Bitcoin Forum

What is going on?
The Altilly Exchange platform has been attacked via unauthorised access and user funds have been stolen. Read the text on the left side to find out more.

What now?
First, we must complete the audit required to understand which users have had funds stolen, this could take up to three months, due to lack of access to backup information. Second, we aim to repay everyone within 6 months, this timeframe is subject to change.
Visit our website to learn more.

We apologize to our community, to our supportive team members and anyone else that is involved directly or indirectly with Altilly.

If you have any questions, please join us on telegram. https://t.me/altilly

Altilly is now owned and operated by Hodler Enterprises. We are introducing new technologies and a new vision for the future of Altilly Exchange

love the new ownership, new vision of the exchange. The changes already that have been done are excellent. We are excited to be a part of the future of Altilly!  ;D

It is really one of the most under-rated exchanges that are CMC ranked!

Thank you so much for the vote of confidence. Were are here for the long run!

---

That is great to hear.  We plan to keep steady and rise above the pack.

I use altilly twice, the trading is very smooth and the withdrawal is very fast. Are gonna make your own token?

We have our native coin XQR (Qredit). https://www.altilly.com/asset/XQR
You can find out more about Qredit here https://qredit.io (website is currently being updated)
More info about Qredit https://hodler.enterprises/projects/qredit
More info about Qredit http://docs.qredit.network/voting/qredit-dpos-explained.html  (work in progress)

Just a small suggestion.

When you are on a market page, I would love to see a feature that shows price and market info in my tabs in the top of the screen.

We will definitely take a look and see if this is something we can provide. 
Thank you for your suggestion!

---

Altilly has an A+ rating
https://securityheaders.com/?q=altilly.com&hide=on&followRedirects=on

---

Thank you so much for your kind comments!  :) ;D

Great exchange, I know them from the beginning, and since then they have proven to be a solid and safe exchange, keep it up guys  :)

Thank you for your comments  ;D
We will continue to trying to provide a great service.

---

NOTICE: New asset listings are open for submission!! 
Each new asset will be thoroughly investigated to help ensure we are only listing assets with real teams and real projects.
https://www.altilly.com/page/addasset

 This weeks telegram game winners are:

1.charisma pramud – 2023           Prize =1500 XQR
2.Alpha – 1553                             Prize =1250 XQR
3.Semut Hitam – 1391                 Prize =1000 XQR
4.Freddy – 1304                          Prize =750 XQR
5.Hilda Loen – 1288                    Prize =500 XQR

Congratulations!

Join us our telegram group at https://t.me/altilly (https://t.me/altilly) and start collecting game prizes today!

NOTICE: OTOCASH (OTO) has been re added to Altilly exchange markets after being swapped
https://www.altilly.com/asset/OTO

---

Please visit the Altilly Facebook page https://facebook.com/altillycom

---

Check out the Qredit video  :) :)
https://www.youtube.com/watch?v=5j4aZYV77DI&feature=youtu.be

---

YCASH (YEC) can now be traded at Altilly
https://www.altilly.com/asset/YEC

When rain is coming in your bedroom due to a massive storm there is nothing better than chatting with the altilly mob on telegram 😁👍

NOTICE: New asset listings are open for submission. 
Each new asset will be thoroughly investigated to help ensure we are only listing assets with real teams and real projects.

---

Our Airdrop Campaign is Live!

You can earn up to 500 XQR by completing the airdrop tasks and 75 XQR for each friend that joins the airdrop with your referral link.

You can join our airdrop here: Telegram: @altillyairdropbot

❓Airdrop FAQ❓

Your airdrop reward will be credited to your Altilly account on July 30, 2019. One participation per user only. You should enter the e-mail address that you have used for registering an account on Altilly Exchange. The referral program is limited to 500 referrals per person. Mandatory tasks are only for the first time participants. The users who have registered before can only take part in the referral bonus part of this airdrop. If you need any further help, you can ask about your issue in here to any of our admins or in our Discord community.

---

Did you know?
Altilly Exchange hosts six MMO markets

https://www.altilly.com/market/MMO_BTC

https://www.altilly.com/market/MMO_USDT

https://www.altilly.com/market/MMO_ETH

https://www.altilly.com/market/MMO_XQR

https://www.altilly.com/market/MMO_ARK

https://www.altilly.com/market/MMO_DOGE

---

https://pbs.twimg.com/media/EAgLr8kWwAArduf.jpg
https://twitter.com/Vetskov/status/1155186161427636226 (https://twitter.com/Vetskov/status/1155186161427636226)

---

---

Our favorite exchange :) good job :)

Thank you!  If you are happy, we are happy!

