|
Title: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on January 28, 2014, 08:10:06 PM I found that in the thread https://bitcointalk.org/index.php?topic=348468 there were posted a lot of addresses though its not really the topic there. Because of that i will collect all deposit addresses in this thread and collect it in this first post once posted by the users. Some users sent me a pm with the address too because they want to stay anonymous. Maybe we find out what happened with the coins that "are gone".
Everyone feel free to investigate in the hope something interesting is found! User JoseRolles created another tool to collect the addresses. They can be posted there anonymously too: So I put together a quick site where we can collect all the addresses in one place... http://www.jspmedia.net/weexadd/ (http://www.jspmedia.net/weexadd/) You can add your address anonymously and quickly. Anyone can go there and view the addresses collected so far. It updates autonomously using Firebase. List of weexchange user deposit addresses: 1P7tdTzWhpYoV87L4v4gZwhd6mAnT7fiD4 1JvJBF59uxkfMqqBxv5RoNCGS92wAnGewL 1LjXuWRfgY7G3akEspgZxVE5toAKcGMaPj 15GhbQJJJCgrWNz4XjPyBrDbHMgHxPcKi3 19UQiHUjy26ZDZfQr6S8fTNJzirbGb8nk4 1EPuWB8BbeLG4m8cSbqug3oRqb2GVXT19X 16UYZoVwVC4jHszXGGVsRx4Nsni5khx3Mz 1JvPAarhmVyfoWYDYuZ6NCp7YL3GPiB11n 18rTzHGa9iuGqkv6tcXTFVASZppiMWfsWz 1Kv2KNrDD77ZEjiXkYZ6EqCGkHmXWH7yG 1LN99wLNnNdqEh2ADyEvWVYViTtcrfHBvC 15EbbDJ2Po1RxXCx9oa2n1h1fXnKx5mM1y Additional info to certain deposit addresses: * 1P7tdTzWhpYoV87L4v4gZwhd6mAnT7fiD4 The address is empty now. Even though i see letsdice.com appear there... i never used that website. I believe what happened is that this website is sending one satoshi to used addresses because blockchain.info is posting the name of the website then which means advertising for the domain name. So its pretty sure neither iam nor ukyo used the domain in connection with my deposit address. Ok, when i see what happened with my last deposited bitcoins, around 158BTC, then they were sent to 1KMmWYbWHQjBZY14hXENGXeb5aMyoQynvg and a small part to 1BDtP3xdCQ1Zj1wJDxLPu8mf1uvuspQ3BU I believe what happened was that ukyo paid out a withdraw request from a weexchange user. The small transaction was a withdraw to a user wallet and the big transactions target is a change address in the weexchange wallet. Weexchange change addresses then are for example: The big BTC-part was sent then from 1KMmWYbWHQjBZY14hXENGXeb5aMyoQynvg is sent to 1BYrnppD62tj2cn1HD32iD6Bv2t9sTESYH, then to 12Nz2KmzVfnsrCK7HVYzw4LLYp4iQtqU4P, then to 115vYRHjw9uCnXoecs6VzigubMUhmMfcfE, then to 17pgZ4mCRsTwW6D5kHEg92eQM2V9JAUHBS, then to 1GtPbfmp75HvJ2N6r4uRtBozZa3bjJofvw, to 12VTYbiXoRiVKXNyNvrqtAgkAFZewFPAw1, to 1EZmoUo4YorRnNnnyDewHsdBREr6YnMnvm, to 17hPi868CsyvjWHtXjY7NnNbS6QTaDz4FN, to 1Q5JYuxQK5ZmjyAP1CJEJUPU8wUHXByvK3, to 1JxME3VtA9Q4quZHqQFwA6qKdSP1rtVviQ, to 1D2MKZtPs5xZC9cY4fch8msP838KnVgXK9 and and and... Till there only 6 hours were gone. Every transactions was done like sending the big part to an address and a smaller part. A weexchange change address and a weexchange users address. The last transaction where i can say that its most probably my coin that was sent to a change address of weexchange is here: https://blockchain.info/de/address/1PfERfzUJEr4kxzBxtx49GcF4dM2vfGc52 from octobre the 27th. After that i cant say if it went to a weex user or a weex change address. So the coins from my deposit were paid out to weexchange users most probably completely. At least it does not look like the coins were sent to a single address that might be controlled by government. At least not till octobre 27th, 2013. I hope we can find some interesting things from other users addresses. Maybe someone has later deposits where ukyo didnt have the time to use the funds to pay withdraws from weexchange users with. So that it is in the timeframe of "manual withdraws" and the "incident". Lets see if we find something! ;) We should investigate this. List of weexchange portal addresses the 6.1% were paid out from: 1L5eKEybeeFq9nZYvvokoKrCVGmudY5iwG General Info: Well - the only interesting thing I found with my 3.175% payout was that tracing it back it came from pool mining. The 386 BTC payouts were done over and over again to a new address so it takes a while to follow it back but it was easy to see and follow. I take it you weren't able to discern which pool it was? Speculation here; maybe it came from Graeme? But it wasn't Ozcoin. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: MilkyLep on January 29, 2014, 06:01:06 AM Although not dealing with the deposit addys, I think the following two posts by kano are fairly relevant to the outcome of the situation considering they deal with coinds coming back out from WeEx.
