Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: Cryptology on January 10, 2015, 08:45:18 AM



Title: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Cryptology on January 10, 2015, 08:45:18 AM
It has been reported that Bitstamp's hacker(s) sent all stolen coins, circa 19k to this address: 1L2JsXHPMYuAa9ugvHGLwkdstCPUDemNCf
https://blockchain.info/address/1L2JsXHPMYuAa9ugvHGLwkdstCPUDemNCf

Furthermore blockchain.info has tagged the address as "Bitstamp Hack" making it quite simple via a "taint analysis" to check whether any incoming bitcoin payment contains any traces of these stolen coins.

The really interesting issue here is whether the thief or thieves will ever be able to spend any of these coins without being caught. This is the ultimate real life experiment in Bitcoin's anonymity.

As far as I can see the bitstamp hacker will have a hard time laundering these coins in any sizeable amounts.

Please post your views.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: newIndia on January 10, 2015, 08:49:18 AM
As I can see, the coins are being mixed slowly. Two of the stashes are here...

https://blockchain.info/address/13KLHgJzdp11ZiJzAK43MMX9dKDoRYrHtG => 200 BTC

https://blockchain.info/address/1Af9nUCxKYRuXeHRDS6v14eV1JXxvUFUqc => 1,955.14096723 BTC


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: elephantas1 on January 10, 2015, 09:01:10 AM
As I can see, the coins are being mixed slowly. Two of the stashes are here...

https://blockchain.info/address/13KLHgJzdp11ZiJzAK43MMX9dKDoRYrHtG => 200 BTC

https://blockchain.info/address/1Af9nUCxKYRuXeHRDS6v14eV1JXxvUFUqc => 1,955.14096723 BTC
whats the point of mixing it is it easier to sell it then?


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: LiteCoinGuy on January 10, 2015, 09:05:23 AM
hide your tracks maybe? (so yes)


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: H.W.Z on January 10, 2015, 09:18:12 AM
it is really the beauty of the anonymity of bitcoin. But this time it hits the confidence of bitcoin holders hardly! Hopefully it will go through quickly!


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Lauda on January 10, 2015, 09:26:47 AM
If he knows what he's doing, there is no reason for him to have issues with laundering these coins.
He just needs to take his time in doing so.
Well at least Bitstamp came back better than it was before.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Comic Book Coin on January 10, 2015, 12:26:22 PM
Well, that is the thing. If no one would accept those coins or any that originated from those wallets it could be stopped. But, highly unlikely.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: noma on January 10, 2015, 12:35:29 PM
It has been reported that Bitstamp's hacker(s) sent all stolen coins, circa 19k to this address: 1L2JsXHPMYuAa9ugvHGLwkdstCPUDemNCf
https://blockchain.info/address/1L2JsXHPMYuAa9ugvHGLwkdstCPUDemNCf

Furthermore blockchain.info has tagged the address as "Bitstamp Hack" making it quite simple via a "taint analysis" to check whether any incoming bitcoin payment contains any traces of these stolen coins.

The really interesting issue here is whether the thief or thieves will ever be able to spend any of these coins without being caught. This is the ultimate real life experiment in Bitcoin's anonymity.

As far as I can see the bitstamp hacker will have a hard time laundering these coins in any sizeable amounts.

Please post your views.
If the coins are sent to someone not aware of bitstamp hack, then there would be almost no use of the tag if it is sent through a mixer.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: 1Referee on January 10, 2015, 03:32:15 PM
There are plenty of places where the receivers don't mind to accept these coins.

The thief most likely will get clean coins or fiat in return.

Perhaps by selling them well below current value at some point.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Nikinger on January 10, 2015, 04:24:52 PM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: mayax on January 10, 2015, 05:00:19 PM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.

it is so simple to cash out and then to deposit these money without any question from anybody. you just have to think that Bitcoin allows the money laundering and nothing more. :)




Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: pandher on January 10, 2015, 05:08:47 PM
He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

Bitcoin is terrible if talking about hiding assets and thats why it will never be used in the deep webs. Untraceable technologies like Monero are far better fit for privacy needs


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Rannasha on January 10, 2015, 05:09:46 PM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.

it is so simple to cash out and then to deposit these money without any question from anybody. you just have to think that Bitcoin allows the money laundering and nothing more. :)

Deposit the money without any question from anybody? In most (western) countries, banks are obligated to report transactions above a certain amount (that amount typically being well below the $100K or equivalent in local currency) or bunches of transactions that appear correlated and add up to an amount above this limit.

