Bitcoin Forum

once again.  ::) More Ethereum Stolen!

An unknown hacker has so far stolen more than $471,000 worth of Ethereum—one of the most popular and increasingly valuable cryptocurrencies—in yet another Ethereum hack that hit the popular cryptocurrency investment platform, Enigma.

http://thehackernews.com/2017/08/enigma-cryptocurrency-hack.html?m=1

This incident marks as the fifth Ethereum hack within two months, following a theft of:
$8.4 Million worth of Ethereum during Veritaseum's Initial Coin Offering (ICO).
$32 Million worth of Ethereum from Parity's Ethereum Wallet accounts.
$7 Million worth of Ether during the hack of Israeli startup CoinDash's ICO.
$1 Million worth of Ether and Bitcoins heist in cryptocurrency exchange Bithumb.

Maybe stop using centralized shit like website based ICOs and slack.

Dumb, lazy and greedy ICO gamblers deserve crap like this.

Is this the same as coindash ?

If it's stolen yeah they deserve it but these stolen news are popping a lot of these days I'm starting to think that they are just playing "we got hacked" card while posting a picture on Instagram from the new island they bought.

Very bad news, unexpected enigma hack project to reach a total of $ 470,000 in Ethereum, I am following bounty does not seem to get anything from this project, also sorrow for this incident.

I wonder how the hackers are going to cash out all these stolen ETH though ???

I'm very shocked at what happens to the enigma and this is very bad news for everyone who has been involved in it, I'm still shocked that a company has been hacked and stolen a lot of money, whether the hacker can be traced and found? This is a huge loss for the enigma. :'(

That isn't difficult to cash out, he can hack is more difficult than cashing out. There are many exchangers that accept. The account isn't tracked and anonyomous. He can split the money into some wallets, than sent to exchanger and change to XMR or Dash or coins that not leave track, After that everything will not be trackable

This is the worst news day.

I knew about the recent coin dash hack, I had no idea there were more hacks, and for more money.

Though from what I read the coindash could have been an inside job.

Gutted was thinking of investing in Enigma. I wonder if the ICO will still go ahead or if the reputation damage now is too much.

I wonder if they can still a lot of money for the ICO after this

Feel sorry for the victims and the projects, there are too many scammers around. Hopefully, there is a way to secure ICOs’ fund raising.

This one spread via their official Slack channel. Some previous ETH attacks were also spread via Slack (like MEW phishing hack). This is the reason I'm staying away from Slack channels. Better safe than sorry.

Hackers are investing their times in these ICO's because it looks like they are really profitable. This industry needs to increase their security in order to maintain it, and not affect any other coin in the process.

Probably they will distribute the bag load of eth into small chunks and cash it out later on....its quite alarming at the rate the hacks keep on coming is there some sort of connection in these projects, a loophole in the code used or maybe its an inside job ???

People need to understand the term "Ethereum Hack", it means Eth network was compromised which resulted into loss!
On contrary, its all those SHIT projects with cheap resources and not enough money to get good cyber Security. Their negligence cannot be dumped onto Eth.

I hope this is not just another hell of a "please hack me" incident. They must already have a treasure accumulated after several successful ICO hacks done. These must be the same people. I hope lessons are learned already.

Just as no one can track stolen paper currencies not just cryptos. Let not pretend like stealing monies never existed.  There are loads of good solutions to the problems, why no ones is interested in using them is a mystery.

what?! is this statement true? what happened again hacked? why, they said that the security of enigma is so secured. why is this happening, what about the campaign can they still pay them?

Well there's a good chance to get the Hacker.

He/she/it moved 676 Ether of the stolen Enigma funds to Bitfinex:

https://etherscan.io/address/0x4c70bb26126baa4d973115ee0e30879b33fa35c4

REPORT IT. x-POST it on Reddit.

Enigma can t resolve that?  strange and funny for the concept.

OK the Hack is clearly bad... a lot of amount of money disappear. Well, i hope they find a solution. I like them.

This is really a PR disaster for a company where security should be absolutely paramount.

Will definitely be thinking twice before participating in an enigma ICO in the future.

The only consolation here is that more money wasn't lost - $470k is chickenfeed compared to some of the recent raids on ICO funds!