Well - the only interesting thing I found with my 3.175% payout was that tracing it back it came from pool mining. The 386 BTC payouts were done over and over again to a new address so it takes a while to follow it back but it was easy to see and follow. I take it you weren't able to discern which pool it was? Speculation here; maybe it came from Graeme? But it wasn't Ozcoin. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: equipoise on January 29, 2014, 12:34:59 PM Although not dealing with the deposit addys, I think the following two posts by kano are fairly relevant to the outcome of the situation considering they deal with coinds coming back out from WeEx. Tracing back each and every coin in existence came from mining.Well - the only interesting thing I found with my 3.175% payout was that tracing it back it came from pool mining. The 386 BTC payouts were done over and over again to a new address so it takes a while to follow it back but it was easy to see and follow. I take it you weren't able to discern which pool it was? Speculation here; maybe it came from Graeme? But it wasn't Ozcoin. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on January 29, 2014, 01:07:04 PM As far as i see my deposit address it looks like the coins i invested were used to pay out the withdraw of other users plus the rest sent to a change address. That way each withdraw a weexchange user got came from a deposit address of another weexchange user most probably. And the origins of these coins would be up to the weexchange user depositing.
So i dont know how important the info is since kano didnt post addresses. Just in case it becomes important i added it. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: JoseRolles on January 29, 2014, 08:12:45 PM So I put together a quick site where we can collect all the addresses in one place...
http://www.jspmedia.net/weexadd/ (http://www.jspmedia.net/weexadd/) You can add your address anonymously and quickly. Anyone can go there and view the addresses collected so far. It updates autonomously using Firebase. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Evolyn on January 29, 2014, 08:36:49 PM You can add my weex deposit address: 1Kv2KNrDD77ZEjiXkYZ6EqCGkHmXWH7yG
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: JoseRolles on January 30, 2014, 02:57:29 AM So I put together a quick site where we can collect all the addresses in one place... http://www.jspmedia.net/weexadd/ (http://www.jspmedia.net/weexadd/) You can add your address anonymously and quickly. Anyone can go there and view the addresses collected so far. It updates autonomously using Firebase. I also added the JSON Endpoints for those who want to GET the data lists to process them with their own script: https://weexadd.firebaseio.com/add_deposit.json (https://weexadd.firebaseio.com/add_deposit.json) https://weexadd.firebaseio.com/add_withdrawal_original.json (https://weexadd.firebaseio.com/add_withdrawal_original.json) https://weexadd.firebaseio.com/add_withdrawal_portal.json (https://weexadd.firebaseio.com/add_withdrawal_portal.json) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: mcleung on February 02, 2014, 02:57:02 AM Is it just me or is the weexchange clam page showing 0 balance now.
I don't mind being patient while Ukyo sorts out his things so I can recover my bitcoins, but it would be nice to know that he still has the logs of how much is owned to everyone. Today I logged into the weexchange clam website, and it says Total 0, Available 0. Also, the main weexchange site seems to not work anymore, as I can not login. (It just leaves you on the main page, no error message or anything.) Is it just me or is it this way for everyone? Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: WeexUser on February 02, 2014, 03:11:12 AM Is it just me or is the weexchange clam page showing 0 balance now. It has happened 2-3 times before and will go back to normal when Ukyo has fixed it. It is allegedly a logging issueI don't mind being patient while Ukyo sorts out his things so I can recover my bitcoins, but it would be nice to know that he still has the logs of how much is owned to everyone. Today I logged into the weexchange clam website, and it says Total 0, Available 0. Also, the main weexchange site seems to not work anymore, as I can not login. (It just leaves you on the main page, no error message or anything.) Is it just me or is it this way for everyone? Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: bittymitty on February 02, 2014, 09:13:35 PM Can anyone help to explain the following.
