Bitcoin Forum

June 22, 2015 - Around 24 hours ago, I (Marcelo Santos AKA Admin) was finishing our server upgrade, We've been doing the switch step by step for the past two weeks. The last part was the accounts database and the trade engine. I put a notice up here around the time I was finishing the switch, users that were online at the time probably noticed. After I completed, I ran a upgrade on the new server and left on a personal trip with my family in which I was unreachable until now.

Around 14 hours ago our database was breached, the hacker credited himself BTC and KHS and withdrew BTC until our withdraw wallet was empty. He then proceeded to make suspicious orders in the market in which the market automatically turned itself off. This sent a alert to myself and other support staff, one of them seeing what was happening but not being able to do much as he does not have back-end access, he enabled our "Panic" mode in which put the whole site on lock down. But the hackers still managed to gain access and steal the coins from the hot wallet and the backup withdraw wallet.

Bad news: We had a large amount of BTC stolen, most of which were ours.
Good news: Our server runs hourly database backups and a backup was made minutes before their first attack and right before the lock down. So all user information is safe.

The site will stay online while we investigate further and plan out our next steps.
Balances will show 0 for the time being as we work on the database.

According to the blockchain some users are still depositing into their accounts, DO NOT MAKE ANY MORE DEPOSITS since the hackers still have access to the hotwallets.

Please have patience and I'll keep everyone updated as we execute our next steps.

if you still have access to scrypt.cc and you can withdraw, do it as soon as possible.

here is the ref link to the main topic of the site : https://bitcointalk.org/index.php?topic=444495.0 (https://bitcointalk.org/index.php?topic=444495.0)

reason:

when i was looking for the site, it became :
https://i.imgur.com/11y68WH.png

also, it is a ponzi, as great referral program, anonymous operator, no such picture proof, no provable physical offices, guest are not accessible to their forum.

as a result, scrypt.cc is a scam, i predicted it before.

I'm pretty sure there is no legitimate cloud mining company. Hash profit, pbmining etc. all collapsed.

We have better ways to invest our money anyways.

bitmain and cryptX is the legit company anyway.

and btw, "Anonymous Operator".
you ever heard of 'whois'?
get your facts straight, buddy.

i personally think that "whois" is not completely as accurate as you think. sometimes whois fooled you.

bump. (sorry, can i do this?)

Seriously? This has been a proven scam for quite some time. Do you all read badbitcoin.org or something?

Seriously? This has been a proven scam for quite some time. Do you all read badbitcoin.org or something?

Yep.

http://btcvestor.com/2015/06/22/scrypt-cc-hack/

---

Posted on the Scrypt.CC Dashboard when you login to the site:

June 22, 2015 – Around 24 hours ago, I (Marcelo Santos AKA Admin) was finishing our server upgrade, We’ve been doing the switch step by step for the past two weeks. The last part was the accounts database and the trade engine. I put a notice up here around the time I was finishing the switch, users that were online at the time probably noticed. After I completed, I ran a upgrade on the new server and left on a personal trip with my family in which I was unreachable until now.

Around 14 hours ago our database was breached, the hacker credited himself BTC and KHS and withdrew BTC until our withdraw wallet was empty. He then proceeded to make suspicious orders in the market in which the market automatically turned itself off. This sent a alert to myself and other support staff, one of them seeing what was happening but not being able to do much as he does not have back-end access, he enabled our “Panic” mode in which put the whole site on lock down. But the hackers still managed to gain access and steal the coins from the hot wallet and the backup withdraw wallet.

Bad news: We had a large amount of BTC stolen, most of which were ours.
Good news: Our server runs hourly database backups and a backup was made minutes before their first attack and right before the lock down. So all user information is safe.

The site will stay online while we investigate further and plan out our next steps.
Balances will show 0 for the time being as we work on the database.

According to the blockchain some users are still depositing into their accounts, DO NOT MAKE ANY MORE DEPOSITS since the hackers still have access to the hotwallets.

Please have patience and I’ll keep everyone updated as we execute our next steps.

Yep.

http://btcvestor.com/2015/06/22/scrypt-cc-hack/

---

Posted on the Scrypt.CC Dashboard when you login to the site:

June 22, 2015 – Around 24 hours ago, I (Marcelo Santos AKA Admin) was finishing our server upgrade, We’ve been doing the switch step by step for the past two weeks. The last part was the accounts database and the trade engine. I put a notice up here around the time I was finishing the switch, users that were online at the time probably noticed. After I completed, I ran a upgrade on the new server and left on a personal trip with my family in which I was unreachable until now.

Around 14 hours ago our database was breached, the hacker credited himself BTC and KHS and withdrew BTC until our withdraw wallet was empty. He then proceeded to make suspicious orders in the market in which the market automatically turned itself off. This sent a alert to myself and other support staff, one of them seeing what was happening but not being able to do much as he does not have back-end access, he enabled our “Panic” mode in which put the whole site on lock down. But the hackers still managed to gain access and steal the coins from the hot wallet and the backup withdraw wallet.

Bad news: We had a large amount of BTC stolen, most of which were ours.
Good news: Our server runs hourly database backups and a backup was made minutes before their first attack and right before the lock down. So all user information is safe.

The site will stay online while we investigate further and plan out our next steps.
Balances will show 0 for the time being as we work on the database.

According to the blockchain some users are still depositing into their accounts, DO NOT MAKE ANY MORE DEPOSITS since the hackers still have access to the hotwallets.

Please have patience and I’ll keep everyone updated as we execute our next steps.

what i said cloudmining are sucks you must never believe on every cloudmining service . its all bullshit.

It's not all a scam, there are legit cloudmining services, but indeed they are rare ones to find.
When a cloudmining company can't or won't deliver proof of actual mining being done, well then i call it BS.

Anyways, there's an "update" on their site now, when you log in, stating:

"

Update: Aside from the stolen coins, there's no other damage done. We have found the entry point and we're ready to move on. We're in the progress of installing a new server and should be back in business within a week.
There's a lot of speculation regarding KHS/BTC balances, all balances will be rolled back to the last backup before the lock down.
You will be forced to change your emails, password and PIN upon your first login. (These are hashed but it's good practice to reset after a breach like this).
It was a big blow, but we'll come out stronger then ever. We appreciate the patience and all of the kind words we have recieved. I'll update as we make progress.

"

* Withdraw is disabled, and as are most of the tabs in navigation menu. It all just leads to a blank page at the moment. Doesn't look good, even tho they claim to return in a week.

cheers

Oops, if withdraw is disabled, then we can't get the 'revenue' from the site. Look forward to how it goes to scam. It will probably collapse in few months as people are starting to withdraw coins there when they realize that it is a ponzi. Once a good site, but it will have a day of leaving. Just to say goodbye to scrypt.cc.

People don't want to invest in interesting startups, who build products with long-term focus. They want to risk their life savings with gambling and ponzi schemes.

I laughed way harder than i should have, on this bolded part above. Do you think they will return, and that you will be able to cashout you balance? I honestly doubt it.

cheers