Bitcoin Forum

Hi Guys,

First of please be nice and constructive. I had my fortune stolen away and I am at a very bad place, infact I am depressed ($17000 worth of my savings that took me more than 8 years to save). I would appreciate if you guys can give me honest suggestions of what to do or if there is any chance Poloniex will refund me for the hack that happened.

So here is what happened as I sent email to Poloniex but they have not responded to me yet:

TICKET NUMBER # 271818

Dear Poloniex,
My account was hacked this morning at 2:50 am BST (british standard time). I am devastated as I had upwards of $17000 worth of portfolio of coins. Someone logged into my account, converted all the coins to BTC first, then to BCN, then he went on to a very illiquid BCN/XMR and started buying high and selling very low at huge spreads. I suspect he was on the other side of the trade to profit from it. I am sure you can easily find out who the culprit by checking on the other side of the trade.
Please check the activity between 2:50 am - 3:00 am BST (british standard time). This is a clear theft where your site has been hacked to gain access to my account and upwards of $17000 was stolen from my account.
I have contacted the Attorney General at your state who has advised me to contact you directly first before taking it further with him.
I have the evidence of the email I received at 2:50 am BST, the ip address where it was logged in from and I have also downloaded the transactions to prove it.
Please look into this issue asap and get back to me please. This is my hard earned savings over past 7 years and I will leave no stone unturned to get this resolved.
Thanks

So here is the email above. Please suggest what to do, I have also reported it to Police and action fraud. I did not have 2FA. I did not use this password on any other sites.
I know I am very silly not to have 2FA. This thread is all about what options I have, please suggest.

Thanks in advance


HERE IS HOW THE ATTACK UNFOLDED

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

STEP 1: CONVERTING ALL MY COINS TO BTC

Date   Market   Category   Type   Price   Amount
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010483   1590.715688
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010413   448.875
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.0001041   1805.496701
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010409   3144.41261
26/06/2017 02:55   DASH/BTC   Exchange   Sell   0.06699959   0.89588201
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002954   335.598172
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000295   774.6756601
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002931   3.41180585
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000293   3.41297029
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002925   341.8808419
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002923   3.42114367
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002922   3.42231449
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002921   3.42348611
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000292   3.42465854
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002919   3.42583177
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002918   3.4270058
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002917   3.42818064
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002916   3.42935629
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002915   3.43053274
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002913   3.43288806
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002912   3.43406694
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002911   3.43524663
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000291   3.43642712
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002909   3.43760843
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002908   3.43879055
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   3.43997349
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   4467.303294
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158738   484.8682556
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158737   313.9317444
26/06/2017 02:56   XRP/BTC   Exchange   Sell   0.00010416   999.6340003
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540007   3.25036868
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540006   7.1795983
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540001   5.2431235


STEP 2: EXCHANGE BTC FOR BCN

Date   Market   Category   Type   Price   Amount
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   59272.84047
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   178.1245725
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   13321.02993
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   69900
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   80995.4
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   120185.7244
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   602409.6386
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   367221.477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   26745.53571
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   44136.3825
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   34648.81477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   131.5789474
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   4647.389196
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   654545.0659
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   218000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   185.4027405
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   26623.01727
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   986.5
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1322
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   412161.8432
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   150.0663717
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   378442.6232
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   175000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   14621.3292
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   91423.83194
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1538148.525
26/06/2017 02:57   BCN/BTC   Exchange   Buy   0.00000114   315275.8772



STEP 3:  BUY HIGH AND SELL LOW ON BCN/XMR (potentially sitting on the other side collecting the spread)

Date   Market   Category   Type   Price   Amount
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.887E-05   4674.970916
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   80735.18691
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   7.57050629
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5.94189602
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5441.088052
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.885E-05   8906.780966
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.882E-05   523.2942593
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.861E-05   3977.657
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000586   3300.7546
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.853E-05   141.66457
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.799E-05   8620.83829
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.762E-05   13994.92212
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.746E-05   104.0725224
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.735E-05   168943.4675
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.731E-05   536.1849055
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000572   91.74545454
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.699E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.695E-05   358.2730872
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.607E-05   39329.59247
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.606E-05   12105.36604
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   35714.28554
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   44642.85714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   93.41535714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.599E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.598E-05   1.80421579
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.586E-05   1118.808514
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.513E-05   90694.72157
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000551   2283.690563
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   990
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   1000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   38499.04
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.499E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.483E-05   1139.918108
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.473E-05   45673.07692
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   37037.03704
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.379E-05   1161.83961
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000535   47004.15421
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.347E-05   46751.9685
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000533   1988.743152
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.325E-05   20944.09527
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000532   187969.9248
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000053   34423.65019
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.276E-05   1184.620779
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000525   27526.34213
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.223E-05   38292.16925
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.221E-05   47883.06452
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   11979.19308
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   556.8425
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.181E-05   1.94943061
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.121E-05   58582.30892
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   19607.84314
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.094E-05   49070.24793
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   8238.9328
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   5680
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.987E-05   17022.35808
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.977E-05   60277.27547
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.968E-05   50317.79661
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000495   202020.202
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   13425.43367
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   1059
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   5756.03
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.881E-05   22848.10393
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.842E-05   51630.43478
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   10.625
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   131516.4717
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.795E-05   24272.80944
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.783E-05   2.11164541
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000475   16.03052631
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.715E-05   53013.39286
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000471   213.4694268
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4264707.907
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000602   3164.0142
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.021E-05   2916.2629
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.074E-05   2493.666412
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.105E-05   10828.10402
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.113E-05   4074.274417
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   116.1580385
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   9713.187093
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000063   7980
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.309E-05   298.8293266
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.326E-05   201.8952973
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.327E-05   400681.0796
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   4759.920572
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   340969.5528
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.349E-05   570.5983376
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.366E-05   234.9259049
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.426E-05   2845.660706
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.441E-05   98.01294347
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.516E-05   550.543843
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.547E-05   15274.17138
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.573E-05   2500
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.585E-05   1.8
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.599E-05   120263.334
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000066   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.611E-05   21422.44154
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   360.6507619
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   112350.767
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.658E-05   3415.547555
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.663E-05   806.9169328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000667   42437.93762
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000668   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.681E-05   304.6794857
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   19970
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   3206873.721
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.634E-05   1700.12886
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4485532.328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.118E-05   1121.922674
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.298E-05   134779.4884
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.559E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1051437.124
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1983484.409
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.701E-05   24430.74249
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   3158417.117
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.697E-05   121882.2575
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   2114199.137
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   2230491.191
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.242E-05   97892.15736
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.657E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   381120.4842
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978764
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1062006.459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.0000534   10666.77678
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1492923.806
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   2549.400068
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   50988.05572
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.198E-05   408422.6922
26/06/2017 02:59   BCN/XMR   Exchange   Buy   0.000062   5427.485332
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.228E-05   36147.77078
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   647567.6459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.584E-05   857.6760387
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1093964.004
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   799807.093
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   797807.5753
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.657E-05   380818.5655
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.659E-05   20000
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   157521.6889
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   556944.4037
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   383236.4612
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.617E-05   9044.32432
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   391300.0835
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   278723.3007
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.217E-05   19139.35231
26/06/2017 02:59   BCN/XMR   Exchange   Sell   4.701E-05   6400.635184
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   252486.505
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   3536.569787
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   100976.5906
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.617E-05   10955.67568
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.699E-05   84161.39945
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   199131.16
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   140697.8605
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   140346.1158
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.614E-05   111708.5747
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   7131.833572
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   104297.4697
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.612E-05   79981.08567
26/06/2017 03:00   BCN/XMR   Exchange   Sell   4.831E-05   8927.255227
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   70853.87773