Any idea when a re-ICO is going to be?

More like Enigma "Hacked". This is ridiculous.. The fact that every ICO scam gets hacked these days, doesnt it make you think that something else is wrong?

this is very profitable if the eth is hackable. or there is a back door in its ethereum system?

people should go back to BTC with their ICOs it is good for all parties, especially the small investers.

As hacking could be insiders' job most of the time

That is not good way to go with this. I use ICO a lot and i know there are trojans moving all around the crypto world. Never thought the number will increase to this extent and we will have to dicuss about the security of the ICO like this. It is not good news for the enigma investors. What happens with thr shareholders ? How they will payback thr money they took from the investors. Is there any security for the funds at least? Does anyone has idea about this. Please let me know.

According to this comment by someone on reddit https://www.reddit.com/r/ethtrader/comments/6v0vei/warning_enigma_website_and_slack_probably_hacked/dlwztnt/ Enigma CEO using the same password for all his accounts, that's why the hacker can hack enigma. Once again another hacker on ICO because of stupid things. Are they deserve the second chance ?

This is bad for potential future ICO projects. They need more cybersecurity and hire network security experts to work with their companies, which will limit the loss of large projects.

Wow, this is kinda scary I mean if slack is that unsecured then maybe people should use something different for their teams etc... 

They just need to have better passwords !
Seriously, I don't trust ICOs from companies that give just one ETH/BTC address for your deposit. Some are giving one address per contributor. This is much more secure ! And you can track your transfers. This should be a useful information to display on the ICO schedule websites.

i wonder this too.  I don't understand how they do this. And did they make a announcement about this hack?

People should be more cautious when sending ether and learn from the past.

It seems this is another coindash event that the hacker stole the eth by replacing the correct contract address with the wrong one. Why not announce the address advance and use the block height to start the ICO crowdsale?

Ethereum has to do something before things get out of hand. Hackers should be tackle head long in other for the  ico that are using Ethereum token to succeed. Ethereum price has also been limit because of the fear of hackers people that see Ethereum as alternative to bitcoin have changed their minds because of hackers activities on their wallet.

Another hacked ICO.
I thought it was just a rumor, so it was true, huh?

No wonder these few days I always got email notification from slack, all of it was the same email but with different senders.
They always asked us to secure our MEW over their given link. Seems like it was from scammers or hacker.
I hope this thing won't ever happen again.

I am now thinking it's a real hack or just a thief in its own team members.Who knows!

Lol.... probably it will happen again and it's price will drop for like 10-15% like it happened before, but pretty sure it will be just temporary, so brace yourselves

They will never learn. People want to get rich quick. Me too of course, who doesn't, but the difference is, I put some research on what I buy and I consider the risks.

The problem with ETH and why it will never be a good store of value is because of things like this. Hacks will keep happening. No matter if it's a hack or an inside job.. the point is, tons of ETH will keep getting stolen and dumped into the market, crushing the price. The more ICO's, the higher chance of a lot of ETH getting stolen and dumped, and ETH holders will suffer the consequences.

BTC is way simpler, so things like this don't happen.

You do have a point because most of ICOs now are basing on ETH platform which the main mistakes on here is those devs who do make store on those tokens on which it do really compromising the price of ETH and the one who should be blame on this hacking incidents are those dev who do make such wallet or storage of those coins.

If this is true, how come a CEO act like this? Using same password for all his accounts is very very stupid things. This is just like a newbie who doesn't knoew anything how to secure his account.
My advice to all dev, don't use slack again because it's very suspicious for me. Just use this forum to update/chatting with your participants.

Maybe they can mix it with other coins?

What the, I just want to know, whyy? What makes him think that using the same password is a wise choice?
Ikr, slack is very fishy nowadays. And as far as I know, most of ICOs have been using slack.

Hackers are SMART enough to Stole 500K USD

But they are DUMB enough to transfer the funds to Bitfinex

All coins can be mixed. When no mixer exists for the coin it can be exchanged to an anonymous coin or mixed in another form.
Or, the hacker can just wait 10 years to sell.

Is there no secure way (blockchsin) to pay an ico? Use Civic?

Is this somewhat like coindash?

Very bad news, how to protect ICO from such invasions?