---

https://www.youtube.com/watch?v=Z0YIJQ1jgEI

https://gifimage.net/well-were-waiting-gif-1-2/

soon  :) :D ;D ::)

---

This is the awesome news i was waiting for. Blockburn all the way🔥🔥💯

Bagging up to the moon 💰💰

Thank you Burn team🤗

Whaoooo congratulates this really happy

At last, Blockburn... awesome project with good community support

I believe Altilly Exchange is an outstanding platform.  For listing a project like BlockBurn builds the potential of your platform. BlockBurn has become one of the best deflationary project . In just less than 2 months they've really do great.

I believe that BlockBurn $Burn have potential to be an awesome project they have good Team and supportive community go $BURN

From all indications, it is obvious that BLOCKBURN  is setting standards as far as deflationary token is concerned and cryptocurrency space as a whole. BlockBurn, with the help of the community has pulled some strings that are amazing. Getting listed on ALTILLY EXCHANGE is a good achievement. 
Thank you ALTILLY EXCHANGE.
Keep a close eye on BlockBurn.

This weeks Telegram game winners are:

1. Black Sonic  - 278432    1500 XQR
2. KennKripton -  51735     1250 XQR
3. Paulie          – 248442    1000 XQR
4. Oreo           –  209760     750 XQR
5. Doneda       –  182941     500 XQR

Congratulations!

Altilly is the one exchange with low fee withdraw, get bonus for maker and easy to use.  8)

Did you guyz consider to list UNO https://coinmarketcap.com/currencies/unobtanium it's old coin and it had a really nice volume on cryptopia. I strongly believe that if it will be listed on some good exchange as Altilly the community will come back.

All assets with active development and communities are welcome to submit a listing for review :-)

If i am not a part of the dev team can i list coin for review?

This weeks Telegram game winners are

1.Black Sonic   –    7777444    1500 XQR   
2.TheGasMan   –    5204856    1250 XQR
3.Mark            –     2068564    1000 XQR

This weeks Telegram game has finished

The winners of "Robot Rise" are:

1. Richi Souto – 129     1500 XQR
2. brosso         - 122     1250 XQR
3. Bolang        –   63     1000 XQR

Congratulations!

🙌

Altilly’s #BravoCoin trading competition is the bomb , I personally will be trading my face off trying to win the awesome prizes on offer . Thanks Altilly & thank you BravoCoin.
1234 I’m gonna start a bidding war !

Can't wait to get stuck in to the xqr competition great exchange admins and looks like a great future ahead.

Let's start the Qredit "Gold" trading competition this will be awesome to the XQR environment 🔥

I've been using altilly for a while now and am very happy with it. Having a competition is a very good way to improve in trading skills. thank you

I always love trading with Altilly Exchange. Simply and safety exchange.

Altilly is one of the best exchange I know! Fast, easy, reliable!

Qredit is amazing, fantastic currency, exceptional developer, amazing fomunity

Great, Altilly has mining pools now.

Any idea on how to use the pool?

WARNING THIS EXCHANGE HAS A SERIOUS SECURITY CONCERN

I registered to this site and got an email WITH MY PASSWORD INSIDE IN PLAIN TEXT!

This is a SERIOUS security issue, as it shows that

1) This exchange is storing passwords in plain text somewhere on their database. Or best case scenario plain text passwords are passed through their registration system into their email system (probably using a third party such as mailchimp) at least once.
2) They don't realise how terrible the practice of emailing users their passwords is. (If a user email is compromised, the password is compromised)

The standard practice for password storage is to one-way hash passwords and save the hash in the database, then any password attempt will also be hashed - then the hashes are compared and validated for login. That way if the exchange is hacked, only the password hashes are in the database, and hence no actual passwords are compromised because you cannot reverse a one-way password hash back into the original password. This is STANDARD web practices!

Be very careful and request that the developers confirm their password security practices. We do not want another compromised exchange that leaks users' passwords in plain text to the world.

When I contacted the developers on the issue, and a couple more security issues that I noticed (Which I will not discuss here because I'm not trying to help anyone hack them) they basically snobbed me off and didn't listen, the lead developer's final message to me was:



This is after I pointed out three vulnerabilities that I noticed with the exchange within 10 minutes of browsing the site as a user. Who knows how many more there are...