Your money are most probably gone , this is the downside of crypto.

It saddens me when I see these stories and i just don't understand why people do this? Why keep money you can't afford to loose on an exchange?
Not even 2FA ? I'm sorry to say but you definitely deserve it. You just don't do this man in this days anymore.

Never get comfortable whit money, you worked 8 years to make it but you did not took 1-2h more to setup proper wallets on your computer and store everything safely.

Thanks for your response BTCIV. But I am looking at options here BTCIV.

This is a clear case of theft and I have notified poloniex about it. 2FA is optional not mandatory by poloniex. I totally agree I should have had it on my account.

But nonetheless the money has been stolen from the exchange who were the custodian of my coins. Should they not do something about this? what are my options here to get this recovered. I have downloaded the list of trades the hacker did, i have have the market snapshot showing the irregular activity.

Please help me out here instead of just saying what has already happened :(

Thanks

You can ask them to investigate HOW the money was stolen. First, instead of sending an email, raise a ticket with support.

Once you have raised the ticket and have a ticket number, make an account on reddit, and then contact Mike-Poloniex (https://www.reddit.com/user/Mike-Poloniex/) via private mesage, quoting your ticket number and explaining what happened. They should be able to investigate and tell you the IP addresses of whoever stole your coins, and which countries they were in. After that, you need to contact the police to get them to track down the thieves.

Do you mind explaining more about how your account was hacked?

Did someone gain access to your account and sold your coins at a low price? What happened after that? Did the 'scammer' not withdraw anything from your account?

If you have any other exchange sites/online wallets with BTC, do change your passwords if they are the same. You might not have a lot options now but the best you can to is to stop this from happening again. If the scammer indeed has taken away all your coins, if would be hard for you to get back your coin, sadly. :(

Did you know anyone who might have gained access to your computer? That might be a possibility too.

Thanks for your response alyssa. I have already raised a ticked witht them and they have not yet gotten back to me. I have the ip address from where the hacker logged into my account. Ip address is 119.26.200.230, a quick search shows its from Kobe Japan, Jupiter Telecommunications Co.

Do you suggest I should speak to police in Japan? I am based in London,

thanks

Someone got hold of my password and logged in from an IP address in Japan, I am based in London.
Here is how the money was stolen, He did not withdraw any. I had notional value of $17000 in different coins. He converted them to BCN, then he went on and started trading BCN on a very wide spread. He sat on the other side of the trade and kept buying and selling from my account, buying high and selling low, him collecting the spread in that time. He kept doing this until my $17000 was reduced to mere $400.

It was a hacker from Japan according to login email

Forget about the IP , it is most probably a VPN.

Best to do is wait poloniex investigate and if they can't do nothing (which is most probable) file the complaint in Delaware and hope that police will do something ( I never heard of any case police recovered crypto).

To me it is lost, ofc until now the scammer withdrawn everything and probably used Monero too so very litte change of tracking anything after that. But good luck is better to try then to give up

Also do you access everything from Windows? Beter swich to a mac or linux and even then use a proper Antivirus like BitDefender and avoid dodgy places.

No 2F.... really.... Why would you not protect your assets with as many layers of security that are available to you...

I think the outcome will be one of well sorry but it's your responsibility to ensure your account stays uncompromised.

Further to this your machine must be compromised some way for attackers to get access to the account in the first place.

Thats why 2fa is very important for an account for safety reasons. What you lose is such a huge amount. Dont you remember signing in to anu site before that happen? Last week i have found a fake/phishing site that looks like exactly as poloniex. By the way if you pass ticket on support surely they would make an investigation about what happen but I dont think they can make any action to refund what you lose.

Thats the thing which I don't get :-\ The thing is even if the hacker sells low and buy high from your account, there's no way he can ensure he is the want who will receive what you sell or what you buy. Did you set your settings such that you receive email notifications or require validation upon withdrawals?

I really have no clue what is going on, but there might be some reason behind such activity which is possible to find. I have some suspicions but I do not dare confirm for now.

Sad to hear that, the problem may be why your password is stolen. So it is very important for us to keep the password as much safe as possible.

Your money is lost, and it's a very expensive lesson for you, use secure computers, unique passwords and always enable two factor authentication.

Poloniex ain't gonna refund anything as you cannot show you're not the one defrauding them.

Police ain't gonna start an international investigation because so little money and also because you can be the one on both ends of that 'hack'.

No 2FA: it's mandatory nowaday.
Holding all your stack on an exchange: coins aren't yours.

Just 2 major failures.

I don't think Poloniex can do anything for you.

that sucks. It's not very smart idea to NOT use 2fa when dealing with so much money. I have 2fa set up on every website I use. I hope you get your money back.

Me. Mt. gox 2013. Didn't have 2FA enabled. Russian hacker got my PW from a Bitcoin forum dump and I had used the same email and PW for my Gox acct. Can't get any dumber than that.

$4000 in BTC at the time, lost.

I've never not used 2FA again. Most expensive but best lesson I've ever learned.

He can make sure he is the one i trade with, as he chooses a very illiquid stock which has a very large spread, buying at 70 and selling at 40. He sits inside the spread at a low volume time and keeps trading very quickly and I keep paying him the spread of thirty until my funds get depleted. Does that make sense?

