|
Title: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 08:11:17 AM I am the owner of VIBGYOR gilded #12 which was swept yesterday but it is still in its ICG casing.
1FrE3MbzxYMpLjh14Efv4ikoirbCpdodYZ https://www.talkimg.com/images/2024/08/09/5ofOz.jpeg https://www.talkimg.com/images/2024/08/07/5J9T2.jpeg (https://www.talkimg.com/images/2024/08/07/5J9T2.jpeg) https://www.talkimg.com/images/2024/08/07/5JB1c.jpeg (https://www.talkimg.com/images/2024/08/07/5JB1c.jpeg) Can the owners of #1,11,13,14,15,17,20,21,22,23,24,25 report back. They were also swept yesterday. Take a look at : https://collectible.money/ (https://collectible.money/) Original sales thread: https://bitcointalk.org/index.php?topic=5415734.0 (https://bitcointalk.org/index.php?topic=5415734.0) Full BTC address list: https://crypto.raritycheck.com/vibgyor (https://crypto.raritycheck.com/vibgyor) Can someone please check if all of this is correct. Edit. This threads is getting long so I updated OP for new readers. OP now show picture of the compromised VIBGYOR series (gilded and sliver) What went wrong? The private keys was in some way compromised. You can read the whole thread and make your own conclusion. Official statement from RarityCheck. We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. Issue is with the keygen software we used. In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go). For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins. We appreciate all support from the forum members. If you are affected by this contact raritycheck to be compensated. https://bitcointalk.org/index.php?action=profile;u=3240980 (https://bitcointalk.org/index.php?action=profile;u=3240980) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: cygan on August 07, 2024, 08:29:14 AM i don't own any coins from this series, but what happened yesterday doesn't sound good at all :-\
someone must have gained access to the private keys a statement from raritycheck himself would of course be very helpful here... Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tweetious on August 07, 2024, 08:36:26 AM I also do not own any of those coins mentioned. However, the sweep transaction of 12 coins simultaneously looks really suspicious indeed.
@Primo-bit would it be possible please, to post a timestamp photo proof of the coin with the holo intact? i.e., a photo of the coin from both sides, next to a note of the current block number & the last digits of the block hash. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 07, 2024, 08:43:21 AM WTF! Not again. If they were all swept together then it's the worst case scenario that it must be an inside job like Yogg. Damn!
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 08:44:41 AM The address lists for raritycheck items on collectible.money (https://collectible.money/) were sourced directly from their website.
An archive of the address list for this set is available on archive.org (in the event that the website is taken down or edited): https://web.archive.org/web/20240304141611/https://crypto.raritycheck.com/vibgyor The coins were swept across two transactions: 5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f (https://mempool.space/tx/5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f) and 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64 (https://mempool.space/tx/5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64), both mined in block 855689. Between the two transactions, there are a total of 61 inputs, of which 13 are from the VIBGYOR Orange Gilded (https://collectible.money/series/raritycheck-vibgyor-orange-gilded) set. The remaining input addresses are not in my database, and may or may not belong to collectibles (some are repeated, so likely come from a regular wallet). If anyone is aware of the origin of those addresses, I would encourage you to share so that we have more information to work with. There are presently 12 unpeeled items remaining in the Orange Gilded set: Code: 9 18TjrYAfdZUTAYooK9ZeCZszw6yLGCTK3X 0.01 BTC $571.23 2023-09-11 18:10:45 UTC - Unredeemed If you own any of the remaining 12 items, it may be time to evaluate whether you would like to peel them. Rarity Check (https://collectible.money/creator/raritycheck) as a whole still holds 0.538BTC across all items produced. If you hodl any items from RC, I would encourage you to join the public telegram channel (https://t.me/collectible_money), or run "/subscribe https://collectible.money/creator/raritycheck" via the collectible money bot (https://t.me/collectible_btc_bot) to receive updates when any RC items are peeled Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: aoluain on August 07, 2024, 08:47:13 AM the sweep transaction of 12 coins simultaneously Yup - red flag straight away lads - FFS this is crazy whatever excuses come out. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 09:10:55 AM The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread. I have initiated fresh snapshots of all three published address lists: https://crypto.raritycheck.com/2021-set-1 https://archive.is/2Gpjg https://crypto.raritycheck.com/vibgyor https://archive.is/Ga3VZ https://crypto.raritycheck.com/lcs-v1 https://archive.is/DVuDS Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 07, 2024, 09:16:57 AM I do hope none of these coins were sodl at any of the big auction houses. ???
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 09:26:27 AM As per my records, at auction we have seen:
Lost Coin V1 Silver #052 (https://collectible.money/item/2023RARITYCHECK-LOST-COIN-V1-SILVER-052) sold on S&B (https://auctions.stacksbowers.com/lots/view/3-1608BY/2022-rarity-check-lost-coin-001-bitcoin-loaded-serial-no-52-silver-ms-68-pl-icg) - Funded with 0.01 BTC, still funded Rarity Check 2021 Set 1 #24 (Gilt) (https://collectible.money/item/2021RARITYCHECK-SET-1-GILT-24) sold on S&B (https://auctions.stacksbowers.com/lots/view/3-134R51/2021-rarity-check-vigilante-001-bitcoin-loaded-firstbits-1bzrweyn-serial-no-24-gold-plated-silver-ms-67-pl-icg) - Funded with 0.01 BTC, still funded Rarity Check 2021 Set 1 #61 (Silver) (https://collectible.money/item/2021RARITYCHECK-SET-1-SILVER-61) sold on Scarce City (https://scarce.city/auctions/raritycheck-silver-coin) - Funded with 0.001 BTC, still funded Searching the Stack&Bowers archives (https://archive.stacksbowers.com/?q=083df916-5333-4b20-80a4-67a8c5d59a64) yields a lot more, mostly unfunded - but looks like 9 (https://auctions.stacksbowers.com/lots/view/3-1606RV/2022-rarity-check-vibgyor-001-bitcoin-loaded-serial-no-9-orange-variety-gold-plated-silver-ms-70-icg) and 10 (https://auctions.stacksbowers.com/lots/view/3-1608AM/2022-rarity-check-vibgyor-001-bitcoin-loaded-serial-no-10-orange-variety-gold-plated-silver-ms-69-icg) from the potentially compromised VIBGYOR Orange set were sold on S&B - they are among the 12 coins that are still funded and have not been swept. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 09:28:10 AM The numbers #16,18,19,33 are only loaded with 0.001, they should have been 0.01
It's also a bit strange. #16 https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG (https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG) #18 https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG (https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG) #19 https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi (https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi) #33 https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb (https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 09:32:26 AM The numbers #16,18,19,33 are only loaded with 0.001, they should have been 0.01 It's also a bit strange. #16 https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG (https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG) #18 https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG (https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG) #19 https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi (https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi) #33 https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb (https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb) I noticed that too - I wonder if those addresses were accidentally treated as Silver coins, but put onto an Orange coin. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 07, 2024, 09:35:22 AM I don't want to assume the worst, but an auction being run by rc ended a couple of days ago without any winners being declared or closing posts: https://bitcointalk.org/index.php?topic=5504410. The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread. I have initiated fresh snapshots of all three published address lists: https://crypto.raritycheck.com/2021-set-1 https://archive.is/2Gpjg https://crypto.raritycheck.com/vibgyor https://archive.is/Ga3VZ https://crypto.raritycheck.com/lcs-v1 https://archive.is/DVuDS Hi Raghav I can verify that RC did contact me about winning auction #7 yesterday and that payment was sent for VIBGYOR coins. I will not be funding those it appears. I did pay RC to fund the coins I won in auction #6. (lcs-v1 set#31) I asked him to hold off on funding until MJ confirmed receipt and I know that he had inquired at least once but thankfully MJ was at the conference. Both coins I won have not been funded and I have politely asked RC to just refund me the 'extra' I paid to fund. https://www.blockchain.com/explorer/addresses/btc/1Awy3XJcHA2E3Bqg3zkRdEcG6zRo4WsT5A https://www.blockchain.com/explorer/addresses/btc/14A3qM7PA5VJ5c5qrCsQiookPJDbN3YQpx I can also say that I've done a few transactions with RC and he's always made things right. Wonder how that set got compromised though. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 09:38:53 AM I don't want to assume the worst, but an auction being run by rc ended a couple of days ago without any winners being declared or closing posts: https://bitcointalk.org/index.php?topic=5504410. The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread. I have initiated fresh snapshots of all three published address lists: https://crypto.raritycheck.com/2021-set-1 https://archive.is/2Gpjg https://crypto.raritycheck.com/vibgyor https://archive.is/Ga3VZ https://crypto.raritycheck.com/lcs-v1 https://archive.is/DVuDS Hi Raghav I can verify that RC did contact me about winning auction #7 yesterday and that payment was sent for VIBGYOR coins. I will not be funding those it appears. I did pay RC to fund the coins I won in auction #6. (lcs-v1 set#31) I asked him to hold off on funding until MJ confirmed receipt and I know that he had inquired at least once but thankfully MJ was at the conference. Both coins I won have not been funded and I have politely asked RC to just refund me the 'extra' I paid to fund. https://www.blockchain.com/explorer/addresses/btc/1Awy3XJcHA2E3Bqg3zkRdEcG6zRo4WsT5A https://www.blockchain.com/explorer/addresses/btc/14A3qM7PA5VJ5c5qrCsQiookPJDbN3YQpx I can also say that I've done a few transactions with RC and he's always made things right. Wonder how that set got compromised though. That's good to hear - hopefully we can hear from him on what's going on with the VIBGYOR orange set soon. In the meantime, I've flagged the RC collections on the tracker site - naturally, these flags will be removed if merited once an explanation for the swept keys is provided. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 10:10:25 AM I am looking to purchase up to 3 "compromised" coins with intact holos which have been swept.
I will pay the full 0.01 BTC face value, shipped to MJ. This is for analyzing the item and for posterity. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 07, 2024, 10:48:32 AM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it!
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 11:02:12 AM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Only some of the gilded 0.01 had been swept. 13pcs in total. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 12:47:06 PM I have had 3 of the VIBGY'O'R coins - both #64's and #89 gilded - all 3 were not sold as loaded.
I have a few other RC coins also not sold loaded. This will call into question their key process as being compromised - now the question is was it intentional or just sloppy? RC has (per the profile) been online "recently" also noting their last auction which ended August 4th has a last post by RC at 13 hours prior to it's ending with no closure to that auction. https://bitcointalk.org/index.php?topic=5504410.0 I do see above that gpfrag had won one of those lots. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 07, 2024, 01:08:19 PM Yup, my #48 was swept.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 07, 2024, 01:09:22 PM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Yes they were.. My #48 silver 0.001btc was swept. Just checked. Edit: icg mislabeled my slab so it was the wrong Addy. I have since found the proper address and it is currently still funded. Sorry for any confusion. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 01:17:55 PM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Yes they were.. My #48 silver 0.001btc was swept. Just checked. Can you share the address and images of the intact hologram with a timestamp? As per my list, the VIBGYOR Silver #48 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-48) is still intact - the address matches the one published on the raritycheck website (https://archive.is/Ga3VZ). If the actual coin has a different address from what is published and has been swept, things may be a lot worse than we thought. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 01:18:49 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 07, 2024, 01:20:33 PM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Yes they were.. My #48 silver 0.001btc was swept. Just checked. Can you share the address and images of the intact hologram with a timestamp? As per my list, the VIBGYOR Silver #48 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-48) is still intact - the address matches the one published on the raritycheck website (https://archive.is/Ga3VZ). If the actual coin has a different address from what is published and has been swept, things may be a lot worse than we thought. OK, so apparently my graded coin doesn't have the address on the coin. But the slab has the first bits on it by ICG. I was using that to check funding and turns out. Icg put the wrong first bits on the slab. They labeled it as #48 gilded. So I apologize for my confusion but the silver #48 0.001 is still funded. Now I gotta send it back to icg or should I peel? Just in case 🤔 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 01:32:18 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. Maybe the person sweeping the coins had the same problem as you since your #82 is still loaded. I hope you get your BTC. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 01:34:46 PM #98 and 84 gilded were just recently redeemed.
is that RC pulling more funding off coins? or did someone here redeem theirs? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 01:36:03 PM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Yes they were.. My #48 silver 0.001btc was swept. Just checked. Can you share the address and images of the intact hologram with a timestamp? As per my list, the VIBGYOR Silver #48 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-48) is still intact - the address matches the one published on the raritycheck website (https://archive.is/Ga3VZ). If the actual coin has a different address from what is published and has been swept, things may be a lot worse than we thought. OK, so apparently my graded coin doesn't have the address on the coin. But the slab has the first bits on it by ICG. I was using that to check funding and turns out. Icg put the wrong first bits on the slab. They labeled it as #48 gilded. So I apologize for my confusion but the silver #48 0.001 is still funded. Now I gotta send it back to icg or should I peel? Just in case 🤔 ICG being terrible at their job is no longer surprising to me. I would insist on a re-slabbing with the correct information, if convenient. Peel or not to peel, that is the question - Given the lower value of the silver, I'd personally hold off until we hear from RC, but everyone should make the call based on their own risk appetite. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 01:45:05 PM #98 and 84 gilded were just recently redeemed. is that RC pulling more funding off coins? or did someone here redeem theirs? No it was me bud, i own those . Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 07, 2024, 01:45:24 PM #98 and 84 gilded were just recently redeemed. is that RC pulling more funding off coins? or did someone here redeem theirs? I would think it's a collector....if it was an inside job they would've swept all Addy's in one go just like did with OPs series I am hoping this was some kind of breach ....but then again why would a coin maker hodl private keys at all? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 01:46:04 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. Maybe the person sweeping the coins had the same problem as you since your #82 is still loaded. I hope you get your BTC. How did you know i owned #82 ?? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 01:48:13 PM where can i find the public address book for the silver coins that have the hole in the middl of them ? ty
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 01:49:23 PM hwere can i find the public address book for the silver coins that have the hole in the middl of them ? ty https://crypto.raritycheck.com/lcs-v1 (archived: https://archive.is/DVuDS) https://collectible.money/series/raritycheck-lost-coin-v1-alloy https://collectible.money/series/raritycheck-lost-coin-v1-silver Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 01:49:57 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. Maybe the person sweeping the coins had the same problem as you since your #82 is still loaded. I hope you get your BTC. How did you know i owned #82 ?? your bump reminded me, mine graded beautifully. thank you so much. =) link to pic: https://ibb.co/bJ3b0D3 From the original sales thread Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Honeybadger2014 on August 07, 2024, 01:51:14 PM man, watching this debacle again makes me really happy to have bought mine "buyer funded" and just never fund them. i like the art, not the risk of putting bitcoin on it.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 01:56:38 PM #98 and 84 gilded were just recently redeemed. is that RC pulling more funding off coins? or did someone here redeem theirs? No it was me bud, i own those . good to know it was not RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 01:59:05 PM man, watching this debacle again makes me really happy to have bought mine "buyer funded" and just never fund them. i like the art, not the risk of putting bitcoin on it. same - I have had 5 RC coins - 4 bought and 1 given by RC (ironically) as a gift for those who were affected by Yogg's scammy bs. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 02:01:22 PM man, watching this debacle again makes me really happy to have bought mine "buyer funded" and just never fund them. i like the art, not the risk of putting bitcoin on it. same - I have had 5 RC coins - 4 bought and 1 given by RC (ironically) as a gift for those who were affected by Yogg's scammy bs. i dont even know how to reply to that. =(. hope your funds end up back in your hands . Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: markinaz on August 07, 2024, 02:01:54 PM I just checked, I have 3 of the silver coins .001 BTC. 1 of them is swept #70. The other 2 are not. I am going to peel one now...
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 02:02:59 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. Maybe the person sweeping the coins had the same problem as you since your #82 is still loaded. I hope you get your BTC. How did you know i owned #82 ?? your bump reminded me, mine graded beautifully. thank you so much. =) link to pic: https://ibb.co/bJ3b0D3 From the original sales thread awwwww, sorry im in "paranoia mode" right now. lmfao.. thank you for caring bud =) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 02:04:03 PM I just checked, I have 3 of the silver coins .001 BTC. 1 of them is swept #70. The other 2 are not. I am going to peel one now... good luck reading the shit ass font/print job. =( just because they havent been swiped doesn't mean your going to be able to read them to be able to swipe them yourself sad to say. (i hope you can read them bud) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 02:04:25 PM I just checked, I have 3 of the silver coins .001 BTC. 1 of them is swept #70. The other 2 are not. I am going to peel one now... As per my list, VIBGYOR Silver #70 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-70) wasn't funded to begin with - can you confirm if the address on your coins match the addresses on my site and those on rarity check's (https://archive.is/Ga3VZ)? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 07, 2024, 02:15:15 PM Wow.... :( :( :(
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 02:18:05 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 02:22:41 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. Looks like all are unfunded except one of the hole coins @ .001 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 02:29:32 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. I have dropped James and the info contact an email listing out the potentially affected on-going auctions, and linking to this thread. I will update here if they reply. For reference, the ongoing auctions involving RC are: https://auctions.stacksbowers.com/lots/view/3-1BAYV9/unfunded-2022-rarity-check-lost-coin-0001-bitcoin-serial-no-079-zinc-alloy-proof-68-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYX2/unfunded-2022-rarity-check-diy-lost-coin-0001-bitcoin-zinc-alloy-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYAN/2022-rarity-check-lost-coin-0001-bitcoin-loaded-serial-no-100-zinc-alloy-ms-68-pl-icg https://auctions.stacksbowers.com/lots/view/3-1BAYWK/unfunded-2022-rarity-check-diy-lost-coin-0001-bitcoin-zinc-alloy-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYVO/unfunded-2022-rarity-check-diy-lost-coin-001-bitcoin-silver-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYW5/unfunded-2022-rarity-check-diy-lost-coin-001-bitcoin-silver-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYUE/unfunded-2022-rarity-check-vibgyor-0001-bitcoin-serial-no-8-orange-variety-silver-ms-70-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYTX/unfunded-2022-rarity-check-vibgyor-001-bitcoin-serial-no-8-orange-variety-gilt-silver-ms-70-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYUU/unfunded-2022-rarity-check-lost-coin-001-bitcoin-serial-no-79-silver-proof-69-deep-cameo-pcgs Of these, Lot 1084 (https://auctions.stacksbowers.com/lots/view/3-1BAYTX/unfunded-2022-rarity-check-vibgyor-001-bitcoin-serial-no-8-orange-variety-gilt-silver-ms-70-pcgs) is from the same series as the peeled items (although this one is unfunded) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: markinaz on August 07, 2024, 02:31:07 PM As per my list, VIBGYOR Silver #70 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-70) wasn't funded to begin with - can you confirm if the address on your coins match the addresses on my site and those on rarity check's (https://archive.is/Ga3VZ)? I don't have the addresses of the coins, I only have this correspondence: Hello How are you? Sure #46, #47, #70 are yours. Please transfer 0.0063BTC to 17AXCoY1PCaSU65D8HyeA7S3Pcz4wCPAgU and share the transaction Id. Thank you Team RC They did make a mistake with coin 70 as they still had it listed after I bought it, so likely that explains why they failed to load it. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: markinaz on August 07, 2024, 02:32:48 PM good luck reading the shit ass font/print job. =( just because they havent been swiped doesn't mean your going to be able to read them to be able to swipe them yourself sad to say. (i hope you can read them bud) Holy crap, you are not kidding.. I am on my 7th attempt and still no luck. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 02:33:32 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. Looks like all are unfunded except one of the hole coins @ .001 even unfunded ones pose a risk in the future if the buyer loads them and they get swept at a later time. the fact that a single coin was swept is evidence that keys were saved and that all keys are potentially at risk. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 07, 2024, 02:33:34 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. Looks like all are unfunded except one of the hole coins @ .001 Ironically or prophetically the "Missing Bitcoin" coin hahaha I own 1 RC Silver w/ .001 that hasn't been swept... yet :D Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 02:42:04 PM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. Looks like all are unfunded except one of the hole coins @ .001 even unfunded ones pose a risk in the future if the buyer loads them and they get swept at a later time. the fact that a single coin was swept is evidence that keys were saved and that all keys are potentially at risk. Good point. Either keys saved or could have been potenially misapplied. In either case, more questions than answers. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: cygan on August 07, 2024, 02:56:20 PM i think that if the private keys have not been deposited with the corresponding rc-coins and have been misplaced by something, the probability that the person who swapped the coins yesterday would also be in possession of the 'misplaced' coins would be very low...