Simply dumping $5M on a bank account is going to raise some eyebrows with the hackers local tax department, which in turn might alert law enforcement. So unless the hacker lives in a country with sufficient bank secrecy it might be quite difficult to profit from his newly found wealth.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: sgk on January 10, 2015, 05:49:14 PM
He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

Bitcoin is terrible if talking about hiding assets and thats why it will never be used in the deep webs. Untraceable technologies like Monero are far better fit for privacy needs

Sorry, but Bitcoin can be as anonymous as other so-called anonymous coins if used properly.

Bitcoins can be traced back to an 'address' but after all it is impossible to figure out who owns the address if the owner has enough caution to cover his tracks.
coins purchased via exchanges can be tracable if exchange requires strict KYC, but mined coins have no suc limitation. A miner gets his reward and can use any address to spend them, making it impossible to link these coins to a person.

Newer technologies like Dark Wallet and coin mixers are making it even easier than before.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: flipstyle on January 10, 2015, 11:59:11 PM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.

it is so simple to cash out and then to deposit these money without any question from anybody. you just have to think that Bitcoin allows the money laundering and nothing more. :)

Deposit the money without any question from anybody? In most (western) countries, banks are obligated to report transactions above a certain amount (that amount typically being well below the $100K or equivalent in local currency) or bunches of transactions that appear correlated and add up to an amount above this limit.

Simply dumping $5M on a bank account is going to raise some eyebrows with the hackers local tax department, which in turn might alert law enforcement. So unless the hacker lives in a country with sufficient bank secrecy it might be quite difficult to profit from his newly found wealth.

This is true.  In America, the IRS gets raised flags when you deposit something like $10k or more at a time in your bank account.  

So unless this guy plans on cashing to fiat and living off cash payments or re-distributing the wealth by giving it to his associates/family...he's going to have people in higher places watching his moves and ultimately questioning where it came from.

Looks like he's already starting to use mixers to 'clean' the coins stolen.  That's pretty cool blockchain can mark the funds as tainted/hacked, but ultimately there are still ways to get around this.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: haploid23 on January 11, 2015, 02:27:50 AM
These are stolen coins, the thief did not lose anything monetary from this. So what's the problem with slowly using a mixer over the next few years to get clean coins? It's not hard, all it takes is patience.

And since we're on the topic of real life scenario, the average bitcoin user does not check where their coins originated from, for every single transaction. He can discretely trade these to people, as long as he stays off the exchanges. Again, it will takes patience and risk to do this, but nevertheless just find the right people


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Atdhe on January 11, 2015, 04:50:45 AM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.
There are tens of countries where you do not pay taxes from foreign income. I guess the thief - if he feels that what you say is a problem - can go there and buy residency for one year.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Atdhe on January 11, 2015, 04:53:18 AM
Fiat cashout should not pose the biggest problem if you travel to the right country first. He could easyly meet buyers who wants to buy bitcoins anonymously for using in the deep webs or hiding assets.

The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.
With no waterproof explaination for the thief, he would have to spend it without drawing attention which is susceptible to fail some day.

it is so simple to cash out and then to deposit these money without any question from anybody. you just have to think that Bitcoin allows the money laundering and nothing more. :)

Deposit the money without any question from anybody? In most (western) countries, banks are obligated to report transactions above a certain amount (that amount typically being well below the $100K or equivalent in local currency) or bunches of transactions that appear correlated and add up to an amount above this limit.