I don't normally complain about clunky / sketchy exchanges, but this is insane. If you plan on using this exchange, please proceed with EXTREME caution. Too many people are being compromised by exchanges with bad security practices these days.

Hi Oscar,

Thank you for notifying us about your concern.
We do not store passwords in plain text.

Please have a nice day.

- Nayiem

yes this seems to be FUD being posted to dis-credit Altilly. They are a great secure exchange. Bitcoin Token https://www.bitcointoken.pw. is more then happy to be partnered with with and using this exchange.

---

Update: 26th of December 2020 - 01:25 CET

Dear Altilly users,

Earlier this week. We've noticed suspicious activities on our Altilly servers.
After rebooting and checking the servers, we've noticed the same activity and a new system user being created on our servers.
Meaning that the system was hacked above OS level most likely using recue mode during the reboot.
We were still unsure what was going on and decided to move things over to a new hosting provider.

During the process, we've lost access to our servers at our previous hosting provider, including the database, wallets and codebase of Altilly.
We are investigating what is going on and what has been saved so far.
We are not sure yet if funds are lost.
We are still waiting for final analysis from the current hosting provider.
We will keep you posted.

--

It is true that Altilly was sold to new owners and in the transfer process to new servers someone made a mistake and deleted important files and now you are going to claim that a hacker did this to make it look good?
Are we able to withdraw our coins from your exchange?

Exit Scam?

gooood that alitlly added soooooo much coins for free in whole december as special event....

how generous.  "cough" ..

that shows again.  nothing is for free.
even not the death.

All those excuses which is written over site are fabricated. That looks like a kindergarten kid was running a trade site , and owner is thinking public is such fool.

He earned a lot and since BTC reached a peak 24000 he will cashout and after sometime will pop with another project Albilly  ;D

The CEO of the exchange Nayiem Willems is running an illegal investment scam in Sweden, High Yield with 40% returns.
this is the website
https://willems.ventures/
https://bitcointalk.org/index.php?topic=5279331.msg55294245
The investment seems like is not going so well because is a caravan park in the middle of nowhere in Sweden, seems like Covid ate his savings and he exit scammed with the exchange.
I found suspicious they spend the last few weeks listing coins for free, then a few days ago BTC, DOGE and other coin withdrawal was suspended, and then they did the same like Livecoin and there are rumors that Altilly was sold.
The excuse seems fake and prefabricated.
It smells like EXIT SCAM

Their 5% return on investbox on BTC, ETH, USDT and LTC were suspicious as hell. It is also very convenient for them to have all data disappearing with funds. If true, it would make legal actions from customers impossible. It seems for now their favorite culprit is their "hosting provider". Personally I do not trust any word coming from them, as they haven't disclosed any info when it happened and just went on silent mode. The blueprint of an amateur exit scam.

A lot of people use these small exchanges because they stake smaller coins.  It's clear that we need to trust decentralized exchanges as much as possible because not enough honest small exchanges can host all these coins.   

And that shows how much of a noob you are. They have kept communication open, it is still there and they are not hiding anything.

Deposits not working days before the announcement of the hack, i made one deposit that did not receive, i saw in the chatbox that other users faced similar problems, so i waited, but i made a second deposit and keep waiting, then they announced they got hacked.
Deposits and Withdrawals for some coins like BTC, DOGE, LTC not working days prior the hack, then the exchange goes offline and they say is because the server rebooted and deleted the database.
Who is noob?
Those idiots didn't backup the Database? or replicated into another server? or have a raid? or tried to recover the files with any of the recovery tools available?
Don't you think smells like a scam?
Why they allow users like me to deposit if they knew they got hacked? if they really got hacked?
Now they are blaming that someone gained access to an email, and use it to access the servers, the database is gone, and they cannot give back the remaining coins.

The hacker(s) deleted the backup
All assets will be returned to users who provide documented proof

You are a fucking idiot, who is going to believe that you storage the backup in the same server where the Database is located?
And you didn't download a backup every few hours? I had a Wordpress blog, i installed a plugin that sent me the backup to my email every few hours, why you did not the same?
If the database was on a server that had RAID you can still recover the database from the second hard drive.

Altilly developed by professionals and built on cutting-edge technology


This is BS

RAID only protects against drive failure, if the database was deleted from the server then it would have been deleted from all drives at the same time. If this was a dedicated server (rather than a virtual server) then the correct course would have been to switch the server off immediately upon discovering the deletion so that there was a chance of data recovery, but then switching off the server would also be the correct way forward upon detecting the hack as well.