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 07, 2024, 02:58:40 PM Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it! Yes they were.. My #48 silver 0.001btc was swept. Just checked. Can you share the address and images of the intact hologram with a timestamp? As per my list, the VIBGYOR Silver #48 (https://collectible.money/item/2022RARITYCHECK-VIBGYOR-ORANGE-SILVER-48) is still intact - the address matches the one published on the raritycheck website (https://archive.is/Ga3VZ). If the actual coin has a different address from what is published and has been swept, things may be a lot worse than we thought. OK, so apparently my graded coin doesn't have the address on the coin. But the slab has the first bits on it by ICG. I was using that to check funding and turns out. Icg put the wrong first bits on the slab. They labeled it as #48 gilded. So I apologize for my confusion but the silver #48 0.001 is still funded. Now I gotta send it back to icg or should I peel? Just in case 🤔 Peel - cash out - call it a day. I am at the point that I am no longer even looking to buy or even keep anything funded. Selling off what I have and sticking to only keeping coins that I generated the keys for. Was shrinking my collection anyway and this just gives me another push to keep moving them out. Might be a bit of a knee jerk reaction but why take the risk. Even makers that are long gone might still have a piece of paper somewhere with a list of private keys on them. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 03:14:31 PM there are 2 that just moved - that was me, helping someone redeem their very poorly very hard to read keys.
will update with coin numbers in a moment. first was: Gilded 82 second was: lost coin series - v1 - I dont know the coin number yet. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: markinaz on August 07, 2024, 03:22:46 PM I wanted to confirm I was able to import my private keys from 2 of the silver coins (.001). I still have one coin that was not funded originally, which I have asked RC about.
I redeemed 46 and 47. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 07, 2024, 03:28:16 PM Side thought, any reason nobody has removed / updated their trust for raritycheck https://bitcointalk.org/index.php?action=trust;u=3240980
IF this turns out to be something else any negative trust can be removed later and replaced with positive again. But for now anyone who did not see this thread and just does a quick look his trust is not going to know about this. I just put in a negative, but it's just 1 in a wall of positives. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: cygan on August 07, 2024, 03:37:33 PM I wanted to confirm I was able to import my private keys from 2 of the silver coins (.001). I still have one coin that was not funded originally, which I have asked RC about. I redeemed 46 and 47. i was also able to follow the whole thing live on raghavsood's collectible money's telegram channel the way it is presented, with all the information, I think it is also successful https://www.talkimg.com/images/2024/08/07/5VpmC.png Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 07, 2024, 03:48:22 PM The owners of some of the swept coins below that are known from original sales thread...
#11 - Mortare #13 - HouseOfBAMF #15 - hotdog7 #17 - Edits Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Steeley on August 07, 2024, 03:58:13 PM I have a request. Will someone, who has already swept a coin be willing to post a pic of the private key so we can see the quality of it?
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 04:01:02 PM good luck reading the shit ass font/print job. =( just because they havent been swiped doesn't mean your going to be able to read them to be able to swipe them yourself sad to say. (i hope you can read them bud) Holy crap, you are not kidding.. I am on my 7th attempt and still no luck. you figure it out yet? i had to ask Mopar to help me and he was able to recover 2 coins funds after i could not read the keys, if you cant figure it out and your at your wits end, maybe reach out to him. (and its always nice to leave him a tip if he pull off recovering your funds, even if he says he doesn't want one lol imo) He is here for the community thank you Mopar ! Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 07, 2024, 04:07:57 PM I have a request. Will someone, who has already swept a coin be willing to post a pic of the private key so we can see the quality of it? here you go : https://ibb.co/2Fg4Tm5 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 07, 2024, 04:10:28 PM I've been checking in on this post throughout the day today. Hopefully everything works out for all involved.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 07, 2024, 04:12:00 PM I have a request. Will someone, who has already swept a coin be willing to post a pic of the private key so we can see the quality of it? here you go : https://ibb.co/2Fg4Tm5 Wtf did they print that with? Jesus!! That's the most janky looking piece of paper. 🤦🏻♂️ Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 04:15:54 PM good luck reading the shit ass font/print job. =( just because they havent been swiped doesn't mean your going to be able to read them to be able to swipe them yourself sad to say. (i hope you can read them bud) Holy crap, you are not kidding.. I am on my 7th attempt and still no luck. you figure it out yet? i had to ask Mopar to help me and he was able to recover 2 coins funds after i could not read the keys, if you cant figure it out and your at your wits end, maybe reach out to him. (and its always nice to leave him a tip if he pull off recovering your funds, even if he says he doesn't want one lol imo) He is here for the community thank you Mopar ! always happy to help - I am always here to help the community. here you go : https://ibb.co/2Fg4Tm5 you shared the nice one too - the other one was a bit more blurry? not sure if that is the right word - but the letters were bleeding into one another. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 04:49:36 PM Good morning everyone,
I get the pleasure of waking up, logging on and seeing another unfolding crisis. Can anyone confirm they have heard from RC today about this, he should issue a public statement ASAP. We already lived through the cold-key disaster, I would say redeem and get your bitcoin off while you still have the chance. I slept on cold-key and never peeled my two sets that I have and I ended up losing all my bitcoin to Yogg. https://i.ibb.co/m9Z3tM5/IMG-2558.jpg (https://ibb.co/Ycnx8qB) These private keys are garbage, awful work indeed. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: HouseOfBAMF on August 07, 2024, 05:13:59 PM The owners of some of the swept coins below that are known from original sales thread... #11 - Mortare #13 - HouseOfBAMF #15 - hotdog7 #17 - Edits I can assure you that I still have my coin and it is NOT peeled. I’ll post a photo later today Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 05:27:26 PM Whoever is swiping the coins has a decent stack of coin sitting on 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU / 2.35BTC to be exact.
.2 of this 2.35 is known to be coming from customer swiped funds of the RC attack. Our flowchart looks like many small amounts being swept together into group wallets and then being pushed through into the master wallet which would be 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU https://i.ibb.co/6BkcncP/Screenshot-2024-08-07-132447.png (https://ibb.co/HdjLFLz) Here are all of the smaller group wallets being drained into the master wallet: https://i.ibb.co/X4jN6NW/Screenshot-2024-08-07-132833.png (https://ibb.co/Jdm080c) All of these smaller amounts that drain into the group wallets are small amounts ranging from 0.001 to 0.01BTC, very similar denominations as the RC coins. https://i.ibb.co/K9cTSkm/Screenshot-2024-08-07-133008.png (https://ibb.co/NLgcbP7) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 05:44:02 PM I have been looking at the transaction flows as well - while a full analysis will take a few more days, the majority of the funds that ended up in 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU do not appear to be from collectibles.
The outputs I've checked so far seem to be overwhelmingly 1-2+ years old, and ultimately originate from p2pkh addresses funded through a very broad variety of sources (exchanges, regular wallets, p2sh wallets, multisig, single sig, etc) I would float the possibility at this time that raritycheck may have used some key generation method that was backdoored, and everyone who used that is being swept right now. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 07, 2024, 05:48:47 PM What I can say and speak on is that I wish he kept a copy of his keys cuz I can’t decipher SHIT from his fucking lost coin series. Holy fuck!! Use some better ink, larger letters… anything cuz this btc is probably lost. Even using a 10x magnifying glass.
Total horseshit Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 07, 2024, 05:52:27 PM Pretty fucking terrible to have to peel a coin. It’s even worse when you peel and can’t redeem
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 05:53:50 PM This is the full rough estimate diagram of what I am seeing:
Lots of tiny blue amounts ( Roughly 20 transactions a batch ) being dumped into larger pink group wallets ( 13 group wallets total ) being dumped into the large red circle which is the master wallet. Some of the blue amounts are RC customer funds that are being swept up into the master wallet over a series of transactions. https://i.ibb.co/dmcx9ys/Screenshot-2024-08-07-135217.png Eclipse - transaction flowchart - RC attack Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 05:59:04 PM I have been looking at the transaction flows as well - while a full analysis will take a few more days, the majority of the funds that ended up in 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU do not appear to be from collectibles. The outputs I've checked so far seem to be overwhelmingly 1-2+ years old, and ultimately originate from p2pkh addresses funded through a very broad variety of sources (exchanges, regular wallets, p2sh wallets, multisig, single sig, etc) I would float the possibility at this time that raritycheck may have used some key generation method that was backdoored, and everyone who used that is being swept right now. If the key-gen that RC used was backdoored, this is very bad news and the entire collection is compromised. The attacker is using scripts to automate batch transactions, so maybe all of them may not be sent to the master wallet yet but they may-be in the future. If the attacker failed to sweep everyhing at once, he failed. He is only giving time for people to move their coins off and save their funds. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: mortare on August 07, 2024, 06:05:51 PM The owners of some of the swept coins below that are known from original sales thread... #11 - Mortare #13 - HouseOfBAMF #15 - hotdog7 #17 - Edits My coins are in the bank safe unpeeled. Just checked and my 0.01 btc RarityCheck VIBGYOR 2022 coin orange #011/140 has been swepped ... 1AMPtQJ3ajQBjZ1JdrtnhBukFgq7MW8749 My 0.001 btc 17rdnQEMe1fj7WX8jPnPrRkTYBYnRQYmg7 seems alright for now... Here we go again ffs Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 07, 2024, 06:13:15 PM There is at least one more batch of transactions in/around the same block that exhibit the same behaviour.
The funds from the VIBGYOR coins were stole in two txs (so far): 5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f (https://mempool.space/tx/5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f) and 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64 (https://mempool.space/tx/5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64), both mined in block 855689. Subsequently, the outputs from those two addresses were consolidated in another transaction (8bcb78031b29a563268170d22c002a12c6ff4d59996095bbdb792c7607f80bd0 (https://mempool.space/tx/8bcb78031b29a563268170d22c002a12c6ff4d59996095bbdb792c7607f80bd0)) into 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU. In block 855689, there are also transactions like 61772db434ea944f77099e4fcc85656eebc58898e02b2716c0b02f9c78a8a7ae (https://mempool.space/tx/61772db434ea944f77099e4fcc85656eebc58898e02b2716c0b02f9c78a8a7ae) and some others, which exhibit the same behaviour: Consolidate BTC from P2PKH addresses a few years old into a P2WPKH, then further consolidate them into a new P2PKH address where the funds sit idle. The transaction sizing and amounts are all in the same ballpark. In the second case, the funds are sent to 16U5Rwm6FMDNGwE7CbFaKV2xQCKzdmqK9Q. Once again, I can't find any meaningful link to collectibles for the majority of the outputs consumed in these two batches (although there are quite a few 0.01 BTC inputs that I don't have linked to any collectible series). If there is a wallet backdoor somewhere, it has been active for several years - there are outputs dating back to 2019 (there might be older ones, I haven't checked everything yet) that have been consolidated in these batches. I don't see any news of a known wallet compromise in recent times. It's getting late for me, so I will continue with this in later once I'm more awake. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 06:23:45 PM There is at least one more batch of transactions in/around the same block that exhibit the same behaviour. The funds from the VIBGYOR coins were stole in two txs (so far): 5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f (https://mempool.space/tx/5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f) and 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64 (https://mempool.space/tx/5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64), both mined in block 855689. Subsequently, the outputs from those two addresses were consolidated in another transaction (8bcb78031b29a563268170d22c002a12c6ff4d59996095bbdb792c7607f80bd0 (https://mempool.space/tx/8bcb78031b29a563268170d22c002a12c6ff4d59996095bbdb792c7607f80bd0)) into 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU. In block 855689, there are also transactions like 61772db434ea944f77099e4fcc85656eebc58898e02b2716c0b02f9c78a8a7ae (https://mempool.space/tx/61772db434ea944f77099e4fcc85656eebc58898e02b2716c0b02f9c78a8a7ae) and some others, which exhibit the same behaviour: Consolidate BTC from P2PKH addresses a few years old into a P2WPKH, then further consolidate them into a new P2PKH address where the funds sit idle. The transaction sizing and amounts are all in the same ballpark. In the second case, the funds are sent to 16U5Rwm6FMDNGwE7CbFaKV2xQCKzdmqK9Q. Once again, I can't find any meaningful link to collectibles for the majority of the outputs consumed in these two batches (although there are quite a few 0.01 BTC inputs that I don't have linked to any collectible series). If there is a wallet backdoor somewhere, it has been active for several years - there are outputs dating back to 2019 (there might be older ones, I haven't checked everything yet) that have been consolidated in these batches. I don't see any news of a known wallet compromise in recent times. It's getting late for me, so I will continue with this in later once I'm more awake. We need RC to come on here and reveal what key-gen software he used. This would demistify alot of the foggy haze. Knowing the key-gen software would also help us get the word out to the right people and issue a broader warning to the bitcoin ecosystem. Until then, it just looks like some RC collectables got caught up in a larger hack of some kind with small time collectors being just collateral damage. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tldr-hodl on August 07, 2024, 06:39:41 PM IMHO I would hazard a guess that if this was some specific tool (key gen) issue, there would be much more screaming about this on Twitter/forum/elsewhere...
Btw. what exactly does it mean "Last Active: (Recently)"? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: ZipReg on August 07, 2024, 06:46:21 PM I am very sorry to hear this has happened guys :(
Hate to say it but from my first interaction with rarity I felt they were an untrustworthy douchebag, so much so that I denied them access into my time traveler loaded canvas contest. I know that the walletgenerator.net utility was compromised back around 2019 and was found to be relaying addresses that were generated. This should be easy to discover because in the browser details it will show the url call to the ip it is trying to send the generated addresses to. My two satoshis, I don't believe they are compromised from an outside entity. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 06:47:28 PM this is why you use an offline airgapped key generation process.
What I can say and speak on is that I wish he kept a copy of his keys cuz I can’t decipher SHIT from his fucking lost coin series. Holy fuck!! Use some better ink, larger letters… anything cuz this btc is probably lost. Even using a 10x magnifying glass. Total horseshit I was able to help rsincognito and deciphered both pks that he sent me - willing to help anyone who needs it at zero cost. you can tip if you want but my motivation is to get the bitcoin to the buyers not back to the maker. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: ChiBitCTy on August 07, 2024, 06:48:48 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. This is what Sol Noctis did with their Bull coins. The redemption process is absolutely ridiculous. It’s in such a way that there’s no other reason than them not wanting people to redeem them. Oh and yeah..one coin was swept and then funded again, a coin owned by someone who came forward with the UNPEELED coin which was sent to a seasoned collector who verified it was not peeled and then was sent to the company who produced the coins ..where no explanation was ever given, and in fact they were extremely shady about the whole thing. @DaveF - great recommendations , I concur entirely. RCs most recent ANN thread being locked troubles me, and if you read through the entire thread, lot of head scratching. Also kinda interesting how he’s trying to get the addresses for all the MrHodl silver “chip” coins..from what I can tell he doesn’t own any of them but keeps requesting a list .. ??? I dunno, just odd to me. IMHO I would hazard a guess that if this was some specific tool (key gen) issue, there would be much more screaming about this on Twitter/forum/elsewhere... Btw. what exactly does it mean "Last Active: (Recently)"? I believe that means they were logged in the last 24 hours. Maybe Cyrus or a mod can chime in on this , but pretty sure that’s the case. The forum BIP tool that I THINK @Vod created tells you how long ago someone was active more specifically, like to the hour , I think ..gunna have to double check that here after I hit send on this, will update .. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: aoluain on August 07, 2024, 07:14:09 PM this is why you use an offline airgapped key generation process. What I can say and speak on is that I wish he kept a copy of his keys cuz I can’t decipher SHIT from his fucking lost coin series. Holy fuck!! Use some better ink, larger letters… anything cuz this btc is probably lost. Even using a 10x magnifying glass. Total horseshit I was able to help rsincognito and deciphered both pks that he sent me - willing to help anyone who needs it at zero cost. you can tip if you want but my motivation is to get the bitcoin to the buyers not back to the maker. Going forward any new maker offering loaded collectibles needs to be quizzed on how they are creating keys etc. Anyone using a lazy route software key gen tool needs to be given a wide berth. Pretty fucking terrible to have to peel a coin. It’s even worse when you peel and can’t redeem I've never peeled a coin, never even seen an image of what is contained there after peeling. Couple of limitations coming to light, key creation and printing, that sample posted above is pretty shocking.. The problem is that creators know that the chances of their coins being peeled a d redeemed is slim so quality has an opportunity to be poor generally speaking Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 07:27:42 PM I will be redeeming the VIBGYOR set 88, so if you see that, it is me.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 07, 2024, 07:31:16 PM The utter shitty print job of private keys and font choice is ridiculous, it’s almost as if he created them to never be redeemed, I’m sitting in a dark room with two different magnifying glasses trying to decipher this bullshit. I’m so glad I’m running into this situation now and not when 1 btc is worth million dollars. This is pretty fucked. Also kinda interesting how he’s trying to get the addresses for all the MrHodl silver “chip” coins..from what I can tell he doesn’t own any of them but keeps requesting a list .. ??? I dunno, just odd to me. This is concerning as RC has offered MrHodl items at auction. I’ve in fact won 2 items. One was lost in the mail and was refunded. The other I received but there is an issue that needs to be resolved with correct PA and coin # as there is a discrepancy. I reached out to MrHodl yesterday via his website and haven’t heard from him yet. He might be able to shed some light here as well. https://bitcointalk.org/index.php?topic=5491364.msg63915798#msg63915798 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Cryptogreatdane on August 07, 2024, 07:41:52 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of?
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 07, 2024, 07:52:16 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? This would be a very bad look for Stacks in my opinion... A lot of the stuff sold on Stacks is limited... For example, the pink Miami note listed on sacks...There's only I think 11 made.....Same for a lot of the coins (There's only a limited amount made)...... If members coins are being targeted but the ones being sold on Stacks aren't.........Yeah....Bad Look.... Just my opinion... Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 08:07:16 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? This would be a very bad look for Stacks in my opinion... A lot of the stuff sold on Stacks is limited... For example, the pink Miami note listed on sacks...There's only I think 11 made.....Same for a lot of the coins (There's only a limited amount made)...... If members coins are being targeted but the ones being sold on Stacks aren't.........Yeah....Bad Look.... Just my opinion... Based out of the UK. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 07, 2024, 08:13:11 PM https://i.ibb.co/TqNkJpT/image.png (https://ibb.co/TqNkJpT) https://i.ibb.co/hfPnL0z/image.png (https://ibb.co/hfPnL0z)
A ms70 too. Smh Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 07, 2024, 08:15:18 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? This would be a very bad look for Stacks in my opinion... A lot of the stuff sold on Stacks is limited... For example, the pink Miami note listed on sacks...There's only I think 11 made.....Same for a lot of the coins (There's only a limited amount made)...... If members coins are being targeted but the ones being sold on Stacks aren't.........Yeah....Bad Look.... Just my opinion... Based out of the UK. Just in trading messages with RC prior; he’s about as British as French Fries are French. Decent enough guy in correspondence, just doesn't type queen's english. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 07, 2024, 08:27:46 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? This would be a very bad look for Stacks in my opinion... A lot of the stuff sold on Stacks is limited... For example, the pink Miami note listed on sacks...There's only I think 11 made.....Same for a lot of the coins (There's only a limited amount made)...... If members coins are being targeted but the ones being sold on Stacks aren't.........Yeah....Bad Look.... Just my opinion... Based out of the UK. Just in trading messages with RC prior; he’s about as British as French Fries are French. Maybe he comes from India. https://find-and-update.company-information.service.gov.uk/company/14433322/officers (https://find-and-update.company-information.service.gov.uk/company/14433322/officers) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 07, 2024, 08:35:18 PM Maybe this bloke??
https://www.youtube.com/watch?v=P9GJNff8E9Y Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 08:58:17 PM Hello
We just saw this thread. Haven't read this.. Only got a message from James from Stacks.. Going through this now Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:01:39 PM All coins are listed here https://crypto.raritycheck.com/
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 07, 2024, 09:06:37 PM Hello We just saw this thread. Haven't read this.. Only got a message from James from Stacks.. Going through this now Glad to see you're here and haven't abdicated the throne. Looks like a major compromise and appreciate you sorting this out. please don't fund my VIGBYOR coins i paid you for in auction 6. i sent a dm but wanted to flag here directly as well as I imagine your inbox is full. Let me know if i can help you in anyway in sleuthing through this. look forward to your findings. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:14:37 PM Hey guys
We havent read the thread ourselves. Ok this is very sad, Looks like some of our reserved coins are also impacted. Can someone please confirm if your LCS v1 coins have been impacted? https://crypto.raritycheck.com/lcs-v1 or https://crypto.raritycheck.com/2021-set-1 Please don't worry. Everyone impacted will be given few options
About the leak. At this point we have no clue what happened. But we are looking into this. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:18:00 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? There is no inside (within the company) job. Some of our coins have been also compromised. At this point, no clue how this happened. Looks like all 0.01 VIBGYOR coins were impacted https://crypto.raritycheck.com/vibgyor We will refund all impacted collectors. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 07, 2024, 09:19:27 PM Just an observation.. if what i read is correct that coins swept were sold to forum members but the coins sold through stacks were not leads me to believe inside job. Looking to victimize easy targets but not involve a company like stacks with access to lawyers and money. Is this correct? And what country is rarity based out of? There is no inside (within the company) job. Some of our coins have been also compromised. At this point, no clue how this happened. Looks like all 0.01 VIBGYOR coins were impacted https://crypto.raritycheck.com/vibgyor We will refund all impacted collectors. What key-gen software did you use for the private key generation. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:32:00 PM Lots of messages. We will answer one by one. Please wait.