I deposited .3 BTC to the we-exchange address on the 18th Nov 2013. This was well after all the issues started and during the issue when no-one could withdraw. https://bitcointalk.org/index.php?topic=337523.msg3633503#msg3633503 https://blockchain.info/address/1LN99wLNnNdqEh2ADyEvWVYViTtcrfHBvC The BTC was sent from here on the 17 DEC 2013 well before redemptions started to 17sQK5ZBmUoZuQpvCrmNZ8UgDNFbzUv2d2 after a quick google search of 17sQK5ZBmUoZuQpvCrmNZ8UgDNFbzUv2d2 I found the below post from a group buy with id40 showing the same address with a known billing address https://bitcointalk.org/index.php?topic=187660.msg2377673#msg2377673 Why was my BTC sent to this address? Who's address is this? Can SebastianJu give us more info about this? Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 02, 2014, 10:32:35 PM Can anyone help to explain the following. I deposited .3 BTC to the we-exchange address on the 18th Nov 2013. This was well after all the issues started and during the issue when no-one could withdraw. https://bitcointalk.org/index.php?topic=337523.msg3633503#msg3633503 https://blockchain.info/address/1LN99wLNnNdqEh2ADyEvWVYViTtcrfHBvC The BTC was sent from here on the 17 DEC 2013 well before redemptions started to 17sQK5ZBmUoZuQpvCrmNZ8UgDNFbzUv2d2 after a quick google search of 17sQK5ZBmUoZuQpvCrmNZ8UgDNFbzUv2d2 I found the below post from a group buy with id40 showing the same address with a known billing address https://bitcointalk.org/index.php?topic=187660.msg2377673#msg2377673 Why was my BTC sent to this address? Who's address is this? Can SebastianJu give us more info about this? Yes, the address belongs to one of the users that took part in my groupbuy and he bought avalon chips with it in may. So i think it was a deposit to a user address that ukyo made manually. I will send the user a pm and ask him if he can confirm this. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: bittymitty on February 02, 2014, 10:43:42 PM Does this prove that Ukyo acted fraudulently? He obviously had access to the wallet to make withdrawals and he used my funds to pay out another user?
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 02, 2014, 11:02:30 PM Does this prove that Ukyo acted fraudulently? He obviously had access to the wallet to make withdrawals and he used my funds to pay out another user? Not really because ukyo claimed some time that he can do withdraws manually. This stopped then though. So this withdraw might be from a time when the manual withdraws still were possible. Of course you are in a special situation. The coins you deposited belonged to you and ukyo only had them in escrow. Its a shares wallet of course but normally those coins would be attached to you and werent owned be weexchange. So at a possible court case you might claim that he gave your coins to others to solve weexchange debts. Strictly spoken coins that were deposited and users bought shares with it wouldnt belong to them anymore. But coins that werent used to buy anything would still belong to someone. Of course that only would help you as long as there is a chance to get the coins back. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: bittymitty on February 02, 2014, 11:32:51 PM Ok it looks like the 17th Dec was the day the claim portal opened
https://bitcointalk.org/index.php?topic=348468.msg4006582#msg4006582 I'm so happy my BTC was used to reimburse users..... Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 03, 2014, 05:21:38 PM The user got back to me and he confirmed that the payment were his 6% from the claim portal...
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: falko0815 on February 06, 2014, 08:44:25 AM Does this prove that Ukyo acted fraudulently? He obviously had access to the wallet to make withdrawals and he used my funds to pay out another user? Not really because ukyo claimed some time that he can do withdraws manually. This stopped then though. So this withdraw might be from a time when the manual withdraws still were possible. Of course you are in a special situation. The coins you deposited belonged to you and ukyo only had them in escrow. Its a shares wallet of course but normally those coins would be attached to you and werent owned be weexchange. So at a possible court case you might claim that he gave your coins to others to solve weexchange debts. Strictly spoken coins that were deposited and users bought shares with it wouldnt belong to them anymore. But coins that werent used to buy anything would still belong to someone. Of course that only would help you as long as there is a chance to get the coins back. I think ukyo has never done one single withdraw manually. Ukyo has lied as he said he does withdraws manually. I tell You what Uyko did: He lost 94% of our Coins. Afterwards he transfered the rest of the coins to the claim portal to withdraw weex users 6% of their coins. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 06, 2014, 12:08:50 PM 1P7tdTzWhpYoV87L4v4gZwhd6mAnT7fiD4 Thanks. That was my entry point. Technologies like CoinJoin aren't yet implemented in standard Bitcoin clients. Therefore, one can safely assume that all transactions signed by WeExchange's addresses are signed exclusively by WeExchange's addresses. Given this assumption, one can get a list of most of WeExchange's addresses and transactions from only one single address. The list isn't complete though, because transactions also have a change address which belongs to the sending wallet. The WeExchange wallet places this change address at an unusual output index, so I didn't include it in the list to avoid fan-out into other wallets. Using the above quoted address as entry point, one will get these addresses: http://pastebin.com/LZJPeiRM ...and these transactions: http://pastebin.com/As66ecst http://pastebin.com/XgsTaiaL Now, let's sum up the total amount on all of these addresses over time: http://postimg.org/image/wvq6x2rsl/ ...zooming into early October 2013: http://postimg.org/image/n693ky4m5/ Firstly, I was surprised seeing the first transactions as early as October 2011 - I didn't know that WeExchange existed at that time. ??? Secondly, I expected the biggest drop to be in mid-November 2013. However, it was early October 2013. I filtered the list of transactions to find the big one from 3rd of October: 8a77d88fcc9ef418ec97cb2c332efd1378f21aa90188d3000a8c2e4e89f467cb ...it looks like this address received more than one big withdrawal from WeExchange: 19ENdxtYNwdsFbaEF2web7FywgQHdsNCGt Other addresses receiving big withdrawals from WeExchange include: 115KrBsBGXvW3saUtmY6seXpXysvgd44BS 1D8zFb9jJvmdxwNmuS1TBGh1sfcqUMyRzf That's all that I could find out for now. Further investigation would concentrate on who owns these addresses, and where did the coins go next... Donations for my efforts go to 1PaEvsKNTDxhz4kg8rL1samkbgF65P9NMF. Thanks! Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: WeexUser on February 06, 2014, 03:34:11 PM I think ukyo has never done one single withdraw manually. Ukyo has lied as he said he does withdraws manually. In the period where Ukyo claimed to do manual withdrawals, some people reported that their stuck withdrawals went through.Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 06, 2014, 07:20:20 PM I think ukyo has never done one single withdraw manually. Ukyo has lied as he said he does withdraws manually. I tell You what Uyko did: He lost 94% of our Coins. Afterwards he transfered the rest of the coins to the claim portal to withdraw weex users 6% of their coins. I remember users that were paid at the time he claimed he does manual withdraws. Though he never claimed that he stopped it. That became only clear because no one received coins anymore. Im relatively sure that nearly all coins were gone at some point and the remaining 300BTC he paid out might be deposits from users. Though of course you cant be sure about that. Thanks for the investigation klabaki... i donated a bit to your address. I dont have a big clue about how these investigations are done so thanks for it. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: pascal257 on February 07, 2014, 07:43:47 PM There are enormous chunks of bitcoin moving around if you follow the transactions from that address.
Maybe we can try and find a link between these addresses and those used by the claim portal. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 07, 2014, 09:29:09 PM Since its interesting for this investigation... here a try to collect the dates involving everything with weexchange/bitfunder. Might give a hint to things that happened:
WeexChange Timeline: * bitfunder closed for us-residents and verification needed 7/8.10.2013 * weexchange withdraw problems started. Bitcoin-d crashing. Result: Withdraws remain "processing" / "Could not connect to 2nd stage server" Error message. Withdraws occassionally worked but the error appeared more often. Started at 17.10.2013 * inputs.io got "hacked" 24.10.2013 * bitfunder closing 4.11.2013 * ukyo claims he still does manual withdraws from weexchange funds though its probably the last time 12.11.2013 * legal issue (Problem 2) started at the time manual withdraws stopped? 12.11.2013 * ukyo removed ability to send funds to bitfunder 16.11.2013 * weexchange claim portal opened on 17.12.2013 * neobee stepped in Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 09, 2014, 11:15:12 AM Given this assumption, one can get a list of most of WeExchange's addresses and transactions from only one single address. The list isn't complete though, because transactions also have a change address which belongs to the sending wallet. The WeExchange wallet places this change address at an unusual output index, so I didn't include it in the list to avoid fan-out into other wallets. I adapted to that issue about unusual output indexes. So, finally, I could compile a list of WeExchange's addresses and transactions which is somewhat complete: Addresses, Part 1: http://pastebin.com/yGEtnAAY Addresses, Part 2: http://pastebin.com/JVSL6zjN Transactions, 2011-10-17 to 2013-03-31: http://pastebin.com/QkFVY7fH Transactions, 2013-03-31 to 2013-05-19: http://pastebin.com/1SE7YVTt Transactions, 2013-05-19 to 2013-06-15: http://pastebin.com/T9TLKVtw Transactions, 2013-06-15 to 2013-07-11: http://pastebin.com/rV3q46Lg Transactions, 2013-07-11 to 2013-07-29: http://pastebin.com/eqWxDbCu Transactions, 2013-07-29 to 2013-08-18: http://pastebin.com/sAnebk2a Transactions, 2013-08-18 to 2013-09-12: http://pastebin.com/r2KkybqV Transactions, 2013-09-12 to 2013-10-09: http://pastebin.com/SnGfhxXn Transactions, 2013-10-09 to 2014-01-31: http://pastebin.com/P0tG2gJZ The transactions' list comes with four columns:
...it looks like this address received more than one big withdrawal from WeExchange: 19ENdxtYNwdsFbaEF2web7FywgQHdsNCGt That's all that I could find out for now. Further investigation would concentrate on who owns these addresses, and where did the coins go next... I kept my promise and analysed this wallet in the same way I analysed the WeExchange wallet. Here's the results: Addresses: http://pastebin.com/57M05y8q Transactions: http://pastebin.com/Vu7b1ib7 Although this wallet has way less addresses than the WeExchange wallet, it handled more bitcoins, for example: Code: 2013-08-10_01:24:36 7e45d4ad00670fcfb51beffbf6ae54413dbf026988fd52a351f4ccce97478e8f 0.25421784 4380.57643731 One of this transactions comes from WeExchange; quoting from the WeExchange wallet: Code: 2013-08-11_10:10:39 4165bfe5ba036afdb29aa87bc4113da411d840a93b7a3ca6409d46f9695edfcd 5.00000000 11094.97351450 This means that on 11th of August 2013, more than half of WeExchange's funds were transferred into some other wallet, where they became intermixed with funds that probably did not origin from WeExchange. The transactions' list has been intentionally presented in a way that allows everyone with a web browser to examine it. So, everyone feel free to skim it for suspicious activity and post your findings. I just did the start. Donations for my continued efforts go to 1PaEvsKNTDxhz4kg8rL1samkbgF65P9NMF. Thanks! Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 09, 2014, 01:03:14 PM What do you think is that other address? Is it connected to a business, IPO or something?
