Show Posts
Following the incident reported by Doron404 below, here is a summary of what transpired (timestamp in UTC +13hrs):
09-12-2013 8:41:42
I received an escrow request from Doron404 (buyer) for an MSC trade with Peezr (seller) worth a total of 2.88 BTC
09-12-2013 11:51:46
I sent out a PM to buyer & seller containing Trade Details based on information received from Doron404 through the escrow form. The Trade Details PM requested both parties to verify that the information contained therein was correct, and if so to proceed according to the instructions.
Escrow address given was: 1HjQ76Ssnoqof8Bb2Fifi28M1VJWV5maGF
09-12-2013, 14:50:35
I received a PM from Doron404 asking what happened to the BTC which he just sent to xxx since the MSC has not been delivered.
09-12-2013, 14:55:57
I received a PM from Doron404 asking if escrow address was xxx, suspecting that Peezr had swapped the escrow address with the BTC receiving address when replying with a quote.
09-12-2013, 15:27:42
I sent PM to Doron404 confirming that the escrow address was 1HjQ76Ssnoqof8Bb2Fifi28M1VJWV5maGF as per my original PM, but has been swapped by the seller. This was said based on the quote from Peezr embedded in Doron404's PM to me.
Who is liable for this loss?
In my Trade Details PM, I requested both parties to use the "Reply to All" button when communicating, so that the entire conversation regarding a particular trade can be easily tracked by all parties. I did not foresee this potential exploit, and hence did not warn users to refer to original PM when sending to escrow.
I have successfully executed 93 escrow trades totalling 682.76 BTC using this this system before this incident.
If there is consensus amongst the community that I am liable, I am prepared to compensate Doron404 for this scam.
I would also like to announce that I will be ceasing to act as an escrow agent in this thread with immediate effect.
Pouncer
No don't do that. If pouncer agrees, I'd like to reimburse him. My account is the one who has gotten hacked. I changed my password so futurely hope it doesn't happen again.09-12-2013 8:41:42
I received an escrow request from Doron404 (buyer) for an MSC trade with Peezr (seller) worth a total of 2.88 BTC
09-12-2013 11:51:46
I sent out a PM to buyer & seller containing Trade Details based on information received from Doron404 through the escrow form. The Trade Details PM requested both parties to verify that the information contained therein was correct, and if so to proceed according to the instructions.
Escrow address given was: 1HjQ76Ssnoqof8Bb2Fifi28M1VJWV5maGF
09-12-2013, 14:50:35
I received a PM from Doron404 asking what happened to the BTC which he just sent to xxx since the MSC has not been delivered.
09-12-2013, 14:55:57
I received a PM from Doron404 asking if escrow address was xxx, suspecting that Peezr had swapped the escrow address with the BTC receiving address when replying with a quote.
09-12-2013, 15:27:42
I sent PM to Doron404 confirming that the escrow address was 1HjQ76Ssnoqof8Bb2Fifi28M1VJWV5maGF as per my original PM, but has been swapped by the seller. This was said based on the quote from Peezr embedded in Doron404's PM to me.
Who is liable for this loss?
In my Trade Details PM, I requested both parties to use the "Reply to All" button when communicating, so that the entire conversation regarding a particular trade can be easily tracked by all parties. I did not foresee this potential exploit, and hence did not warn users to refer to original PM when sending to escrow.
I have successfully executed 93 escrow trades totalling 682.76 BTC using this this system before this incident.
If there is consensus amongst the community that I am liable, I am prepared to compensate Doron404 for this scam.
I would also like to announce that I will be ceasing to act as an escrow agent in this thread with immediate effect.
Pouncer
I have temporarily disabled the escrow request form until we resolve this issue. We don't want anyone else to be a victim.
2) Please use escrow service provided by Maxmint and Pouncer.
He did, but Peezr changed the escrow address to his personal address very sneaky.
How? I assume the escrow address is PMed by Maxmint or Pouncer. How could Peezr change it?
Moreover, if he did so, then we should report to the moderator and ban his account immediately.
I believe he replied all, and in quotes he changed the escrow address to his address, and Doron probably copied the escrow address from peezr's PM instead of the original pouncers message
exactly.
2) Please use escrow service provided by Maxmint and Pouncer.
He did, but Peezr changed the escrow address to his personal address very sneaky.
How? I assume the escrow address is PMed by Maxmint or Pouncer. How could Peezr change it? Moreover, if he did so, then we should report to the moderator and ban his account immediately.
I believe he replied all, and in quotes he changed the escrow address to his address, and Doron probably copied the escrow address from peezr's PM instead of the original pouncers message
but I'd still like my coins back!
I was pm'ing with peezer for 2-3 days
before the trade, Was I talking with the thief all this time?
BitThink, I have the thief's final address,
but would it really help to post it? He can
easily make a new one.
