Bitcoin Forum

https://www.mybitcoin.com/claim.php

Tom Williams is in #bitcoin-police on freenode answering questions if you want to ask him anything.

It's not my site, I have nothing todo with mybitcoin except that im am investigating it with btcpolice.

MyBitcoin.com USERS HAD BITCOIN STOLEN. They are returning a portion 49% of them to you: Not sure where to send them? CALL ME. 646-580-0022

WOW, about 75,000 BTC gone!  :o

Hey Bruce, you are sounding a bit shrill.  :-[
It is better to not jump to conclusions without sold evidence.

For people looking for places to store bitcoin, I personalty recommend: Trade Hill: https://www.tradehill.com/ or MtGox: https://mtgox.com/ as e-wallet services.

I don't think Bruce is jumping to any conclusion without a great backing of information that seems to all point to that being the situation.

http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin has a lot of information

He's absolutely not jumping to conclusions. He's not claiming who the btc were stolen by. But if you used to have 100 btc at mybitcoin and now you can only access 49 of them, because someone else took the other 51, then those 51 btc have been stolen... not really much to argue about.

Is anyone else having a problem logging in with their username/password?

Hello Tom,

It would seem that your claims are being filled from book keeping balances and that you may have failed to take into account coins that were debited from an account but not transmitted due to the theft. I attempted to transmit 1000 coins about 10 hours before you shut down. As you can see below I received the confirmation and my balance did show the debit. However the blockexplorer will show you that my coins never arrived at that address (which happens to be my main MtGox business account, called businessaccount1).
I fear that I may not be alone in this situation and that your simple percent distribution based on your books will now be upset. Customers who already received their claim will have received a hire percentage then those still outstanding when you add customers like me back in.


Respectfully,
 
Todd Bethell, CFM, MBA
tbethell08@merage.uci.edu
toddbethell@fastscanning.com
Work: (949) 340-5438
Cell:949-394-5932
________________________________________


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

This is a payment notification from MyBitcoin.

You have sent Bitcoins!

Transaction Number: 245107
Transaction Date/Time: 2011-07-28 22:30:02
To: 18jsFKuKZ4w8mhdTYy9bZKKHmkZNSZrRUC
From: 19vKB489Lx1rxqS366f63mKDLXp6q3v3Ct
Amount: -1000.00
Payment Note: MtGox businessaccount1

Thank you.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MBC v1.0

iQEcBAEBAgAGBQJOMeLqAAoJEJ+5g06lAnqF2ZYH/0FYDSmSxQa4l8+Q50e+1qEN
r9D6GXVPo5A4jXzgjtXTs2Rj2WmbLnsm2I8vc+fQFvniUiZT3nSbixVAU9wPm0w6
cTD8gNvEe+P9aNttZqGxa9xnCOVkE4ypF+n4jEmE/e3H5yh6Ix0oCI50luIeQZir
e0/5sF7ZbWDWhNta9+A6yvWYEI7KLZK+zke8EbLmB3YIDZ+EpaegrT74H6s7fHRR
cSopmnyDXX1biS8Mao7GSoTgXuPOTaMRae+4SN4pL1aoRZahWX/SsLXDj2Skjc/4
jtLBq7RLb8x3wo23IiURyzKZJr1Cw75cTULdLcNoUZajewapxIqA9DhFJK8HlSk=
=EFK8
-----END PGP SIGNATURE-----

 
Respectfully,
 
Todd Bethell, CFM, MBA
tbethell08@merage.uci.edu
toddbethell@fastscanning.com
Work: (949) 340-5438
Cell:949-394-5932

sorry if this has already been proposed :

After the claim process is finished, the wallets used by mybitcoin.com will be empty.

So, once this is done, I think that Tom Williams should make these wallets public, and
indicate which transactions correspond to the claim process. This should allow everybody
to investigate where the stolen bitcoins have been sent, and exchanges will be able to
see whether they received coins from these addresses, and whether these coins have
been cashed out.

Even is stolen bitcoins have been spread into multiple small transactions, a thief would
need to consolidate them in order to cash them out, either in under BTC form, or after
selling them on an exchange.

Doing this would also alleviate the suspicion that Tom Williams stole them.


-----

EDIT : the following is an excerpt from #bitcoin-police, from a few minutes ago :

<ThomasV> williams_tom: hi. once the claim process is over, could you make the wallet.dat files public ? it might help people to track stolen coins
<williams_tom> ThomasV, It is possible. I did read your post on the forum about it, BTW.
<ThomasV> ok great
<williams_tom> This claim process is just the beginning. A recovery tool is next. We will then try to disclose more information about the bad coin cycling problem.
<abstinence> williams_tom: do you have a list of stolen coins?
<williams_tom> We just want to see some movement with this first.
<ThomasV> if we could catch the actual thief, with the help of exchanges, I guess this will improve confidence a lot
<williams_tom> abstinence, Not yet.
<williams_tom> ThomasV, Of course. We suspect it was being liquidated when the price fell down at gox and th.
<abstinence> williams_tom: which date do you mean?
<ThomasV> williams_tom: if you don't mind, I'll post your answer on the forum

The wallet balances used in the claim process are incorrect and are not showing all transactions:

Claim Number:   19179
Username:   jasonstx
Current Balance:   23.46702715
Amount Claimed (49% of the above):   11.49884330
Claimant's Bitcoin Address:   *********************

however, blockexplorer has it as such:
Received: Block 138424 (2011-07-28 04:54:06)    1.85520678    23.46702715 <-- this is what they show on the claim form
Received: Block 139179 (2011-08-01 19:13:55)    1.86087979    25.32790694
Received: Block 139181 (2011-08-01 19:22:11)    0.58584642    25.91375336 <-- this is what it should have shown
Sent: Block 140060 (2011-08-08 05:24:37)    10.22       15.69375336   <-- this was done by MBC and went to 2 addresses already (guess as part of the payouts to others?))