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 11, 2014, 08:58:29 AM The 19ENd address (where half Weex coins went in august) exchanged a lot of coins with 17hCi8apMUkzzLLJgUwfXxRJuykuo5Lcur
7,000 here, for example: https://blockchain.info/tx/b2889b6e0dea50082e3dd1783dca8fdcbd83957755c612332dc55c8da7c7443b 13,000 here: https://blockchain.info/tx/88704e47ea9efb730fbfd456f43f856fdd0dc063f0a132bd27fc99c49f4fec32 Googling for this 17hCi8 address... https://bitcointalk.org/index.php?topic=262052.msg3879697#msg3879697 Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: ffwong on February 11, 2014, 10:26:39 AM The 19ENd address (where half Weex coins went in august) exchanged a lot of coins with 17hCi8apMUkzzLLJgUwfXxRJuykuo5Lcur 7,000 here, for example: https://blockchain.info/tx/b2889b6e0dea50082e3dd1783dca8fdcbd83957755c612332dc55c8da7c7443b 13,000 here: https://blockchain.info/tx/88704e47ea9efb730fbfd456f43f856fdd0dc063f0a132bd27fc99c49f4fec32 Googling for this 17hCi8 address... https://bitcointalk.org/index.php?topic=262052.msg3879697#msg3879697 Also here: http://www.reddit.com/r/Bitcoin/comments/1uj7ow/asic_manufacturer_hashfast_faces_legal_action/ Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 11, 2014, 11:28:42 AM Quote from: CoinDesk, concerning HashFast What’s more, the company has reportedly antagonized customers further by failing to protect their email addresses in a mailout sent on 27th December. DeCastro admitted: “Customer emails addresses were accidentally put in the ‘To’ field rather than the ‘Bcc’ field.” “Only customers received these emails, no other customer-specific information was included. We took immediate and decisive corrective action to put measures in place to ensure that this will not happen again.” This looks interesting; does anyone have a record of these email addresses? I'd like to check whether this list includes Ukyo... Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 11, 2014, 01:28:25 PM Quote from: CoinDesk, concerning HashFast What’s more, the company has reportedly antagonized customers further by failing to protect their email addresses in a mailout sent on 27th December. DeCastro admitted: “Customer emails addresses were accidentally put in the ‘To’ field rather than the ‘Bcc’ field.” “Only customers received these emails, no other customer-specific information was included. We took immediate and decisive corrective action to put measures in place to ensure that this will not happen again.” This looks interesting; does anyone have a record of these email addresses? I'd like to check whether this list includes Ukyo... You might wanna shoot a PM to https://bitcointalk.org/index.php?action=profile;u=148670 As he suggested someone could compile the 5 lists that leaked: https://bitcointalk.org/index.php?topic=262052.msg4177783#msg4177783 Even more peculiar, is that the 5863 sent from Weex to this 19ENd address was sent back explicitely to (supposedly) Hashfast. If you look at the 13,000 tx, they output exactly 5863 as one of the inputs, and all other inputs are nice round numbers coming from the same address. Why not just output the 13,000 one-shot? This tx had to be handcrafted, right? Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: DobZombie on February 11, 2014, 02:48:49 PM It it possible that the 13,000 was from a mining IPO?
Then used to pay for hashfast equipment? Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: perezoso on February 11, 2014, 04:20:52 PM What are the e-mail addresses you are looking for? I have a partial list of the leaked HF addresses and can cross-check for my portion. In the thread cited above, you'll also see others who received other parts of the HF customer list. Mine is of addresses beginning with GAR and ending in JER.