From reading the various things said by the team I think these were a set of virtual servers probably on a shared provider (a mistake), what backups they might have had were minimal (a mistake), credentials seem to have been managed poorly (a mistake) the hack wasn't dealt with very well (a mistake).

Whilst I don't see enough evidence to call it an exit scam, there seems to be plenty of evidence of incompetence in how things were run and have been handled (why no announcement on twitter).

If things were setup correctly the hackers would have been unable to delete the backups and there would be a full audit trail on a separate server that couldn't have been altered, both simple things to achieve, both things that seem to be lacking.

Communication can always be better but it's there open and transparent.

I'm not sure that Twitter would help at all as they have in many cases just made stuff way worse. That has spoiled several buybacks and caused additional hacking in several cases I can think of.

It was a preplanned scam if i am not wrong , that is why they are giving lame excuses.

- Server got hacked
- Email also gone to host provider to delete server  ;D
- Offline wallet also got hacked with the help of API  ;D

they are thinking we are dumb and dont understand anything.

Imo the theft is the work of probably only one person. But probably someone on the inside, for reasons I'm not aware of. Hearing the domain was basically stolen through an old inactive email from 3 years ago should help find who did this, as probably not many person were to be aware of that. I believe the rest of the staff at Altilly giving updates is genuinely affected too and are doing their best to sort things out. So thanks to the ordinary people stuck in this mess and doing their best, for my part, I'm not too affected so don't worry for me.

I also had a withdrawal that was confirmed but never went through over a week ago from RVN. Never cared because it was 27 RVN's...

Here is what I am asking myself since early december:
Their system status page had a deposit, withdrawal, and "safe storage" wallet. But where was that safe storage located? As it seems their funds were already funneled elsewhere. For example: in early december, when trying to withdraw a substantial amount of litecoins that was deposited only 3 days earlier, the litecoin withdrawal wallet of the exchange had to be put in maintenance for 12 hours so that my withdraw could be finally fulfilled. After that, in the system status page, the amount of litecoins, in safe storage, stayed exactly the same even though there was supposed to be a substantial amount of litecoin subtracted from my recent withdraw.

So the person allowing the withdrawals for litecoins and managing the maintenance during that time, had to know that something was going wrong, because I knew...

I recommend to the staff left at Altilly to look at who of theirs left the boat just before the shtf, because if someone on the inside caused that, he/she would left you hanging with all the troubles...

edit: after reading @drofxafm comment,  I agree that in the concourse of multiple mistakes, I think it may also be the work of an attacker maintaining stealth control over the exchange for weeks... only time will tell if we'll ever know...

Seems another inside job here...Wanting to get out of this altilly project. I have seen a lot of related blockchain projects here by Hodler Company like the Qredit, Hodler Mining, Hodler Energy, Voyager Park and I believe they are not really doing good in those ventures. They are venturing into several businesses, and yet, I haven't seen them really prosper even with this altilly exchange. Now, somebody decided to siphon some funds, which is not really good because they have small trading volume only.

Who keeps proof of their assets at exchanges?  It's a good idea but I've never seen it discussed before. 

That is an epic idea the problem comes in with the centralized custody part. If should however be possible with the right type of logic framework that would be something that could move things along dramatically as right now it is still the same as it was with WBX 10 years back  ???

This would be an clunky to run but that might not be a bad thing.

Not a bad habit to take screenshots of what you hold on exchanges. But a proof of assets can easily be falsified on the user side. And for the exchange side, we've seen that data security is an issue.

At this moment i lost hope, the total amount i lost was 27$, it doesn't worth the effort to proof my two deposit,
they will probably make it hard to recover, like asking for KYC, at this moment i will move on & stop staking useless shitcoin, i still have a big amount of coins that i am staking, but unable to sell because it was only traded here.

I'm starting to follow a bit my deposits addresses to Altilly and I realized that the ethereum withdraw wallet (possibly) of Altilly hasn't moved since the exchange went down, and still has over 24 ETH in it:

https://blockchair.com/ethereum/address/0x1a2c9c848d9e9df10d45dd736fde9910d21e56b9

On the other hand:

one of Altilly's active Litecoin address was already empty on december 24th:
https://blockchair.com/litecoin/address/LVJEMLwEFwmWb4P6qoXLX4bC7MwqjHJGZ7

one of Altilly's active Dogecoin address was already empty on december 25th:
https://blockchair.com/dogecoin/address/DFnP5y1fpU6snYGkQHKK53mYmXeXgiXvQ7

one of Altilly's active Bitcoin address was already empty on december 24th:
https://blockchair.com/bitcoin/address/334eYEeRNj6XkSpq411Gs5DfZAFVtVmqG1

above is one of the address Altilly started to use for deposits on october 28th, before this date it was:
https://blockchair.com/bitcoin/address/12TqdX5Rz1sPFejJ6Qz84NzgHz4JuuH7q1

My theory is that the "safe storage" wallets were compromised. For a while, customers deposits were covering for others customers withdraws. But those behind the theft couldn't cover it anymore. So the servers were wiped off.