Please can anyone confirm if their LCS coin was impacted Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 09:36:00 PM Lots of messages. We will answer one by one. Please wait. Please can anyone confirm if their LCS coin was impacted Also, can anyone confirm if any of their 2021 set 1 coins were impacted? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:38:32 PM Lots of messages. We will answer one by one. Please wait. Please can anyone confirm if their LCS coin was impacted Also, can anyone confirm if any of their 2021 set 1 coins were impacted? No 2021 coins were impacted. Please don't redeem 2021 coins. Those keys were generated differently to VIBGYOR keys Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 07, 2024, 09:40:51 PM Lots of messages. We will answer one by one. Please wait. Please can anyone confirm if their LCS coin was impacted Also, can anyone confirm if any of their 2021 set 1 coins were impacted? No 2021 coins were impacted. Please don't redeem 2021 coins. Those keys were generated differently to VIBGYOR keys Were the silver .001 loaded VIBGYOR keys generated the same as the gilt .01 loaded coins that have been swept? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:41:13 PM Ok so only the VIBGYOR series were impacted.
Please don't worry. Everyone impacted will be contacted and refunded. We will even regenerate the keys and load them if needed (with a new sticker). We will pay for shipping both ways. Please message us if you were impacted. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: seavodin on August 07, 2024, 09:43:06 PM Lost coin V1 silver #3 looks very suspicious with transactions.
Looks like it might have been hit as well, unless someone here on the boards swept it for safety. Perhaps it was swept by a member: VIBGYOR gilded 82 was swept at the same time. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 07, 2024, 09:47:46 PM Ok so only the VIBGYOR series were impacted. Please don't worry. Everyone impacted will be contacted and refunded. We will even regenerate the keys and load them if needed (with a new sticker). We will pay for shipping both ways. Please message us if you were impacted. Can you tell us what font you used for Lost Series Coins keys? I peeled both of mine for safety measures and cannot decipher the keys on the .01 load. Even bought a 10x magnifying glass w/light and I still can’t figure it out. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:48:47 PM Lost coin V1 silver #3 looks very suspicious with transactions. Looks like it might have been hit as well, unless someone here on the boards swept it for safety. Perhaps it was swept by a member, VIBGYOR gilded 82 was swept at the same time. We think the coin owner has redeemed that coin. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 09:49:11 PM Ok so only the VIBGYOR series were impacted. Please don't worry. Everyone impacted will be contacted and refunded. We will even regenerate the keys and load them if needed (with a new sticker). We will pay for shipping both ways. Please message us if you were impacted. Can you tell us what font you used for Lost Series Coins keys? I peeled both of mine for safety measures and cannot decipher the keys on the .01 load. Even bought a 10x magnifying glass w/light and I still can’t figure it out. Please don't worry. We will message you. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 07, 2024, 09:49:58 PM Lots of messages. We will answer one by one. Please wait. Please can anyone confirm if their LCS coin was impacted I swept the .001 that I had after a few attempts. Cannot sweep the .01 but will keep trying. Wasn’t going to sit by and get Yogg’d again personally Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: hybridsole on August 07, 2024, 09:54:10 PM I'm glad to hear you are willing to make your customers whole. For transparency sake, please tell us the method of key generation and custody for compromised coins. This could be a valuable lesson to would-be coin makers out there.
I hope you plan to offer a full debrief of what occurred, and not just deal with it via PM for affected owners. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogothmanhattan on August 07, 2024, 10:10:36 PM Ended peeling my coin #67 from series one batman symbol and sweeping the BTC....what a shame. The private key was crystal clear btw
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 10:33:37 PM Ended peeling my coin #67 from series one batman symbol and sweeping the BTC....what a shame. The private key was crystal clear btw Sorry to hear this. please pm us. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 10:34:02 PM I'm glad to hear you are willing to make your customers whole. For transparency sake, please tell us the method of key generation and custody for compromised coins. This could be a valuable lesson to would-be coin makers out there. I hope you plan to offer a full debrief of what occurred, and not just deal with it via PM for affected owners. Yes. We will create a response. At the moment we are not sure either. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 10:36:13 PM We have replied to everyone that was impacted.
Please PM us if your coin has been impacted. @raghavsood, we saw you did some analysis. Could you please help us in figuring out exactly how many coins were impacted if you already have some data. Please note that more than half of VIBGYOR coins were not loaded. (We will provide the exact number tomorrow). Also, please note all impacted customers will be refunded and even provided loaded coins as replacement if you were impacted. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 07, 2024, 10:38:35 PM Ok so only the VIBGYOR series were impacted. Please don't worry. Everyone impacted will be contacted and refunded. We will even regenerate the keys and load them if needed (with a new sticker). We will pay for shipping both ways. Please message us if you were impacted. How were the keys generated? You said they were done differently - how so? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: polymerbit on August 07, 2024, 10:38:51 PM Could you kindly post the differences between the two key generation types you claim to use.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 07, 2024, 10:40:14 PM Ended peeling my coin #67 from series one batman symbol and sweeping the BTC....what a shame. The private key was crystal clear btw Sorry to hear this. please pm us. I have not read the entire thread but the last posts you made it looks like you are not a Yogg....looks and sounds like a breach that was not intentional. I am content with hodling the coin empty and of course I swept the BTC. I think from the looks of it you are an honest coin maker and left you merit for coming forward and doing the right thing. I do hope you find out how this happened though to put the rest of our minds at ease. Thanks again for offering though and hope all ends well for everyone involved. Cheers Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 07, 2024, 10:50:50 PM Almost home to peel my #41 silver coin but just saw it got swept damn it!
13LrZUGByDw2TYWfSheWWs3TmNmUMPjQ1U Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 07, 2024, 10:51:27 PM Ended peeling my coin #67 from series one batman symbol and sweeping the BTC....what a shame. The private key was crystal clear btw Sorry to hear this. please pm us. I have not read the entire thread but the last posts you made it looks like you are not a Yogg....looks and sounds like a breach that was not intentional. I am content with hodling the coin empty and of course I swept the BTC. I think from the looks of it you are an honest coin maker and left you merit for coming forward and doing the right thing. I do hope you find out how this happened though to put the rest of our minds at ease. Thanks again for offering though and hope all ends well for everyone involved. Cheers I have to agree. Coming forward and saying exactly what we needed to hear is a great first step. Following through is the next important step. I can say that RC team messaged me through the forum asking for pics of my private keys that I couldn’t figure out. With in 10 minutes they had sent me what they believed the key was. Then even asked for confirmation if it worked. It did and my peeled coins are now at least swept. Also - the VIBGYOR series .001 are now being swept - they got mine before I could get to it as I was worried about my .01 load Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Cryptogreatdane on August 07, 2024, 10:57:17 PM Ended peeling my coin #67 from series one batman symbol and sweeping the BTC....what a shame. The private key was crystal clear btw Sorry to hear this. please pm us. I have not read the entire thread but the last posts you made it looks like you are not a Yogg....looks and sounds like a breach that was not intentional. I am content with hodling the coin empty and of course I swept the BTC. I think from the looks of it you are an honest coin maker and left you merit for coming forward and doing the right thing. I do hope you find out how this happened though to put the rest of our minds at ease. Thanks again for offering though and hope all ends well for everyone involved. Cheers BAM- This is how a breach is handled. Concerns answered and solutions proposed. Hopefully RC can follow through with everything but so far impressed with the response. Now, detective work and lets find the crook. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 11:17:23 PM Total loaded 72 coins (25 gilded 0.01 BTC(some are buyer funded 0.001) + 47 silver 0.001 BTC)
Sweeped gilded addresses: gilded: 1 - 1JW8JVnveNdD6ULGaM9W56KVkgs99hHwBJ, 0.0 BTC gilded: 11 - 1AMPtQJ3ajQBjZ1JdrtnhBukFgq7MW8749, 0.0 BTC gilded: 12 - 1FrE3MbzxYMpLjh14Efv4ikoirbCpdodYZ, 0.0 BTC gilded: 13 - 1K28LHHtwj7ftqDVguUSbpcj9B9uWTGEXp, 0.0 BTC gilded: 14 - 12FbeUEckoJpG2xGnjU7pWT5ZjFkYDFoEs, 0.0 BTC gilded: 15 - 1AK1JdkEdFZ7HfJPzF3QHXsc3ziCT2m6ks, 0.0 BTC gilded: 17 - 17wfj6ef9zieHXLcPBWPhE2KNKuTcet2NR, 0.0 BTC gilded: 20 - 16qNy5zoCMES2H35RNnMgxtYBTu2kM96zg, 0.0 BTC gilded: 21 - 1AaASgch97pEfAhrVPwYF551p227yHRMoV, 0.0 BTC gilded: 22 - 17TPPcp9sruSGHGN9BxkppzfUNjcAT2AVo, 0.0 BTC gilded: 23 - 1CHkivLgVVJGJ5yLW6iuBpP6QE3Mhh6PCB, 0.0 BTC gilded: 24 - 1JNXJvowXpeGWeFxpj82nFnEGxyTNwuvYp, 0.0 BTC gilded: 25 - 1E2meDtAdUE2HaoW56eWKiLipN5MnFK3tX, 0.0 BTC gilded: 82 - 1EebYoM2dgss72iufTbaCzc7BjpZrWPaDC, 0.0 BTC gilded: 84 - 1KhNugM436utqwBL3h2UXF6Xa1diQwg7xq, 0.0 BTC gilded: 88 - 19wWUxwBnBgxpz4ogS192yX1T9LsbHPhtL, 0.0 BTC gilded: 98 - 1C1EqyLz2zXEJtig6H2tBbYqrinUFdCS7N, 0.0 BTC Still loaded: gilded: 9 - 18TjrYAfdZUTAYooK9ZeCZszw6yLGCTK3X, 0.01 BTC gilded: 10 - 1HYf3FfmA96qNj2Rwaz5nr3r7JvMDQTANt, 0.01 BTC gilded: 16 - 1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG, 0.001 BTC gilded: 18 - 19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG, 0.001 BTC gilded: 19 - 13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi, 0.001 BTC gilded: 33 - 1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb, 0.001 BTC gilded: 81 - 1JhPQSUL4rMcrEkDHssDiJrJXwHKbjDkRe, 0.01 BTC gilded: 100 - 1KxfmW4ou58eMB2sVhBGitAtQ1ymvYyMjP, 0.01 BTC Sweeped silver: silver: 1 - 16AYovMaG8Z5m7wPbra37g7aSNvewruqTM, 0.0 BTC silver: 11 - 17rdnQEMe1fj7WX8jPnPrRkTYBYnRQYmg7, 0.0 BTC silver: 13 - 17NT1UBq3ukXU36C3gRxKNQoyULYpDu1SB, 0.0 BTC silver: 14 - 1CFjkGmBYDfTw4Sc6GLwx4JeGeewQAjyty, 0.0 BTC silver: 15 - 1JN2ACsBX5SY2nR9iuLK2t15iH78RjegMz, 0.0 BTC silver: 17 - 16apMP5bFaeCDi92kkNvcQyVK2i7zkBurX, 0.0 BTC silver: 23 - 15YcgrqdmxFLSm6A7Heb8NrF5d7aqR6TpY, 0.0 BTC silver: 24 - 178aPRpSSwGaHzhsZuJmP1apeL2MkLRQA5, 0.0 BTC silver: 25 - 1F8AdhbZog8SF9zY2AskuZdXsDcu5izhAR, 0.0 BTC silver: 41 - 13LrZUGByDw2TYWfSheWWs3TmNmUMPjQ1U, 0.0 BTC silver: 43 - 1AHWfp8arx4LiE9gTMopUUYDTFwiuXtJni, 0.0 BTC silver: 44 - 12ny8S4VV48unuwW5j7KqR4QJ49BeootGw, 0.0 BTC silver: 46 - 19K4nwHtqdNB9rFQzMZH9r8wousPVEmBus, 0.0 BTC silver: 47 - 13Dk5H9AJUE5DnPQHXTTuUcoBtvh4PRZ6C, 0.0 BTC silver: 48 - 1J9UXA3sRJUsbXCw8orzKDV1NX61dGz98a, 0.0 BTC silver: 49 - 1Pu8h3GNhvj1U3CCRHS5RUDdGwEQUvVKup, 0.0 BTC silver: 50 - 1KsnuQgwGx59ew6t4i2g46RiXWVSiRbHH5, 0.0 BTC silver: 51 - 19n26FdG643UecNCUBGrHBUo2pPtdXeB6c, 0.0 BTC silver: 55 - 1EMdpch11o4GZghVepKPHnoZdmNnrs2G2y, 0.0 BTC silver: 66 - 1HbbBT5LwSvKfgvpYVRoY1N21Sqxs7xrJB, 0.0 BTC silver: 69 - 1Gzy8857V8YeTG52pgSKzCMmG4gVKpC4PG, 0.0 BTC silver: 77 - 1EJTpCLRNjbgpETCmbBni13sS3HVj3X9pS, 0.0 BTC silver: 88 - 1JJF74LewkqNexrtRKeYqXJeck54hcupF5, 0.0 BTC silver: 92 - 1DToU1jPJsdwhJLaJVexjA9tYjHyHvkfje, 0.0 BTC silver: 93 - 15sJ8isF68bm6DGRKAKbkCGA6updmis8bb, 0.0 BTC silver: 94 - 12RXhF22Anvw7GFrQibN7CpQerAu1VBQ9R, 0.0 BTC silver: 95 - 172BbL1ds6EJfekkS2E9sVsk6qFdvE7PXo, 0.0 BTC silver: 97 - 15mDRLpCWj4vaJZw5ia8RxmEw18HoZvPxm, 0.0 BTC silver: 98 - 12vqu1ce2JrMAYpL2Pr6Yo6R6xcfFC36sJ, 0.0 BTC silver: 99 - 12cNnpgHZp7YDL286rn7XMMtpqieiQgw2b, 0.0 BTC silver: 100 - 1PYbtcRMdya2MBWQwCYf6kbtXuwkLfZM4C, 0.0 BTC Still Loaded silver: 9 - 1389mXsW4K1WCni9JiNrKtxpeTM89EsWB1, 0.001 BTC silver: 10 - 14gydWP6qzEw55f6cosEL87pFMHYP4mGii, 0.001 BTC silver: 12 - 1DLVHQkfH4uXj64xYGFkg5vbhMY9ACDeE2, 0.001 BTC silver: 16 - 1MM8r17VJiMtvNntD94y3kxYPg59gmoLWG, 0.001 BTC silver: 18 - 1KdYZ1fe7vnXfvJALgtg7xm9w4PWBvDXQv, 0.001 BTC silver: 19 - 1AvC9kwVxTTqGsF2L6Vi83SpP8d7raJ5G5, 0.001 BTC silver: 30 - 1DyfLv6G4CfyGFFwsNpcHyLCwcsKazCmqf, 0.001 BTC silver: 33 - 1CRoPhjV2euox76mTuVDqPFQwJxqF5ijJd, 0.001 BTC silver: 40 - 15AUQbEU6qoyc5YoPT9emHwjs1qKA7VN9Y, 0.001 BTC silver: 60 - 1KYhVzgDwK4uZQYK9qKpGSx6S9n5fKi4Le, 0.001 BTC silver: 80 - 1E7WkJWbEHK7Fo9m1yYhjVgwcqnEQsD1f9, 0.001 BTC silver: 81 - 1Hn4nF5KcPbKBbwibiXeMYGo3mwLrZtLLk, 0.001 BTC silver: 82 - 1Pi2NzYP9EMM4aCSxjUquz9b34pw7QYrZn, 0.001 BTC silver: 84 - 1LKsfdB3jFJKPWCZ5CgYCi46hwWLEDXBzm, 0.001 BTC silver: 90 - 1CbyeEoRPb8wDozJTzxhKu3HNMJdBrCZYp, 0.001 BTC silver: 91 - 1PFD6GCscWGJtk4KkJ11Q8Td1n1quEaMLw, 0.001 BTC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 07, 2024, 11:32:56 PM Total loaded 72 coins (25 gilded 0.01 BTC(some are buyer funded 0.001) + 47 silver 0.001 BTC) Sweeped gilded addresses: gilded: 1 - 1JW8JVnveNdD6ULGaM9W56KVkgs99hHwBJ, 0.0 BTC gilded: 11 - 1AMPtQJ3ajQBjZ1JdrtnhBukFgq7MW8749, 0.0 BTC gilded: 12 - 1FrE3MbzxYMpLjh14Efv4ikoirbCpdodYZ, 0.0 BTC gilded: 13 - 1K28LHHtwj7ftqDVguUSbpcj9B9uWTGEXp, 0.0 BTC gilded: 14 - 12FbeUEckoJpG2xGnjU7pWT5ZjFkYDFoEs, 0.0 BTC gilded: 15 - 1AK1JdkEdFZ7HfJPzF3QHXsc3ziCT2m6ks, 0.0 BTC gilded: 17 - 17wfj6ef9zieHXLcPBWPhE2KNKuTcet2NR, 0.0 BTC gilded: 20 - 16qNy5zoCMES2H35RNnMgxtYBTu2kM96zg, 0.0 BTC gilded: 21 - 1AaASgch97pEfAhrVPwYF551p227yHRMoV, 0.0 BTC gilded: 22 - 17TPPcp9sruSGHGN9BxkppzfUNjcAT2AVo, 0.0 BTC gilded: 23 - 1CHkivLgVVJGJ5yLW6iuBpP6QE3Mhh6PCB, 0.0 BTC gilded: 24 - 1JNXJvowXpeGWeFxpj82nFnEGxyTNwuvYp, 0.0 BTC gilded: 25 - 1E2meDtAdUE2HaoW56eWKiLipN5MnFK3tX, 0.0 BTC gilded: 82 - 1EebYoM2dgss72iufTbaCzc7BjpZrWPaDC, 0.0 BTC gilded: 84 - 1KhNugM436utqwBL3h2UXF6Xa1diQwg7xq, 0.0 BTC gilded: 88 - 19wWUxwBnBgxpz4ogS192yX1T9LsbHPhtL, 0.0 BTC gilded: 98 - 1C1EqyLz2zXEJtig6H2tBbYqrinUFdCS7N, 0.0 BTC Still loaded: gilded: 9 - 18TjrYAfdZUTAYooK9ZeCZszw6yLGCTK3X, 0.01 BTC gilded: 10 - 1HYf3FfmA96qNj2Rwaz5nr3r7JvMDQTANt, 0.01 BTC gilded: 16 - 1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG, 0.001 BTC gilded: 18 - 19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG, 0.001 BTC gilded: 19 - 13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi, 0.001 BTC gilded: 33 - 1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb, 0.001 BTC gilded: 81 - 1JhPQSUL4rMcrEkDHssDiJrJXwHKbjDkRe, 0.01 BTC gilded: 100 - 1KxfmW4ou58eMB2sVhBGitAtQ1ymvYyMjP, 0.01 BTC Sweeped silver: silver: 1 - 16AYovMaG8Z5m7wPbra37g7aSNvewruqTM, 0.0 BTC silver: 11 - 17rdnQEMe1fj7WX8jPnPrRkTYBYnRQYmg7, 0.0 BTC silver: 13 - 17NT1UBq3ukXU36C3gRxKNQoyULYpDu1SB, 0.0 BTC silver: 14 - 1CFjkGmBYDfTw4Sc6GLwx4JeGeewQAjyty, 0.0 BTC silver: 15 - 1JN2ACsBX5SY2nR9iuLK2t15iH78RjegMz, 0.0 BTC silver: 17 - 16apMP5bFaeCDi92kkNvcQyVK2i7zkBurX, 0.0 BTC silver: 23 - 15YcgrqdmxFLSm6A7Heb8NrF5d7aqR6TpY, 0.0 BTC silver: 24 - 178aPRpSSwGaHzhsZuJmP1apeL2MkLRQA5, 0.0 BTC silver: 25 - 1F8AdhbZog8SF9zY2AskuZdXsDcu5izhAR, 0.0 BTC silver: 41 - 13LrZUGByDw2TYWfSheWWs3TmNmUMPjQ1U, 0.0 BTC silver: 43 - 1AHWfp8arx4LiE9gTMopUUYDTFwiuXtJni, 0.0 BTC silver: 44 - 12ny8S4VV48unuwW5j7KqR4QJ49BeootGw, 0.0 BTC silver: 46 - 19K4nwHtqdNB9rFQzMZH9r8wousPVEmBus, 0.0 BTC silver: 47 - 13Dk5H9AJUE5DnPQHXTTuUcoBtvh4PRZ6C, 0.0 BTC silver: 48 - 1J9UXA3sRJUsbXCw8orzKDV1NX61dGz98a, 0.0 BTC silver: 49 - 1Pu8h3GNhvj1U3CCRHS5RUDdGwEQUvVKup, 0.0 BTC silver: 50 - 1KsnuQgwGx59ew6t4i2g46RiXWVSiRbHH5, 0.0 BTC silver: 51 - 19n26FdG643UecNCUBGrHBUo2pPtdXeB6c, 0.0 BTC silver: 55 - 1EMdpch11o4GZghVepKPHnoZdmNnrs2G2y, 0.0 BTC silver: 66 - 1HbbBT5LwSvKfgvpYVRoY1N21Sqxs7xrJB, 0.0 BTC silver: 69 - 1Gzy8857V8YeTG52pgSKzCMmG4gVKpC4PG, 0.0 BTC silver: 77 - 1EJTpCLRNjbgpETCmbBni13sS3HVj3X9pS, 0.0 BTC silver: 88 - 1JJF74LewkqNexrtRKeYqXJeck54hcupF5, 0.0 BTC silver: 92 - 1DToU1jPJsdwhJLaJVexjA9tYjHyHvkfje, 0.0 BTC silver: 93 - 15sJ8isF68bm6DGRKAKbkCGA6updmis8bb, 0.0 BTC silver: 94 - 12RXhF22Anvw7GFrQibN7CpQerAu1VBQ9R, 0.0 BTC silver: 95 - 172BbL1ds6EJfekkS2E9sVsk6qFdvE7PXo, 0.0 BTC silver: 97 - 15mDRLpCWj4vaJZw5ia8RxmEw18HoZvPxm, 0.0 BTC silver: 98 - 12vqu1ce2JrMAYpL2Pr6Yo6R6xcfFC36sJ, 0.0 BTC silver: 99 - 12cNnpgHZp7YDL286rn7XMMtpqieiQgw2b, 0.0 BTC silver: 100 - 1PYbtcRMdya2MBWQwCYf6kbtXuwkLfZM4C, 0.0 BTC Still Loaded silver: 9 - 1389mXsW4K1WCni9JiNrKtxpeTM89EsWB1, 0.001 BTC silver: 10 - 14gydWP6qzEw55f6cosEL87pFMHYP4mGii, 0.001 BTC silver: 12 - 1DLVHQkfH4uXj64xYGFkg5vbhMY9ACDeE2, 0.001 BTC silver: 16 - 1MM8r17VJiMtvNntD94y3kxYPg59gmoLWG, 0.001 BTC silver: 18 - 1KdYZ1fe7vnXfvJALgtg7xm9w4PWBvDXQv, 0.001 BTC silver: 19 - 1AvC9kwVxTTqGsF2L6Vi83SpP8d7raJ5G5, 0.001 BTC silver: 30 - 1DyfLv6G4CfyGFFwsNpcHyLCwcsKazCmqf, 0.001 BTC silver: 33 - 1CRoPhjV2euox76mTuVDqPFQwJxqF5ijJd, 0.001 BTC silver: 40 - 15AUQbEU6qoyc5YoPT9emHwjs1qKA7VN9Y, 0.001 BTC silver: 60 - 1KYhVzgDwK4uZQYK9qKpGSx6S9n5fKi4Le, 0.001 BTC silver: 80 - 1E7WkJWbEHK7Fo9m1yYhjVgwcqnEQsD1f9, 0.001 BTC silver: 81 - 1Hn4nF5KcPbKBbwibiXeMYGo3mwLrZtLLk, 0.001 BTC silver: 82 - 1Pi2NzYP9EMM4aCSxjUquz9b34pw7QYrZn, 0.001 BTC silver: 84 - 1LKsfdB3jFJKPWCZ5CgYCi46hwWLEDXBzm, 0.001 BTC silver: 90 - 1CbyeEoRPb8wDozJTzxhKu3HNMJdBrCZYp, 0.001 BTC silver: 91 - 1PFD6GCscWGJtk4KkJ11Q8Td1n1quEaMLw, 0.001 BTC Note, some were swept by individual collectors in order to not lose the BTC (I am one of those, set 88- gilded & silver). I'm thinking to better ascertain, you may want to see which addresses got the most BTC swept to them as this should point to the culprits. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 07, 2024, 11:36:13 PM We have replied to everyone who messaged us.
