|
What is cryptolend IP?
We need to restrict API only on cryptolend API
|
|
|
|
|
I thought I'll be happy seeing LTC went up and stuck at cryptopia.
Total amount of money taken is 10k NZD
However, I got only 7800 CLM
So what?
Am I missing something?
Current price 3/18 32 LTC is about 2700 NZD and 1.2 BTC is about 7200 NZD
|
|
|
|
|
Problem SOLVED. Actually, binance is reasonably awesome in this regard.
I was frustrated because they didn't reply for days. I thought they had decided that I was fraudulent and not replying. Now that's not the case.
|
|
|
|
|
Anyone else have the same problem in coinexchange? It happened since yesterday.
|
|
|
|
Everytime I want to cancel, or create order, or anything, I failed. The confirm button cannot be pressed. It only works in one computer among all of my computers. We tried firefox, we tried chrome. It happened yesterday since yesterday.  |
|
|
|
|
Cryptopia also have a bug. They sort orders based on string value of the dates. I told support but it's not fixed.
|
|
|
|
|
Actually it makes sense. The customer service must have talked to some expert and agree. That I am the owner of the email.
On second thought I think they've been very reasonable. But if losing 2FA can mean I lost the whole money, I would be pretty afraid.
|
|
|
|
Oh they replied. I just didn't read. Well, there is no need to create that otheruser@mydomain.com. I spent $30 already. I guess I learn a lot from this problem. |
|
|
|
in binance. I tried my 2FA in binance. It didn't work. I have no idea why. Most likely I deleted the 2FA from my authy account by mistake. Authy do not have an option to "hide" 2FA. We can only delete. Because the account is rarely checked, it happened. And by that time I already forget where the 2FA is. So I told binance that I forget the 2FA. I was asked for the account LTC deposit. The deposit has been there like years ago. There is only one deposit. Worth .1 BTC. I do not know the deposit address. Obviously. The account use an alias for email address. See.... It's othermail@mydomain.com. I managed mydomain.com. Every email to mydomain.com will be forwarded to my account. Now this is the SHITTY PARTThe guy that work in binance customer service insist that I sent email from rany@mydomain.comI told them that's not necessary. I own the email othermail@mydomain.com. EVERY BODY SHOULD KNOW that sender address can be easily spoofed. The one proof whether I own the domain or not is whether I can receive email to that email address. After explaining AGAIN AND AGAIN AND AGAIN. I relent. I followed instruction in https://support.google.com/mail/answer/22370?hl=enI showed the customer service so he is aware of the issue. They don't reply anymore. I asked them, are you getting email from rany@mydomain.com now? NO REPLY. What the fuck? I am an admin of mydomain.com. Yes, I can just create othermail@mydomain.com at the cost of $30 (there is $150 total in that account). I am just pissed. What kind of security expert do they have in binance. Why can't the customer service in binance able to figure this shit out. |
|
|
|
 Basically yobit asks for 2FA and code via email. However, only one field is shown (it seems like the one for 2FA). When entered, yobit will complain that the code sent via email is wrong. |
|
|
|
Basically, Polo didn't tell me who did it. They don't tell me which API key is used by the hacker (what no log?). They didn't tell me if they bother banning the accounts involved. They also wouldn't want to share me any info about the hacker accounts. As we know, people are required to give their identity to polo. That requires photograph. That's not easily faked. If I know the pic of the vermin I can post that all over the internet and report to cops. Nor do they tell me if any money is recoverable.
How do I get Polo to reveal the info to me? if your API keys were compromised, how do you know the hack is tied to other "accounts" at poloniex? how do you know they are aware of the hacker's account or identity? they may have little more than the IP address that executed the API calls. I can report the problem to my local cops. However, my local cops is so corrupt. Chance is I lost even more money than what's already lost. But that's precisely what Polo suggested me to do. So far they're not helping me at all. They're just protecting the culprit. without a police report and case number, poloniex can't really assert that a crime occurred. they also can't give out suspects' personal information; that has to be done through police. the suspect (if one exists) hasn't been convicted of a crime. what are you trying to accomplish? it sounds like the money is already gone. do you have access to your account? doesn't polo provide activity logs with IP addresses? i can't remember, it's been so long since i used them. Similar hacks have happened several time in polo. The way the hack work is that the hacked account make losing trade. The hacker account is on the opposite side of the trade. https://www.reddit.com/r/CryptoMarkets/comments/6kv2p4/poloniex_account_hacked_25000_stolen/In that case, polo doesn't have a hard time pinpointing who did it. Another problem is one of the API belong to cryptolend. Another I stored in my file. Obviously there is a log that says which API is used. Polo doesn't tell me which one. Poloniex are usually able to pin point who the other account is and is usually able to ban them. Usually it's too late. But KYC knows. |
|
|
|
|
KBR is removed from market. To me it's sudden.