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 11, 2014, 04:32:22 PM Even more peculiar, is that the 5863 sent from Weex to this 19ENd address was sent back explicitely to (supposedly) Hashfast. If you look at the 13,000 tx, they output exactly 5863 as one of the inputs, and all other inputs are nice round numbers coming from the same address. Why not just output the 13,000 one-shot? This tx had to be handcrafted, right? Well, it doesn't look like a standard bitcoind installation. It could be handcrafted, or some other non-standard wallet. What we don't know yet, is whether this is already part of BitPay's infrastructure, or a private wallet (e.g. a group buy). I'm currently trying to gather information about these and other intermediate wallets. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 11, 2014, 04:40:51 PM What are the e-mail addresses you are looking for? I have a partial list of the leaked HF addresses and can cross-check for my portion. In the thread cited above, you'll also see others who received other parts of the HF customer list. Mine is of addresses beginning with GAR and ending in JER. Hmm... someone compiled a folder with lots of dox of Ukyo. I don't have it bookmarked, though. Maybe we're lucky and the address starts with "jon" or "jmontroll", that would be easy to find. But GAR to JER isn't the hot one probably. Thanks for your quick response! :) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 11, 2014, 07:13:15 PM What are the e-mail addresses you are looking for? I have a partial list of the leaked HF addresses and can cross-check for my portion. In the thread cited above, you'll also see others who received other parts of the HF customer list. Mine is of addresses beginning with GAR and ending in JER. Cheers for the reply perezoso Maybe try your luck with dhenson, then? I now have the email addresses of customers from csi...@gmail.com through jer...@com-products.nl If you have a different list (outside of this range), please forward it to me via PM. I will construct a properly addressed email and warn all of the customers about their leaked email and to be on the lookout for possible phishing attempts. Digging more, I found out that at least one of the outputs ending up in 19ENd address belongs to https://bitcointalk.org/index.php?action=profile;u=4532 https://bitcointalk.org/index.php?topic=226179.msg2380742#msg2380742 And apparently, Transisto was also into hashfast at that time... Disclaimer, I'm a share holder. IMO, Having a few large investors is always a good thing in the sense that those are willing to go to greater length, spend lot more and can sometime provide the missing expertise to make sure things get done. Hashfast initial prices are public, do your own maths. With the price drop of bitcoin IceDrill's share equivalent is now much better, with hosting included ! Hashrate/$ is about 1/4 that of BFL @ ~1/10 the power consumption. (These devices will be mining cost effectively for much longer) On top of that IceDrill/HashFast will be saving a lot of money by not having to deal with shipping and customer service. I've researched the track record of ever actor involved and I have a hard time seeing how this could fail. So I doubt the 19ENd address is a bitpay one, but maybe we can ask Transisto if he'd agree to share details about this transaction? https://blockchain.info/tx/2094d50b32791a778555835c62552e9e2f82fa4c75e159438c1c73eedc99d74a EDIT: I sent a PM to Transisto. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 11, 2014, 09:01:28 PM Those are really high amounts. Amounts one would normally think an IPO collected them. It might well be that an IPO at bitfunder was successful and someone took the bitcoins out to order the hardware. Though the question is... when ukyo now really would need to have 6000BTC in the weexchange wallet... how can this be. Are these big withdraws maybe legit and the loss of bitcoins was happening through many small transactions?