We will take a quick nap. And continue replying early morning. We still are not 100% sure how/what happened. But we will add more details. For remaining unsold VIBGYOR coins we will regenerate addresses and keys Regards Team RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 07, 2024, 11:45:31 PM We have replied to everyone who messaged us. We will take a quick nap. And continue replying early morning. We still are not 100% sure how/what happened. But we will add more details. For remaining unsold VIBGYOR coins we will regenerate addresses and keys Regards Team RC Until you are sure what happened and how it happened you should not regenerate anything. Not being negative and it's great that you are taking care of the people who lost funds, but until you figure out what happened, generating more / new keys may not fix the problem. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 08, 2024, 12:01:22 AM .001 was refunded by RC. Appreciate the quick reply & refund.
As others have requested, we would like to know more about how this happened asap bc it seems like it’s a larger issue than just these coins. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 08, 2024, 12:03:32 AM .001 was refunded by RC. Appreciate the quick reply & refund. As others have requested, we would like to know more about how this happened asap bc it seems like it’s a larger issue than just these coins. Nice, glad he is standing by it. Now hopefully I can get a refund too.. 😔 I couldn't get home fast enough to peel. #48 Silver still in a icg slab and unpeeled 1J9UXA3sRJUsbXCw8orzKDV1NX61dGz98a Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: PreciousMetapsICT on August 08, 2024, 12:10:35 AM I have #140 (I believe that’s the last one in the series) Vibgyor in my possession, unpeeled but swept.
Here’s the address: 1PYbtcRMdya2MBWQwCYf6kbtXuwkLfZM4C Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 08, 2024, 12:10:49 AM We have replied to everyone that was impacted. Please PM us if your coin has been impacted. @raghavsood, we saw you did some analysis. Could you please help us in figuring out exactly how many coins were impacted if you already have some data. Please note that more than half of VIBGYOR coins were not loaded. (We will provide the exact number tomorrow). Also, please note all impacted customers will be refunded and even provided loaded coins as replacement if you were impacted. This is huge if they follow through. A replacement would be a nice way to make everyone whole. So I'm glad to see you're stepping up. I think the people forced to peel should get the replacement as well. If it was a key generation issue. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: markinaz on August 08, 2024, 12:12:11 AM Note, some were swept by individual collectors in order to not lose the BTC (I am one of those, set 88- gilded & silver). I'm thinking to better ascertain, you may want to see which addresses got the most BTC swept to them as this should point to the culprits. Agreed, thanks to this post, I was able to redeem the following two coins myself, they were not swept: silver: 46 - 19K4nwHtqdNB9rFQzMZH9r8wousPVEmBus, 0.0 BTC silver: 47 - 13Dk5H9AJUE5DnPQHXTTuUcoBtvh4PRZ6C, 0.0 BTC All, I can say is thanks to everyone for sharing this info, and thank to Team RC for being so transparent. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 12:25:49 AM .001 was refunded by RC. Appreciate the quick reply & refund. As others have requested, we would like to know more about how this happened asap bc it seems like it’s a larger issue than just these coins. This is good to hear. This is exactly how a honest and morally sound coin maker should be. I still have faith now that this is not another coldkey theft. The only thing I would like to know like so many others is how the hell were these keys compromised? Were the keys accidentally exposed to a live Internet connected computer? And even if so...that computer had to have been infected as well for the keys to be discovered and swept. These answers can help in future and current makers of things not to do but to avoid Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Amax16 on August 08, 2024, 12:53:42 AM #49 silver .001 was redeemed by someone. Lost that one.... SMH
1Pu8h3GNhvj1U3CCRHS5RUDdGwEQUvVKup Hope RC is true to his word. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: seavodin on August 08, 2024, 12:59:41 AM Question for RC after he's returned:
For the rest of us that have VIBGYOR coins that were unloaded, its clear that the keys for these would be compromised as well. If left out in the wild, this runs the risk of someone loading them in the future and having their funds swept. It seems like part of the solution to this must be to replace the keys/holos on these coins too (in whatever method makes sense). Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 02:22:09 AM I want to know how the keys were generated and thus how they were compromised.
RC stated these coins keys were generated differently than the others - how so? If you used an airgapped system, and did not save the keys, and you still have possession of that system, then how were they breached? even without saving there are potential ways someone could have recovered them from the system but that would mean you lost control of it. I am glad to see you making people whole but that does not make them whole - their coin will never be what it was worth. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: YodasRedRocket on August 08, 2024, 02:30:50 AM I want to know how the keys were generated and thus how they were compromised. RC stated these coins keys were generated differently than the others - how so? If you used an airgapped system, and did not save the keys, and you still have possession of that system, then how were they breached? even without saving there are potential ways someone could have recovered them from the system but that would mean you lost control of it. I am glad to see you making people whole but that does not make them whole - their coin will never be what it was worth. All good points. I would hope RC would let us send the coins to someone like you to be re-holo’d & re-key’d as buyer funded. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 02:59:38 AM I want to know how the keys were generated and thus how they were compromised. RC stated these coins keys were generated differently than the others - how so? If you used an airgapped system, and did not save the keys, and you still have possession of that system, then how were they breached? even without saving there are potential ways someone could have recovered them from the system but that would mean you lost control of it. I am glad to see you making people whole but that does not make them whole - their coin will never be what it was worth. All good points. I would hope RC would let us send the coins to someone like you to be re-holo’d & re-key’d as buyer funded. always willing to assist. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 03:24:04 AM Wow.....was going to bid on a few items on Stacks....Not anymore.... :( :( :( speaking about Stacks - someone might want to tell them so they can pull those auctions. I have dropped James and the info contact an email listing out the potentially affected on-going auctions, and linking to this thread. I will update here if they reply. ✂️ I have heard back from James at S&B - All raritycheck items will be pulled from the upcoming/ongoing auction, they should be delisted from the site within the next 24 hours. We have replied to everyone that was impacted. Please PM us if your coin has been impacted. @raghavsood, we saw you did some analysis. Could you please help us in figuring out exactly how many coins were impacted if you already have some data. Please note that more than half of VIBGYOR coins were not loaded. (We will provide the exact number tomorrow). Also, please note all impacted customers will be refunded and even provided loaded coins as replacement if you were impacted. I will follow up with more details today on what's going on with the funds flows, but for immediate action, here's all coins from RC sets that were peeled in a batch (more than 3 coins in the same block) (using godmode (https://collectible.money/godmode)): (view query at https://pastebin.com/XYvuN0eW - Cloudflare doesn't let me post it to the forum) Code: series_name addresses serial total_value balance first_active redeemed_on raritycheck team: It is imperative that you share how the keys for the VIBGYOR series were generated in as much detail as possible - software used, people involved, computer used, printer used, and everything else that is available. This does appear to be a more widespread attack and funds for many others people outside of collectibles may be at risk. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 03:46:04 AM Given that impacted coins total 15700000 sats (0.157BTC), which is not a small amount these days, I would encourage the raritycheck team to set up a compensation fund held by a reputable escrow (less any refunds already complete).
At this stage, we don't know why and how the keys are compromised, and having the compensation fund held by a non-rc team member will go a long way in rebuilding trust. I would also not assume other series are safe until we have more details from the raritycheck team on the key generation process, and what changed when handling VIBGYOR keys. Rarity Check VIBGYOR Orange Set Gilded (https://collectible.money/series/raritycheck-vibgyor-orange-gilded) still holds 0.044BTC Rarity Check VIBGYOR Orange Set Silver (https://collectible.money/series/raritycheck-vibgyor-orange-silver) still holds 0.016BTC The still-intact items are: Code: series_name addresses serial total_value balance first_active redeemed_on If you hold any of these items, or are aware of someone who does and can reach out to them, I strongly suggest peeling and redeeming them before they get swept. I have reached out to the S&B team regarding the 4 loaded items sold through their auctions to see if they can contact the winner. We already saw another batch clearing the 0.001 BTC silver coins a few hours ago, so the threat is still ongoing. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 04:11:52 AM It appears that VIBGYOR coins are still being offered for sale by the raritycheck team on eBay: https://www.ebay.co.uk/itm/115653939905. This listing should be pulled by the team with haste, even if the coins being offered are unloaded.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 08, 2024, 04:13:15 AM 113Z6geivgG7WAhHowP6n5fQBYzuTFZmxU (Master address)
Has had no ingress transactions since this morning. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 08, 2024, 05:05:51 AM We have replied to everyone that was impacted. Please PM us if your coin has been impacted. @raghavsood, we saw you did some analysis. Could you please help us in figuring out exactly how many coins were impacted if you already have some data. Please note that more than half of VIBGYOR coins were not loaded. (We will provide the exact number tomorrow). Also, please note all impacted customers will be refunded and even provided loaded coins as replacement if you were impacted. This is huge if they follow through. A replacement would be a nice way to make everyone whole. So I'm glad to see you're stepping up. I think the people forced to peel should get the replacement as well. If it was a key generation issue. Glad that the community is rallying to solve. That’s pretty cool in itself and look forward to speedy resolution. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 08, 2024, 05:16:41 AM We have replied to everyone that was impacted. Please PM us if your coin has been impacted. @raghavsood, we saw you did some analysis. Could you please help us in figuring out exactly how many coins were impacted if you already have some data. Please note that more than half of VIBGYOR coins were not loaded. (We will provide the exact number tomorrow). Also, please note all impacted customers will be refunded and even provided loaded coins as replacement if you were impacted. This is huge if they follow through. A replacement would be a nice way to make everyone whole. So I'm glad to see you're stepping up. I think the people forced to peel should get the replacement as well. If it was a key generation issue. Let’s not bury the guy. He’s not Walmart and probably eking out very little. I think it’s commendable that he’s stepping up to the plate as is. The coin itself is one Oz silver , international shipping , etc. it would quickly add up. Hoping he can work with a trusted member in the US like MJ or Mopar to handle the processing here. It would definitely save on costs to make whole. That said, I understand your point too. Glad that the community is rallying to solve. That’s pretty cool in itself. Lol he's the one that brought it up and I was just saying that's pretty cool. A creator should stand behind the keys they created and if the keys created by them are swept due to faulty key generation, then they should be on the hook like Walmart if they ever want to have a reputation or ever be trusted again. It definitely wasn't a dig, I was commending that he is in here trying to make it right. But at the same time. I'm salty because my funds were swept and coins premium is gone. So I would like a replacement if possible down the road. But let's start with a refund. Lol Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 05:43:17 AM Hello all
Good morning. Our inbox has lots of messages. We will reply all one by one. We have already refunded many of guys directly. Please note that all impacted coins will be made whole. Either we will offer a loaded coin (with newly created keys)or we will reload your coins (depending on volume we will order holos). In some cases we are sending you BTC We will preserve the history on our site so impacted coins always show up. WE ARE STILL ROOT CAUSING THE ISSue. So far we are certain thi isn’t hardware leak. Regards Team RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 05:55:33 AM WE ARE STILL ROOT CAUSING THE ISSue. So far we are certain thi isn’t hardware leak. Regards Team RC if it is not a hardware leak - then it someone on your team, or no? how many are on your team? how many have access to key generation? and how do you have private keys stored after the coins were made?? No keys should ever be saved. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 06:04:23 AM WE ARE STILL ROOT CAUSING THE ISSue. So far we are certain thi isn’t hardware leak. Regards Team RC if it is not a hardware leak - then it someone on your team, or no? how many are on your team? how many have access to key generation? and how do you have private keys stored after the coins were made?? No keys should ever be saved. We have NO keys backup. If we had we could save the remaining coins by sweeping their BTC. But unfortunately we have no backups. So far we have identified the isssue is neither a hardware issue nor a team member isssue. Looks like the issue is with the way private keys were generated. We will do this 1. Create a separate thread for refund 2. Use this thread for root causing Meanwhile we will order holos for VIBGYOR coins. Holos will be slightly different so it’s easy to tell these are new. Each buyer will be given the option to re-holo (and reload) or we ll send BTC. We continue to refund Btc for impacted people. Regards Team RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 06:11:54 AM I would hope that the eBay sale page is also being pulled: https://www.ebay.com/itm/115653939905
✂️ raritycheck team: It is imperative that you share how the keys for the VIBGYOR series were generated in as much detail as possible - software used, people involved, computer used, printer used, and everything else that is available. This does appear to be a more widespread attack and funds for many others people outside of collectibles may be at risk. I strongly encourage the team to share details with folks who have the background and skills to help get to the bottom of this. The refunds and efforts to make people whole are commendable and important, but based on the on-chain activity there are more wallets at risk than just collectibles. I'm volunteering my time and effort in helping to track this down, but it is extremely important that the RC team provides the information and background for the key generation process, and how it differs from that of their other series. I have separately dropped them a PM to ask for the same information, in the event that (for whatever reason) they are unwilling to share it publicly at this stage. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 06:20:04 AM Looks like the issue is with the way private keys were generated. you use an airgapped system correct? if you are using a system that is online, then all your coins are at risk and you need to cease selling any coins and recall all of them - I hope it is not this serious and I am not sure if it was, that you would say so. Considering your statements on how your keys are generated when previously asked: Following all the suggestions, we are buying a one time only Printer for printing keys (wired) and one time use-only computer for creating keys. Thanks Team RC so if it is a one use system, was it online? did you lose control of it? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 06:25:43 AM Quote I strongly encourage the team to share details with folks who have the background and skills to help get to the bottom of this. Hi raghavThe refunds and efforts to make people whole are commendable and important, but based on the on-chain activity there are more wallets at risk than just collectibles. I'm volunteering my time and effort in helping to track this down, but it is extremely important that the RC team provides the information and background for the key generation process, and how it differs from that of their other series. I have separately dropped them a PM to ask for the same information, in the event that (for whatever reason) they are unwilling to share it publicly at this stage. We will not pull the eBay listing. If someone orders we will send them coins with new holos and new keys. We understand that not just other coins but our wallets are impacted but even we are trying to root cause it. We are not 100% sure how this has happened. But we think the key gen software we used is compromised. Rest ensured as soon as we know we will provide details. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 06:32:44 AM Looks like the issue is with the way private keys were generated. you use an airgapped system correct? if you are using a system that is online, then all your coins are at risk and you need to cease selling any coins and recall all of them - I hope it is not this serious and I am not sure if it was, that you would say so. Considering your statements on how your keys are generated when previously asked: Following all the suggestions, we are buying a one time only Printer for printing keys (wired) and one time use-only computer for creating keys. Thanks Team RC so if it is a one use system, was it online? did you lose control of it? We still posses all the hardware used. We will share exact details of what we think has happened. None of the used hardware has ever been connected to the internet. And the computers used are also wiped out. As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 06:38:42 AM Looks like the issue is with the way private keys were generated. you use an airgapped system correct? if you are using a system that is online, then all your coins are at risk and you need to cease selling any coins and recall all of them - I hope it is not this serious and I am not sure if it was, that you would say so. Considering your statements on how your keys are generated when previously asked: Following all the suggestions, we are buying a one time only Printer for printing keys (wired) and one time use-only computer for creating keys. Thanks Team RC so if it is a one use system, was it online? did you lose control of it? We still posses all the hardware used. We will share exact details of what we think has happened. None of the used hardware has ever been connected to the internet. And the computers used are also wiped out. As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. Is there a reason you are unable to share the details of the keygen software used immediately? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: cygan on August 08, 2024, 06:52:22 AM ✂ As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. why did you come up with the idea of using a different key generator for the VIBGYOR series and why not always the same as for the previous editions? unfortunately, that doesn't make sense to me i am very curious about the further details... i can say from personal experience how stressful the whole thing is for raritycheck now and i hope that he can refund all victims and present/clear up everything completely Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 07:08:09 AM ✂ As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. why did you come up with the idea of using a different key generator for the VIBGYOR series and why not always the same as for the previous editions? unfortunately, that doesn't make sense to me i am very curious about the further details... i can say from personal experience how stressful the whole thing is for raritycheck now and i hope that he can refund all victims and present/clear up everything completely It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 07:43:29 AM i can say from personal experience how stressful the whole thing is for raritycheck now and i hope that he can refund all victims and present/clear up everything completely Hi Cygan Thank you for the kind words. Indeed very stressful. As we are also working with version 2 of the hole coin series. Please share your experience. Or pm if possible. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: cygan on August 08, 2024, 07:56:40 AM ✂ Please share your experience. Or pm if possible. i better make it public, so that the whole procedure here remains transparent, because i think that among all the collectibles makers there should also be a certain cohesion and you should also support each other (up to a certain point, because in some cases the whole thing can turn out to be a scam in the end). so at the beginning of last year i started to refind all of coldkey's victims, i created this extra thread (https://bitcointalk.org/index.php?topic=5434598.0) to make the whole thing visible to everyone and also to present it according to a certain procedure. this way i was also able to identify/fix certain ambiguities but also scammers (who then wrote to me via pm) more quickly Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Jambo USA on August 08, 2024, 08:01:11 AM Any info on if the hole coins were generated using the same method? Looks like only 5 or 6 of em were funded to begin with and it seems one person has already swept their funds.