Yes I did have email setup, i got email at 2:50 am when i was asleep. The ip adress lookup shows an IP in Kobe Japan

a couple of lessons, ALWAYS use unique password or even special email accounts to make it even harder, just like linkedin hacks etc all ur previous passwords are already out in the open so stop (re)using old password, enable 2fa

mostlikely you wont get ur money back, sorry to hear about it hopefully in the next wave (whenever that is) you can make some nice profits and PLEASE..... TAKE OUT SOME PROFITS when u got some. because the most important rule is and will always be..... DONT PLAY WITH MONEY YOU CANT MISS!!!!

Yes I know what you mean, but you can apply this argument to any crime, like lost/stolen item, the victim can always be the one defrauding the system/the insurers/the banks

if your account hacked then it is done, no one can help you about it or don't expecting polo to pay you back. simple as that.

Wooo, that's a bit harsh

Yup basically accept it and move on, it's not anyone's fault but yours. Polo has no control over who has your pw, so it's not their problem. I wouldn't contact japanese police either, you can't expect them to do anything, especially just based off an ip which really just provides a general location. They'd probably just laugh you off.

Report it to your local police in London (I think they have a cybercrime unit and can achieve much more through their internal contacts than you attempting to solve things by yourself).

Centralized exchanges will always steal your coins. Use Blocknet`s decentralized exchange. You always keep your private keys. Their exchange goes live by the end of July:

https://bitcointalk.org/index.php?topic=829576.0

what kind of person you are keeping your 18,000 $ without 2 step security ? even if i only had 10 bucks i will keep it secure, it your assets, no body can help for your own mistake... sorry to say it

C'mon guys,
2FA is not that complicated.

Use AUTHY, way better than google authenticator (cloud saves, easy migration on a 2ndary device)

It depends on their terms of use. Have you read that? What does it say about insuring your deposited funds?

I agree, I am the dumbest guy to do that, lesson learnt a very expensive one, but that is not the point of this post :(

I am sorry for your loss, I guess the only way is to create ticket from what the seniors mentioned in the previous reply and hope poloniex is able to help you recover the fund.

I came across a website which is trying to impose poloniex early this month. It has the same design and domain but it is not poloniex.com but something like poloniex.ru. It is on Google search page, did you accidentally login to the fake website and that is why the hacker managed to steal your password? Since I came across the website, I always login to poloniex through bookmark.

Try to include as many details as possible so that poloniex can try to help. Hope everything goes well for you.

This story has been posted before.. LOTS.

When do chucklefucks clue in that all this shit is scammy?

No idea why you all keep pretending trading profit coins on teh exchanger is a legit investment strategy.

I am not sorry for your loss.. Because I highly doubt you learned anything  ::)

PS:
I already knew your story.
All I did was guess then I read the comment before mine then edited my post.

In case you shit birds didn't figure it out yet?
That happens a lot.. Especially at POLONIEX & BITTREX.
Wonder why? LOL

I WISH IHAD MY OWN EXCHANGE  ;D

I feel sorry for your loss.

Poloniex is aware of this problem because you are not the first one whose poloniex account is hacked and submitted a ticket for this.
In my opinion poloniex is also accountable and should (partly) compensate users who are hacked.

After the first ticket was raised, poloniex should have informed all their users to setup a 2fa authentication immediately.
They simply should not allow users not to use 2fa authentication, and make 2fa mandatory.
Also they should have prevent users to withdraw coins (or at least delay for a long time) if they logged in without a 2fa-authentication (with the knowledge that their users are hacked currently).

The shady thing with the hacked accounts at poloniex is that the withdrawal is processed without the confirmation by e-mail.

As a poloniex user you must be confident that your coins are safe, and currently this is one of the worst places to deposit your coins.

Just enabled 2FA  on polo ;D
I'm also registered on bittrex and few days ago got email that someone logged from diff IP, traced to Russia  ???  Had nothing on bittrex  8)
Changed passwords and now 2FA

Same exact shit happened to me.

Polo is in on it, I guarantee it 100%

This happened at the end of may. They ultimately traded out my 600 litecoins to fucking qora, first to btc, then xmr.

Polo is like swiss cheese.

Actually Im very certain it was one of the help desk fucktards as I had contacted support a week prior. I had this particular account for maybe two weeks before it was hacked the exact same way as yours.

If polo is this insecure, why the hell haven't they fixed this problem. Make 2fa mandatory.

Polo is probably insolvent, and hence hacking users accounts using this method. Their response is always, its your fault not ours.


Fuck them

Staff can steal it then play dumb.. Implying hackers.
Perfect crime.. It would impossible to catch the staff doing it because they all operate with 0 transparency.
Think about it people.. I am just pointing out common sense.

one of the weirdest options: i did'nt have 2fa enabled, next day i tried to log in 2fa was enabled just out of the blue...so i could'nt get to my account.
contacted their support #210524 three weeks ago and several times after, up till now they've not responded. question is, why should a hacker enable 2fa.... ???
makes me think it was not hacked...!

Since you have not enabled 2 fa,if anyone wants to withdraw the coins from poloniex they have to verify the mail ID and i hope the hacker does not have access to your mail ID and so it make sense that he made those stupid plot to buy and sell ,the only possible way is that polo must lock your account from further abuse,really sad about your loss.

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

STEP 1: CONVERTING ALL MY COINS TO BTC

Date   Market   Category   Type   Price   Amount
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010483   1590.715688
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010413   448.875
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.0001041   1805.496701
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010409   3144.41261
26/06/2017 02:55   DASH/BTC   Exchange   Sell   0.06699959   0.89588201
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002954   335.598172
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000295   774.6756601
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002931   3.41180585
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000293   3.41297029
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002925   341.8808419
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002923   3.42114367
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002922   3.42231449
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002921   3.42348611
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000292   3.42465854
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002919   3.42583177
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002918   3.4270058
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002917   3.42818064
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002916   3.42935629
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002915   3.43053274
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002913   3.43288806
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002912   3.43406694
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002911   3.43524663
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000291   3.43642712
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002909   3.43760843
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002908   3.43879055
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   3.43997349
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   4467.303294
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158738   484.8682556
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158737   313.9317444
26/06/2017 02:56   XRP/BTC   Exchange   Sell   0.00010416   999.6340003
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540007   3.25036868
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540006   7.1795983
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540001   5.2431235


STEP 2: EXCHANGE BTC FOR BCN

Date   Market   Category   Type   Price   Amount
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   59272.84047
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   178.1245725
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   13321.02993
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   69900
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   80995.4
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   120185.7244
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   602409.6386
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   367221.477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   26745.53571
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   44136.3825
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   34648.81477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   131.5789474
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   4647.389196
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   654545.0659
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   218000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   185.4027405
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   26623.01727
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   986.5
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1322
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   412161.8432
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   150.0663717
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   378442.6232
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   175000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   14621.3292
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   91423.83194
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1538148.525
26/06/2017 02:57   BCN/BTC   Exchange   Buy   0.00000114   315275.8772