Simply dumping $5M on a bank account is going to raise some eyebrows with the hackers local tax department, which in turn might alert law enforcement. So unless the hacker lives in a country with sufficient bank secrecy it might be quite difficult to profit from his newly found wealth.
You do not need to live in country like Andorra to open an account there. Even if it is tax evasion, they do not care.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: BTCreward on January 11, 2015, 05:19:03 AM
As I can see, the coins are being mixed slowly. Two of the stashes are here...

https://blockchain.info/address/13KLHgJzdp11ZiJzAK43MMX9dKDoRYrHtG => 200 BTC

https://blockchain.info/address/1Af9nUCxKYRuXeHRDS6v14eV1JXxvUFUqc => 1,955.14096723 BTC
whats the point of mixing it is it easier to sell it then?
The point of mixing coins is to prevent your identity from being associated with the theft when you go to sell the coins on an exchange. If the hacker were to sell them he would probably mix them first and then sell them on an exchange.

And since we're on the topic of real life scenario, the average bitcoin user does not check where their coins originated from, for every single transaction. He can discretely trade these to people, as long as he stays off the exchanges. Again, it will takes patience and risk to do this, but nevertheless just find the right people
It would be possible that someone would purchase the coins then eventually sell them on an exchange, then be questioned by law enforcement about how they came into possession with the coins.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: m3 on January 11, 2015, 05:50:42 AM
Like others have said, the hacker would try to tumble the coins, the real question is are the tumblers legit or could they be honeypots?


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: UsernameBitcoin on January 11, 2015, 10:55:41 AM
The hacker just needs time to turn the coins into fiat. In a few years no one really cares anymore. In the meantime he can split the 19k into thousands of smaller amounts, transfer, tumble, gamble, exchange to alt coins.

Does anyone still keep track of the stolen coins from the Sheep Marketplace?


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: sgk on January 11, 2015, 11:58:07 AM
Have the user balances restored?

I had nothing there on hot wallet, so I wouldn't know. For everyone else, did BitStamp restored the stolen coins or everyone's balances are zero now?


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: QuestionAuthority on January 11, 2015, 02:11:39 PM
Bitcoin theft is difficult to prosecute. Even if law enforcement tried to buy the coins from you at a localbitcoins deal they couldn't prove you were the thief even if they cared enough to try. Being in possession of the stolen coins does not prove you hacked into Bitstamp. There isn't even any proof that Bitstamp was ever hacked. You could claim they owed you the money and finally sent it to you and it's your word against theirs. You could claim whoever stole the money must have accidentally sent some of it to your address and you didn't know it was stolen. There is simply no way to prove the address holder is the thief after one transfer of the coins. At this point the coins have been transferred. Hope of finding the thief with proof positive is gone forever using just the coins address. They don't even need to be mixed to be usable. I've done lots of fast trades using LBC and no one has ever paused for a minute to look up the source of the coins or even at the description of the address on blockchain.info.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Stephen Gornick on January 11, 2015, 06:26:41 PM
There isn't even any proof that Bitstamp was ever hacked.

Exactly.  If we were to start treating these coins different from any others (e.g., by blacklisting them) then that provides an opening for all kinds of abuses (by those who might falsely claim "hack!" in an attempt to get the funds back or drive some other outcome.)


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: BTCreward on January 11, 2015, 10:14:12 PM
Bitcoin theft is difficult to prosecute. Even if law enforcement tried to buy the coins from you at a localbitcoins deal they couldn't prove you were the thief even if they cared enough to try. Being in possession of the stolen coins does not prove you hacked into Bitstamp. There isn't even any proof that Bitstamp was ever hacked. You could claim they owed you the money and finally sent it to you and it's your word against theirs. You could claim whoever stole the money must have accidentally sent some of it to your address and you didn't know it was stolen. There is simply no way to prove the address holder is the thief after one transfer of the coins. At this point the coins have been transferred. Hope of finding the thief with proof positive is gone forever using just the coins address. They don't even need to be mixed to be usable. I've done lots of fast trades using LBC and no one has ever paused for a minute to look up the source of the coins or even at the description of the address on blockchain.info.
You selling the stolen coins may not be enough to prosecute someone for hacking Bitstamp however it may be enough for probable cause to get warrants to look into you further by law enforcement.