Mainly curious because I just landed in Switzerland for work and am wondering if I should be calling the wife or one of my buddies and trying to walk them through the process of redeeming a coin or not 😂 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 08:02:18 AM ✂ Please share your experience. Or pm if possible. i better make it public, so that the whole procedure here remains transparent, because i think that among all the collectibles makers there should also be a certain cohesion and you should also support each other (up to a certain point, because in some cases the whole thing can turn out to be a scam in the end). so at the beginning of last year i started to refind all of coldkey's victims, i created this extra thread (https://bitcointalk.org/index.php?topic=5434598.0) to make the whole thing visible to everyone and also to present it according to a certain procedure. this way i was also able to identify/fix certain ambiguities but also scammers (who then wrote to me via pm) more quickly Oh sorry to hear this. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceV on August 08, 2024, 08:53:37 AM here you go : https://ibb.co/2Fg4Tm5 The link isn't loading. Try Talkimg.com?https://i.ibb.co/m9Z3tM5/IMG-2558.jpg (https://ibb.co/Ycnx8qB) Was that printed on an old inkjet printer? That's pathetic!These private keys are garbage, awful work indeed. I could type it correctly at first try though, so that's something. But any cheap dumb laser printer would provide a sharp font. What I can say and speak on is that I wish he kept a copy of his keys cuz I can’t decipher SHIT from his fucking lost coin series. Holy fuck!! Use some better ink, larger letters… anything cuz this btc is probably lost. Even using a 10x magnifying glass. Try a high-res picture (ideally on an offline camera). Note that there is no l (lower case L), I (upper case i), 0 (zero) and O (upper case o) in BASE58.We understand that not just other coins but our wallets are impacted but even we are trying to root cause it. I've seen the question how keys were generated many times, but it hasn't been answered. I'm very curious to see this! Security creating private keys is the very basics of creating loaded coins. It's even very easy to do. Why are you not sharing how you did it?We are not 100% sure how this has happened. But we think the key gen software we used is compromised. If your own wallets are also impacted, that means you didn't use a dedicated computer just for creating private keys. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. What software is that?In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 09:23:05 AM here you go : https://ibb.co/2Fg4Tm5 The link isn't loading. Try Talkimg.com?https://i.ibb.co/m9Z3tM5/IMG-2558.jpg (https://ibb.co/Ycnx8qB) Was that printed on an old inkjet printer? That's pathetic!These private keys are garbage, awful work indeed. I could type it correctly at first try though, so that's something. But any cheap dumb laser printer would provide a sharp font. What I can say and speak on is that I wish he kept a copy of his keys cuz I can’t decipher SHIT from his fucking lost coin series. Holy fuck!! Use some better ink, larger letters… anything cuz this btc is probably lost. Even using a 10x magnifying glass. Try a high-res picture (ideally on an offline camera). Note that there is no l (lower case L), I (upper case i), 0 (zero) and O (upper case o) in BASE58.We understand that not just other coins but our wallets are impacted but even we are trying to root cause it. I've seen the question how keys were generated many times, but it hasn't been answered. I'm very curious to see this! Security creating private keys is the very basics of creating loaded coins. It's even very easy to do. Why are you not sharing how you did it?We are not 100% sure how this has happened. But we think the key gen software we used is compromised. If your own wallets are also impacted, that means you didn't use a dedicated computer just for creating private keys. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. What software is that?In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We didn’t say our wallets were impacted. Our own coins (we keep some reserves for sale etc) were impacted. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceMobile on August 08, 2024, 09:44:53 AM We didn’t say our wallets were impacted. I literally quoted the post in which you said that.Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 10:46:40 AM We didn’t say our wallets were impacted. I literally quoted the post in which you said that.Apologies. We meant our own RC VIBGYOR coins. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 10:48:41 AM We didn’t say our wallets were impacted. I literally quoted the post in which you said that.I believe they were referring to the fact that the bad keygen software used has resulted in BTC from other, non-collectibles wallets potentially held by normal, regular users who have nothing to do with this forum, being moved and stolen. I'm baffled as to why they don't share the software at this stage, given that it could save other folks. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 10:57:23 AM Many people who tried using a vanity gen software have been compromised. You should have stuck with your original software that worked on your first coins.
I know you didn't end up using the vangen part but you still used their software. Did the swept funds go to any exchange? Perhaps you can reach out to them to freeze the funds. Always stick with what works. And in your case the first key generation code looks like it was solid. Also please post where you got that software so others do not fall in the same trap. And perhaps take legal action as well Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 08, 2024, 11:22:23 AM Lost coin V1 silver #3 looks very suspicious with transactions. Looks like it might have been hit as well, unless someone here on the boards swept it for safety. Perhaps it was swept by a member: VIBGYOR gilded 82 was swept at the same time. It was me, I swept 4 coins yesterday , two was able to read with a high-end magnifying glass with a light in a dark room, the other two even with the magnifying glass I had to reach out to Mopar for some help. it’s nice to see the creator is on here trying to make things right. But compromised keys or not, I can’t stress enough how extremely aggravated and disappointment I am with the quality and technique used for the font, ink and printing of the private keys. Due to this HUGE ERROR in judgment, I personally will not be collecting any coins from RarityCheck and will be selling a majority of mine on the forum in the coming days. But I want to say again I’m impressed with the companies response so far in trying to make things right, I don’t want that to be understated. But at the end of the day: Compromised = Compromised Another example of a very poor printed private key from yesterdays debacle: https://i.ibb.co/NxCwDv4/IMG-2598.jpg (https://ibb.co/MnSqwvX) I think creators should from here on out post a sample pic of what their private keys look like so buyers know what they are getting into imo I wish everyone who was affected from this a positive outcome along with the creator. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 11:37:32 AM Lost coin V1 silver #3 looks very suspicious with transactions. Looks like it might have been hit as well, unless someone here on the boards swept it for safety. Perhaps it was swept by a member: VIBGYOR gilded 82 was swept at the same time. It was me, I swept 4 coins yesterday , two was able to read with a high-end magnifying glass with a light in a dark room, the other two even with the magnifying glass I had to reach out to Mopar for some help. it’s nice to see the creator is on here trying to make things right. But compromised keys or not, I can’t stress enough how extremely aggravated and disappointment I am with the quality and technique used for the font, ink and printing of the private keys. Due to this HUGE ERROR in judgment, I personally will not be collecting any coins from RarityCheck and will be selling a majority of mine on the forum in the coming days. But I want to say again I’m impressed with the companies response so far in trying to make things right, I don’t want that to be understated. But at the end of the day: Compromised = Compromised I think creators should from here on out post a sample pic of what their private keys look like so buyers know what they are getting into imo And that's why I created this thread yesterday https://bitcointalk.org/index.php?topic=5505467.0 I even loaded it with Bitcoin. :D https://mempool.space/address/1BzYG6KmHvhi8RiLuVDCDd94FFsCGbVPet So be my guest everyone....please try and sweep Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 12:20:55 PM Given the explanation and partial information provided so far, I've removed the alerts from Rarity Check creator page and non-VIBGYOR series.
Rarity Check VIBGYOR Orange Set Gilded (https://collectible.money/series/raritycheck-vibgyor-orange-gilded) and Rarity Check VIBGYOR Orange Set Silver (https://collectible.money/series/raritycheck-vibgyor-orange-silver) will continue to show the Compromised Keys alert on both the series page and individual item listings. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 01:03:35 PM I also created a thread on how I generate my keys as well.
https://bitcointalk.org/index.php?topic=5416519.0 For those people who do not trust software download off of the internet or do not own a mycelium entropy...there is another way that I suggest. Simply....buy a Trezor...generate a new seed and place the 12 word seed instead of a private key. You can use it this method as many times as you wish simply by resetting the Trezor. And yes of course you have to trust Trezor as well. If not then use a hardware wallet of your choice. Coldard is also another one I would trust especially the latest Q wallet which is all done air gapped! Or simply roll the dice. Lol Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: minerjones on August 08, 2024, 01:15:15 PM Quote I strongly encourage the team to share details with folks who have the background and skills to help get to the bottom of this. Hi raghavThe refunds and efforts to make people whole are commendable and important, but based on the on-chain activity there are more wallets at risk than just collectibles. I'm volunteering my time and effort in helping to track this down, but it is extremely important that the RC team provides the information and background for the key generation process, and how it differs from that of their other series. I have separately dropped them a PM to ask for the same information, in the event that (for whatever reason) they are unwilling to share it publicly at this stage. We will not pull the eBay listing. If someone orders we will send them coins with new holos and new keys. We understand that not just other coins but our wallets are impacted but even we are trying to root cause it. We are not 100% sure how this has happened. But we think the key gen software we used is compromised. Rest ensured as soon as we know we will provide details. From the looks of it you generated keys with the computer still on-line My recommendation is stop making keys immediately, refund everyone impacted and just send out replacement holograms Regardless of what you are trying to do to make this right, your keys will never be trusted again... so why make it worse by offering to rekey the coins? ??? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: hybridsole on August 08, 2024, 01:16:31 PM ✂ As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. why did you come up with the idea of using a different key generator for the VIBGYOR series and why not always the same as for the previous editions? unfortunately, that doesn't make sense to me i am very curious about the further details... i can say from personal experience how stressful the whole thing is for raritycheck now and i hope that he can refund all victims and present/clear up everything completely It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Which vanitygen software did you use? Most people have used either this one: samr7/vanitygen: https://github.com/samr7/vanitygen Or the 10gic/vanitygen-plusplus? https://github.com/10gic/vanitygen-plusplus Or was it some .EXE program you found somewhere? Which operating system? How did you transfer the software to your airgapped PC? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 01:42:43 PM I also created a thread on how I generate my keys as well. https://bitcointalk.org/index.php?topic=5416519.0 For those people who do not trust software download off of the internet or do not own a mycelium entropy...there is another way that I suggest. Simply....buy a Trezor...generate a new seed and place the 12 word seed instead of a private key. You can use it this method as many times as you wish simply by resetting the Trezor. And yes of course you have to trust Trezor as well. If not then use a hardware wallet of your choice. Coldard is also another one I would trust especially the latest Q wallet which is all done air gapped! Or simply roll the dice. Lol I believe you had one already - maybe several - as you have walked thru your process very clearly and meticulously several times. as a note - many have peeled all their RC coins. When a coin maker has been compromised, one must assume all works are compromised. we really need to hear about your key generation process and how it was different for the affected coins vs the ones you claim are safe. and then a very detailed post on how exactly you generated keys for each project. yes. We will provide details. But Mopar this thread is for helping those who are impacted. As this is a widespread issue(not only for VIBGYOR coins). This is an issue beyond our collectibles. Please let’s use the other thread for root causing and keep this for helping those impacted. and by widespread you mean what? if there is some larger issue, you need to state it now vs later - the sooner the better. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 08, 2024, 02:09:56 PM We didn’t say our wallets were impacted. I literally quoted the post in which you said that.I believe they were referring to the fact that the bad keygen software used has resulted in BTC from other, non-collectibles wallets potentially held by normal, regular users who have nothing to do with this forum, being moved and stolen. I'm baffled as to why they don't share the software at this stage, given that it could save other folks. Many people who tried using a vanity gen software have been compromised. You should have stuck with your original software that worked on your first coins. I know you didn't end up using the vangen part but you still used their software. Did the swept funds go to any exchange? Perhaps you can reach out to them to freeze the funds. Always stick with what works. And in your case the first key generation code looks like it was solid. Also please post where you got that software so others do not fall in the same trap. And perhaps take legal action as well Yes and yes, there are 2 well known pieces of vanity address generating software. VanitySearch: https://bitcointalk.org/index.php?topic=5112311.0 And the older Vanitygen: https://bitcointalk.org/index.php?topic=25804 They are well known and people have been using them for YEARS with no issues. Heck in 8 minutes on my old work laptop with NO GPU I got 3 keys for an address starting with "1V1BG" with a decent video card it should take no time at all. Without a lot more detail we are all just guessing what happened here. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Eclipse33 on August 08, 2024, 04:32:12 PM RC needs to dox the key-gen software.
I suspect it's backdoored with pregenerated rolling codes or pregenerated private keys. It's not vanitygen or vanitysearch. Prob some small-time dinky key-gen. Why he has not doxxed it yet is beyond me. A real headscratcher. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Amax16 on August 08, 2024, 04:48:36 PM RC refunded me .001 btc for the swiped silver #49 for the record.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 08, 2024, 04:57:32 PM RC needs to dox the key-gen software. I suspect it's backdoored with pregenerated rolling codes or pregenerated private keys. It's not vanitygen or vanitysearch. Prob some small-time dinky key-gen. Why he has not doxxed it yet is beyond me. A real headscratcher. makes me feel he's not doing it because he know something else happened that wasn't the software, but the longer he takes the more shady it looks. there is ZERO reasons not to share the name of the software for some of the professionals on here to investigate further, news flash: you don't have to say its was the softwares fault or even figure out if its secure or not for you to be able to take the time to share the softwares name and URL. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 05:34:51 PM An update from James @ S&B: All upcoming/ongoing Rarity Check lots have been withdrawn.
As before, the affected lots are: https://auctions.stacksbowers.com/lots/view/3-1BAYV9/unfunded-2022-rarity-check-lost-coin-0001-bitcoin-serial-no-079-zinc-alloy-proof-68-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYX2/unfunded-2022-rarity-check-diy-lost-coin-0001-bitcoin-zinc-alloy-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYAN/2022-rarity-check-lost-coin-0001-bitcoin-loaded-serial-no-100-zinc-alloy-ms-68-pl-icg https://auctions.stacksbowers.com/lots/view/3-1BAYWK/unfunded-2022-rarity-check-diy-lost-coin-0001-bitcoin-zinc-alloy-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYVO/unfunded-2022-rarity-check-diy-lost-coin-001-bitcoin-silver-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYW5/unfunded-2022-rarity-check-diy-lost-coin-001-bitcoin-silver-proof-69-deep-cameo-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYUE/unfunded-2022-rarity-check-vibgyor-0001-bitcoin-serial-no-8-orange-variety-silver-ms-70-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYTX/unfunded-2022-rarity-check-vibgyor-001-bitcoin-serial-no-8-orange-variety-gilt-silver-ms-70-pcgs https://auctions.stacksbowers.com/lots/view/3-1BAYUU/unfunded-2022-rarity-check-lost-coin-001-bitcoin-serial-no-79-silver-proof-69-deep-cameo-pcgs Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 06:00:11 PM maybe he had yogg create them for him...
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tweetious on August 08, 2024, 08:09:02 PM Hi raghav We will not pull the eBay listing. If someone orders we will send them coins with new holos and new keys. We understand that not just other coins but our wallets are impacted but even we are trying to root cause it. We are not 100% sure how this has happened. But we think the key gen software we used is compromised. Rest ensured as soon as we know we will provide details. Since you "are not 100% sure how this has happened", how are you 100% certain that the newly generated keys will be 100% safe? (even if you use a different key generation method for creating the key pairs) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 08, 2024, 08:13:22 PM ✂️ We still posses all the hardware used. We will share exact details of what we think has happened. None of the used hardware has ever been connected to the internet. And the computers used are also wiped out. As this is a widespread issue(beyond our collectibles) this means this is an issue with the private key generator we used for VIBGYOR. We will share the details at 9 pm UK time today. ✂️ raritycheck team: It is imperative that you share how the keys for the VIBGYOR series were generated in as much detail as possible - software used, people involved, computer used, printer used, and everything else that is available. This does appear to be a more widespread attack and funds for many others people outside of collectibles may be at risk. I see no reason why there should be any more delays on sharing the keygen software and process. I'm sure everyone appreciates raritycheck's efforts to compensate affected users, but without more concrete information the community is still being asked to take the fact that other series are not impacted on faith. Additionally, given the on-chain evidence highlighted by Eclipse33 and myself previously in the thread, actively withholding the software and process involved is putting other Bitcoin users at risk. I've reached out to the raritycheck team multiple times over PM to offer help in analyzing this situation (I have a long, long background in building and operating custody systems), and have had no material response. I'm hopeful raritycheck sticks to their promise of a details update and posts it soon - in the mean time, if anyone has been provided any additional information on the keygen process not in this thread by the team, I would encourage you to share it. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 08:48:34 PM Hey guys
Just finished analysing everything we could from our side. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 09:01:26 PM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue.
Issue is with the keygen software we used. In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go). For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins. We appreciate all support from the forum members. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Kazkaz27 on August 08, 2024, 09:09:51 PM My coin was unfortunately part of this debacle… hoping to be made whole. No way I was able to recoup any funds as this unfolded.. my coin is still in a icg slab and in my safe 1000 miles away from me currently. .001 lost, which isn’t huge but the principle of it matters.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Steeley on August 08, 2024, 09:10:29 PM Rarity Check:
I really hate that this happened to you and your team. I appreciate the ways you are responding to help owners of these coins and I wish you the best moving forward. Steeley Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 09:12:06 PM My coin was unfortunately part of this debacle… hoping to be made whole. No way I was able to recoup any funds as this unfolded.. my coin is still in a icg slab and in my safe 1000 miles away from me currently. .001 lost, which isn’t huge but the principle of it matters. Please pm us an address for refund. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 08, 2024, 09:13:46 PM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. Issue is with the keygen software we used. In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go). For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins. We appreciate all support from the forum members. Disregard as you already answered. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 09:14:34 PM Rarity Check: I really hate that this happened to you and your team. I appreciate the ways you are responding to help owners of these coins and I wish you the best moving forward. Steeley Thank you! 🙏 your wishes mean a lot. Very difficult times for us and our customers. We are trying to help as much as possible. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 09:22:57 PM Have you reported this to GitHub? They should take it down if it is compromised.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 09:32:41 PM Have you reported this to GitHub? They should take it down if it is compromised. https://github.com/walletgeneratornet/WalletGenerator.net/issues/293 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: hybridsole on August 08, 2024, 09:34:03 PM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961
But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 08, 2024, 09:34:21 PM Have you reported this to GitHub? They should take it down if it is compromised. https://github.com/walletgeneratornet/WalletGenerator.net/issues/293 Good man. Will they now pull it off the site? I hope nobody else downloads it Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: seavodin on August 08, 2024, 09:59:08 PM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Kazkaz27 on August 08, 2024, 10:04:02 PM Raritycheck is 100%. Swiped bitcoin has been refunded. An honorable man. Proven trusted in my book. A shame this stuff happens to good people on all sides. Yet another part of history, and a mistake turned into a lesson for us all.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 08, 2024, 10:11:33 PM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. The code on github seems to be clean, the site WAS compromised but as of now is not. Now, note I said SEEMS clean, there might be something else that I missed, I am not a programmer nor do I pretend to be but since the github has been static for 7+ years as you pointed out I would *think* there is something else going on. Because, if it really was bad, you would *think* there would be a lot more people with lost funds. Have you reported this to GitHub? They should take it down if it is compromised. https://github.com/walletgeneratornet/WalletGenerator.net/issues/293 Good man. Will they now pull it off the site? I hope nobody else downloads it As pointed out, if the code is bad on github it's been that way for a loooong time with no other issues that have been reported. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Suzuki Matt on August 08, 2024, 10:26:03 PM Just came to say.. RC has sent refund for lost funds.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: ChiBitCTy on August 08, 2024, 11:19:51 PM Raritycheck is 100%. Swiped bitcoin has been refunded. An honorable man. Proven trusted in my book. A shame this stuff happens to good people on all sides. Yet another part of history, and a mistake turned into a lesson for us all. No, no he sure as shit has not proven to be “proven trusted”. I threw up at about every other post in the last few pages. I mean for the dear love of Christ why in the fck do you guys want to keep purchasing funded coins..WHY?!?! Some of you are just complete fools, many of you I love to death, but I think you’re being incredibly foolish and setting a TERRIBLE precedent for the future of this hobby. Yall want the hobby to last, take sound advice when given. DIY or Krogos funding method are solid options if you HAVE to have your wallets loaded, anything else..no. I read that last couple pages quickly but still don’t believe we’ve been given a breakdown of how keys were generated. @RC you should have addressed this at least by like the 10th time it was requested. Also please STOP telling people not to peel..what’s it to you??? That’s really none of your concern and should have no opinion in the matter. I’m not sure I’ve seen a maker ever tell someone they shouldn’t peel their coins. Coin refunds should absolutely unequivocally be above just load value, anything less is a slap in the face and bullshit, period. Why load coins moving forward? You clearly don’t have the proper equipment or knowledge and I can’t fathom anyone ever wanting anything funded by you again. Also, who is “we”. Do you really have a team helping you? How many people? What’s their names /background? Wake up people, I’m bn a grumpy asshole here because I care !! Not because I’m some negative spirit trying to tear down the hobby, one I’ve spent a whole lot of hours trying to help build. I want it to continue without question, but in a proper manner. I guess I’ll just repeat this in the next compromised thread..and then the next (and they will be coming, I assure you). End rant. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 08, 2024, 11:27:37 PM We replied in a previous thread.