STEP 3:  BUY HIGH AND SELL LOW ON BCN/XMR (potentially sitting on the other side collecting the spread)

Date   Market   Category   Type   Price   Amount
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.887E-05   4674.970916
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   80735.18691
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   7.57050629
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5.94189602
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5441.088052
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.885E-05   8906.780966
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.882E-05   523.2942593
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.861E-05   3977.657
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000586   3300.7546
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.853E-05   141.66457
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.799E-05   8620.83829
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.762E-05   13994.92212
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.746E-05   104.0725224
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.735E-05   168943.4675
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.731E-05   536.1849055
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000572   91.74545454
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.699E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.695E-05   358.2730872
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.607E-05   39329.59247
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.606E-05   12105.36604
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   35714.28554
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   44642.85714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   93.41535714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.599E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.598E-05   1.80421579
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.586E-05   1118.808514
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.513E-05   90694.72157
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000551   2283.690563
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   990
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   1000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   38499.04
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.499E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.483E-05   1139.918108
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.473E-05   45673.07692
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   37037.03704
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.379E-05   1161.83961
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000535   47004.15421
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.347E-05   46751.9685
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000533   1988.743152
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.325E-05   20944.09527
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000532   187969.9248
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000053   34423.65019
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.276E-05   1184.620779
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000525   27526.34213
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.223E-05   38292.16925
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.221E-05   47883.06452
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   11979.19308
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   556.8425
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.181E-05   1.94943061
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.121E-05   58582.30892
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   19607.84314
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.094E-05   49070.24793
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   8238.9328
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   5680
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.987E-05   17022.35808
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.977E-05   60277.27547
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.968E-05   50317.79661
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000495   202020.202
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   13425.43367
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   1059
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   5756.03
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.881E-05   22848.10393
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.842E-05   51630.43478
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   10.625
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   131516.4717
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.795E-05   24272.80944
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.783E-05   2.11164541
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000475   16.03052631
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.715E-05   53013.39286
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000471   213.4694268
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4264707.907
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000602   3164.0142
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.021E-05   2916.2629
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.074E-05   2493.666412
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.105E-05   10828.10402
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.113E-05   4074.274417
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   116.1580385
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   9713.187093
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000063   7980
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.309E-05   298.8293266
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.326E-05   201.8952973
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.327E-05   400681.0796
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   4759.920572
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   340969.5528
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.349E-05   570.5983376
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.366E-05   234.9259049
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.426E-05   2845.660706
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.441E-05   98.01294347
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.516E-05   550.543843
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.547E-05   15274.17138
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.573E-05   2500
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.585E-05   1.8
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.599E-05   120263.334
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000066   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.611E-05   21422.44154
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   360.6507619
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   112350.767
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.658E-05   3415.547555
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.663E-05   806.9169328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000667   42437.93762
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000668   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.681E-05   304.6794857
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   19970
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   3206873.721
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.634E-05   1700.12886
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4485532.328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.118E-05   1121.922674
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.298E-05   134779.4884
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.559E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1051437.124
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1983484.409
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.701E-05   24430.74249
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   3158417.117
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.697E-05   121882.2575
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   2114199.137
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   2230491.191
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.242E-05   97892.15736
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.657E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   381120.4842
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978764
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1062006.459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.0000534   10666.77678
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1492923.806
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   2549.400068
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   50988.05572
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.198E-05   408422.6922
26/06/2017 02:59   BCN/XMR   Exchange   Buy   0.000062   5427.485332
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.228E-05   36147.77078
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   647567.6459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.584E-05   857.6760387
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1093964.004
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   799807.093
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   797807.5753
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.657E-05   380818.5655
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.659E-05   20000
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   157521.6889
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   556944.4037
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   383236.4612
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.617E-05   9044.32432
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   391300.0835
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   278723.3007
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.217E-05   19139.35231
26/06/2017 02:59   BCN/XMR   Exchange   Sell   4.701E-05   6400.635184
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   252486.505
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   3536.569787
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   100976.5906
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.617E-05   10955.67568
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.699E-05   84161.39945
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   199131.16
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   140697.8605
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   140346.1158
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.614E-05   111708.5747
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   7131.833572
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   104297.4697
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.612E-05   79981.08567
26/06/2017 03:00   BCN/XMR   Exchange   Sell   4.831E-05   8927.255227
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   70853.87773

Sorry about your loss, but the money is gone. You will not be able to recover it as I suspect its already off poloniex and has been mixed.

i guess instead of cashing out btc, trading them means there is no evidence of the theft, even if polo know the trader how can you prove it. very sophisticated, the question is how was your account breached. the money has gone that is the problem/benifit of the decentralized world.

But poloniex was the custodian of my coins, someone hacked at stole my coins, they should compensate me right

surely your account details have been compromised. have you scanned your computer, checked for any network leaks, do other people have access to your computer etc. lets be honest all that effort for 17k, polo makes millions a day.

In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?

My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?

In that case it should be easy for Poloniex to establish who the culprit is. If BCN is very illiquid and the culprit was on the other side of the trade, there can't be many people trading it so it's just a case of them going through the ledger and working out who set the orders on the book. If they too had a Japanese IP address, then that's your man (or woman).

I agree with this.  Polo should be able to discover the account on the other end of the trades.  They may also be able to get IP records showing both accounts were trading from the same IP but if the thief used a VPN and two computers side by side that may not be the case.  The biggest problem I can see though is getting any response from polo in anything like a timely manner.  The forum is full of people with problems that polo is ignoring.  If the thief has his withdrawal "on hold" as so many others do, then there is a very small chance that polo could prevent that withdrawal and recover something.  But that all depends on them actually looking at what happened close enough to be convinced it was a theft and not a series of legitimate trades.  It sounds like if they have half a brain it should be evident.  But again, all of this requires them to even begin responding to your communications or support tickets which right now looks like it just isn't happening for anyone.

You should give some thought as to how the thief obtained your password.

I would like to know the outcome of this support ticket, also whatever you do, and how quickly they responded?

Ha Ha! This might be the one time Polo's delays actually benefit a customer!

That's scary and the fact that he/she was toying your account in Poloniex too. Didn't you put like a security something on your Poloniex account though like a 2fa? I feel bad for your loss but I doubt Polo would be able to return back your losses, I do hope they get to find out from where or what IP address was used to hack your account.

