Bitcoin Forum

Economy => Service Discussion => Topic started by: Jeronimus on March 01, 2014, 10:59:07 PM



Title: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 01, 2014, 10:59:07 PM
Locking this topic -  IF anyone wants to continue this, feel free. I am not offering a reward anymore since i am moving out of crypto for good(see last message)


Current total reward:  3.65 BTC

myself:           0.3 btc
CompNsci:       1 btc
BrewCrewFan:  0.1 btc
rochkey:         0.25 btc
Gotgoxed        1.5 btc
btcusury         0.5 btc


As the title says, i will reward 0.3 BTC to whoever can without any doubt(or little doubt) show us the chain of events from MtGox filling up the cold storage wallets before it was robbed supposedly, to the coins leaving the cold storage wallets into the thief's/thieves' hand/s, possibly passing through a mixer afterwards or an exchange which does not keep track of IDs.

He will have to show us all cold storage wallets that were in MtGox's possession (the exact addresses) and show us the chain of events in the blockchain of the coins escaping those cold storage wallets.

I don't care if it is a copy and paste job, as long as you can explain exactly where all the 750k(850k with gox own BTC?) went to. You can use whatever info you want, including this site but have to deliver a complete bulletproof theory.
I might not understand it fully, and will wait for rewarding until a great majority of the community agrees or i understood it fully.

To say it again. It won't matter if you did a copy and paste job. The only thing that matters is who posts a full bulletproof theory inside THIS thread.



I encourage people to add to this reward ( i cannot promise however those people will stand to their word).

I will keep updating the total reward above as people in this thread dish more into it.

edit: keep it real. Don't dish more in than like 1% of your BTC

edit2: Just to clarify cut and paste. It should be a cut and paste from pieces completing the puzzle, not taking someone elses complete work and just pasting it in here.


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: dontek on March 01, 2014, 11:04:26 PM
Here's probably some. About 270k worth:
https://bitcointalk.org/index.php?topic=494695.0


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 01, 2014, 11:06:20 PM
Here's probably some. About 270k worth:
https://bitcointalk.org/index.php?topic=494695.0

Please refrain from posting any half theories you are not even certain about they are true. We already have enough of those in other threads. This thread is only for a complete bulletproof theory, or otherwise it will just get spammed and filled to a point where i cannot maintain it anymore and would have to start another thread.


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: dontek on March 01, 2014, 11:16:09 PM
Here's probably some. About 270k worth:
https://bitcointalk.org/index.php?topic=494695.0
This thread is only for a complete bulletproof theory

There in-lies the problem. The only way to get a complete bulletproof theory is to get MtGox to open up their information and records to be scrutinized, which, hah...yeah right.

With the info from the letstalkbitcoin action from 2011, it's about as solid as you can get that:
1. The two wallets being referred to were created by MtGox/Mark
2. On 2011-11-16 05:59:08, 40,000 bitcoin were transferred one wallet: (https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV)
3. Those 40,000 bitcoin were untouched and to this moment are still in that wallet.
4. On 2011-11-16 05:59:08, 50,000 bitcoin were transferred to the other wallet: (https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9)
5. Those 50,000 bitcoin were untouched and to this moment are still in that wallet.

TL;DR - Pretty substantial proof MTGOX/Mark had control of those wallets when the deposits were made and the bitcoin haven't moved since.


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 01, 2014, 11:37:59 PM
Here's probably some. About 270k worth:
https://bitcointalk.org/index.php?topic=494695.0
This thread is only for a complete bulletproof theory

There in-lies the problem. The only way to get a complete bulletproof theory is to get MtGox to open up their information and records to be scrutinized, which, hah...yeah right.

With the info from the letstalkbitcoin action from 2011, it's about as solid as you can get that:
1. The two wallets being referred to were created by MtGox/Mark
2. On 2011-11-16 05:59:08, 40,000 bitcoin were transferred one wallet: (https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV)
3. Those 40,000 bitcoin were untouched and to this moment are still in that wallet.
4. On 2011-11-16 05:59:08, 50,000 bitcoin were transferred to the other wallet: (https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9)
5. Those 50,000 bitcoin were untouched and to this moment are still in that wallet.

TL;DR - Pretty substantial proof MTGOX/Mark had control of those wallets when the deposits were made and the bitcoin haven't moved since.

i already mentioned those in this thread

https://bitcointalk.org/index.php?topic=492776.msg5437308#msg5437308


You will see that many of those wallets i linked follow two patterns.