MIT Grads are just too DUMB not to use 2 Factor Authentication :(

Its unfortunate that the ICO was compromised as a result of the Enigma CEO account being hacked, its high time people set secondary security protocols in place such as 2fa and basically make an effort of not using the same passwords as is this case. Hope all other ICO's learn from this and tighten their security in the best interest of its investors

Yeah heard that news. If Im not mistaken the hacking start on slack after one of the dev/leader's slack account had been hack and post an announcement about the tokensale openning and give an eth wallet addy for investor's deposits. Seems like hacking amd phising is increasing on ICOs. Even slackbot always sending scam messages regarding whitelist and what so ever redirecting on fake mew which is a phising site to steal log ins. So all of us must beware.

something is wrong with some icos these days...

Dies someone know the exact mechanics of this hack? The only rumor is that Enigma's CEO had the same passports for all his services, but what happened exactly?

This is so sad. Hopefully some white hats and sleuths can make a recovery.

The slack just like a place with a bunch of the scammers, Too many the scam message already come from the slack bot. Too many people still got scammed by the slack scammer at the same time we know the awareness about the slack bot just like a scam attack is everywhere. I think they need more orange juice.

This is the sadest news i have heard today. That ICO was growing too fast, i think that was one of the best around here, also they had a good campaing and a lot of people were happy with them, i am so sorry for the founders.
Well i think we all are acustumbrated to hear from Ethereum hacks, i dont think why every ico keeps using ethereum bassed for making their coins, there are better options at the moment.
Hope that this coin recover soon, that was a high impact for sure.

ICO projects who have Slack channel or having a bounty about participating in Slack should mandatory added some warnings about it in their respective ANN thread not just in their Slack channel to raise more awareness. There are no ANN bountry thread today who having some active warnings about. Yes it's depend on a user but still it's good help for newbies.


Maybe there are things behind the curtain which probably we didn't know. Let's wait for the progress of this case.

It is easy to make an excuses like we are "HACKED", this is the most common scenario of scamming practice pretending that they are the first victim. Now it is the right time that all future ICO proposals should be regulated and legalized so that we, the investors are well protected and can easily file a lawsuit or complaints whenever they run away. ICO investors today are just crossing their fingers hoping that their ICO investment may in the good hands.

Another scenario that this happen. Just like the coindash got hacked, though I just hope this would not happen the next time. And should made a security or make a ways nextime so the Investors will be in a good hands and they are at ease to invest in other Ico project.

It's doesn't matter if it's slack, a forum or anything else. We can never know if its inside jobs or real hacks, and scams will continue to keep happening for ever. Even if ICOs are made illegal, there will alwas be countries where it will be legal to host them. All people need to do is to pick an VPN IP and then enjoy your ICO gambling.

People love to make a lot of money and quick, so the ICO madness will never end as long as there are buyers. The unfortunate thing is that so many scams hide the real serious projects, but that is your job as an investor to do research and pick the right thing. I don't want some regular to tell me what is or isn't a scam. That is the beauty of crypto, you must take care of your own money and your own investment decisions.

This is what I am thinking too,
They can just put all blame with easy excuse to the hacker and hope for the investor to forgive them.
 ;D ;D

So ico running fellows should have maximum security.
We are also at first afraid of it.
Now some basics from those hacks can help us to prevent it

Did Bitfinex freeze the Account of the Hacker?

Anyone know how these guys are getting through there firewalls and systems? I think 99% of it is an inside job, just a gut feeling  :(

The hacker tried to sell about 200k of the stolen ether on an exchange and it was caught and frozen. Kind of a dumb move.

Sounds like Enigma is planning to reimburse the people who were tricked. I'm glad for those people, but I hope they know how lucky they are in this circumstance, and I hope they will be more careful in the future since this sort of thing seems to happen a lot.

This shows that doing crime with crypto is not a walk in the park. If you steal millions you will get caught sooner or later... the amount of mixing and so on that you would need would drive you insane. I prefer to not commit any crimes and just do it the right way and be able to sleep at night.

The only time I mixed coins I did it to test it out and see how it works, but im not going to mix my coins because you never know if you are getting tainted coins back from the mixture.... like it or not, fungibility in BTC sucks.

