Bitcoin Forum

Bitcoin => Important Announcements => Topic started by: John (John K.) on January 11, 2013, 01:05:15 PM



Title: Vircurex and Cryptostocks Wallet Compromised.
Post by: John (John K.) on January 11, 2013, 01:05:15 PM
We sadly need to announce that our wallet has been compromised thus DO NOT send any further funds to any of the coin wallets, BTC, DVC, LTC, etc. We will setup a new wallet and reset all the addresses. This will most likely take the whole weekend.




We sadly need to announce that our wallet has been compromised thus DO NOT send any further funds to any of the coin wallets, BTC, DVC, LTC, etc. We will setup a new wallet and reset all the addresses. This will most likely take the whole weekend.



Title: Re: Vircurex and Cryptostocks Wallet Compromised.
Post by: John (John K.) on January 11, 2013, 02:02:25 PM
Further update:  The system was not breached, no passwords were compromised (they are salted and multiple times hashed anyways). The attacker used a RubyOnRails vulnerability that was released yesterday (http://www.exploit-db.com/exploits/24019/) to withdraw the funds therefore we will put back in the deposit addresses and leave the wallet as it is.


Title: Re: Vircurex and Cryptostocks Wallet Compromised.
Post by: John (John K.) on January 11, 2013, 03:38:03 PM
Before the wild speculations beginn, the service will be recovered and we pay the losses out of our own pockets.