All other exchange usually tell in front if a coin is about delisted.
Why not hitbtc?
|
|
|
|
|
Suddenly KBD coins are eliminated.
Why?
Do they actually announce this or what am I missing?
Other exchanges would tell in front, that these coins will be eliminated. Why not hitbtc?
|
|
|
|
I got hacked https://bitcointalk.org/index.php?topic=5034447.msg47514177#msg47514177Similar hacked happened before https://bitcointalk.org/index.php?topic=1988476.msg19800513#msg19800513https://www.reddit.com/r/CryptoMarkets/comments/6kv2p4/poloniex_account_hacked_25000_stolen/Polo usually knows who did it. You are welcome. We have identified the accounts involved and they have been banned. Unfortunately, as is normally the case in these situations the attackers immediately withdrew the majority of the coins and as these transactions have now left our system and have been confirmed by the blockchain then they are outside our control. We will continue to investigate further and see if we are able to recover any of the coins that were not yet withdrawn. source: https://www.reddit.com/r/CryptoMarkets/comments/6kv2p4/poloniex_account_hacked_25000_stolen/Now, in my case, this is what Polo said. Basically they are protecting those vermin from my hand Thank you for your response and apologies for the delay. At this time we can only confirm that one of your API keys were compromised and we are unable to confirm which - we recommend in checking your personal records and a cybercrime investigator to confirm which was compromised. Due to GDPR and data privacy laws we are only able to provide account information to the account owner, however if you open up a case with local law enforcement we will be able to cooperate with them in the investigation to the loss of your assets. Please attempt to get the investigating officer to reach out to us with a case number or details to the investigating unit once the case has been opened. Best, Poloniex Support Team Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/1094471 Basically, Polo didn't tell me who did it. They don't tell me which API key is used by the hacker (what no log?). They didn't tell me if they bother banning the accounts involved. They also wouldn't want to share me any info about the hacker accounts. As we know, people are required to give their identity to polo. That requires photograph. That's not easily faked. If I know the pic of the vermin I can post that all over the internet and report to cops. Nor do they tell me if any money is recoverable. How do I get Polo to reveal the info to me? I can report the problem to my local cops. However, my local cops is so corrupt. Chance is I lost even more money than what's already lost. But that's precisely what Polo suggested me to do. So far they're not helping me at all. They're just protecting the culprit. I suspected that Polo wanted me to get arrested instead. I regret using them so much. |
|
|
|
Is it not possible that your computer is not clean and a hacker managed to get access to the API through it? Unless the amount is so huge, I doubt that there will be any real investigation from the cops, to be honest. If Poloniex allows sending emails directly and not through their site, you could use mailtrack.io to see whether they're actually opening your emails in the first place or not, that might give you an idea whether they're avoiding to answer or they actually missed it. I asked through their ticket system. They get it. But it seems that their customer service is so incompetent or not having facts. It's as if they're playing dumb or really dumb. I am not getting any specific info at all. They just said that I have to save API carefully because it can be used. Duh. What about something I don't already know. Things like which API is compromised. I don't know how much is lost. 1.5 bitcoin I think. It is possible that my computer is not clean but unlikely. Again, I need them to confirm which API the hacker uses. They do not give the info. The reason I suspect possible inside jobs is because there are SEVERAL SIMILAR CASES. In the other thread about this I show several similar cases. Poloniex is the only similar cases I found. I also have API for other exchanges on the same file. However, poloniex is the only one that is hacked. I changed all of my API to read only due to this. Anyway where should I report this? I've in US people can report some black guys cooking barbeque. They don't just report, they called 911 for that. Obviously this is more serious than that. |
|
|
|
|
I can access that via vpn.
