Bitcoin Forum

Economy => Service Discussion => Topic started by: molecular on April 01, 2013, 06:31:21 PM



Title: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 06:31:21 PM
https://i.imgur.com/g0utytml.png (https://i.imgur.com/g0utytm.png)


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Spaceman_Spiff on April 01, 2013, 06:41:09 PM
https://i.imgur.com/g0utytml.png (https://i.imgur.com/g0utytm.png)


Joy  :'(
I hope the funds are safe...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Injust on April 01, 2013, 07:13:31 PM
Same thing at Instawallet...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 07:15:05 PM
Same thing at Instawallet...

fuck.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: MPOE-PR on April 01, 2013, 07:30:32 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: mccorvic on April 01, 2013, 07:31:16 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

Looks like a whelp to me.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Spaceman_Spiff on April 01, 2013, 07:32:53 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

I hope to god that the people from bitcoin central did that as a security measurement....


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Injust on April 01, 2013, 07:33:27 PM
uh oh...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: mccorvic on April 01, 2013, 07:33:49 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

I hope to god that the people from bitcoin central did that as a security measurement....

Do we know when the site went down?  If the timing is close, then this may just be the case.  Though, if it were the case, it'd be prudent of them to say that those with coins there havent' lost anything


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 07:34:12 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

Looks like a whelp to me.

I looked up "whelp" (http://www.urbandictionary.com/define.php?term=whelp).

None of the definitions seem to make sense in this context. ("A hot young 20 something guy who prefers having sex, dating, or marrying older women.")


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: mccorvic on April 01, 2013, 07:37:14 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

Looks like a whelp to me.

I looked up "whelp" (http://www.urbandictionary.com/define.php?term=whelp).

None of the definitions seem to make sense in this context. ("A hot young 20 something guy who prefers having sex, dating, or marrying older women.")


In EvE Online if you "whelp" your ship/fleet it means you died/lost in a horrible embarrassing manner. 


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Scott J on April 01, 2013, 07:37:33 PM
That wallet couldn't have been very cold if it was hackable...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: deadweasel on April 01, 2013, 07:40:06 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

Looks like a whelp to me.

I looked up "whelp" (http://www.urbandictionary.com/define.php?term=whelp).

None of the definitions seem to make sense in this context. ("A hot young 20 something guy who prefers having sex, dating, or marrying older women.")


In EvE Online if you "whelp" your ship/fleet it means you died/lost in a horrible embarrassing manner. 

Hopefully people keep their bitcoins in a cold wallet, not on some exchange.   I mean, srsly?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 07:41:15 PM
That wallet couldn't have been very cold if it was hackable...

If it was safe in the first place, there would be no reason to move funds to some "emergency address", though. Maybe it wasn't that cold, only cool.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 07:42:00 PM
well now you have a simple question to ask them. Do they or do they not control private key to that BTC address?

The second question I suppose would be if it is in instawallet and in google yet.


Yeah, they might've used instawallet for the "cold" wallet of bitcoin-central.... lol.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 07:42:52 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

Looks like a whelp to me.

I looked up "whelp" (http://www.urbandictionary.com/define.php?term=whelp).

None of the definitions seem to make sense in this context. ("A hot young 20 something guy who prefers having sex, dating, or marrying older women.")


In EvE Online if you "whelp" your ship/fleet it means you died/lost in a horrible embarrassing manner. 

Hopefully people keep their bitcoins in a cold wallet, not on some exchange.   I mean, srsly?

If you want to trade on that exchange you kind-of have to, no?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: moni3z on April 01, 2013, 07:48:11 PM
Uhoh, says that was 42,000 coins transferred from the cold wallet right? Shouldn't it be 42k transferred to the cold wallet instead of other way around.

Zhu Tonged x 2


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: trout on April 01, 2013, 07:49:16 PM
those two big withdrawals are still "unconfirmed," for a few hours already. If this was a theft, the BC/instawallet guys should quickly try to doublespend with big fees.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: glub0x on April 01, 2013, 08:05:57 PM
i hope they tried to double spend it with huge fees...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: TalkingAntColony on April 01, 2013, 08:10:08 PM
instawhelped


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: 2weiX on April 01, 2013, 08:13:13 PM
31BTC at central
and many times that in €

sheesh.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:14:11 PM
31BTC at central
and many times that in €

sheesh.

at least the € should be insured by the cartel, right?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Shadow383 on April 01, 2013, 08:17:05 PM
Still not showing as confirmed, despite having a big fee attached...