To resolve the issue going forward we will offer DIY versions and provide details before printing keys. Rest assured we are also equally passionate about the hobby. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: hybridsole on August 08, 2024, 11:50:00 PM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Okay I was about to remove my negative trust for this incident considering the refunds and finally revealing the software, but it still doesn't add up. If the github repo that raritycheck cited is not vulnerable, then there is more to the story. Surely after 7 years someone would have reported an issue on github. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Additionally, you stated that you used this software to generate vanity addresses, but it does not support generating vanity addresses. From what I can tell it offers no functionality above what bitaddress.org does except for supporting dead shitcoins. I don't want to seem like we are being overly critical, and I want to commend you for refunding people, but the fact you waited this long to even give us the name of the software tells me you are still not sharing the full story. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 08, 2024, 11:50:31 PM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 08, 2024, 11:59:46 PM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. I believe Krogoth mentioned the Vigilante coin keys were crystal clear. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 09, 2024, 12:09:03 AM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Okay I was about to remove my negative trust for this incident considering the refunds and finally revealing the software, but it still doesn't add up. If the github repo that raritycheck cited is not vulnerable, then there is more to the story. Surely after 7 years someone would have reported an issue on github. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Additionally, you stated that you used this software to generate vanity addresses, but it does not support generating vanity addresses. From what I can tell it offers no functionality above what bitaddress.org does except for supporting dead shitcoins. I don't want to seem like we are being overly critical, and I want to commend you for refunding people, but the fact you waited this long to even give us the name of the software tells me you are still not sharing the full story. Perhaps because it said vanitygen, they assumed it would do such but maybe they changed their mind or figured after the fact it didn't, but decided to stick with it for whatvever reason(s). Not sure, but maybe that's possible. The addresses that were sweeping seemed to be collecting coins from a few, if not many sources. Seems things will come to light sooner than later. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 12:20:22 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. I believe Krogoth mentioned the Vigilante coin keys were crystal clear. that would be refreshing considering the ones I have seen so far. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: seavodin on August 09, 2024, 12:55:35 AM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Okay I was about to remove my negative trust for this incident considering the refunds and finally revealing the software, but it still doesn't add up. If the github repo that raritycheck cited is not vulnerable, then there is more to the story. Surely after 7 years someone would have reported an issue on github. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Additionally, you stated that you used this software to generate vanity addresses, but it does not support generating vanity addresses. From what I can tell it offers no functionality above what bitaddress.org does except for supporting dead shitcoins. I don't want to seem like we are being overly critical, and I want to commend you for refunding people, but the fact you waited this long to even give us the name of the software tells me you are still not sharing the full story. Perhaps because it said vanitygen, they assumed it would do such but maybe they changed their mind or figured after the fact it didn't, but decided to stick with it for whatvever reason(s). Not sure, but maybe that's possible. The addresses that were sweeping seemed to be collecting coins from a few, if not many sources. Seems things will come to light sooner than later. Hybridsole's point, is that nowhere on either the website or on github does it say that it supports generating vanity addresses. RC said that this was the impetus for switching to this keygen method, which makes zero sense given that its not listed as a feature. There's a whole bunch of things here that do not line up or make sense, which is worrying. My bet, is that for whatever reason they didnt have the original systems that they used to create keys for the vigilante coins. They then, to shortcut, decided to generate keys using walletgenerator.net, but not by using the code from github on an air gapped system- but directly from the webpage. That medium article came out in late 2019: we know the webpage was vulnerable around that timeframe. In looking at a lot of the funding transactions that were swept the other day (both the VIGBYOR coins and other unfortunate souls), the ones i looked at appeared to be in the timeframe of 2020 to 2022. My guess is that the malicious code was removed from the webpage in 2019 right after the article came out, then added back in, in 2020. It collected keys throughout 2020 to 2022, catching the VIGBYOR coins that were done through the webpage, and then are now being swept in 2024. There is nothing more important than key generation and preservation on these collectables, and these coins (and the lost coins it seem), fail spectacularly in this regard. Not only was the key generation done with little to no care or research, but then the preservation medium (paper, ink, legibility), was done with little regard to redeeming in the future. Most worrying of all, is that this maker has been dodging questions, not sharing information in a timely fashion that would help other scam victims, and then when they do share information- none of it makes logical sense. You guys really want to give a pass to that? Say everything is 100% in order and RC should be trusted? More than likely they didnt want to share that they used the website because it is extremely negligent and would shatter trust. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: ZipReg on August 09, 2024, 12:58:23 AM I may have responded a bit harshly originally, but it infuriates me when this level of incompetence is allowed to flourish in this space.
It's good to see rarity making people whole, but there is zero room for incompetence in this space. You should never make and sell another key ever again rarity, have someone trusted do it or stick to DIY. Furthermore, I have no skin in the game here, however, in case I have to point it out to everyone, he's been saying the whole time that he was using a new vanitygen software then the big reveal is that he used a compromised walletexplorer.net Last I checked, walletexplorer.net has never been a vanity address generator, so I'm calling BS on that.. And don't even get me started on those ghetto ass printed keys shown. I ain't buyin' any of it guys. And like I said, I have no skin in this game, I'm just speaking truth and offering advice. I have played around with compromised wallet software before, when you fund a compromised address, 99% of the time the funds are swept within minutes. I would advise everyone to secure their BTC. Don't say I didn't warn you if this turns out to be a test run and the next one sweeps everything. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 09, 2024, 01:18:58 AM Raritycheck is 100%. Swiped bitcoin has been refunded. An honorable man. Proven trusted in my book. A shame this stuff happens to good people on all sides. Yet another part of history, and a mistake turned into a lesson for us all. No, no he sure as shit has not proven to be “proven trusted”. I threw up at about every other post in the last few pages. I mean for the dear love of Christ why in the fck do you guys want to keep purchasing funded coins..WHY?!?! Some of you are just complete fools, many of you I love to death, but I think you’re being incredibly foolish and setting a TERRIBLE precedent for the future of this hobby. Yall want to the hobby to last, take sound advice when given. DIY or Krogos funding method are solid options if you HAVE to have your wallets loaded, anything else..no. I read that last couple pages quickly but still don’t believe we’ve been given a breakdown of how keys were generated. @RC you should have addressed this at least by like the 10th time it was requested. Also please STOP telling people not to peel..what’s it to you??? That’s really none of your concern and should have no opinion in the matter. I’m not sure I’ve seen a maker ever tell someone they shouldn’t peel their coins. Coin refunds should absolutely unequivocally be above just load value, anything less is a slap in the face and bullshit, period. Why load coins moving forward? You clearly don’t have the proper equipment or knowledge and I can’t fathom anyone ever wanting anything funded by you again. Also, who is “we”. Do you really have a team helping you? How many people? What’s their names /background? Wake up people, I’m bn a grumpy asshole here because I care !! Not because I’m some negative spirit trying to tear down the hobby, one I’ve spent a whole lot of hours trying to help build. I want it to continue without question, but in a proper manner. I guess I’ll just repeat this in the next compromised thread..and then the next (and they will be coming, I assure you). End rant. What I posted yesterday: ... I am at the point that I am no longer even looking to buy or even keep anything funded. Selling off what I have and sticking to only keeping coins that I generated the keys for. Was shrinking my collection anyway and this just gives me another push to keep moving them out. Might be a bit of a knee jerk reaction but why take the risk. Even makers that are long gone might still have a piece of paper somewhere with a list of private keys on them. -Dave Going to follow up with this next thought of that last line of mine really has me thinking. There are a bunch of people that produced coins and things that are no longer around. If they did have that paper with private keys on it they have no loss of business if they move all the BTC that may exist in their products. If it's been years since anyone has heard from them all we can do would be to sit here and scream into the void. People that are still here do have the potential profits of future sales to loose. But if say mrbrt (maker of ravenbit coins) has copies of all the private keys and took all the BTC what would it matter to him. Has not been here in years, has not sold anything in even longer. How long till all the people we know and trust here slowly leave and then YEARS later still have the potential to scam. And what makes it worse is some of these coins may change hands many times holograms are not perfect: https://bitcointalk.org/index.php?topic=5401502.0 -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 02:37:50 AM that is why I prefer DIY or BF coins - and I completely hate the fact that some makers refuse to sell DIY or BF and force you to fund the coins or they deface them if you do not do so.
I want the coin unloaded preferred. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 04:44:23 AM Guys
We are being very honest here. Yes we made a mistake. Too many things happening here 1. For the vigilante coin ink doesn’t bleed nor for other coins. That’s not true. Yes the hole coins are not very easy to read but we are here to help anyone who has issues. 2. About vanity addresses, We were saying that we were trying different key gens to try vanity and honestly it’s been so long that but that’s the only reason we remember why were switching between keygen is because we were trying different software and yes, a mistake has been done. Yes we messed up. what else you want us to say. It’s not like we intentionally do this. We took some time because some of us have day jobs as well. The keys were done in 2022 and we were trying to research as much as possible. 3. Yes, incompetence has been done. Yes we made a mistake and trusted a software which is also impacting other people along with our wallets. 4. Given that we have made a mistake, we are trying to help the customers as much as possible. It feels too much negativity in the group honestly. Has it happened with you? You trusted a software or a person and the trust is broken. We didn’t realize walletgenerator has an issue. So yes we were incompetent. Yes we have made a mistake. But what do we do from here? Sit with hands on hand? No 1.We have nothing to hide and we have been refunding every single coin collector who has sent us a message. 2. We learn, we will make the key gen process even more clear from here on,but we will sell DIY coins if needed 3. We will share generated private key pictures and ask for feedback for next round of coins Look at the negative feedback given, it keeps on saying we are hiding the truth what truth are we hiding exactly? Yes, we made a mistake. Now whether we used the site or we used the software or whatever.x props have been impacted and we are apologizing . And we are tying to help. We have told James to return VIBGYOR coin series. We are tying as best as we can. And we have apologfised. If you don’t trust us going forward that makes sense. Please don’t If you want to peeel the existing RC coins please go ahead. But whoever has been impacted yesterday, we will help you. And yes we will learn from this mistake and improve our process. and try again with better key gen. Please stay a little supportive and positive. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 04:48:58 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. This is not true. During the printing itself it looks some hole coins might have not properly printed paper but we have used waterdrop water proof paper and the ink does NOT bleed. Please don’t spread lies.Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 04:58:02 AM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Okay I was about to remove my negative trust for this incident considering the refunds and finally revealing the software, but it still doesn't add up. If the github repo that raritycheck cited is not vulnerable, then there is more to the story. Surely after 7 years someone would have reported an issue on github. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Additionally, you stated that you used this software to generate vanity addresses, but it does not support generating vanity addresses. From what I can tell it offers no functionality above what bitaddress.org does except for supporting dead shitcoins. I don't want to seem like we are being overly critical, and I want to commend you for refunding people, but the fact you waited this long to even give us the name of the software tells me you are still not sharing the full story. Perhaps because it said vanitygen, they assumed it would do such but maybe they changed their mind or figured after the fact it didn't, but decided to stick with it for whatvever reason(s). Not sure, but maybe that's possible. The addresses that were sweeping seemed to be collecting coins from a few, if not many sources. Seems things will come to light sooner than later. Hybridsole's point, is that nowhere on either the website or on github does it say that it supports generating vanity addresses. RC said that this was the impetus for switching to this keygen method, which makes zero sense given that its not listed as a feature. There's a whole bunch of things here that do not line up or make sense, which is worrying. My bet, is that for whatever reason they didnt have the original systems that they used to create keys for the vigilante coins. They then, to shortcut, decided to generate keys using walletgenerator.net, but not by using the code from github on an air gapped system- but directly from the webpage. That medium article came out in late 2019: we know the webpage was vulnerable around that timeframe. In looking at a lot of the funding transactions that were swept the other day (both the VIGBYOR coins and other unfortunate souls), the ones i looked at appeared to be in the timeframe of 2020 to 2022. My guess is that the malicious code was removed from the webpage in 2019 right after the article came out, then added back in, in 2020. It collected keys throughout 2020 to 2022, catching the VIGBYOR coins that were done through the webpage, and then are now being swept in 2024. There is nothing more important than key generation and preservation on these collectables, and these coins (and the lost coins it seem), fail spectacularly in this regard. Not only was the key generation done with little to no care or research, but then the preservation medium (paper, ink, legibility), was done with little regard to redeeming in the future. Most worrying of all, is that this maker has been dodging questions, not sharing information in a timely fashion that would help other scam victims, and then when they do share information- none of it makes logical sense. You guys really want to give a pass to that? Say everything is 100% in order and RC should be trusted? More than likely they didnt want to share that they used the website because it is extremely negligent and would shatter trust. We are not hiding anything. We are sorry if something doesn’t make sense. When we were creating keys for VIBGYOR we were (don’t remember what other soft gen) but we were looking to generate 1O (1Orange) for the first coins in the series. That’s all we remember the real reason For change of key gen solution. And moved from bitaddess to walletgenerator. That’s what we meant that we unluckily changed software. We took. Sometime because it was 1 am last night until we were responding to messages. Then we woke and went to work(day job) Then we came back and checked as much history as possible and we researched as much as possible and researched only to realized that walletgenerator is compromised. But we are not hiding anything. We didn’t answer because weren’t sure how this happened but as soon as possible we had time we responded. Seavodin you have bough few coins from Is, what does your heart say? Did we really do something intentionally ? What does your interactions with us say? Will we hide somehting or makeup somehting ? Do you not think we are always helpful and caring as much as possible We are humans and yes a mistake is made for VIBGYOR series. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:00:46 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. I believe Krogoth mentioned the Vigilante coin keys were crystal clear. VIBGYOR coins are also crystal clear. For hole coins sometimes there can be slight doubt between 3 and J. But we are here to help and we will try our best to help others. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 05:03:13 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. I believe Krogoth mentioned the Vigilante coin keys were crystal clear. VIBGYOR coins are also crystal clear. For hole coins sometimes there can be slight doubt between 3 and J. But we are here to help and we will try our best to help others. I have seen several VIBGYOR pk's that were NOT clear. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:03:55 AM I may have responded a bit harshly originally, but it infuriates me when this level of incompetence is allowed to flourish in this space. It's good to see rarity making people whole, but there is zero room for incompetence in this space. You should never make and sell another key ever again rarity, have someone trusted do it or stick to DIY. Furthermore, I have no skin in the game here, however, in case I have to point it out to everyone, he's been saying the whole time that he was using a new vanitygen software then the big reveal is that he used a compromised walletexplorer.net Last I checked, walletexplorer.net has never been a vanity address generator, so I'm calling BS on that.. And don't even get me started on those ghetto ass printed keys shown. I ain't buyin' any of it guys. And like I said, I have no skin in this game, I'm just speaking truth and offering advice. I have played around with compromised wallet software before, when you fund a compromised address, 99% of the time the funds are swept within minutes. I would advise everyone to secure their BTC. Don't say I didn't warn you if this turns out to be a test run and the next one sweeps everything Apologies. Just to clarify we were saying that we were trying different software and we only remember why we changed the software was because we were trying vanity address generation and toward the end abandon the vanity generation and in the whole process (for god knows what reason) we needed up using walletgenerator. We really regret making the switch. But that was the whole reason why we went away from bitaddress in the first place. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 05:04:35 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. This is not true. During the printing itself it looks some hole coins might have not properly printed paper but we have used waterdrop water proof paper and the ink does NOT bleed. Please don’t spread lies.not spreading lies - I have shown the keys to multiple people - Polymerbit and Minerjones - both agreed they ink was bleeding. and if they were crystal clear multiple people would not have had issues and needed help. one pk had 2 "Q" and they were not even the same size - one appeared to be either a different font or a different size if the same font. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:05:32 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. I believe Krogoth mentioned the Vigilante coin keys were crystal clear. VIBGYOR coins are also crystal clear. For hole coins sometimes there can be slight doubt between 3 and J. But we are here to help and we will try our best to help others. I have seen several VIBGYOR pk's that were NOT clear. Not clear and not bleeding are different things. All VIBGYOR coins are readable . And if someone peels their coin and cannot make the key please message us we will help. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:07:01 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. This is not true. During the printing itself it looks some hole coins might have not properly printed paper but we have used waterdrop water proof paper and the ink does NOT bleed. Please don’t spread lies.not spreading lies - I have shown the keys to multiple people - Polymerbit and Minerjones - both agreed they ink was bleeding. We used waterdrop waterproof paper. How can the ink be leaking ? We are asking so we make sure this doesn’t happen again. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 09, 2024, 05:08:30 AM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. Issue is with the keygen software we used. In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go). For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins. We appreciate all support from the forum members. Thank you for sharing the software. However, this does raise more questions, and it would be very helpful to have as many answers as possible. 1. Were the keys generated using the code from this specific GitHub repository on an offline computer (i.e. are you certain it was this repo and not a fork/similar looking clone?) 2. If the repo wasn't directly used and you used the website instead, are you certain it was "walletgenerator.net"? .org has been known to be a phishing site for a long time, and .net presently redirects to .com 3. Are you able to provide the exact date (or narrowest date range) when the generation was done? In the event that there is a malicious site or repo, knowing the exact time frame will assist in scouring sources such as archive.org to find more details 4. You mentioned previously that you still had the original hardware used - I would suggest quarantining it and not using it any further. On that hardware, do you still have a copy of the source code used/website listed in the browser history? For anyone to look into this in more detail, it is imperative that we have as much information as possilbe. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 05:08:54 AM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. This is not true. During the printing itself it looks some hole coins might have not properly printed paper but we have used waterdrop water proof paper and the ink does NOT bleed. Please don’t spread lies.not spreading lies - I have shown the keys to multiple people - Polymerbit and Minerjones - both agreed they ink was bleeding. We used waterdrop waterproof paper. How can the ink be leaking ? We are asking so we make sure this doesn’t happen again. I will share the pics tomorrow, I am in bed just on my phone so not on PC with the pictures. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:09:33 AM Walletgenerator.net has had known vulnerabilities since at least 2019: https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961 But one other issue is that walletgenerator does not support the creation of Vanity keys...so I'm confused why you even switched to using this software from bitaddress? This is for the website- not for the code on github which RC said he used. One of the main reasons this vulnerability was found was by comparing the two code bases, which revealed the addition of the malicious code. From that medium article you posted in (2019): 'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Okay I was about to remove my negative trust for this incident considering the refunds and finally revealing the software, but it still doesn't add up. If the github repo that raritycheck cited is not vulnerable, then there is more to the story. Surely after 7 years someone would have reported an issue on github. It was pure luck. We wanted to try creating vanity addresses (1O) for VIBGYOR coins so we looked at multiple options. In the end we didn’t end up creating vanity addresses But still went with the software we trying to generate vanity addresses We are currently trying to help every impacted customer. Please note that we aim to reach out to every single one by Sunday evening. Additionally, you stated that you used this software to generate vanity addresses, but it does not support generating vanity addresses. From what I can tell it offers no functionality above what bitaddress.org does except for supporting dead shitcoins. I don't want to seem like we are being overly critical, and I want to commend you for refunding people, but the fact you waited this long to even give us the name of the software tells me you are still not sharing the full story. Perhaps because it said vanitygen, they assumed it would do such but maybe they changed their mind or figured after the fact it didn't, but decided to stick with it for whatvever reason(s). Not sure, but maybe that's possible. The addresses that were sweeping seemed to be collecting coins from a few, if not many sources. Seems things will come to light sooner than later. Yes this is correct. Unfortunately, we decided to sill change and hence this mishap. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: buckrogers on August 09, 2024, 05:27:05 AM Quote but we will sell DIY coins if needed This would be nice, and I look forward to seeing some nice designs :) Thanks! Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 05:27:52 AM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. Issue is with the keygen software we used. In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go). For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins. We appreciate all support from the forum members. Thank you for sharing the software. However, this does raise more questions, and it would be very helpful to have as many answers as possible. 1. Were the keys generated using the code from this specific GitHub repository on an offline computer (i.e. are you certain it was this repo and not a fork/similar looking clone?) 2. If the repo wasn't directly used and you used the website instead, are you certain it was "walletgenerator.net"? .org has been known to be a phishing site for a long time, and .net presently redirects to .com 3. Are you able to provide the exact date (or narrowest date range) when the generation was done? In the event that there is a malicious site or repo, knowing the exact time frame will assist in scouring sources such as archive.org to find more details 4. You mentioned previously that you still had the original hardware used - I would suggest quarantining it and not using it any further. On that hardware, do you still have a copy of the source code used/website listed in the browser history? For anyone to look into this in more detail, it is imperative that we have as much information as possilbe. Hi Raghav We know you are trying to help and we will answer your questions. But please note that most of the team are software engineers in their day job and the only mistake in this whole process is that we truly blindly trusted a compromised software. We think the wallet generator either has a back door or someone has done an RNG attack How we created the keys were we connected the computer via lab cable to the internet to download the client side side site from walletgenerator and the disconnected the cable No hardware (printer) was connected to wifi. All hardware is wiped (windows uninstalled and hard disk wiped) after usage. About dates that is the main reason why we took sometime. After i reached home after my day job I started looking at my personal device to check historically when was the first time i was researching on key gen software and looking at all sales thread and when exactly it could be that we created the keys. But unfortunately as we have no back up of any kind it is impossible to tel exactly. But we feel it might be between July and November 2022. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceV on August 09, 2024, 08:32:44 AM For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. This website is known to steal Bitcoins for almost as long as I can remember! That's not just a rookie mistake, it's plain negligence. A simple forum search would have brought you to Disclosure: Key generation vulnerability found on WalletGenerator.net (https://bitcointalk.org/index.php?topic=5146885.0) (in 2019). Using compromised software offline doesn't make it safe.Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised. We didn’t realize walletgenerator has an issue. That can only mean you didn't even search for it, otherwise you'd have found many warnings signs.From that medium article you posted in (2019): There's another paper wallet website that turned into stealing Bitcoins after the site was sold, and even offline it produces compromised keys. See this post (https://bitcointalk.org/index.php?topic=5247201.msg54451325#msg54451325). There's no need to use potentially compromised software, there's more than enough legit software out there.'At this time, the code on GitHub is not malicious nor vulnerable, nor has it been malicious or vulnerable previously.' Last checkin for that code on github appears to be 7 years ago. Even if that code was compromised, if it was on an air gapped system theres no way it could have communicated the keys back to the malicious actors. Something doesnt smell right here. Coin refunds should absolutely unequivocally be above just load value, anything less is a slap in the face and bullshit, period. I'm not into collectibles (for privacy, and for "verify, don't trust"), but as far as I know the value of collectibles comes from scarcity, and age. Buyers pay more than just the Bitcoin value when they buy them, which means refunding just the Bitcoin amount is less than the damage done when it got compromised. Even replacing it with a new one removes the "age" of the coin, so doesn't fully fix the value. And that's even ignoring the fact that being compromised even once makes all future coins lose their credibility.So yes we were incompetent. Yes we have made a mistake. In my country, we have these sayings:~ Please stay a little supportive and positive.