My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.

In the eye of all these breaches i think it would make sense to open a warning-thread for poloniex and make it a sticky.
So many ppl who prob come here and read that 2fa could have saved them after it happened ...
My mail was compromised and thank god i had not used poloniex for anything yet.
Someone hacked into the servers or someone from the inside screws all those people - i am sure.
At this point the exchange has already burnt its reputation - just search for poloniex in this forum - full of ripoffs and successful logins from japan or china or usa.
Maybe we will see a crypto price drop soon when this exchange is burning to the ground ...

No, they have not made any effort or gotten back to me yet, I have been constatnly sending them emails, and raised a ticked 4 days ago!

I know someone started a website when there was a glitch saying polo stole money. the website went down after a week so i guess he was paid off.

you could start a class action in the usa, even the threat might spur them to investigate. have tiy tried twitter facebook,, they are making 10s of millions a day.

Thanks, I am thinking of taking some legal action, problem is i am based in London and all my savings (17000) is gone

Except that you can't prove that you didn't just use a VPN to do it yourself.  This is the problem unless you can get some evidence of a specific person doing this then you are just as much a possible suspect as anyone else.  In fact you are likely more of a suspect because you had access to the password already.  Can you see why this is going to be a problem?

Internet transactions and connections are inherently risky.  Poloniex is NOT the custodian of your account, you are.  YOU alone are responsible for the security of your account and password.  That information very well can be compromised from a Poloniex database, but you are still responsible if there are losses incurred. 

If you brought a case against them you would need to be able to prove that Poloniex was hacked and you have no way to do that.  If Poloniex at some point announced their database had been compromised then you might have the ability to bring a case.  If not you would need to get enough potential victims together to convince a judge or attorney general that there was something bigger going on to issue a search warrant or evidentiary discovery of logging data then MAYBE you might find the info you needed to potentially prove a case.  The problem is you will need likely at least 5-10+ victims totalling enough money to convince a lawyer willing to bring such a case against them.  In the end though their defense has the simple task to say that you made the choice not to protect your account using all means available to you and they have done all their legal due diligence by providing multi-layer protections to prevent unauthorized access and you chose not to use them, therefore you are at fault.

You're going to have to throw more money at the problem to even have a semblance of a chance to get this moving.  It sucks that this happened and I'm sorry to hear about it, but this was a risk you took, not Poloniex.

How are these people getting into these accounts so easily?  Do that many people really have trojans on their computer?   Is it that easy to phish or brute force a password without 2 factor authentication enabled?  Even without 2 factor authentication my passwords are 15+ character random ASCII generated from grc's password generator. (Example password:  PJZO@w#(P/fZ75"rXAg) I haven't had any attempts to access my account much less somebody who got ahold of the password, and even then they would need 2 factor authentication.

Does poloniex have a limit to your number of attempts?  A way to curb this would be 5 unsuccessful password attempts on any given account per day.

hello the exact same thing happened to me yesterday, someone hacked into my account and sold all my coins and started to buy bcn, this has happened to a few other people also, also if you check bcn on polo its having problems so its clearly happened to a few people, when i logged onto my account they was in my account then i got locked out, froze my account straight away and contacted poloniex

So what letter of the alphabet are you, and is this your first name or surname?

The simple fix to this is to enable 2FA on your account.  It's really not that big of a deal if you have a phone.  The 10 seconds it takes to look up an account would eliminate all of this heartache.

If you don't have the ability to have 2FA then you really shouldn't have money in your accounts.

It is so simple to hack people's accounts without that kind of protection.

I kinda disagree on "its easy to hack" - we all have accounts for mail, ebay, paypal and so forth which store some value.
No arguing that 2fa is an important countermeasure- but i would not feel very safe at this exchange anymore.
A little while ago only people who used VPN had had 2fa with special tokens. And somehow we have not all had sudden successful logins in our paypals
or whatever - these guys got owned in some way and do not admit it. Even if someone got a hold of the hashed passwords, a good salting of these hashes could have prevented this.
Going there saying "hey i have 2fa, i am safe" feels a bit wrong for me . You never know what happens next in this hostile environment...
I am going to delete my account there, they have not even responded to my request and that is the last nail in the coffin for my trust.

Dropping by to say, Im sorry bro. But theres no chance you are getting all that money back. What you should have done was withdraw all your coins to a wallet and back up your private keys and encrypt them.

Thats the price you pay for being negligent.

Certainly do what you need to do to feel confident and safe.  Poloniex is a US based company that has a lot of liability if things go wrong, so it is not some fly in the night operation that is going to disappear without any repercussions if there are problems.  Bring a lawsuit if you think that you have evidence to prove wrong doing, but as I mentioned that's not free and will require time and effort.  The point is that people who have 2FA generally are not hacked unless there is a social engineering component or other accounts that would allow access to the OTP or private keys to be accessed.  Even then there are other safeguards that are in place to prevent it.  The fact is that these people are likely complicit in their hacking and they don't admit it.  The same thing has happened for years and years on plenty of other services and people still think that it will never happen to them therefore they get lazy and don't enable the security features.  Take your money where you feel safe and secure, but all the Poloniex problems are now showing up on Coinbase/GDAX as well and people aren't calling that a scam.  When you have explosive 1m new customers per month type of growth there is a LOT of growing pains and you're going to have a fairly large number of stupid people who don't do what they need to do to protect themselves.  It only takes one to make a post like this on the forums and 1-9 more going me too to make it sound like there are hoards being hacked.

That doesn't mean that Poloniex or anyone else is immune from hacking, but they have a vested interest in making sure that doesn't happen.  Especially when they have had to be registered with the SEC and following money laundering rules just to operate.  Then again maybe this is just me be complacent and ignoring signs that are really are red flags.  Either way you shouldn't be putting money into investments unless you are willing to lose it all, especially if you aren't doing everything you can do to protect it.

The hacked account started with the letter A.

Btw, polo support blamed me, case closed. However, that's not good enough. They are an American company, and I am American, and we Do have consumer protection here.

Also it looks like person number 3 has been hacked on polo.

If this isn't a warning sign to leave polo, then I don't know what is.

And all of you didn't have 2FA enabled so how do you know that it was Poloniex's database that was hacked?