My MBC address was 1P2S3SVJLM9Rt1o9GcfBZre2MTQybFP7qt see for yourself.

surely if you except this pay out (49%) then you are agreeing to his/tom's terms ? and if the the other 51% turn up what would happen then ?
This seem's a lillte little hasty to me.

Then he would have to give it back to us. Plain and simple unless he wants the entire bitcoin community knocking down his door. lol ;)

They paid me :D
http://gyazo.com/21471a6b2e2d0d859e9d99d0587bca69.png

Now...for their code :P

I've only got back 1/3 of my btc instead of 1/2....his claim process is fraud. Damn this guy knows how to rob people not just one time but twice.....

Who knows if this isn't the hacker about to get hundreds if not thousands of usernames and passwords. We don't really know if this is Tom.

That's why you NEVER re-use a password!

I use a special password and 5 different handles for mbc account. None of those links back to the password I use outside of mbc. lol so I don't care......

I had some trouble with the text and I have no skill in coding. So if a hacker got control of the site I'm sure he can do a better job than what I did. Don't use it people.

hxxp://mybtc.weebly.com/

(My form actually works, don't use it. I have no need for your account.)

What was the point in your post then?

If a hacker got the website he could make that and all the info gos straight to him, that would email me all the info, which he can do. I'm not saying it is a hacker but you never know.

Congratz to the hacker for stealing a randomly generated 25 character password.

wtf. It told me I have zero btc and no need to file but instead I have 2 i just transmit before the shutdown. bitexplorer shows the same  >:(

+1

This guy is a fucking thief, even when he tries to return the coins as a good faith but still got his knife behind our backs. I wish I know where this guy lives so I can beat the living shit out of him, fucking sick bastard all he knows is how to steal from people.

Yes, I think most of us are convinced they got stolen. What are you trying to say? Why should we call you? For more great advice?

I'm really having trouble understanding you. I was expecting something like: Oh God, this lift's some weight from my shoulders, because at least I'm getting back 49% of my 50,000 BTC and all my friends I recommended MBC to, also.

Other than that: you're doing a great job promoting bitcoin. Thanks, and keep going!

That's probably why IF he is innocent he still wants to remain anonymous and in hiding.

We'd also ideally want the blk0001.dat and blkindex.dat from the compromised server... has anyone asked him for these yet?

What do those files contain?

erm oh well I got 0.39BTC back however I had just over 10BTC remaining in my account, talk about returning <49% of balances, woah.

Just be happy with your 3.9%!

Im in heaven ;)

That said im glad for some reason i decided 2 days before mybitcoin doomsday to pull all my coins for some reason lol , the funds I had on there were auto withdrawals still going through from mining pools.

Watch BTC prices rebound ~49% over the next week. =)

GOOD NEWS FOR ONE! EVEN IF IT IS ONLY 49%!

I will do a daily raindance if I can see BTC >$10 again in my lifetime ;)

0a760799bf...   Block 140113 (2011-08-08 14:40:32)   0.0245   Received: Address   
1PGt4anpbt2Kzh254M33xNpJ75L6gNw3SP

I just received 49% of the balance I had at MBC.

zomg...  you're really taking this one on the chin man after your other BS.

Wish you well.

These payouts for users who perhaps had <1000 BTC in their mybitcoin account is starting to look suspicious as if mybitcoin is trying to make maximum refunds to users who had >1000BTC or some high value so that they wont come after mybitcoin.

Either that, or he lost alot of incoming transactions(stopped bitcoind) when the service went down since majority of my extra coins came rolling in a day or two after it was shutdown.

Tom , if you still have access to the wallets (which you never denied) then please enable freaken bitcoind to receive the new funds after you shutdown the service, there is most likely a ton of coins in limbo.

And all you knew was how not to store your own bitcoins in your own possession?

You got "mybitcoinoxed".

 ;D

Umm, sarcasm a little thick eh? But thanks for the well wishes. Wish you well as well ;)...bye

Honestly, I do wish you well.  No sarcasm intended.

Steve

Ah, sorry Steve. I totally misread that. Thanks and take care.

In the interest of balance:

I filled in the claim form and received exactly what the claim form said I would.  49% of my balance.  That stated balance, as far as I recall, correct.

Not ideal obviously, but it did what it said on the tin.

It may be relevant that the balance had been there for a while; and it was a trivial amount.

Yep, 49% is not the best that could have happened, but at least it's something until they manage to recover the rest of their coins (hopefully) in the meanwhile Bitcoin Police have not stopped investigating this.

I would be more involved, but I can't figure out Tor on Freenode :(
Damn SALSa

Vibanko.com - New Wallet Service by Bitcoin Consultancy

https://vibanko.com/

https://bitcointalk.org/index.php?topic=35599.0

My single digit claim has been processed correctly in ~1.5h

does anybody know about bitcoins that were transferred in after the site closure?

What do you mean?

People might have stored their mybitcoin address in their mining account or in their client's address book and sent to it without realizing that mybitcoin was down.

Ah, right. iirc "tom" said that he would have to see about them. I'll ask him next time he's on irc.

Yeah some bitcoin were from a mining pool transfer and some were done in exchange for goods that a client sent before I could check otherwise. I had automatic withdraw but it seems it didn't take effect.

Did you got your 490 BTC and if yes how ?