I'm too, that was pretty odd to see someone are able to hacked the site and put the wrong address to fool the investors, but i believe this just the inside jobn that linked to the team. I think that will be true.
I already watched the coindash.

So how do we feel about Enigma's future?

Can't imagine being massively hacked will help inspire confidence in this project going forward...

So is the enigma project stopped? And how the fate of the participants bounty ?, because I also included one of the participants enigma bounty campaign

Not only you alone who experienced it but I also experienced it, I feel sorry for those who invest in Enigma, everyone wants the truth, find hackers, find and bring it to the legal level. but that's not easy.

I think it will continue since the enigma project got 20 million contribution cap from all investors. Besides they officially announce that all ICO investors who lost their money from the hack will get refunds.

thats good news for investors who lost money from fake email will get refunds.
i think enigma site not hacked. but their slack.

centralized services always hacekd thats not a suprise.
If you put thousands and millons of dollars in a webservice hackers will work very hard to get all of them.
and as everybody knows there is no computer cannot be hacked.

470.000 dollars??? OMFG
It sounds terrible... So how about Enigma's future?

Any new update about how many funds were frozen with Bitfinex?

dumbest move ever for the Hackers to deposit the Funds to Bitfinex

I must agree that these guys are very lucky that they will be refunded. How many times have hackers stolen stuff, and people are just left alone in the dark. Hopefully the makers can contact the people holding these frozen funds. I think this is a lesson also. If ICOs can have preagreements for escrow or multi sig wallets that are only sent to investors, this will make it extra difficult to be fooled.

On the issue of Enigma projects hit by hackers, does anyone know why this happened? I am very sad when I heard this news from this thread and my friend.  :'(

how is the condition now? Has the hacker been caught? And what will investors' funds return to their owners? It's really stupid that hackers make money instantly without wanting to feel the pain of making money on the internet, if I am in the choice I choose not to have money than I use other people's money in a way that is very unlawful.

This is boring. The good thing is that Ethereum is possible to trace, but in the next update of Metropolis, I think Ethereum will be anonymous in transactions!

People lost almost half a million and all you are worried about is the facking bounty? this is facking great, lol sorrow I mean who uses the word sorrow anymore these days? that's for the books to use sorrow. there are lots of hackers on this forum lurking around to grab some cash very quick.
Yes very bad, what is more bad is that you just dictate from some kind of script explaining the situation. another bad thing is that Ξ is the target of almost every hacking attempt lately, maybe there is something wrong with their security.

Why is it that Bitfinex and Enigma are not releasing any statement about what happened to the Funds?

Is it Frozen or the Hackers got away?

I don't think they can catch the hackers. Hackers started a fake ico using the admin account on their slack and got away with all the ETH. Security should be maximum in all the ICO's

The hackers Deposited the hacked ETH to Bitfinex. There is no doubt about that.

"Are they fast enough to Freeze the Funds?" This is something we dont know coz Bitfinex and Enigma are not giving any info

Enigma team work with spec ops in cybersecurity division. But if will be precedent of frozen it wiil have plus and minus. Where is freedom and decentralization? ETH and ETC? I think need to intercept fiat from this operations with real people but not accounts

lucky the exchange caught the hacker btw did the exchange gave back the ether to its owners or they just keep it. i hope enigma would give free on their coin to those who invested while they got hacked so it would be fair.

could have been a disaster like last years bitcoin heast.

They can't because my thought that the hacked job already done by the inside person. That makes don't  senseless to say the team will try to catch the hacker as soon as possible. But you can't just the security problem will always be related to the hacked case.

why is this we come to hear about lots of hacks happening of such large amounts?

did they stole it from the ethereum wallet? like myetherwallet or which way did they use?

Nothing wallet. Scammers take control on site and one of admin account in slack and noted that preICO begun with self wallet number. Due to FOMO people rush to send money on this scam wallet.
And now team write that will refund to all scammed.

Still no Update from Bitfinex and Enigma about what happened to the Funds

I am curious if they are fast enough to Freeze the Funds or the Hacker just got away

Success of an ICO is mostly about marketing and visibility.

Even competent and honest teams get their capacity caught up in rising above the noise of the 100s of ICOs happening at one time. And so they spend less time on actual security.

We now have weekly huge hacks and losses.