But not directly.
|
|
|
|
I suspected insider job. The link was here https://bitcointalk.org/index.php?topic=5034447.msg47514177#msg47514177There are 3 ways the hacker can enter. Using 2 API that I have and using login. The login is protected by 2FA. The API is safely stored in my computer and safely stored by cryptolend. It's been 13 days since Poloniex support last report to me. I asked which API is used and they never replied. So I have no idea how the hacker got the API. They suggested that an API is used and try to suggest the cryptolend one is being used. Basically they told me that I am at risk for giving my API key to cryptolend. However, when I asked again which API is used they do not reply and have to check again. That means they either didn't read what I wrote to them asking the same thing again and again or what? There are many SIMILAR hacking occurrence in Polo. Polo requires all traders to have their info on file. However, Polo customer service is defending the hacker by saying that they keep other accounts info "private". It happens here https://bitcointalk.org/index.php?topic=1988476.msg19800513#msg19800513https://www.reddit.com/r/CryptoMarkets/comments/6kv2p4/poloniex_account_hacked_25000_stolen/They suggest that I report to cops. I asked, which cops. They said local cops. Which doesn't make sense at all. So I tried to call cops in Delaware, the place where they are located. Guess what? Delaware cops do not even have email address. What am I missing here? This is an online crime and I am reporting it to cops that do not have email address? What about DA? Do we report things to DA? This is Polo info Industry Bitcoin Exchange Founded January 2014 Headquarters Wilmington, Delaware, USA Key people CEO and founder Tristan D'Agosta Website www.poloniex.com |
|
|
|
|
Why didn't he access that from home?
He got caught because he's in a library. If he access it from home, cops would need a warant and he could just turn off his PC
|
|
|
|
All this does is strengthen my association of "ex-con" with living in a police state. It no longer has any automatic negative connotation.
Exactly. According to this post of him, Roger apparently provoked the wrong people, and got sent to jail for a non-crime that normally is not actually punished. It's crypto-totalitarianism. Everyone is a potential "criminal". Provoke the wrong people, and they may literally destroy your life. This exact same thing happened to a friend of mine's dad. He ran for state political office and they threatened to destroy his life if he didn't quit the race. When he didn't, they trumped up some absolute garbage about how the insurance company he owned sent some business paperwork with mistakes in it through the mail, constituting mail fraud. He spent 10 years in jail. The case was complete nonsense, his business was the very clean, and everyone involved knew it. Our "justice" system is a joke. What happened to your dad? What race? What mistakes? What court case? Who was your dad. You can pm me. |
|
|
|
I think I am beginning to get suspicious with polo. Many other similar cases happen at polo Thank you for your message and understanding, to start off you may reach out to your local cyber crime law enforcement if this is offered in your region. You can then check with your local law enforcement if there's an international route you'd need to take. As for which IP and which API key was compromised, we'll look into this matter after reaching out to our relevant teams and get back to you, thank you for your patience. If you have any other questions, please do not hesitate to ask. Best, Poloniex Support Team Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/1094471As of now, they do not tell me which API key the hacker used. One API key belongs to cryptolend and another I save at my hard disk in plain text. So I do not know, as of now, which one is broken. Also they told me to contact law enforcement. I asked which one and they said local cyber crime law. Obviously not a good advice. Who should I contact? Interpol? Police? Who? Police first maybe, but to be honest I don't think you'll get back your funds. Police or attorney general? As of now Polo does not tell me which API is compromised. This is very important for me. If the API for cryptolend that is compromised, for example, then the culprit can be one of their customer service. If the one compromised is the one in my computer, for example, then the culprit is a spyware. I would like to report to police or attorney general in Delaware. Industry Bitcoin Exchange Founded January 2014 Headquarters Wilmington, Delaware, USA Key people CEO and founder Tristan D'Agosta Website www.poloniex.comWho should I contact and what email? I do not expect to get my money back. But at least I want to know the identity used by the hacker. Polonies is very uncooperative on this. |
|
|
|
|
Show Posts