One is all digits in front of the dot being zero (except the front digit of course)

The second pattern is, MOST of those wallets getting a 0.00777 receive transaction in.

examples

the ones that wre mentioned in that thread

https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9 50k
https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV 40k
https://blockchain.info/address/12HddUDLhRP2F8JjpKYeKaDxxt5wUvx5nq 40k
https://blockchain.info/address/16Ls6azc76ixc9Ny7AB5ZPPq6oiEL9XwXy 40k
https://blockchain.info/address/1MyGwFAJjVtB5rGJa32M6Yh46cGirUta1K 30k


others i linked in my thread following those two patterns


https://blockchain.info/address/13ssxUjmQqemuiBfJSBsr7gFX7UWU7uXNK 20k
https://blockchain.info/address/1LDWDufjU5ATbozDZY3uChb7oPAbDaiB7K 15k

https://blockchain.info/address/1MeCzxxB8eDd17DaocFLQaQtH8seVjNM67 10k
https://blockchain.info/address/19PPeuu4jPjqtefSQ2FDgKmNJ88Z5wiuJt  10k
....
a lot more 10k cold storages following the two patterns


wasn't 777 some illuminati symbol?

I am sure we will be able to compose a full list of those 0.00777 transactions containing cold storage wallets.

Many of those will NOT be MtGox wallets as 777 is like 666 a heavily used number, not just by the illuminati, but also by satanists and master trolls




Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 02, 2014, 02:37:57 AM
Don't be shy. Add a comment about willing to dish in some reward in case someone solves this mystery. Even 0.1 btc will be good.

It cannot be that i am the only one interested in solving this when i do not even have any funds stuck in mtgox.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: CompNsci on March 02, 2014, 03:10:11 AM
OK, for this sort of proof I would chip in 1.0 BTC.

This is a very good idea and would be one of the key pieces in determining what has been going on. Knowing the main cold storage wallets just before trading shutdown would also be quite valuable.

I have commented that serious forensic analysis is good here. That is one of the advantages of a public blockchain.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: BrewCrewFan on March 02, 2014, 03:48:02 AM
Ill toss in .01 BTC. I know its small beans but its something. I also think the community needs to know what has happen. For starters, where the coins went, If gox is really at fault, what may have caused this so it can be fixed if there was indeed an issue.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: thelema93 on March 02, 2014, 03:50:27 AM
I thought some had already been found:

The 50,000 output is still there, unspent.
https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9

The 40,000 output is still there, unspent.
https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV

From this info: http://letstalkbitcoin.com/the-ghost-in-the-machine-at-mtgox/#.UxKqIl65K3V

How do we get any better proof than that?


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 02, 2014, 04:14:50 AM
I thought some had already been found:

The 50,000 output is still there, unspent.
https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9

The 40,000 output is still there, unspent.
https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV

From this info: http://letstalkbitcoin.com/the-ghost-in-the-machine-at-mtgox/#.UxKqIl65K3V

How do we get any better proof than that?

nice article, but it accounts only for 90k of the coins and claims that not even this is certain. I think we need something a bit more in-depth than this to be satisfied.

All the addresses mentioned in this article i already mentioned in this thread plus more all having the 0.00777 received btc pattern included.

It cannot be just coincidence that all addresses linked to the former 424k btc proof by karpeles all having at least one 0.00777 received btc transactions in them along with a all zero digits in front of the dot pattern sub the first digit

edit: after checking some more addresses in the richlist top 100, i found many of them contain the 0.00777 received btc pattern, so this cannot be used anymore as a link to the mtgox cold storages.
Most of those transactions were issued on the 6th febr 2014, but also later


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: thelema93 on March 02, 2014, 04:44:47 AM
Not sure if this helps anything, but I JUST TRACED BITCOINS I SENT TO GOX ON:

2014-02-03 06:29:00

SENT 5 BTC TO Mt.GOX ADDRESS: 1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

TRANSACTION: https://blockchain.info/address/1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

NEXT my 5 BTC get's sent to: 1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

https://blockchain.info/address/1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

NEXT my 5 BTC get's sent to: 1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

https://blockchain.info/address/1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

They are still sitting there.
Just 2 transactions away from where I sent them: to Gox. How can that be theft? Any serious cyber criminal would have immediately sent all the stolen coins through thousands of different addresses to confuse everyone. Not 2. ! This does not shout theft to me at all. Just Pure fuckup.

And yes, I sent coins to Gox 4 days before they shut down withdrawals. Merrry Fucking Christmas.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 02, 2014, 04:50:33 AM
Not sure if this helps anything, but I JUST TRACED BITCOINS I SENT TO GOX ON:

2014-02-03 06:29:00

SENT 5 BTC TO Mt.GOX ADDRESS: 1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

TRANSACTION: https://blockchain.info/address/1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

NEXT my 5 BTC get's sent to: 1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

https://blockchain.info/address/1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

NEXT my 5 BTC get's sent to: 1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

https://blockchain.info/address/1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

They are still sitting there.
Just 2 transactions away from where I sent them: to Gox. How can that be theft? Any serious cyber criminal would have immediately sent all the stolen coins through thousands of different addresses to confuse everyone. Not 2. ! This does not shout theft to me at all. Just Pure fuckup.