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: mccorvic on April 01, 2013, 08:18:10 PM
Still not showing as confirmed, despite having a big fee attached...

The plot thickens.  If anything else, this is a very interesting mystery.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: lucb1e on April 01, 2013, 08:18:33 PM
It is very likely I'm seeing things that aren't there, but...
http://blockchain.info/tx/4cf56d0c1566778030095925328f4bc7ae988657bd62fe8bc05ac67302d32b4c

Address "bccold" (1BcCo1d)?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: uhoh on April 01, 2013, 08:18:57 PM




<--




Honestly though, I thought we'd seen the last of these multi-million hacks. I hope for all who store any money there that this pans out in their favor and was a transfer done by the admins.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: glub0x on April 01, 2013, 08:20:32 PM
I sold some 10 btc (all i had in there) at 77,897€ there today during the 100$ rush.
I then hit my head on the wall as it s always hard to miss opportunity.
I now bless my wisdom ahah.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Amitabh S on April 01, 2013, 08:22:47 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

unconfirmed! quick, double spend and mine them FAST!!


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: 2weiX on April 01, 2013, 08:23:53 PM
I had 31 BTC on my account.
they have since been moved to 1BCo1d and are part oft he huge-ass trx that is of yet unconfirmed.



Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Scott J on April 01, 2013, 08:24:26 PM
Another block has just been mined that they weren't included in. Strange.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: uhoh on April 01, 2013, 08:26:43 PM
Does anyone have contact by skype or irc or anything with the admins?



Title: Re: bitcoin-central.net say they detected a security-breach
Post by: maxmint on April 01, 2013, 08:27:24 PM
Another block has just been mined that they weren't included in. Strange.
Maybe the best plotted April fool's joke ever.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:27:58 PM
It is very likely I'm seeing things that aren't there, but...
http://blockchain.info/tx/4cf56d0c1566778030095925328f4bc7ae988657bd62fe8bc05ac67302d32b4c

Address "bccold" (1BcCo1d)?

It is a vanity address, not big deal. Bitcoin Central COLD. I have a few which start from 1Vladimir



How is it no big deal?

If it's vanity for Bitcoin Central COLD and the other large tx to the same address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is indeed instawallet cold (as marked on blockchain.info) then we're looking at either the "theft transactions" or some transactions made by davout and team to "further secure the funds". I somehow think the latter is unlikely, since cold store should already be secure and they might've considered telling us "funds secure, don't worry" by now.



Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:28:50 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

unconfirmed! quick, double spend and mine them FAST!!

that, my friend, would be amazing. don't know if bad or good though.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: MPOE-PR on April 01, 2013, 08:29:36 PM
Can anyone who unlike me actually understands transactions look at the raw stuff and say if it's a nonstandard tx and why?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: maxmint on April 01, 2013, 08:30:01 PM
Everybody has of course seen http://blockchain.info/address/1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy

unconfirmed! quick, double spend and mine them FAST!!

I see big discussion about this coming up. In the end, who knows who's the "good guys" and the "bad guys" here? Where's the evidence?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: gbl08ma on April 01, 2013, 08:30:24 PM
This block came 30 minutes after the last one, and only included 6 transactions.
http://blockchain.info/block-index/369660/000000000000010194961754d3d0739a794b934559b63137201273f01cd0f14d
Then one minute or so later, this block comes:
http://blockchain.info/block-index/369661/000000000000027a3775948e3c5f02cec95d9e1421e43130f5f589067fb0d1a2
...and includes all the other transactions. But neither of the two blocks include the transaction from 1bcco1d or the one from the Instawallet cold storage, even though it has a huge fee.

Strange things going on in here, at least from my uninformed-about-the-technical-details-user perspective. Someone care to elaborate?