As I said file your complaints and lawsuits.  I see no issue with Poloniex right now other than them not forcing people to use proper security.  I am using proper security and not worried about the problems you're complaining about.  If I get bit then I'll join your lawsuit.  If you start it at least you can be the principle that will get the most gains from a victory.  All I see at this point is 3 people on an unrelated forum that claim they were hacked when all evidence points to failure to secure accounts.

what did polo say to you? I've also been hacked in the same way and funds drained its obvious something isn't right here and needs to be sorted, they're getting beyond a joke for a company that make around 10million a day they need to be more supportive to their customers, without us they wouldn't be making a penny, also how long did it take for them to reply to you? thanks

Guys just to update, Poloniex has not gotten back to me despite several emails and tickets. I am thinking of filing a lawsuit
I have seen many being in the same boat, please respond below if you want to join me in this

if they don't get back to me within a month i will be taking this further, their support staff is beyond a joke for a company that makes around 10 million a day! and their systems clearly aren't as safe as we may think, yes we should of used two factor and i regret not using it but its not my fault that some low life hacked my account, i never give my password to anyone nor do i use the same password for any other account i always use different one, and my laptop is secure i never download add ons or bots, so its clearly been hacked from their side!

i m doing my homework on legality of this issue & which authorities to approach As our asset is lying in USA in poloniex.so we can approach https://www.usa.gov/online-safety also i had tracked down these two I.P addresses from poloniex login history. 51.174.74.182 82.208.175.115 did anyone else also hacked via these I.P addresses ?


i had complained to the cybersecurity wings of the nations from where these I.P traced. also complaining to cybersecurity wing of USA as poloniex or our assets are in USA. RAISED A TICKET IN POLONIEX TOO. i had requested poloniex moderator to just check the timing of these unauthorised trades & they can easily check which accounts are beneficiaries at that moment. as these hackers uses those currency pairs which have almost near to nil volume. it's too easy for poloniex to trace these fraudsters. but they r not responding . so i had mailed my concern to cybersecurity wings of concerned nations. & i request all victims to do the same. also report these to twitter handle of @coindesk ‏& https://twitter.com/Cointelegraph & @themerklenews.
let us rise this issue ,otherwise how can we trust poloniex is not involved in this. take these cases to media limelight.
poloniex i had contacted u on your twitter handle too. but no response.

poloniex my ticket #299064 .

 i m starting a campaign on change.org . it's quite disturbing how a person tens thousands miles far. even doesn't know anything about me. even knows my credential to log into my poloniex account & lately i m seeing a lot of such cases all over reddit.com & net . just search " poloniex account get hacked " & see the numbers. almost 98% of these hacks happened in may,june &july 2017. it can't be a co incidence.

Of course people are getting hacked.  No one is suggesting otherwise, but if you didn't have 2FA enabled on your account you were just asking to have everything taken.

Between malware, keyloggers, hacking other databases, getting into your email they can and will find some people's usernames and passwords.  You can easily protect yourself.  The extra 30 seconds it takes to login everytime with 2FA pales in comparison to being taken for everything you have.  But Poloniex is the steward of my account you say?  Bullshit, you are.  It costs nothing to protect yourself this way.  Use the desktop version of google authenticator if you don't have a phone, it is still far better than not having 2FA enabled at all.

is 2FA mandatory? no i thought not and yeah we didn't have it on but thats not why we got hacked i can assure you my computer is not compromised i have had it checked by a professional, i never use the same password for anything nor do i give it to anyone so its obvious they got this information from polo! yes i feel stupid for not having 2FA but again its not mandatory so either polo should make it so or they should have better cyber security and they should insure our money in my opinion, my bank insures my money from cyber attacks as should poloniex due to the amount they're making and the amount of money thats being traded on poloniex, its a bloody joke do you have any idea how much they make from fees? yet their support takes for ever to get back to people and their servers are always messing up, they are meant to be one of the best crypto exchanges about they need to start acting like it, how're people meant to trust crypto when they can't trust the exchanges? every time an exchange gets hacked or goes down, crypto market cap drops, why? because people lose faith! they need to improve the way they run its as simple as that. yes i may of lost my money for good but I'm not letting polo get off with this its not acceptable .

I'd like to see a company that gains hundreds of thousands or a million new customers a month keep up with the support load, especially one that deals with monetary transactions.  Coinbase isn't doing any better...

You're playing with huge amounts of money in an environment that literally brand new and basically completely unregulated.  There is HUGE risks involved with that.  You say that you aren't compromised because an "expert" checked your computer and yet you have no idea where the information was leaked from.  You make assumptions that it must come from Polo and yet you have no evidence.  It is just as likely that you yourself used a VPN to "hack" your own account and looking to make an insurance claim.  I'm not saying either is true or even that it didn't come from Polo, but until there is evidence of such a thing you can't say with certainty that was the case.  Malware scanning, antivirus, firewalls they can all be bypassed and if the hackers are good enough go completely undetected doing it.  Hell they may not even have done any of those things they could have social engineered the support process with other information they found out about you and made Poloniex support think that it was a legit request coming from you.  Until you have evidence then you have no idea.  Saying that Poloniex was definitely hacked is just as much spreading FUD as the other things you claim.  All the while the people who are smart enough to understand cyber security are getting along just fine.

And yes I think that Poloniex should make 2FA authentication a mandatory requirement, but that doesn't let you off the hook for not using it.

yes they have gained more customers but this is something they should of been prepared for or at least had some kind of plan ready for when/if it happened which clearly they didn't, and theyre not getting millions of people a month at all! couple hundred thousand tops maybe, and do you really think all these new comers are all going to use 2FA no i think not and with all the extra money polo are getting due to all these new customers they have even more money to fund their support department, at least coinbase support is actually replying to people, i really don't think you understand why people are so hacked off! I'm hacked off because i lost my money yes of course if i get it back thats great if not i live and i learn, obviously i hope to get it back but I'm not counting on it, but do you know the real reason people are hacked off is because poloniex isn't getting back to anyone thats been hacked nor have they stopped the hacker nor have they mentioned it at all!! if they got back to me to at least let me know whats going on i wouldn't mind as much! but people have gone months without a reply, its not like someone wants a general question answered, my bloody account has been compromised you think they would priorities don't you?, and as for i have no proof, have you seen how many people this has been happening too? ahah its not just a couple of people my friend its a lot, hundreds of thousands have been taking from people, i don't need proof if poloniex was to actually do something about it they could track down the accounts and figure out who's account is behind this all, have they done this nope! people are still getting hacked! you can blame us all you like but the truth is its down to some low life who clearly can't earn money so he/she has to take it from others who have worked for it! it seems to me that the information is coming from polo, its not happened to any other exchange and as i said the password i used for poloniex is one of a kind and only ever used on one devise, keep denying it all you like my friend all i say is be careful yes i made a mistake and I'm kicking myself for it believe me ahah I've been saying to myself for ages i need to get 2FA now i regret it, i have been trading crypto for over 3 years this is the first problem I've had, i normally suggest poloniex to a lot of people as i have over a thousand followers online and in groups, like I've said if i get my money back thats great if not thats life and i have to take some blame for this i understand that, but for you to come here and just purely blame everyone because they didn't have an extra security step activate is very low of you in my opinion, these people want helpful information not someone kicking them while theyre down!