And now you need to claim your balance within 60 days - but first you need to sign up to google so you are able to fill the claim form...


What a frickin gong show...

It's Christmas  ::)

Yup but still significantly better than how it has been handled in a lot of places.

And they've now quietly changed that to:

There is an update posted yesterday about the cause of the theft, go see the website.

42Coin
AEON
ALIAS
AFRO
ANON
Argoneum
AuroraCoin
Axe
Bare
BetllerCoin
BigDataCash
BitBlocks
BitcoinDiamond
BitcoinMono
BitcoinPlus
Bitcoinz
BitZyon
Blocknet
Chimera
CPUchain
Crystaleum
DAPSCoin
DeepOnion
Deflacash
Delion
Dextro
DimeCoin
DocumentChain
EUNO
EvergreenCoin
FanaticosCash
FedoraGold
FrenchDigitalReserve
Feirm
Five G
FTScoin
Galilel
Garlic
Gauntlet
GlobalToken
Gobyte
GoldCash
HelpTheHomeless
Hive
HonkHonk
Horizen
HTMLCoin
Hush
Ilcoin
IQCash
Jackpot
Litebit
Livenodes
Malware Chain
MangoCoin
MasterWin
Mchain
Mint
MMOcoin
MobileCryptoPayment
ModernInvestmentCoin
MonetaryUnit
MoneyByte
Monkey
MoonCoin
Mota
Myce
NeetCoin
NestEgg
Ninjacoin
Niobio
Noir
OdinyCoin
Pawcoin
PacGlobal
Peony
Pepscoin
Pirate
Platinum
Powerbait
PYRK



If you filled out the form for a refund of any above assets please check your email for correspondence from Altilly Customer Support so we can get these refunds processed.  (If you are expecting refund for any of the above and do not find email, please check spam box)  Thank you
__Updated: 02/18/21__

Hey scammers at Altilly, will you kindly return my shitcoins or you just keep pretending that you need those confirmation emails that you sent me years ago?! >:(

Altilly scammers wrote to me in email that they can return 507,000 PAC, but my deposit was 999,990 PAC. When asked why they want to return only half, they have not answered for 2 days. Admins delete my questions in the telegram. if there is anyone deceived by this exchange, let's get together and how to solve this issue. My telegram @ ayron15

The agents are very busy handling thousands of refund cases. Please be patient.  If a mistake was made just reply in a civil manner and it will be corrected

Deposit confirmation emails are your receipt of deposit.  Im
 sorry you did not feel a need to keep it

That is, to be rude, you will not return the money ?? Is it obligatory to delete messages in the telegram and then block them altogether? What is your attitude towards the users from whom you received money?

Im not sure where in what i wrote you saw that his money would not be returned. I told him to contact the agent and they would make the correction if there was an error.

According to these words "If a mistake was made just reply in a civil manner and it will be corrected"

That's BS reply! Never ever Altilly told me to keep those emails. Especially for those deposits made months or years ago.

If anything, blockchain is the best receipt of my deposit. Can't be faked, right?

But Altilly's support excuse was they don't know which wallet belongs to which user, because they "lost" their database.

Just send the coins to the address where they came from!! But you won't cuz it's not what your intensions are.

Many MoonCoin community members were scammed out of their coins by Altilly.
We are thinking to file a class action lawsuit. Anyone affected by these Altilly scammers, Let us know here: https://bitcointalk.org/index.php?topic=5236362.new;topicseen#new (https://bitcointalk.org/index.php?topic=5236362.new;topicseen#new)

Let's unite to fight these crooks!

these are scammers and scum.
they pocketed all my coins

Just in case any of you here expect a refund from Altilly. If you don't have all their deposit confirmation emails, they give you nothing. That's a scam.

Altilly Exchange FAKE Refunds, Possible Exit Scam (https://bitcointalk.org/index.php?topic=5385112.0)

So what about refunds?