A theory... that was found as wrong now... was that ukyo misconfigured the wallet. So that change bitcoins didnt went to a new change address but instead went to user deposit addresses from other users. That way it was a deposit to weexchange and the user had more money. In fact the wallet then had lost bitcoins. And a user had more bitcoins he could withdraw that he didnt deposit. Unfortunately it turned out the theory wasnt correct but its a unique idea so i wanted to post it so maybe someone gets an idea for new investigations. Maybe faulty stats so that ukyo didnt see that coins in fact are vanishing. Only as a sidenote... Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: KS on February 11, 2014, 10:40:37 PM A theory... that was found as wrong now... was that ukyo misconfigured the wallet. So that change bitcoins didnt went to a new change address but instead went to user deposit addresses from other users. That way it was a deposit to weexchange and the user had more money. In fact the wallet then had lost bitcoins. And a user had more bitcoins he could withdraw that he didnt deposit. That sounds like a complicated way to fail. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: kano on February 11, 2014, 11:01:03 PM ... Heh - I didn't think of this one at all.So at a possible court case you might claim that he gave your coins to others to solve weexchange debts. Strictly spoken coins that were deposited and users bought shares with it wouldnt belong to them anymore. But coins that werent used to buy anything would still belong to someone. Of course that only would help you as long as there is a chance to get the coins back. My BTC in Weex was deposited BTC. (I never put $ into Weex, only BTC) What happened for me was someone said they'd buy BTC from me. So I decided to do that (with my wallet) and then withdraw the remaining BTC back out of Weex that I had deposited. Hmm ... very interesting. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: kano on February 11, 2014, 11:36:06 PM As far as i see my deposit address it looks like the coins i invested were used to pay out the withdraw of other users plus the rest sent to a change address. That way each withdraw a weexchange user got came from a deposit address of another weexchange user most probably. And the origins of these coins would be up to the weexchange user depositing. OK when I looked for it a 2nd time I didn't find it ... coz I'd used a cold address :PSo i dont know how important the info is since kano didnt post addresses. Just in case it becomes important i added it. So I looked again today and tracked it down. Look at this transaction. It's part of the 6.175% payout chain. https://blockchain.info/address/19N74rC3sFyanYGfgezkv4mWG9juYvSxYj (No it's not my payout) But anyway, it's quite simple to follow that one, since it is simply a line of payments until the source ran low, one payment per txn, and the change going to the next payment - following it back by clicking on the address that is the input address on the left that supplied the coins. It slowly counts back up, one transaction at a time. ... until you hit this address: https://blockchain.info/address/151uDvok7xx26Q8xoAoJVBPoT6VKmKsHS6 Now there is a direct pool source filling up 151uDvok... on that page: https://blockchain.info/address/17Rog6H3NDd2sttHiHozcMGf1bDBnjK8jy is a pool payout address The pool is: Eligius If you look further down 151uDvok... (in the past) going back to July https://blockchain.info/address/1BKjTzLiq1EoS9Q55rebw1wzWS7sSiSapk Is Eleuthria Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 12, 2014, 09:09:11 PM Maybe we should collect another list of addresses from the weexchange withdraw portal. All addresses were the coins came from that were paid out as 6.1%.
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 13, 2014, 04:36:11 AM Maybe we should collect another list of addresses from the weexchange withdraw portal. All addresses were the coins came from that were paid out as 6.1%. All of WeExchange's addresses and transactions should already be included in the lists that are linked in this post: https://bitcointalk.org/index.php?topic=437154.msg5033659#msg5033659 If you know about an address or a transactions that belongs to WeExchange, but doesn't appear in the lists, then you should report it immediately. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: kano on February 13, 2014, 07:28:23 AM Maybe we should collect another list of addresses from the weexchange withdraw portal. All addresses were the coins came from that were paid out as 6.1%. All of WeExchange's addresses and transactions should already be included in the lists that are linked in this post: https://bitcointalk.org/index.php?topic=437154.msg5033659#msg5033659 If you know about an address or a transactions that belongs to WeExchange, but doesn't appear in the lists, then you should report it immediately. Look at my post above, every address that is not a continuation of the chain I pointed out, is extremely likely to be a 6.175% payout address. ... and that's just one payout chain. Total was supposedly 386BTC ... that chain started with exactly 28BTC This one ... follow it back and forth: https://blockchain.info/address/19N74rC3sFyanYGfgezkv4mWG9juYvSxYj Edit: hmm but my transaction is in one of the lists :) (Just not my address) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 13, 2014, 08:39:26 AM All of WeExchange's addresses and transactions should already be included in the lists that are linked in this post: https://bitcointalk.org/index.php?topic=437154.msg5033659#msg5033659 https://blockchain.info/address/19N74rC3sFyanYGfgezkv4mWG9juYvSxYj Edit: hmm but my transaction is in one of the lists :) (Just not my address) Open the addresses' list, part 1, and look at line 4864. I guess you just missed it? ;) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: kano on February 13, 2014, 10:24:02 AM All of WeExchange's addresses and transactions should already be included in the lists that are linked in this post: https://bitcointalk.org/index.php?topic=437154.msg5033659#msg5033659 https://blockchain.info/address/19N74rC3sFyanYGfgezkv4mWG9juYvSxYj Edit: hmm but my transaction is in one of the lists :) (Just not my address) Open the addresses' list, part 1, and look at line 4864. I guess you just missed it? ;) Bad guess :) Not me. As I said, that's just part of that 28BTC chain. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 13, 2014, 11:16:18 AM The address i got my 6.1% from isnt in the list too. I got the coins from
Code: 1L5eKEybeeFq9nZYvvokoKrCVGmudY5iwG Its a pretty straight list of transactions so i guess all portal-addresses can be seen there. I followed the trail back manually through many transactions till that address: https://blockchain.info/de/address/19nz67bvcCMwZUNZJ7AxJtoDPb7fHJXkMP which seems to be an address where ukyo collected funds for the portal since he paid in exactly 225BTC and 5BTC. So there is probably another string of transactions when ukyo really paid out >300BTC in total. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: klabaki on February 13, 2014, 03:50:13 PM Damn yes, that was really missing...