And yes, I sent coins to Gox 4 days before they shut down withdrawals. Merrry Fucking Christmas.

i see this was febr the 3rd. Didn't gox shut down withdrawals AFTER febr the 3rd?
How would you know if this isn't just some normal guy who withdrew 5  BTC of the exchange?


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: papamoi on March 02, 2014, 08:20:06 AM
following


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: thelema93 on March 02, 2014, 08:35:24 AM
i see this was febr the 3rd. Didn't gox shut down withdrawals AFTER febr the 3rd?
How would you know if this isn't just some normal guy who withdrew 5  BTC of the exchange?

Isn't it a bit of a co-incidence that I sent exactly 5 coins and then somebody else withdrew exactly 5 coins from the same wallet?


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 02, 2014, 09:18:05 AM
i see this was febr the 3rd. Didn't gox shut down withdrawals AFTER febr the 3rd?
How would you know if this isn't just some normal guy who withdrew 5  BTC of the exchange?

Isn't it a bit of a co-incidence that I sent exactly 5 coins and then somebody else withdrew exactly 5 coins from the same wallet?

I think not. As far as i understand this is part of how the protocol works


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: rochkey on March 02, 2014, 10:38:35 AM
+0.25 BTC from me.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: rochkey on March 03, 2014, 10:38:18 PM
Might be of interest.

http://www.coindesk.com/mt-gox-lawsuit-target-mark-karpeles-personal-wealth/


Says they already have over 200 clients.


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: repentance on March 03, 2014, 11:14:26 PM

wasn't 777 some illuminati symbol?

I am sure we will be able to compose a full list of those 0.00777 transactions containing cold storage wallets.

Many of those will NOT be MtGox wallets as 777 is like 666 a heavily used number, not just by the illuminati, but also by satanists and master trolls


The 777 transactions were an attempt by people to follow Bitcoin transactions related to a recent Silk Road theft (SR admins claim that all of their BTC were stolen by someone exploiting the malleability issue).  They used 777 because 666 had already been used previously to try to follow BTC from another theft (sheep marketplace, IIRC).

There are threads on the SR forums about the 777 tag and on reddit about the 666 tag.


Title: Re: REWARD - Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 04, 2014, 12:21:42 AM

wasn't 777 some illuminati symbol?

I am sure we will be able to compose a full list of those 0.00777 transactions containing cold storage wallets.

Many of those will NOT be MtGox wallets as 777 is like 666 a heavily used number, not just by the illuminati, but also by satanists and master trolls


The 777 transactions were an attempt by people to follow Bitcoin transactions related to a recent Silk Road theft (SR admins claim that all of their BTC were stolen by someone exploiting the malleability issue).  They used 777 because 666 had already been used previously to try to follow BTC from another theft (sheep marketplace, IIRC).

There are threads on the SR forums about the 777 tag and on reddit about the 666 tag.

Yes, i already mention in another thread that the 0.00777 pattern was present in many other addresses within the richlist top 100 as well, several days ago.
So this is not something we can use to solve the mystery really.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Gotgoxed on March 05, 2014, 10:27:31 PM
+0.5BTC from me


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: ifritsultan on March 06, 2014, 07:40:16 AM

wasn't 777 some illuminati symbol?

I am sure we will be able to compose a full list of those 0.00777 transactions containing cold storage wallets.

Many of those will NOT be MtGox wallets as 777 is like 666 a heavily used number, not just by the illuminati, but also by satanists and master trolls


The 777 transactions were an attempt by people to follow Bitcoin transactions related to a recent Silk Road theft (SR admins claim that all of their BTC were stolen by someone exploiting the malleability issue).  They used 777 because 666 had already been used previously to try to follow BTC from another theft (sheep marketplace, IIRC).

There are threads on the SR forums about the 777 tag and on reddit about the 666 tag.

Yes, i already mention in another thread that the 0.00777 pattern was present in many other addresses within the richlist top 100 as well, several days ago.
So this is not something we can use to solve the mystery really.

I am not so familiar with floating point arithmetic in PHP, but as far as I know, it was used in the messy source code, very probably written by Mark himself.
So maybe one of you can tell me, whether such a rounding overhead can occur somewhere and what amount you will need to produce such a rounding error?


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: andy10000 on March 11, 2014, 05:45:18 PM
According to a Japanese English-Language newspaper, one of Gox's lawyers is saying that the coins disappeared during the ddos attacks that took place in the days just prior to the shut down.