My _______________________ and I believe I am entitled to sympathy and recourse because _______________________.

A: Account got hacked / I refused every recommendation from everyone who knew what they were doing and didn't use 2FA.
B: Child died from Polio / I refused every recommendation from everyone who knew what they were doing and continued to believe that vaccines cause autism.

Coinbase's GDAX put on 1 million customers in a month.  What happened?  Oh yeah flash crash just like Polo had a couple months ago.  You're dealing with financial transactions which means you need to vet those support people and train them to make sure they don't send your coins into oblivion or give your coins to any dickwad that puts in a support ticket.  Work in a support department for 20 years like I have and see how long it takes to spin up new good people and how money doesn't really factor into the equation.  As for a plan, I doubt any company could predict that next month they are going to take on hundreds of thousands of new customers and be able to respond in kind.  Maybe they could, but you're talking about likely hiring hundreds of more support people and trying to train them.  Which means that at 20 people a class you're going to need 10's of trainers and 10's of managers and 10's of more HR people to handle all the benefits and payroll.  All those people need training and time to get acclimated to the systems.  That's if Poloniex even has that many people it CAN hire in an economy that has 4.4% unemployment.  But you know they have all this money and can just clone new people because that's how the world works.  Take some personal responsibility instead of blaming something you obviously don't understand.

We get it you're pissed because you did something stupid and now you're paying for it.  Poloniex should respond, but the fact of the matter is you left yourself vulnerable.  As I've said in my posts before by all means sue them into oblivion if you think you have the proof to do it.  Otherwise wait patiently for a response to your support ticket.  I guarantee that you'll get a response from that before you get a settlement or answer from your lawsuit.  Until then spouting off on a forum about how it's all Poloniex's fault when you knowingly left yourself vulnerable isn't going to get you anywhere.

As for the number of people getting hacked I've seen like what?  3-4 on here claiming that, not hundreds of thousands.  As for whether that million customers will use 2FA it doesn't matter, the fact is YOU didn't.  If they don't and they get hacked then that is on them not you or me.  Honestly I hope you get your money back, but the fact is you played in waters you obviously didn't understand and I hope you learned your lesson.  You sound exactly like the people who had their World of Warcraft accounts hacked for years because they didn't use 2FA too and that was just a stupid game account.  I've been hacked before and it hurt, but I learned from it.  This is why I'm telling you to take some responsibility for YOUR mistake.  Maybe Poloniex will help you, maybe they won't, but in the end the responsibility is still yours because YOU took the risks not Poloniex.

There is a reason people say don't leave money on the exchanges.  Always put it into cold storage.  Keep your crypto safe.  Why?  Because they want to see you have to jump through 10 hoops to trade your money?  NO because they got burned and don't want you too.  As I said hopefully you've learned your lesson and I'm sorry you lost your money.

Poloniex has been around for years one of the longest going exchanges i know, they've had plenty of time to put together a plan my friend theyre a company dealing with revolutionary tech, and I'm sure most business have plans in place for things like this, most companies don't just wing it with no plan ahah, but poloniex could at least keep people up to date with whats going on, look you clearly didn't read my reply very well and just jumped on the keyboard and started the blame game again ahah I've already said if you look back and re read it, i take responsibility for not using 2FA for sure i should of used it am i looking for sympathy? no i would go cry on my mums shoulder if that was the case ahah, all I'm looking for is bloody reply from poloniex or some kind of response online insuring people theyre dealing with the problems I'm not asking for the world on a plate, any professional company would have done a statement by now, and again your second paragraph is purely a joke here is why, okay I'm going over to America soon should i bring a bullet proof vest with me to protect myself from being shot? because i mean if i don't wear one its clearly all my fault if i get shot because i left my self vulnerable?. again i take responsibility for not using the 2fa but as for my personal info, to ME it seems like its been from their side, we post this stuff online not for people like you to come along and not be helpful at all but to warn others that they should be more secure so it don't happen to them and in hope that poloniex sees the problem at hand and speeds it up, 2-3 yes just on this chat there is about 20 people that i know of that its happened to, some with 30kplus other with nothing in their account but account still been compromised, this is why to me it seems that they have been working through some kind of list, personal opinion but it happened to my friends account he had nothing in their and never used it once apart from setting up so the password was never used nor compromised he went to log in a week back as i mentioned it and he's been locked out his account? all I'm saying is something seems a bit strange and we just want reassuring as to whats going on, and look i agree with your last paragraph completely but understand this, I've gradually built my portfolio up to a large amount (large to me) over the past 6 months, last month i applied for my withdraw limit to be upped so i can withdraw most of the money into a hard wallet, i waited over 3 weeks and still it had no been upped so i started to take it out bit by bit but then bam got hacked before i could get it all off. i agree all we can do is wait but its the waiting thats the worse part about this all ahah

My chain of communication with Poloniex

-----------------------------------------------------------------------------------------------
Hi xxxx,

I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account.  We can not be held responsible for any breach where the attacker has used your login details to gain access to your account.
 
Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed.
 
It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology.

Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course.

Thank you for understanding.


Best regards,

Kevin
Poloniex Support

Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818


B
xxxx, said 4 days ago
Thanks Kevin,

Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. 

I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds.

Thanks,

xxx
K
Kevin, said 4 days ago
Hi xxx,

First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension.

With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement.


Best regards,

Kevin
Poloniex Support

thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing.

Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous

its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing.

That is lots of money to keep in exchange without 2fa. Why did you keep your money in exchange anyway? It's not wallet, coins are not yours when they are in it.
I don't see any other thing to do than what Kevin said you to do indirectly.

Do you think we should start a legal action? I have lost a lot because of this

I am sorry for your lost guys :(

I can remember there was a phishing website 2 or 3 months ago which was looking exactly the same as the official polo site but with ending .ru... Did you guys use that website in the past?

You need to report it to the police (you should have done this straight way).

They are the only ones able to compel Polo to release the details of the person who traded against you, and to pursue the other trader for the funds (and try them in court). It's no good suing Polo - they can prove you didn't have 2fa, and therefore they are not liable (especially as the terms and conditions when you signed up probably say something to the effect thay you are responsible for making sure your passwords are not stolen.