I've updated my previous post to include it. So, everyone please have a look at the updated lists: Addresses, Part 1: http://pastebin.com/yGEtnAAY Addresses, Part 2: http://pastebin.com/JVSL6zjN Transactions, 2011-10-17 to 2013-03-31: http://pastebin.com/QkFVY7fH Transactions, 2013-03-31 to 2013-05-19: http://pastebin.com/1SE7YVTt Transactions, 2013-05-19 to 2013-06-15: http://pastebin.com/T9TLKVtw Transactions, 2013-06-15 to 2013-07-11: http://pastebin.com/rV3q46Lg Transactions, 2013-07-11 to 2013-07-29: http://pastebin.com/eqWxDbCu Transactions, 2013-07-29 to 2013-08-18: http://pastebin.com/sAnebk2a Transactions, 2013-08-18 to 2013-09-12: http://pastebin.com/r2KkybqV Transactions, 2013-09-12 to 2013-10-09: http://pastebin.com/SnGfhxXn Transactions, 2013-10-09 to 2014-01-31: http://pastebin.com/P0tG2gJZ Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: kano on February 13, 2014, 08:34:53 PM Nope still not in there.
I'm not sure how you generated the address list, but my txn is in the txn list, but my address isn't in either address list. I guess it's a bug somewhere :) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 13, 2014, 08:42:32 PM I googled every input from this TX with no luck.
https://blockchain.info/tx/1e3198fd649c8d67d197bb754a344790c5d4c22fbdd45753f7d2afbb66f0dc6e Transisto is still the only one to know who the 19ENd address belongs to... And he does not seem to be very active, unfortunately. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Transisto on February 17, 2014, 06:04:01 PM I googled every input from this TX with no luck. https://blockchain.info/tx/1e3198fd649c8d67d197bb754a344790c5d4c22fbdd45753f7d2afbb66f0dc6e Transisto is still the only one to know who the 19ENd address belongs to... And he does not seem to be very active, unfortunately. ... 19ENd is DeadTerra / IceDrill address. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 17, 2014, 07:29:52 PM ... 19ENd is DeadTerra / IceDrill address. Superb, thank you for confirming, Transisto. Next step, shoot a PM to DeaDTerra, I guess. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 21, 2014, 12:30:24 AM It is almost 100% sure now that 5000+ coins went from an address owned by Ukyo to an addresss owned by DeaDTerra (for IceDrill investment).
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: fuckukyo on February 21, 2014, 12:53:27 AM We need a confirmation from @DeaDTerra.
Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: glendall on February 21, 2014, 08:19:31 PM It is almost 100% sure now that 5000+ coins went from an address owned by Ukyo to an addresss owned by DeaDTerra (for IceDrill investment). I'm sorry but does it matter much? Anyone who has a brain can see that Ukyo stole/lost over a million dollars of users' deposits. He isn't even really bothering to keep up the façade anymore. Does tracking how he spent his stolen bitcoins matter? It has been months, he doesn't even post updates anymore, he's under no pressure to returns the stolen deposits, and no one is doing anything about it. You might as well just move on I guess because Ukyo stole a LOT of money, including mine and your own, and got away with it. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 21, 2014, 08:54:12 PM I googled every input from this TX with no luck. https://blockchain.info/tx/1e3198fd649c8d67d197bb754a344790c5d4c22fbdd45753f7d2afbb66f0dc6e Transisto is still the only one to know who the 19ENd address belongs to... And he does not seem to be very active, unfortunately. ... 19ENd is DeadTerra / IceDrill address. Can you show a website or something that proofs this? It is almost 100% sure now that 5000+ coins went from an address owned by Ukyo to an addresss owned by DeaDTerra (for IceDrill investment). 5000+? It would be unlikely that those were the funds of one private person only because it was practically the who weexchange wallet. But i dont see where you got the 5k from. Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: Kouye on February 22, 2014, 02:32:40 AM 5000+? It would be unlikely that those were the funds of one private person only because it was practically the who weexchange wallet. But i dont see where you got the 5k from. I I'm sorry (and sorry I spent so much time, and bothered so many people, too :-\) Title: Re: Weexchange/Bitfunder User Deposit Addresses. Where are the coins "gone"? Post by: SebastianJu on February 22, 2014, 05:35:52 PM 5000+? It would be unlikely that those were the funds of one private person only because it was practically the who weexchange wallet. But i dont see where you got the 5k from. I I'm sorry (and sorry I spent so much time, and bothered so many people, too :-\) I doubt that too many people read this thread at all but i made errors in this too already. Looks like this forum lawyer isnt in the forum anymore at all. No reaction to pm nor email. I wanted to ask him if he thinks he can get more information in case there is a gag order. Or if there is a gag order at all. |