy orderbook bug...i found this info in an underground forum...blackhat tho.


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: ocminer on July 20, 2015, 04:49:09 PM
i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above

Was writing same time:)
I dont think ppl with 100ltc buy this scan attempt and i hope they wont believe it:)

Hopefully, yes...


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: samspaces on July 20, 2015, 04:59:23 PM
We'll find out if greed makes blind.


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: BitcoiNaked on July 20, 2015, 05:06:10 PM
Why is this piece of shit scammer not banned yet?


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: tiggytomb on July 20, 2015, 05:07:31 PM
If this is a bug and actually does work which I doubt, the right thing to do would be to notify Crypsy of this issue surely? Otherwise this is simply stealing and you end up beng no better then all the scammers out there.  Also if this worked why would you want to shsre this and not just keep repeating it yourself.

People please don't fall for this.


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: bitspill on July 20, 2015, 05:12:24 PM
Even if the sell price is set to .00000001 btc the trade will occur at the highest buy order or approximately 0.0136 btc currently however dumping 100 ltc wouldnt even change the price much.


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: talkbitcoin on July 20, 2015, 06:05:27 PM
give us screen shot or it didn't happen.

you want others to sell their LTC at 1 satoshi for a fake bug!!


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: Raskal on July 20, 2015, 06:16:55 PM
LMMFAO...

This is a new one, however you get an F- for effort in creating this scam...

Atleast photoshop some cryptsy screenshots or fake some wallet transactions, something...

I know we're all a bunch of morans here but you didn't even try very hard...

Hey guys I can turn 1.37btc worth of litecoin into 100btc but out of the kindness of my heart I will publicly tell everyone how to do it so cryptsy will discover and close the FAKE loophole...

WHAT A DUMBASS, I'M SURPRISED YOU WERE SMART ENOUGH TO MAKE A FAKE BTCTALK PROFILE TO POST THIS AND NOT JUST USE YOUR REAL ACCOUNT...


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: Sparood on July 20, 2015, 06:19:31 PM
Wow thanks for the tip, this really works!!!


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: mullick on July 20, 2015, 06:52:30 PM
I received this ticket. Tried to replicate on our dev cluster. And I could not. I believe the user is trying to get people to sell LTC


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: wlefever on July 22, 2015, 03:00:00 PM
Even if the sell price is set to .00000001 btc the trade will occur at the highest buy order or approximately 0.0136 btc currently however dumping 100 ltc wouldnt even change the price much.
+1


Title: Re: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}
Post by: NorrisK on July 23, 2015, 01:11:37 PM
I received this ticket. Tried to replicate on our dev cluster. And I could not. I believe the user is trying to get people to sell LTC

Good thing that you checked this out, would be very bad if it for some reason was working..

TS is probably a daytrader trying to use this to force the price down a little to enter again.