If that's the case and the coins were moved, there'd be a significant spike in the BTC days destroyed. The only spike is on the 8th of March. This was attributed to a movement of just 200k coins. (I think thats what I remember reading - please correct me if I'm wrong). That would be a good place to start looking, if I could make any sense of the unintuative blockchain.info

But an alternative theory which is more supported by the blockchain data (insofar as I understand it) is that the keys are some how lost/stolen and the coins are still in place. (or MK stole them, or the Feds/NSA took them, depending on how pointy you fold your tin hats).

Edit: P.S. Hats off to all of you contributing a reward. Really good things to you all.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Gotgoxed on March 11, 2014, 06:51:32 PM
+1.5BTC from me! Please keep this thread alive!!!


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: T.Stuart on March 11, 2014, 06:53:43 PM
According to a Japanese English-Language newspaper, one of Gox's lawyers is saying that the coins disappeared during the ddos attacks that took place in the days just prior to the shut down.

If that's the case and the coins were moved, there'd be a significant spike in the BTC days destroyed. The only spike is on the 8th of March.


Good point!

I wonder how long it's going to take Mark's lawyer to catch on to that one. I imagine he's still at the bottom of the Bitcoin learning curve.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: btcusury on March 11, 2014, 08:39:09 PM
+0.5 BTC


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: bitcoinminer on March 12, 2014, 04:19:08 AM
+0.5BTC from me

GOXXXED is the preferred grammerz.  The triple XXX and the all caps just emphasizes how pornographically they penetrate their users.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: innovina on March 12, 2014, 02:47:17 PM
I had a program running which was connected to the Mt.Gox API and tracked all trades from 2013/04/04 until 2014/02/25.
In total 4661034 Trades...

Could this be valuable information? For each trade I have the timestamp, amount in BTC and price in Dollar or Euro.
Perhaps this information can also be found in the blockchain and based on correlation the addresses belonging to Mt.Gox can be found.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: T.Stuart on March 12, 2014, 02:51:49 PM
I had a program running which was connected to the Mt.Gox API and tracked all trades from 2013/04/04 until 2014/02/25.
In total 4661034 Trades...

Could this be valuable information? For each trade I have the timestamp, amount in BTC and price in Dollar or Euro.
Perhaps this information can also be found in the blockchain and based on correlation the addresses belonging to Mt.Gox can be found.


Extremely valuable and could straight away be compared with the leaked trading information we got a couple of days ago.


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: eztezt on March 12, 2014, 02:54:11 PM
I searched some gox addresses and I saw this
https://blockchain.info/tr/address/1LNWw6yCxkUmkhArb2Nf2MPw6vG7u5WG7q?offset=20050&filter=1
2011-12-06 17:14:38
is the mos important withdraw
https://blockchain.info/tr/address/1Cj5kAeGK5CQSubY1Bk6HbGdweq15eJtH9

And splitted Here
https://blockchain.info/tr/address/1M1ZkWpHfuQthji2AVsGDvpfY2PrcXQar6

Lots of them didn't come back


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: ifritsultan on March 12, 2014, 04:09:46 PM
indeed there was a huge transaction that day... 06.12.2011
I also dont know hwat has happened there

https://blockchain.info/charts/estimated-transaction-volume?timespan=all&showDataPoints=false&daysAverageString=1&show_header=true&scale=0&address= (https://blockchain.info/charts/estimated-transaction-volume?timespan=all&showDataPoints=false&daysAverageString=1&show_header=true&scale=0&address=)


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: eztezt on March 19, 2014, 03:25:49 PM
I found New Gox Addresses Smiley
This Address is one of gox  200K Addresses
https://blockchain.info/address/16Ls6azc76ixc9Ny7AB5ZPPq6oiEL9XwXy

And look at this transaction
https://blockchain.info/tr/tx/907728bd9a0911194aa810f76fd577d2d38300ca22773029b7693518a09f6b2e

Destination addresses have lots of coins


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: ifritsultan on March 19, 2014, 10:11:32 PM
Why does it belong to gox? Can you prove that?


Title: Re: [REWARD] Find The Cold Storage Wallets Of MtGox Before Supposed Theft
Post by: Jeronimus on March 20, 2014, 03:15:57 PM
I will have to close this topic since i am moving out of crypto for good.

I think coinex was the last droplet for me. I find it hard to swallow that so many talented developers that have so many other means to get a job and make some money, could be so greedy.
How could ALL ASIC manufacturers end up being so greedy, to the point where they rather kill BTC than reduce some of their profits.

I also find it disturbing that so many experts in the community have decided to go silent or say very little, rather than help unwind what is going on with MtGox.


I think enough time has passed for the reward. IF it did not happen until now, i do not see it happening in the future either.



good luck to everyone who has faith in this still