I did report it to police straight away, though police has done nothing yet, I do not think police even understands the complexity of the issue

i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit.

hello, i always double check the url before signing in and i have poloniex bookmarked so i only ever access it by this means to make sure i never go on a fishing site, i just want a reply or statement from polo i don't think its to much to ask for if I'm honest

Yes, I am based in the UK as well, based in London, which city are you located in?

Okay thats great! we should be able to set something legal up, i am based in Hampshire a few hours away

Cool lets PM,
Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings

Cool lets PM,
Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings

The exact same thing happen to me yesterday. Around 5000 EUR was drained out of my account.
First everything was transferred to BTC->XMR and afterwards traded on pairs with almost no liquidity.

I was completely sure my account was secure. Still have no idea how someone could access my password.

It doesn't help that Poloniex requires you to click a link in an email to withdraw. This gives you a false sense of security.
I was considering this to be my 2FA and never taught about this attack vector with low liquidity pairs.

I'm sure many more people fall victim to this attack that are not posting here. It's also a bit discouraging that Poloniex doesn't show even a bit of interest in fixing or informing users that this can happen. There are many simple things that they could do, just requiring an email confirmation when you first time trade something "strange". They have insight into the whole system, fraud detection should be one of their priorities. This looks like the most common attack right now.

I was lucky as I will survive without this money, but many others could have their lives destroyed. It's also sad to see the community react in such a victim blaming way. Saying, you should have done this or you should have done that. Why are you not as smart as me? Don't keep your money on an exchange!

This is not really helping anyone. We are all humans. Sometimes we forget to set up something (I should definitely change the brake-fluid in my car) or make mistakes. Why don't we work together to try to fix problems and save others? It's not someones fault to assume he is not going to get robbed.

Many thanks mate as this was my point of the original post not to say this and that but to help, as I said earlier 2FA is not mandatory and this may exactly be the same person who has robbed me. Makes me wonder if poloniex has done anything to stop this sort of attack. I suspect they have not even looked at my case where I sent them all the evidence to block the thief's account to recover my funds, what a shame

Well chase them up. Here is some info about the UK's cyber crime unit:

http://www.nationalcrimeagency.gov.uk/about-us/what-we-do/national-cyber-crime-unit

P.S. To report a cyber crime, go to

http://www.actionfraud.police.uk/

I do not think poloniex can do anything for you....

thank-you very much! i shall report this now

the modus operandi does seem honed, i as well as the other poster thought my account would be safe due to the email withdrawal, i never thought they could do such a thing. ive not lost any money as stopped using them a few weeks back, but very sad, as it clear it is a organised gang or someone with either insider knowledge or stolen data.

Somebody know who to contact in the Netherlands?

Any updates?
Maybe some victims from US, can make collective lawsuit in local court against Poloniex?

Indeed, please PM me if you want to join in, I will be starting legal action soon

I do not intend to shock you but this is too much of a loss.

You have some blames though because poloniex use to send you an email with the login details including the ip address of the location that they login in from, you either not checking your email or poloniex account frequently.

This also happened to me but a little bit different, the hacker login into my account and sold off my altcoins to btc then moved my btc into the loan section whereby the funds no longer appear for trading but i can view it in my balance; i then reverse everything and change my password.

Lawsuit against poloniex might be a better option but you need to read their TOS first in order not to be blamed at the end of the judgement.

I am really sorry for your loss but take heart and dont get depressed because you can make more than that if you help yourself to stay alive.

Does anyone know the contact details for Poloniex, I have involved the law enforcement agency in the UK and they are having trouble finding their contact details!

Easy to find with google:

Poloniex, LLC
1013 Centre Road
Suite 403-B
Wilmington, DE 19801

Founder is Mr Tristan D'agosta

Thanks mate,

is there an email address for them for the Action Fraud to contact them?

From their official twitter account : contact@poloniex.com

Thank you for getting in touch and please accept my apologies for the delay with this update.

I am very sorry but your account was compromised through your login credentials and the attacker traded on other markets with your funds. Unfortunately as you did not have 2FA enabled, these credentials were all the attacker required to be able to access your account.

We would like you to know that we are still investigating this very complex issue and there is a remote possibility that some of the stolen funds can be recovered.
 
We will do our best however there is no guarantee that this will be successful.
 
I am sorry again to hear that this unfortunate situation has occurred, however we would also like to advise you to please be very careful in the future with your operational security. Never use the same password on different sites, keep your email account and Poloniex account secured with 2FA and do not download any software to the computer you are handling your trading accounts with unless you are ABSOLUTELY sure it is safe.


Sincerely,
Poloniex Support Team

Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/298363

this is what i got in reply from poloniex after 40 days.   My account is hacked almost in similar way,others have mentioned. going through the google searches , i found that these kind of "hack & unauthorized trades"
 happened in almost all of the cases between may to july end. now there is no reporting of cases like this . neither there was any before may. i seriously doubt it's an organized hack with the involvement of some insider

contact@poloniex.com
14:42 (26 minutes ago)

to me
NOTICE:

This address is no longer monitored and you will not receive a response.

To contact Poloniex please visit: https://poloniex.com/contact

Did they manage to recover any of the funds for you? they have stopped responding to me!

Hi,

I also had a security breach even haven 2F activate, I posted a ticket, and since 12 days I haven't received any answer yet...

Not sure how true it was, but there was an exploit that was being sold to bypass F2A, but I'm not sure that it was getting into the account or just being able to withdraw without it.

It does seem suspicious, but I guess we'll have to wait and see what happens.  I've moved all my coins off the exchange.

https://bitcointalk.org/index.php?topic=4400856.0

all the problems here seem serious and can not answer at all. I suggest you all better find out telegram contact so you can directly ask directly what is really happening. hopefully people who have lost assets can quickly return or get answers.

https://bitcointalk.org/index.php?topic=5034447.msg45981914#msg45981914

I just want to tell that I have the exact same problem.

The difference is the hacker uses trading API.

I want to know if there are other similar cases ANYWHERE

Why is this not on the news?

The hacker do NOT withdraw.

They just deliberately create losing trades.

Poloniex froze my account. I wonder if they managed to do so BEFORE the hacker withdraw the fund.

I hope they are cooperative enough and disclose all info they can about the hacker.

I still do not know how the hacker knows my API key and secret.

It happened to me. Do you have API?

I believed the hacker must have used API and must have traded automatically. To be able to drain 17k within 10 minutes he must have done so many quick trades.

is this only happening in poloniex?

OP?

Do you have API? Do you have 2FA? Do you think the hacker uses program or trade manually?