This post is my Reference link for neutral feedback. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Mitchell on August 09, 2024, 08:54:02 AM Removed my negative for now, but I cannot wrap my head around why you would use some online wallet generator? Even if the source code wasn't compromised (which it must have been, otherwise, how are we here), why would you ever choose that over actual (airgappable) wallets. :-\
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tweetious on August 09, 2024, 11:02:56 AM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. How we created the keys were we connected the computer via lab cable to the internet to download the client side side site from walletgenerator and the disconnected the cable No hardware (printer) was connected to wifi. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. First of all, we are not judging you here. We are not asking questions to understand if you made a small or a big mistake, to convict/"crucify" you later on. We are all making mistakes. Being here answering questions & trying to find solutions is really appreciated. What is important here, is that we need to understand exactly how this leak happened. Was it a mistake by your side (ie you used a compromised key gen and mistakenly the airgap computer was connected to the internet and the generated key pairs were leaked) OR you actually use the key gen in a proper way -airgap computer, compiled the key gen from github source code in you airgap computer etc. etc.- and still the priv keys were leaked? If it was the first case, then fair enough. However, if it is the second case, we REALLY need to know all the details to protect others from creating compromised key pairs. I am not technical enough (there are many highly technical individuals here, hence please correct me if I am wrong), however the only way I can think of -in the second case- that the priv keys could be leaked from an airgap computer, is if the entropy used for generating the key pair was not random. Hence, if someone knows the exact entropy used, they could probably generate the same key pairs. My question here is: Did you compile the key gen (on the air gaped computer) from the github source code OR you used a pre-compiled file (from the github or eleswere). If the second, could you please indicate what exactly you used? Again, we are not asking questions to turn the answers against you. Since (as you are saying too) this has probably affected many others - even outside of the collectibles community- we just want to protect others from falling into the same mistake. And in order to protect them, we need to work out exactly how the priv keys were leaked. (and your collaboration on that would be of crucial importance) Lastly (and here my above quotes apply) if I understand this correctly the term "airgap" refers to hardware never connected to the internet. Hence if you connected the hardware to the internet (even for 1 second) then the term "airgap" might not still apply. I am just trying to help here, no negativity whatsoever Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 09, 2024, 11:19:06 AM We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a personnel issue. How we created the keys were we connected the computer via lab cable to the internet to download the client side side site from walletgenerator and the disconnected the cable No hardware (printer) was connected to wifi. For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer. First of all, we are not judging you here. We are not asking questions to understand if you made a small or a big mistake, to convict/"crucify" you later on. We are all making mistakes. Being here answering questions & trying to find solutions is really appreciated. What is important here, is that we need to understand exactly how this leak happened. Was it a mistake by your side (ie you used a compromised key gen and mistakenly the airgap computer was connected to the internet and the generated key pairs were leaked) OR you actually use the key gen in a proper way -airgap computer, compiled the key gen from github source code in you airgap computer etc. etc.- and still the priv keys were leaked? If it was the first case, then fair enough. However, if it is the second case, we REALLY need to know all the details to protect others from creating compromised key pairs. I am not technical enough (there are many highly technical individuals here, hence please correct me if I am wrong), however the only way I can think of -in the second case- that the priv keys could be leaked from an airgap computer, is if the entropy used for generating the key pair was not random. Hence, if someone knows the exact entropy used, they could probably generate the same key pairs. My question here is: Did you compile the key gen (on the air gaped computer) from the github source code OR you used a pre-compiled file (from the github or eleswere). If the second, could you please indicate what exactly you used? Again, we are not asking questions to turn the answers against you. Since (as you are saying too) this has probably affected many others - even outside of the collectibles community- we just want to protect others from falling into the same mistake. And in order to protect them, we need to work out exactly how the priv keys were leaked. (and your collaboration on that would be of crucial importance) Lastly (and here my above quotes apply) if I understand this correctly the term "airgap" refers to hardware never connected to the internet. Hence if you connected the hardware to the internet (even for 1 second) then the term "airgap" might not still apply. I am just trying to help here, no negativity whatsoever Based on a discussion I had with the team separately earlier today, they opened the website on the computer, before removing the internet connection and generating the keys. It does not appear that the tool was built from source. Unfortunately, that does make it extremely hard to validate anything more - even with a date range to work with, past investigations into walletgenerator knock-offs and scams have shown some degree of sophistication in serving "Good" generators to some IPs, and bad seeds to others. Without the original page used by the team to generate the keys being saved and available, it isn't really possible to look futher. Presumably, the backdoor took the same form as the one described in the previously linked reports in this thread - the page was seeded with bad random data which was saved by the attackers, and they've simply been biding their time for a few years before sweeping to let the pot grow. This matches the on-chain evidence as well. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 09, 2024, 12:47:05 PM based on the quality of the paper and ink used - I recommend peeling all of RC coins - many of them have ink that is bleeding which will only get worse over time. This is not true. During the printing itself it looks some hole coins might have not properly printed paper but we have used waterdrop water proof paper and the ink does NOT bleed. Please don’t spread lies.not spreading lies - I have shown the keys to multiple people - Polymerbit and Minerjones - both agreed they ink was bleeding. We used waterdrop waterproof paper. How can the ink be leaking ? We are asking so we make sure this doesn’t happen again. I will share the pics tomorrow, I am in bed just on my phone so not on PC with the pictures. The first and last images are of rarity check coins, the first from one of the lost series. The last from VIBGYOR. The second and third images are of a key I generated. Here is the one that best represents what I am referencing as appearing to have the ink bleeding. https://www.talkimg.com/images/2024/08/09/55MJm.jpeg and before you can say it is because it is being zoomed in so much. here is a key I made almost 2 years ago with 2 pt sized font - first image is showing how small it is and the second image is me zooming in on the same. It has no ink bleeding. https://www.talkimg.com/images/2024/08/09/55PSJ.jpeg https://www.talkimg.com/images/2024/08/09/55mbW.jpeg and here is a key from VIBGYOR that I would not say is "crystal clear" https://www.talkimg.com/images/2024/08/09/55R3C.jpeg update images replaced. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: SwissCrab on August 09, 2024, 03:16:49 PM My guess the hardware was not actually airgrapped.
But out of curiosity : Which browser have you used ? I had a quick look at securerandom.js (I did not inspect it throughly) : It relies on the Web Crypto API (which is supported in all modern versions of browser), but if it is not supported it will fallback to Math.random() and/or ArcFour. Both are not cryptographically secure - it is non-cryptographic pseudo-random number generator (PRNG). I believe there is even a comment in the code about PRNG. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 03:34:15 PM My guess the hardware was not actually airgrapped. But out of curiosity : Which browser have you used ? I had a quick look at securerandom.js (I did not inspect it throughly) : It relies on the Web Crypto API (which is supported in all modern versions of browser), but if it is not supported it will fallback to Math.random() and/or ArcFour. Both are not cryptographically secure - it is non-cryptographic pseudo-random number generator (PRNG). I believe there is even a comment in the code about PRNG. Google Chrome. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: hybridsole on August 09, 2024, 07:19:32 PM Based on a discussion I had with the team separately earlier today, they opened the website on the computer, before removing the internet connection and generating the keys. I went ahead and removed my negative trust, because I feel bad for you, and you have had to pay dearly for this mistake. But this sentence right here proves you should never, ever make any private keys for anyone ever again. Full stop. You don't need a "team" to generate keys, that's the first fuck up. If it wasn't the well known malware you used, it would have been someone in this "team" to save the keys for later. There was so much wrong with how you went about this, that to think you can salvage your brand and make more products is astounding. Let this thread be an example for anyone who wants to make their own coins. Don't. There is zero margin for error in this business. And without calling out this level of incompetency, we are only encouraging others to follow in your footsteps. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 08:24:43 PM Based on a discussion I had with the team separately earlier today, they opened the website on the computer, before removing the internet connection and generating the keys. I went ahead and removed my negative trust, because I feel bad for you, and you have had to pay dearly for this mistake. But this sentence right here proves you should never, ever make any private keys for anyone ever again. Full stop. You don't need a "team" to generate keys, that's the first fuck up. If it wasn't the well known malware you used, it would have been someone in this "team" to save the keys for later. There was so much wrong with how you went about this, that to think you can salvage your brand and make more products is astounding. Let this thread be an example for anyone who wants to make their own coins. Don't. There is zero margin for error in this business. And without calling out this level of incompetency, we are only encouraging others to follow in your footsteps. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 08:35:31 PM Guys!
We also want to remind all that last year when the Yogg debacle happened, we volunteered to help everyone impacted by giving RC coins to each impacted forum member. Every single one impacted. We didn't say not to anyone and helped everyone. And when something went wrong, most of the forum members rushed to immediately provide negative feedback and when we asked 12 hours of time, people were already concluding bad stuff about us on this forum. It hurts so much. That's all. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceV on August 09, 2024, 08:41:03 PM And when something went wrong, most of the forum members rushed to immediately provide negative feedback and when we asked 12 hours of time, people were already concluding bad stuff about us on this forum. It hurts so much. That's all. You're wrong here: from what I've seen, people are very conservative with negative feedback. I've seen only 2 negative tags on your account, and the warning was justified. It's also easy to remove later.Quote We also want to remind all that last year when the Yogg debacle happened, we volunteered to help everyone impacted by giving RC coins to each impacted forum member. Every single one impacted. We didn't say not to anyone and helped everyone. I think most people here agree that your heart is at the right place. But that's just not enough to create secure funded coins.Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: seavodin on August 09, 2024, 09:43:19 PM We are not hiding anything. We are sorry if something doesn’t make sense. When we were creating keys for VIBGYOR we were (don’t remember what other soft gen) but we were looking to generate 1O (1Orange) for the first coins in the series. That’s all we remember the real reason For change of key gen solution. And moved from bitaddess to walletgenerator. That’s what we meant that we unluckily changed software. We took. Sometime because it was 1 am last night until we were responding to messages. Then we woke and went to work(day job) Then we came back and checked as much history as possible and we researched as much as possible and researched only to realized that walletgenerator is compromised. But we are not hiding anything. We didn’t answer because weren’t sure how this happened but as soon as possible we had time we responded. Seavodin you have bough few coins from Is, what does your heart say? Did we really do something intentionally ? What does your interactions with us say? Will we hide somehting or makeup somehting ? Do you not think we are always helpful and caring as much as possible We are humans and yes a mistake is made for VIBGYOR series. I dont think anyone here truly thinks you did this maliciously- you would be financially hurting yourself and your brand. It wouldnt make any sense and you would have just ghosted out of the community. But when any sort of a security leak happens, the person or entity involved typically tries to spin things in a way to take as little accountability as possible, and preserve as much trust from society as possible (it could happen to anyone right? just bad luck). This is why the sharing of information immediately is so vital, so your customers within this community can do an independent sort of 'audit' as opposed to you just investigating yourself. As mentioned by other members, there are quite a few engineers/programmers/technically savvy people on the board who can not only assist but verify claims. This is good for you and good for the community. When information isn't provided immediately, my first reaction is that the person/entity is playing for time and trying to spin the facts. I'm not saying that that was what you were necessarily doing here, but your actions up to that point seemed to indicate it. I appreciate your longer form responses later on, as it lets people understand a bit more about what was going on as opposed to having to speculate, like I did. Perhaps part of this is a language barrier thing, or a PR response kind of issue. I think Raghavsood provided the missing information here, which clears up how this occurred: Based on a discussion I had with the team separately earlier today, they opened the website on the computer, before removing the internet connection and generating the keys. It does not appear that the tool was built from source. Unfortunately, that does make it extremely hard to validate anything more - even with a date range to work with, past investigations into walletgenerator knock-offs and scams have shown some degree of sophistication in serving "Good" generators to some IPs, and bad seeds to others. Without the original page used by the team to generate the keys being saved and available, it isn't really possible to look futher. Presumably, the backdoor took the same form as the one described in the previously linked reports in this thread - the page was seeded with bad random data which was saved by the attackers, and they've simply been biding their time for a few years before sweeping to let the pot grow. This matches the on-chain evidence as well. If this is accurate, then the breach occurred because: - Using a computer that was not air gapped (was connected to the internet which allowed loading of the malicious website) - Getting the software supplied by this .net website, and not downloading it from github - Removing the internet connection did not secure key generation, as the website had already served up code that had an entropy seed value known to the attackers This contradicts some of the information supplied earlier, but makes sense how this attack occurred. The original explanations did not make sense in how the attack was perpetrated, and that was what I was trying to clear up. Without a clear root cause on the issue, not only could you fall into this trap again (or more likely a variation of it)- but others could as well. I would like to say that I am a fan of RC's designs and own several coins. I do not benefit from attacking his team, as it lowers the value of my collectibles and potentially stops a newer maker from creating new coins: something i support. I've supported this in the past by pre-ordering RC's LC V2 coins prior to this event occurring. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: transvestite lamb on August 09, 2024, 11:08:46 PM https://talkimg.com/images/2024/08/10/59kIc.png
Taken from this thread: https://bitcointalk.org/index.php?topic=5325059.msg56603383#msg56603383 The signs were there in the very first thread. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: HouseOfBAMF on August 09, 2024, 11:10:05 PM RC,
You addressed this promptly with communication in these threads. Payment was received. I appreciate the ownership y’all are taking with this breach. to me, it says a lot about your character and customer service. I have no bad feelings on this. mistakes happen, I understand you have learned from them and look forward to what you do in the future. Always a pleasure. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 09, 2024, 11:21:24 PM RC, You addressed this promptly with communication in these threads. Payment was received. I appreciate the ownership y’all are taking with this breach. to me, it says a lot about your character and customer service. I have no bad feelings on this. mistakes happen, I understand you have learned from them and look forward to what you do in the future. Always a pleasure. Thank you. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceV on August 10, 2024, 08:14:28 AM https://talkimg.com/images/2024/08/10/59kIc.png That "sign" applies to any new coin maker who sells funded collectibles. And you could just as well apply it to every old coin maker.Taken from this thread: https://bitcointalk.org/index.php?topic=5325059.msg56603383#msg56603383 The signs were there in the very first thread. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: transvestite lamb on August 10, 2024, 10:53:07 AM https://talkimg.com/images/2024/08/10/59kIc.png That "sign" applies to any new coin maker who sells funded collectibles. And you could just as well apply it to every old coin maker.Taken from this thread: https://bitcointalk.org/index.php?topic=5325059.msg56603383#msg56603383 The signs were there in the very first thread. They were asking very basic questions on how to generate private keys. That does not apply to every new maker, was unique to this one Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 10, 2024, 12:52:46 PM At the moment the other negative tags on RC have been changed to neutral, going to leave mine as a warning for the moment.
Let's be honest its not going to matter since I don't think anyone is going to be buying anything funded or even with keys they generated for a while. Once it looks like the majority of the people who lost their funds are paid back at least what they lost I will change it. But for now between the 1) Mistake with the key generation 2) The poor quality of the private keys 3) The admission that more then 1 person had access to the machine that generated / printed the keys There are too many things that are just not done to the way things should be done to take off the negative in my opinion. HOWEVER, once it looks like everyone has had their swept coins refunded I will update to a neutral. raritycheck --> Have you attempted to reach out to the people who have not contacted you yet about this who have the coins? Email / PMs / even a letter though the post office if you have no other way of contacting them since you did ship them a coin you should have their address? -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: pinky1234 on August 10, 2024, 03:55:24 PM At the moment the other negative tags on RC have been changed to neutral, going to leave mine as a warning for the moment. Let's be honest its not going to matter since I don't think anyone is going to be buying anything funded or even with keys they generated for a while. Once it looks like the majority of the people who lost their funds are paid back at least what they lost I will change it. But for now between the 1) Mistake with the key generation 2) The poor quality of the private keys 3) The admission that more then 1 person had access to the machine that generated / printed the keys There are too many things that are just not done to the way things should be done to take off the negative in my opinion. HOWEVER, once it looks like everyone has had their swept coins refunded I will update to a neutral. raritycheck --> Have you attempted to reach out to the people who have not contacted you yet about this who have the coins? Email / PMs / even a letter though the post office if you have no other way of contacting them since you did ship them a coin you should have their address? -Dave 2) The poor quality of the private keys you have not seen MR HOLD private key . ;) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 10, 2024, 05:05:02 PM Maybe another member mentioned this already...But if I'm *RC* I'm turning a negative situation into a positive....
If I'm *RC* I'd design a different *New coin from scratch* and every person that purchased a VIBGYOR coin would now get one of the new designed coin for free.... Here's the kicker......The newly designed coin SHOULD NEVER GO ON SALE.....NEVER EVER......They should only go to the people who purchased a coin in this series...Now *RC* has actually created a new collectible for the people affected...Those who purchased funded get one funded...Those who purchased unfunded get one unfunded....What the people do with the coins once they get them...well that's up to them.... Probably a stupid idea on my part....I don't know....Anyways....it looks like everything the bloke can do he is doing... Props to *RC* but I'm sure others on here may not see it that way.... Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tldr-hodl on August 10, 2024, 06:00:22 PM Could you please elaborate or point me to some specific thread?
(And I assume you meant MrCryptoHodl) 2) The poor quality of the private keys you have not seen MR HOLD private key . ;) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: pinky1234 on August 10, 2024, 06:09:47 PM Could you please elaborate or point me to some specific thread? (And I assume you meant MrCryptoHodl) 2) The poor quality of the private keys you have not seen MR HOLD private key . ;) YEs am referring to MRCRYPTHOLD PRIVATE KEYS https://imgur.com/a/7xzZesy fixed pic https://imgur.com/a/p9RiTVH authentic pic Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: tldr-hodl on August 10, 2024, 08:05:11 PM Thanks!
YEs am referring to MRCRYPTHOLD PRIVATE KEYS https://imgur.com/a/7xzZesy fixed pic https://imgur.com/a/p9RiTVH authentic pic Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: ironworld on August 11, 2024, 12:55:16 AM Hi everyone!