I assume that Bitstamp has some kind of logs of the hack, including the IP address of the computer(s) that were used to connect to their hot wallet. If a connection could be made between the computer(s) that were used to hack Bitstamp and you then it could be proven that you hacked them. This is especially true if law enforcement were able to find Bitstamp's private keys to their hot wallet or some other code to transfer their bitcoin to the address all the stolen coins were sent to


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: QuestionAuthority on January 11, 2015, 11:23:37 PM
Bitcoin theft is difficult to prosecute. Even if law enforcement tried to buy the coins from you at a localbitcoins deal they couldn't prove you were the thief even if they cared enough to try. Being in possession of the stolen coins does not prove you hacked into Bitstamp. There isn't even any proof that Bitstamp was ever hacked. You could claim they owed you the money and finally sent it to you and it's your word against theirs. You could claim whoever stole the money must have accidentally sent some of it to your address and you didn't know it was stolen. There is simply no way to prove the address holder is the thief after one transfer of the coins. At this point the coins have been transferred. Hope of finding the thief with proof positive is gone forever using just the coins address. They don't even need to be mixed to be usable. I've done lots of fast trades using LBC and no one has ever paused for a minute to look up the source of the coins or even at the description of the address on blockchain.info.
You selling the stolen coins may not be enough to prosecute someone for hacking Bitstamp however it may be enough for probable cause to get warrants to look into you further by law enforcement.

I assume that Bitstamp has some kind of logs of the hack, including the IP address of the computer(s) that were used to connect to their hot wallet. If a connection could be made between the computer(s) that were used to hack Bitstamp and you then it could be proven that you hacked them. This is especially true if law enforcement were able to find Bitstamp's private keys to their hot wallet or some other code to transfer their bitcoin to the address all the stolen coins were sent to
Those are pretty big assumptions. You could also say that if law enforcement found Bitstamps server in the trunk of your car they could prosecute you for theft. Chances are, if Bitstamp was really hacked, the hacker would not have been stupid enough to use an IP from his living room computer or put Bitstamp's server in the trunk of his car.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: moriartybitcoin on January 11, 2015, 11:50:15 PM
they could easily launder those coins :-)


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: newIndia on January 11, 2015, 11:53:06 PM
they could easily launder those coins :-)

At bitlaunder.com ? :o


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: doggieTattoo on January 12, 2015, 06:24:20 AM
Those are pretty big assumptions. You could also say that if law enforcement found Bitstamps server in the trunk of your car they could prosecute you for theft. Chances are, if Bitstamp was really hacked, the hacker would not have been stupid enough to use an IP from his living room computer or put Bitstamp's server in the trunk of his car.
You are right, they would probably use some kind of IP masking service (like, tor, VPN or hack their way into a SOCKS5 proxy, although the latter may allow you to be tracked to your "real" identity.

The hacker would obviously need to somehow have the private keys of bitstamp's hot wallet in their possession in order to sign and broadcast the transactions that sent their bitcoin to their bitcoin address. If those private keys are still somehow in the hackers possession then they would be implemented in the theft


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: QuestionAuthority on January 12, 2015, 01:23:21 PM
Those are pretty big assumptions. You could also say that if law enforcement found Bitstamps server in the trunk of your car they could prosecute you for theft. Chances are, if Bitstamp was really hacked, the hacker would not have been stupid enough to use an IP from his living room computer or put Bitstamp's server in the trunk of his car.
You are right, they would probably use some kind of IP masking service (like, tor, VPN or hack their way into a SOCKS5 proxy, although the latter may allow you to be tracked to your "real" identity.

The hacker would obviously need to somehow have the private keys of bitstamp's hot wallet in their possession in order to sign and broadcast the transactions that sent their bitcoin to their bitcoin address. If those private keys are still somehow in the hackers possession then they would be implemented in the theft

Yes, believing that a hacker would not at least attempt to hide his identity would be similar to a bank robber not wearing a mask. Even the dumbest bank robber wouldn't do that.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: Troonetpt on January 12, 2015, 01:33:50 PM
He can mix his coins.
As the decentralized exchange came out, he can easy spend his bitcoin, then change it to other coins. and last change it to bitcoin back.


Title: Re: Bitstamp hack. A real life test of anonymity in Bitcoin
Post by: panju1 on January 13, 2015, 01:13:05 AM
The bigger challenge comes with the need to explain the money to the taxation authority which is certainly interested in where the money is coming from.

Depends on which jurisdiction the thief stays in.
There are some jurisdictions where personal income tax is 0%.  ;D