Bitcoin Forum

Etherdelta.com DNS has been hacked so one could get redirected to a fake site and lose everything:

https://twitter.com/etherdelta/status/943582597459972101


Do not use Etherdelta and do not use your private key there until this is resolved. 

Probably going to stop using it after this.

THank you for your post.

More and more hacker attacks on crypto. Bad news, but if the private key was there. Could he have stolen it? I'll wait for the good news ...

Yes, thank you for the notice.  Bitcointalk should have stickies for these... and this is one of the few times the word 'hacked' was used correctly.  Curious... since I've linked EtherDelta to MEW, what would happen if I just visited the site?  Would it pass my private key for just visiting it or do I have to interact with it?

They just stated that DNS server is hacked, not sure that the database was stolen or not. Anyway if you use Metamask I assume that your private keys are secured. Hope ED will recove from this attack, there's no alternative for selling tokens by contact address.

for sure i have noticed that but i think since that kittens issue the site has became more heavy and seem overload the transaction are not made neither the withdraws.

The site will redirect you to a phising site if I understand it correct. So no you won't be hacked but if you go on ED, get redirected and fill out your keys then yes.

Is this what decentralization and smart contract security looks like? The official twitter account of a service based on "decentralized" tech calling for their own users to move out of their own platform. ROFL ;D

does this really happen? Must be more careful again with this exchanger, because we login using private key, can harm the wallet.
Thanks for your sharing information.

I make use of Metamask and feel relieved to know that my private keys (and funds) are secured from the attack. Meanwhile does anyone know if the attack on etherdelta in any way connected to why one can not access Metamask currently on google chrome? It takes forever to load and still will not open.

So someone is cashing out from users funds stored in ED? Or are users using the copycat site who are sending directly to hackers? Hope ED will get back full control of their site with no major user funds stolen.

https://twitter.com/etherdelta/status/943582597459972101

https://twitter.com/etherdelta/status/943583921714925569

I have only used etherdelta with ledger nano s. Is there any way i could i be compromised? And is there any way i can check if my tokens are still safe?

got this message from MetaMask

ATTENTION
MetaMask believes this domain to have malicious intent and has prevented you from interacting with it.

This is because the site tested positive on the Ethereum Phishing Detector.

You can turn MetaMask off to interact with this site, but it's advised not to.

If you think this domain is incorrectly flagged, please file an issue.

And just like that, more than $200,000 gets stolen. Very bad news.

My thought that your token still safe, you can try to check your nano is your token still available in your wallet. As you can see the only wallet that got hacked caused by they are all already redirect to the new site that created by the scammer. And it can't sync with etherdelta database. That means if you are try to sign on etherdelta right now it was actually you are giving a key to the scammer. But as long as you are not using your private key and you are still safe.

That's a bad news, Login with private key is not secure for US. I had experience of losing money because login using PV key. I lost almost 1000 USD. That's the worst thing I have ever had. if DNS hacked hope the database not hacked. If database hacked? the hackers will get million US asset of ethereum balance and tokens.

I think that will be last attempt to incorporate exchange into the platform and somehow sharing keys. Hard to guess now how it will turn to ICO especially those who have issued security tokens.

Thanks for the heads up, can't wait to move to blocknet dex, hope they get that platform ready soon

Thanks for the information, mate! I will surely be stop doing trades using Etherdelta, and will be using I think hitBTC or bittrex. But I hope that it will be fixed soon.

Thank you very much for the infomation i think i have not been compromised i cant login to change pw now

If you used ledger nano then you are 100% safe.


To the rest, use this guide to get your tokens out: https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta (https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta)

This is bad news for bounty hunters and investors who uses etherdelta for most of their exchanges. Something should be done fast.

This is sad news but decentralized exchanges shouldn't be used, they don't work that well and there is little liquidity.

bad news, they did not do security audit?

That's a really bad news for us, i hope etherdelta team can handle this problem...
all we have to do just try to manually transfer tokens off of EtherDelta to rescue our tokens that already deposit to etherdelta
anyway, i already rescued all my tokens that i deposit to etherdelta... :)

If you can still access your wallet why don't you create another wallet and move your coins and token to the new wallet to be save.

I came here to confirm if the exchange was hacked and i was shocked after i open the alts sections truly yours is hacked,ive heard 300 eths were stolen from the users i hope ED will be fixed soon.

This is why www.orderbook.io (http://www.orderbook.io) is better. It is expensive as fuck but strictly superior to everything else in terms of security.

If it is only a DNS attack as declared on ED official tweeter account:
If so, every thing should be OK and your coins will be safe. The hacker can't get your private key unless you provided it to log into the phising website.
ED team didn't provide enough information and didn't even bother themselves to answer users question that's why I decided to stop trading there.

I like EtherDelta, and hope that it would be a good lesson for them. They should improve the security and I believe that they already planned it, as they are going to have a TGE. So most likely we'll see big improvements of the platform in the nearest future. And hope they fix the current issue ASAP.

I've been looking forward to IDEX launching as it has better technology than EtherDelta but it would be interesting to know if it gives you the ability to trade contract addresses. I'll send them an email and see what they say.

Thanks for the heads up,you saved me today for doing transactions,i hope they will fix the issues as soon as possible.

Their is actually a video explaining how people can transfer their fun from ED without opening the website it is not save now to use it. Do not open it until you have official statement from ED.

Ever since from the start I doubt to use this exchanger but I just still don't a choice but to sell my token in there due to no other exchange to trade my token. But this once this thing being resolve I wont use it anymore this piece of sheet of exchange.

People can still use EtherDelta in future but you shouldn't ever input your private key directly into EtherDelta.

You must use either MetaMask or the BLUE chrome extension (currently in beta but even safer than MetaMask and with more features).

This hack has only affected people who were logging into EtherDelta with their private keys. MetaMask and BLUE users are not affected.