I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I had saved the address 1EXkmyQEtNL351Q9ovUsCvsDTYtx4hVgCf to check the balance using the BlueWallet app, to see how my godson's savings were doing. Tonight, when I accessed the website, I was shocked! The funds had been moved. I immediately spoke to my godson's father, who confirmed that the funds hadn't been moved by him and that the paper was safely stored in a vault, as I had given it to him. I can't stop thinking about where I went wrong in this process. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 21MilBTC on August 11, 2024, 01:36:06 AM Hi everyone! If you're looking for assistance you might want to start a new thread. Not that someone won't respond to this post but with a new thread some of the more experienced members will see the new thread and might be more likely to respond.I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I had saved the address 1EXkmyQEtNL351Q9ovUsCvsDTYtx4hVgCf to check the balance using the BlueWallet app, to see how my godson's savings were doing. Tonight, when I accessed the website, I was shocked! The funds had been moved. I immediately spoke to my godson's father, who confirmed that the funds hadn't been moved by him and that the paper was safely stored in a vault, as I had given it to him. I can't stop thinking about where I went wrong in this process. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 11, 2024, 02:06:17 AM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird.
edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: 2stout on August 11, 2024, 02:32:53 AM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty According to Collectible Money, 16 are still funded. Item 019 from series Rarity Check Lost Coin Series V1 Alloy has been redeemed on 2024-08-07 18:50:58 UTC, worth 0.001 BTC (54.85 USD). First funded on 2023-09-21 03:30:24 UTC, this item held it's value for 10 months, 21 days, 15 hours. There are 183 unfunded, 16 funded, and 1 redeemed items in this series now, worth 0.016 BTC (877.61 USD). Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 04:40:05 AM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty The Lost Coin Series has two variants - Silver and Alloy. Rarity Check Lost Coin Series V1 Alloy (https://collectible.money/series/raritycheck-lost-coin-v1-alloy) has 16 unredeemed, 1 redeemed, and 183 unfunded (thanks 2stout!). Rarity Check Lost Coin Series V1 Silver (https://collectible.money/series/raritycheck-lost-coin-v1-silver) has 5 unredeemed, 4 redeemed, and 91 unfunded. For VIBGYOR series, there are still 8 unredeemed Gilded (https://collectible.money/series/raritycheck-vibgyor-orange-gilded) and 15 unredeemed Silver (https://collectible.money/series/raritycheck-vibgyor-orange-silver) worth 0.044BTC and 0.015BTC respectively. If you hold an intact, funded VIBGYOR coin or know someone who does, please make sure it is peeled and redeemed. Based on what we know about the keygen compromise so far, funds being stolen from this is a matter of WHEN, not IF. Leaving those coins funded is akin to sending a time-delayed donation to the people behind the bad keygen. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 11, 2024, 04:52:18 AM 2 lost coins should show as redeemed.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 04:58:57 AM Hi everyone! I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I had saved the address 1EXkmyQEtNL351Q9ovUsCvsDTYtx4hVgCf to check the balance using the BlueWallet app, to see how my godson's savings were doing. Tonight, when I accessed the website, I was shocked! The funds had been moved. I immediately spoke to my godson's father, who confirmed that the funds hadn't been moved by him and that the paper was safely stored in a vault, as I had given it to him. I can't stop thinking about where I went wrong in this process. Thank you for the datapoint. If you're certain you used bitaddress and not walletgenerator, my sense is that both you and raritycheck ended up on fake sites of the respective generators, which were compromised. If you generated any other wallets using this same method, I would suggest sweeping them immediately. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 05:00:34 AM 2 lost coins should show as redeemed. For silver or alloy? Just manually checked all remaining addresses that show funded for both series, and mempool.space shows them as funded still as well. Would be great to see addresses/txids to rule out a case where a redeemed coin has a different address than the one published on the RC site. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 11, 2024, 05:21:42 AM 2 lost coins should show as redeemed. For silver or alloy? Just manually checked all remaining addresses that show funded for both series, and mempool.space shows them as funded still as well. Would be great to see addresses/txids to rule out a case where a redeemed coin has a different address than the one published on the RC site. ahh yea I see your post now - it was one of ea that I knew of. and you got that covered in your post. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: gpfrag on August 11, 2024, 05:59:45 AM I'm amazed at the speed of which notification and publishing of activity took place.
Is there a way to set up alerts for transactions/movement on personal public addresses so that you're instantly notified if something is happening with one of your coins? I'd like to set something up so I get an alert on my phone jic. Thanks Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 06:23:45 AM ✂️ If you hodl any items from RC, I would encourage you to join the public telegram channel (https://t.me/collectible_money), or run "/subscribe https://collectible.money/creator/raritycheck" via the collectible money bot (https://t.me/collectible_btc_bot) to receive updates when any RC items are peeled For items in the collectibles tracker, you can use the telegram bot to subscribe to specific creators, series, or items (or join the public channel for everything). For arbitrary public addresses, some explorers offer notification emails - there's also some services focusing just on alerts out there, but I haven't used any personally to recommend. Before building the tracker, I used to just import my items' addresses into an electrum watch-only wallet and leave it running in the background - worked well enough (although not great, as I still got burned by Yogg while I was asleep) Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: LoyceV on August 11, 2024, 07:04:02 AM I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. The only thing linking it to this topic is that it was swept in the same transaction as the collectible coins. Other than that, it would probably be better to open a new topic in Bitcoin Technical Support (https://bitcointalk.org/index.php?board=4.0).Quote On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I see several potential points of failure:~ I can't stop thinking about where I went wrong in this process.
Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: Primo-bit on August 11, 2024, 10:04:23 AM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty I've taken a look at my #12 (gilded and silver). Bought them both in April 2023 Gilded was loaded October 2022 Before I bought (Hacker Swept) Silver was loaded April 2023 When I bought (I swept after the others were swept by hacker) So this makes me to believe that maybe RC makes the keys when they are sold and changed key generator software/method from early 2023 (I think raghavsood has also mentioned it) rsincognito you bought late 2023 I can also be completely wrong about this :) Maybe RC can elaborate on that? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 11, 2024, 12:30:55 PM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty I've taken a look at my #12 (gilded and silver). Bought them both in April 2023 Gilded was loaded October 2022 Before I bought (Hacker Swept) Silver was loaded April 2023 When I bought (I swept after the others were swept by hacker) So this makes me to believe that maybe RC makes the keys when they are sold and changed key generator software/method from early 2023 (I think raghavsood has also mentioned it) rsincognito you bought late 2023 I can also be completely wrong about this :) Maybe RC can elaborate on that? All keys were generated at once i.e. on the same day. Address list was published from the day of coins announcement : https://crypto.raritycheck.com/vibgyor It's possible some keys haven't been hacked with RNG attack or the backdoor for VIBGYOR series. All LCS coin keys are created with bitaddress. So, please avoid panic. Regards Team RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 12:37:19 PM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty I've taken a look at my #12 (gilded and silver). Bought them both in April 2023 Gilded was loaded October 2022 Before I bought (Hacker Swept) Silver was loaded April 2023 When I bought (I swept after the others were swept by hacker) So this makes me to believe that maybe RC makes the keys when they are sold and changed key generator software/method from early 2023 (I think raghavsood has also mentioned it) rsincognito you bought late 2023 I can also be completely wrong about this :) Maybe RC can elaborate on that? All keys were generated at once i.e. on the same day. Address list was published from the day of coins announcement : https://crypto.raritycheck.com/vibgyor It's possible some keys haven't been hacked with RNG attack or the backdoor. Regards Team RC If all keys were generated in one session with the same tool, it is not possible that same keys are safe. Every single existing VIBGYOR key should be considered unsafe, and every single loaded VIBGYOR coin should be peeled immediately. The raritycheck team should be very, very clear in their messaging regarding this. Giving holders the impression that they might be safe if the funds haven't been swept yet is simply not an option. If you hold an intact, funded VIBGYOR coin or know someone who does, please make sure it is peeled and redeemed. Based on what we know about the keygen compromise so far, funds being stolen from this is a matter of WHEN, not IF. Leaving those coins funded is akin to sending a time-delayed donation to the people behind the bad keygen. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: DaveF on August 11, 2024, 12:56:19 PM I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. The only thing linking it to this topic is that it was swept in the same transaction as the collectible coins. Other than that, it would probably be better to open a new topic in Bitcoin Technical Support (https://bitcointalk.org/index.php?board=4.0).Quote On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I see several potential points of failure:~ I can't stop thinking about where I went wrong in this process.
The clone sites are everywhere and they are STILL indexed used all the time. I while ago I wound up getting a bunch of domains and setup the sites like this after they hosted malware: http://electrum-bitcoin.org YEARS AND YEARS later they are still getting hits from non bot / non crawler sources. As in people had to have them bookmarked or something and tried to go back. -Dave Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 11, 2024, 01:07:19 PM Hi everyone! I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I had saved the address 1EXkmyQEtNL351Q9ovUsCvsDTYtx4hVgCf to check the balance using the BlueWallet app, to see how my godson's savings were doing. Tonight, when I accessed the website, I was shocked! The funds had been moved. I immediately spoke to my godson's father, who confirmed that the funds hadn't been moved by him and that the paper was safely stored in a vault, as I had given it to him. I can't stop thinking about where I went wrong in this process. Thank you for the datapoint. If you're certain you used bitaddress and not walletgenerator, my sense is that both you and raritycheck ended up on fake sites of the respective generators, which were compromised. If you generated any other wallets using this same method, I would suggest sweeping them immediately. @raghavsood is this guys swiped coin being done by the same people that swiped the raritycheck coins? im not as tech as you are. ty Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: rsincognito on August 11, 2024, 01:10:33 PM I'm amazed at the speed of which notification and publishing of activity took place. Is there a way to set up alerts for transactions/movement on personal public addresses so that you're instantly notified if something is happening with one of your coins? I'd like to set something up so I get an alert on my phone jic. Thanks yes there is an app called crypto alerting, for your phone and they have a website, you can set it to send you a text , push notification and i even think a phone call if funds move from an address you upload into your account, here is the site. https://cryptocurrencyalerting.com/ if anyone has a reason not to use this site please let me know, i have had zero issues with it. ty Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 02:53:21 PM Hi everyone! I'm new here and found this place after researching transaction 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64. On a certain day (which I honestly don't remember), I accessed bitaddress.org to generate a wallet for my godson. I'm a tech person, so I took every precaution when accessing the site (Mac/Safari or Chrome), generating the document, and even when printing it. I chose to take my laptop to the printer and connected it via a USB cable (I've worked with printer drivers for years). I had saved the address 1EXkmyQEtNL351Q9ovUsCvsDTYtx4hVgCf to check the balance using the BlueWallet app, to see how my godson's savings were doing. Tonight, when I accessed the website, I was shocked! The funds had been moved. I immediately spoke to my godson's father, who confirmed that the funds hadn't been moved by him and that the paper was safely stored in a vault, as I had given it to him. I can't stop thinking about where I went wrong in this process. Thank you for the datapoint. If you're certain you used bitaddress and not walletgenerator, my sense is that both you and raritycheck ended up on fake sites of the respective generators, which were compromised. If you generated any other wallets using this same method, I would suggest sweeping them immediately. @raghavsood is this guys swiped coin being done by the same people that swiped the raritycheck coins? im not as tech as you are. ty Yes, it is the same actors - I'm working on a larger fund flow piece, and will share it once I'm done - there may be an avenue for folks who were directly stolen from to file some reports with platforms/law enforcement (although I doubt it would lead to a recovery, but not entirely impossible). Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 11, 2024, 03:25:24 PM I still don't know how I had 8 of these coins and NONE of them were swept. I swept all 4 of the 0.01 btc denomination coins and left the other 4 coins that are loaded with 0.001 alone and they are still loaded, weird. edit: Does anyone know how many of the "lost coin series" 0.001 btc coins are still loaded ? ty I've taken a look at my #12 (gilded and silver). Bought them both in April 2023 Gilded was loaded October 2022 Before I bought (Hacker Swept) Silver was loaded April 2023 When I bought (I swept after the others were swept by hacker) So this makes me to believe that maybe RC makes the keys when they are sold and changed key generator software/method from early 2023 (I think raghavsood has also mentioned it) rsincognito you bought late 2023 I can also be completely wrong about this :) Maybe RC can elaborate on that? All keys were generated at once i.e. on the same day. Address list was published from the day of coins announcement : https://crypto.raritycheck.com/vibgyor It's possible some keys haven't been hacked with RNG attack or the backdoor. Regards Team RC If all keys were generated in one session with the same tool, it is not possible that same keys are safe. Every single existing VIBGYOR key should be considered unsafe, and every single loaded VIBGYOR coin should be peeled immediately. The raritycheck team should be very, very clear in their messaging regarding this. Giving holders the impression that they might be safe if the funds haven't been swept yet is simply not an option. How are we giving the message that the VIBGYOR coins might be safe? Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogoth on August 11, 2024, 03:30:11 PM I'm amazed at the speed of which notification and publishing of activity took place. Is there a way to set up alerts for transactions/movement on personal public addresses so that you're instantly notified if something is happening with one of your coins? I'd like to set something up so I get an alert on my phone jic. Thanks yes there is an app called crypto alerting, for your phone and they have a website, you can set it to send you a text , push notification and i even think a phone call if funds move from an address you upload into your account, here is the site. https://cryptocurrencyalerting.com/ if anyone has a reason not to use this site please let me know, i have had zero issues with it. ty I have the app and it does alert me right away thru text with any changes in a BTC addy balance. So far so good Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 11, 2024, 03:36:32 PM Maybe another member mentioned this already...But if I'm *RC* I'm turning a negative situation into a positive.... If I'm *RC* I'd design a different *New coin from scratch* and every person that purchased a VIBGYOR coin would now get one of the new designed coin for free.... Here's the kicker......The newly designed coin SHOULD NEVER GO ON SALE.....NEVER EVER......They should only go to the people who purchased a coin in this series...Now *RC* has actually created a new collectible for the people affected...Those who purchased funded get one funded...Those who purchased unfunded get one unfunded....What the people do with the coins once they get them...well that's up to them.... Probably a stupid idea on my part....I don't know....Anyways....it looks like everything the bloke can do he is doing... Props to *RC* but I'm sure others on here may not see it that way.... We have been already refunding affected people. Edit: We plan on adding new stickers for existing coins. We are thinking of taking someone else's help for private keys for VIBGYOR. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogothmanhattan on August 11, 2024, 03:46:15 PM Below is a pic of a crystal clear private key that I swept as I mentioned in an earlier post...I deleted the last row to prevent anyone from tracing where the BTC went to once swept. https://www.talkimg.com/images/2024/08/11/5DVYo.jpeg Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 11, 2024, 04:15:07 PM Below is a pic of a crystal clear private key that I swept as I mentioned in an earlier post...I deleted the last row to prevent anyone from tracing where the BTC went to once swept. https://www.talkimg.com/images/2024/08/11/5DVYo.jpeg Yes these are the Vigilante private keys. Thank you krogothmanhattan for sharing. Only the Hole coin was tricky because of the shape of the paper. but VIBGYOR and Vigilante keys are easy to read. But we are thinking about what to do with LCS v2 and remaining unsold VIBGYOR + anyone resending us + unsold LCS v1 coins. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 04:19:08 PM How are we giving the message that the VIBGYOR coins might be safe? The phrasing in orange could be construed to mean that some keys are safe. Please be careful and try to phrase things unambiguously for this case. All keys were generated at once i.e. on the same day. Address list was published from the day of coins announcement : https://crypto.raritycheck.com/vibgyor It's possible some keys haven't been hacked with RNG attack or the backdoor for VIBGYOR series. All LCS coin keys are created with bitaddress. So, please avoid panic. Regards Team RC Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raghavsood on August 11, 2024, 04:20:56 PM Yes these are the Vigilante private keys. Thank you krogothmanhattan for sharing. Only the Hole coin was tricky because of the shape of the paper. but VIBGYOR and Vigilante keys are easy to read. But we are thinking about what to do with LCS v2 and remaining unsold VIBGYOR + anyone resending us + unsold LCS v1 coins. Honestly, for an immediately next step, you should do a buyer funded variants - get new holos with BF serials, and list out the coin serials that will be sold as buyer funded once you have consolidated the unsold inventory and returns. I personally like the RC designs, as I'm sure many others do - the coins are good. I would just prefer to fund them myself with my own keys at this stage. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 11, 2024, 05:47:38 PM I have now seen the keys on 7 VIBGYOR coins - 5 were clear, 2 were difficult but not impossible to read and one of the two was worse than the other.
but as it currently stands - RarityCheck should not generate any more keys now or in the immediate future, and quite possibly never again. do buyer funded and/or DIY Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 11, 2024, 08:16:55 PM I have now seen the keys on 7 VIBGYOR coins - 5 were clear, 2 were difficult but not impossible to read and one of the two was worse than the other. but as it currently stands - RarityCheck should not generate any more keys now or in the immediate future, and quite possibly never again. do buyer funded and/or DIY Yes, we selected a wrong software/site to generate Keys. But never again seems too strong. Anyways, we are still deciding. We'll make a call soon. For now, please note that the only impacted series is the Orange in VIBGYOR. We are deciding on how to move forward with rest of VIBGYOR series and series #2 for Vigilante and LCS. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 11, 2024, 11:24:14 PM I have now seen the keys on 7 VIBGYOR coins - 5 were clear, 2 were difficult but not impossible to read and one of the two was worse than the other. but as it currently stands - RarityCheck should not generate any more keys now or in the immediate future, and quite possibly never again. do buyer funded and/or DIY Yes, we selected a wrong software/site to generate Keys. But never again seems too strong. Anyways, we are still deciding. We'll make a call soon. For now, please note that the only impacted series is the Orange in VIBGYOR. We are deciding on how to move forward with rest of VIBGYOR series and series #2 for Vigilante and LCS. There is no risk to you - making keys or not - and no profit or loss either . .01 btc load costs the buyer .01 btc - however, with security issues and/or questions people will or should hesitate to buy. By doing Buyer Funded you leave it to them to decide now or later whether they want to risk their sats with your keys. When you sell loaded, you force them to take the risk. and with DIY, people can create their own keys removing any issues of trust and/or risk. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 12, 2024, 06:12:49 AM At the moment the other negative tags on RC have been changed to neutral, going to leave mine as a warning for the moment. Let's be honest its not going to matter since I don't think anyone is going to be buying anything funded or even with keys they generated for a while. Once it looks like the majority of the people who lost their funds are paid back at least what they lost I will change it. But for now between the 1) Mistake with the key generation 2) The poor quality of the private keys 3) The admission that more then 1 person had access to the machine that generated / printed the keys There are too many things that are just not done to the way things should be done to take off the negative in my opinion. HOWEVER, once it looks like everyone has had their swept coins refunded I will update to a neutral. raritycheck --> Have you attempted to reach out to the people who have not contacted you yet about this who have the coins? Email / PMs / even a letter though the post office if you have no other way of contacting them since you did ship them a coin you should have their address? -Dave Only one person had access to the machine. As mentioned theVIBGYOR keys are all readable. You can see people are even redeeming hole coins. Fine. Can you please change the wording of the trust rating. Your wording sounds like we are doing a scam but on the opposite we are trying to help everyone impacted. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: krogothmanhattan on August 12, 2024, 08:19:39 AM I think one of the ways we physical bitcoin creators can hopefully help to prevent something like this from happening is to share and educate present and future creators one the process we use and programs to create private keys. Many do not, and thus we find people experimenting and falling for malicous programs and websites.
I have created threads here that perhaps more people can post on and guide people to the right programs....this will hopefully prevent and future mishaps. https://bitcointalk.org/index.php?topic=5416519.0 https://bitcointalk.org/index.php?topic=5505467.0 Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: MoparMiningLLC on August 12, 2024, 12:13:48 PM Only one person had access to the machine. As mentioned theVIBGYOR keys are all readable. You can see people are even redeeming hole coins. at some point previously you said "team" used the laptop - if one person only had access then your team is only one person? and not all the keys were 100% readable I have seen a couple that were not perfectly clear. we did get them figured out but they were not crystal clear as you claim. Title: Re: RarityCheck VIBGYOR gilded #12 swept yesterday. Post by: raritycheck on August 12, 2024, 12:29:18 PM Only one person had access to the machine. As mentioned theVIBGYOR keys are all readable. You can see people are even redeeming hole coins. at some point previously you said "team" used the laptop - if one person only had access then your team is only one person? and not all the keys were 100% readable I have seen a couple that were not perfectly clear. we did get them figured out but they were not crystal clear as you claim. Thank you for the feedback. We said keys are readable (someone else mentioned in the comments that they are crystal clear for Vigilante). Apologies if we miscommunicated, from the team only one person had access to the laptop + printer etc. |
