Title: Poll: Cause of MtGox missing funds? Post by: btcusury on March 03, 2014, 07:52:00 PM Vote for up to 3 causal factors you find most probable. But please vote with your head, not your fist. We're all angry at MtGox and Karpeles, but making assumptions based on that anger is not useful. To assume Karpeles is trying to steal the coins is silly if the other possibilities are more probable.
Theft by insiders seems unlikely, given the slim chances of getting away with it. Continue to expand your business as one of the leading Bitcoin exchanges, or attempt to rob all your customers in the hopes of maybe, possibly, with a stroke of luck, eventually get to cash out the coins without getting into too much legal trouble or too much stress from the predictable death threats? Tough choice! Although this guy (http://hackingdistributed.com/2014/03/01/what-did-not-happen-at-mtgox/) thinks this is the most probable by elimination. We know that incompetence is involved to a great degree, regardless of which scenario is correct, but 750,000 BTC suddenly unaccounted for just after finishing the business expansion plans for Europe? Incompetence alone seems extremely unlikely. MtGox has a long history of incompetence, and the US Government has a long history of major thefts and the motives to hurt Bitcoin. That's why my votes go to "incompetence" and "theft by third party". It could also be a combination of things (one problem compounding another), for example, as proposed by ninjarobot (https://bitcointalk.org/index.php?topic=493449.msg5452325#msg5452325), "a combination of factors including mismanagement, theft (malleability), price manipulation and government intervention." Title: Re: Poll: Cause of MtGox missing funds? Post by: btcusury on March 03, 2014, 07:58:17 PM Some insights/speculation you might want to read before voting...
I think the truth will be a combination of factors including mismanagement, theft (malleability), price manipulation and government intervention. I know many people here scream Occam's razor. But from my experience with Bitcoinica the rabbit hole goes deeper than you think (https://docs.google.com/document/d/1-QMiae2yQthRMZgSq8KisK5NcjYDxkyDjzLcDp3FoTQ/edit) and things only collapse when the situation has become an unrecoverable entangled mess. Government seizure would explain the majority of the 'temporarily unavailable' coins best imho. We know the US and Japan governments work very closely when it comes to regulation. Also there are vested interests in MtGox failing: 1) Creating the need for government regulation - more power to DFS in NY. more power to lobby institutions like the BF. 2) Depressing the price so large (Wallstreet) investors can get in at ground 0. 3) Opening up new space for competing U.S. regulated exchanges to fill the void. 4) Creating FUD around Bitcoin to turn the public opinion against a technology that poses a threat to the existing power base. The SR investigation is ongoing and already led to the seizure of customer BTC accounts in the past. It also led to the arrest of Charlie from BitInstant. And subpoena's to virtually every US business that so much a touches BTC (including Gox). Surely the FEDs had their eyes on Gox for a long time but has largely remained out of reach by virtue of them being based in Tokyo. However, in May 2013 they were able to seize 3 US based accounts (1 Dwolla, 2 Wells Fargo) from Gox: Quote In May 2013, through an interagency taskforce led by ICE in Baltimore, Maryland, three U.S. bank accounts associated with what was then the world’s largest bitcoin exchanger, Japan-based Mt.Gox, which was moving approximately $60 million per month into a number of Internet-based hidden black markets operating on the Tor network, including Silk Road, were seized for violations of 18 U.S.C. § 1960, operating a money service business in the United States without a license. The bulk of the funds were associated with the illicit purchase of drugs, firearms, and child pornography. As a result of the forfeiture action, Mt.Gox, which allows users to trade bitcoins for U.S. dollars and several other currencies, has implemented varying degrees of user verification for its customers. These and many other ongoing criminal investigations have provided ICE with a better understanding of the risks and challenges posed by virtual currencies. https://www.dhs.gov/news/2013/11/18/ice-statement-record-senate-committee-homeland-security-and-governmental-affairs I would not be surprised if the FEDs have turned MtGox into a giant honeypot since then so they could actively monitor money flows. (And putting Mark under a gag order possibly issued by FISA in collaboration with the Japanese government). There is a precedent for this in SR where the FEDs also monitored transactions for some time before swooping in and seizing all funds: Quote During the course of the investigation, ICE special agents identified bitcoins used by buyers and sellers to complete their transactions on the Silk Road site. The bitcoins, worth an estimated $3.6 million, were located in Silk Road's operating account and ultimately seized by the FBI. Mark also mentioned he stores the cold storage funds as paper wallets in multiple physical locations. I would not be surprised if one of those location would have been in the US. (e.g. a Wells Fargo safety deposit box associated with their seized bank accounts). Mark also mentioned he uses RAID technology to store the private keys, so perhaps he was using split keys. That would mean that Mark has only the first half of his keys, and the FEDs have the 2nd. I.e. neither party can move the coins at the moment. This situation might have existed since May but only escalated recently due to the malleability bug that drained the hot wallet forcing Gox to fall back on cold storage that is frozen. I could be wrong (and most likely am). ... I could be wrong (and most likely am). A hypothesis along these lines strikes me as being as strong as any. I, however, think it most likely that the Coinlab deal was supposed to result in the historic customer activity data landing in the Fed's laps and the retribution for this not happening took place immediately afterwards and was highly effective. Thus, Mt. Gox has been acting as a honey-pot since the beginning of 2013 rather than the end. And the Feds have all the data that Mt. Gox kept which is probably a lot. It seems very unlikely to me that the cold funds were stolen in an ordinary manner since there is no way Karpeles is that stupid and careless, and pretty much inconceivable that they were drained in anything but trivial amounts by the malleability issues. I'de put the hypothesis tree as so: - Mark has lost control of the BTC through extortion - by criminals - by state actors - Mark has lost control through very sophisticated zero-day means (e.g., hardware backdoors.) This would imply state level action. - Mark has control of the coins but is floating a story of some vague theft story to avoid giving up control. - Mark has ceded control to a friendly entity do stage a theft for similar reasons. - Mark thinks he can get away with simply stealing the BTC and the theft is staged or bogus. An interesting (and bothersome) thing about having law enforcement work in a covert and secret manner is that it short-circuites all of the traditional justice systems of the U.S. If information or actions (e.g., stealing/appropriating the BTC) is carried out in a covert manner than it becomes very cumbersome to act on it in public without giving away the methods. I would not rule out that Mark and the U.S. authorities are working hand-in-glove to invent a story of theft as a means of diverting attention and analysis of the methods that the authorities are employing as they relate to Bitcoin. For the whole year Marks assertion that he simply cannot talk about certain fairly basic things has been highly awkward. It literally screams 'gag order.' === Edit: One more perfectly viable hypothesis which I forgot to mention: - Mark did in fact simply lose access to some cold wallet keys. I say this because it is actually damn difficult to come up with a scheme which limits loss due to extortion. I've put many hours into figuring out how to mitigate this threat, and I control nowhere near the BTC that Mark does so his threat surface here is much larger. Not only that, but a scheme which is subject to loss of keys has the utility of providing a level of plausible deniability which can go a long way towards helping solve certain kinds of problems. |