Another block has just been mined that they weren't included in. Strange.
Maybe the best plotted April fool's joke ever.
Someone please tell me how to avoid my transactions getting included at will, even when paying a fee!
Is it possible that all the miners are being conscious enough not to include this transaction?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: nomnomnom on April 01, 2013, 08:31:01 PM
Transactions not found on blockexplorer.com
Don't trust only one source  ::)


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: bitdragon on April 01, 2013, 08:32:47 PM
[Apr-1 10:30 CET] Bitcoin-Central and Paytunia update: Our customer's bitcoins and euros are safe and will not be affected by the security breach. We have taken the websites off-line for proper investigation.

The address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is under our exclusive control.

from
https://bitcoin-central.net/


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: maxmint on April 01, 2013, 08:34:07 PM
[Apr-1 10:30 CET] Bitcoin-Central and Paytunia update: Our customer's bitcoins and euros are safe and will not be affected by the security breach. We have taken the websites off-line for proper investigation.

The address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is under our exclusive control.

Now that's some good news! These guys know how to build the suspense


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: Nick on April 01, 2013, 08:36:15 PM
[Apr-1 10:30 CET] Bitcoin-Central and Paytunia update: Our customer's bitcoins and euros are safe and will not be affected by the security breach. We have taken the websites off-line for proper investigation.

The address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is under our exclusive control.

from
https://bitcoin-central.net/

Now why did that take so long? Good news though. Can't wait to hear the details. Then I will consider if I'll do business with them again, have made good experiences in the past.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: lucb1e on April 01, 2013, 08:36:55 PM
"The address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is under our exclusive control. "
Great, but the transactions being sent there are unconfirmed and don't exist on blockexplorer.com. Something's fishy.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:37:24 PM
guys, should I lock this thread and show people over to the pretty much identical topic in thread Instawallet Security Breach (https://bitcointalk.org/index.php?topic=164143.0;topicseen) for simplicity?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: uhoh on April 01, 2013, 08:37:45 PM
Excellent news.

Now just the strangeness of the lack of confirmations on a well-funded transaction.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: maxmint on April 01, 2013, 08:37:51 PM
guys, should I lock this thread and show people over to the pretty much identical topic in thread Instawallet Security Breach (https://bitcointalk.org/index.php?topic=164143.0;topicseen) for simplicity?

Yes


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: solomon on April 01, 2013, 08:38:07 PM
And it's not being confirmed because...?


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: repentance on April 01, 2013, 08:38:19 PM

How is it no big deal?

If it's vanity for Bitcoin Central COLD and the other large tx to the same address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is indeed instawallet cold (as marked on blockchain.info) then we're looking at either the "theft transactions" or some transactions made by davout and team to "further secure the funds". I somehow think the latter is unlikely, since cold store should already be secure and they might've considered telling us "funds secure, don't worry" by now.



And if they're moving funds from their normal cold storage wallet to another address to demonstrate that they still have control of the funds (which is more reassuring than a "don't worry" statement), then that's something they should be publicising.

What's worrying is that when the Instawallet vulnerability was made public last week they should have assumed that both Instawallet and Bitcoin-Central would become bigger targets and that people would start looking for more vulnerabilities in both services, so they should have been locked down hard while a security audit was conducted.  They should have been expecting a breach.


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:38:41 PM
[Apr-1 10:30 CET] Bitcoin-Central and Paytunia update: Our customer's bitcoins and euros are safe and will not be affected by the security breach. We have taken the websites off-line for proper investigation.

The address 1LrPYjto3hsLzWJNstghuwdrQXB96KbrCy is under our exclusive control.

Now that's some good news! These guys know how to build the suspense

yep good to know

finally! thanks!


Title: Re: bitcoin-central.net say they detected a security-breach
Post by: molecular on April 01, 2013, 08:41:52 PM
guys, should I lock this thread and show people over to the pretty much identical topic in thread Instawallet Security Breach (https://bitcointalk.org/index.php?topic=164143.0;topicseen) for simplicity?


I'm locking this thread for simplicity.

Please discuss here: Instawallet Security Breach (https://bitcointalk.org/index.php?topic=164143.0;topicseen)