Can somebody from XCP please confirm which of the following statements is true (sparing technical details):
a) Poloniex's server or system was compromised by a malicious attacker who withdrew a large amount of bitcoin
b) Poloniex was running on an XCP chain which was incorrect, and somebody has (legitimately or maliciously) moved XCP to poloniex to sell for BTC, which they have then withdrawn.
Thanks.
sorry to repeat, but as the dev of another currency who is partially responsible for 50-100 btc of coin on poloniex, and 50+ btc there too, I would appreciate an answer. Poloniex / Tristan seems very decent to me so far, but clarification on the above would really help me move forwards with full confidence. Here is the chronology of the events as I remember. This might be inaccurate. A dev or busoni might correct any inaccuracy. a) a bug in the XCP protocol alllowed a hacker to maliciously withdraw 35k XCP from Poloniex hot wallet to one of his address b) he desposited those 35k XCP immediately after on his Poloniex trading account c) he sold those 35k XCP on the market for approx X BTC (150?) d) he withdrew X-35 BTC to one of his address, leaving 35 BTC behind e) he stole again 35k XCP (that he had just sold) to one of his address with a malicious transaction f) Poloniex XCP/BTC pair was shut down, and the bug was corrected in a matter of hours. Both malicious transactions were invalidated (and not reversed) by the fixed protocol g) Later, busoni reverted the transactions of the dump (leaving a 0 XCP balance for the buyers) Dev or busoni / PM me if something is wrong so I can edit/ delete some parts |
|
|
|
|
Damn, I almost fell off my chair.
Thank you (again) for your hard work.
|
|
|
|
|
Probably everyone will find this normal but I appreciate the fact that they're working overtime to setup the gear.
|
|
|
|
Okay, people seem to think donations are the best way to go. I agree. I think taxing Poloniex balances or everyone's XCP balances would be disastrous. I have created a thread on the Counterparty forums for donations: https://forums.counterparty.co/index.php/topic,127.0.htmlThe total missing is actually about 6100 XCP instead of 7000, as some people had not yet withdrawn and I was able to deduct balances. Your donations are greatly appreciated, and as soon as the missing XCP is covered, I will open up withdrawals so people can get at their XCP. Ok, but before that, what about asking the guys who withdrew to return the "stolen" coins ? One of them has already proposed that. |
|
|
|
How to rebuild to counterpartyd.8.db?
I am at counterpartyd.7.db right now.
I believe you can delete your counterparty database and it will force a rebuild C:\Users\Owner\AppData\Roaming\Counterparty\counterpartyd Any command to do that? Actually, I think C:\Python32\python.exe setup.py update gets the master branch, and to rebuild the 8.0 database you have to pull the develop branch. But I have no clue on how to do it. I'm just waiting the devs to update the master branch, and I guess they have more important things to address right now. |
|
|
|
Since the price has crashed to 0.002, I"m buying XCP @ 0.004BTC please PM
0.002 sales were done with stolen coins. Bug is now fixed. Time to move on. Nothing stops you from being delusive though... but I advise you not staying in this state too long, it might hurt your sanity. |
|
|
|
|
24 miners ! Gh/s is ramping up
|
|
|
|
I bought some XCP at 0.002 during the crash. I'm happy to return them to poloniex but where should we send them? Or are we just waiting to hear back from everyone still?
This is a nice attitude. I think the best is to contact poloniex directly and handle this with them. I'm glad to see that all hope is not lost and I can still have faith in humanity! I'd send you some karma if I could. Since you are the first to come out of the wood, and if you can send me the proof that you returned the XCP, I can sell you a percentage of these XCP at that bargain price (if you still want to hold XCP of course) disclaimer : I don't own much XCP, and while I saw the dump happening, I didn't took advantage of it. |
|
|
|
|
The problem is not with XCP anymore. Transactions were reversed and balances have been re-established.
I don't wanna shoot the ambulance, but Poloniex has allowed a withrawal of 80 BTC to the (dark) grey hat without manual check. This point could be discussed, but it wasn't obviously a good idea when you allow the trade of multiple 2.0 coins in alpha or the other shitcoins he lists.
Meanwhile I have faith in the devs & busoni and I think they'll come up with something that minimize the impact for the users. Wait & see.
|
|
|
|
Any plans to add XCP to any other centralised exchange than poloniex. What is the status with DGEX? I want to liquidate my holdings
Sell in bulk in the buy/sell thread https://bitcointalk.org/index.php?topic=445740.0 You'll find a buyer in no time PS: alternatively you can PM me the price and quantity you want to sell and I'll see if I'm intrested |
|
|
|
So you cant really be sure of your position until the standard 6 confirmations.
Also a miner can game the system by front-running trades after solving a block.
Also there are many "latency arbitrage" "alpha" strategies that can be used to game the system, since it is possible to to make a trade in the past based on "future" information.
This is why Decentralized Distributed Exchanges for liquid assets is nearly impossible to implement.
I've read this whole thread and everything about XCP and still have not found details technical info on how the matching works, does it use "atomic transactions" ?
I have some ideas on solutions, PM if interested.. im a 15 year high frequency trading C++ coders. cheers
Hello, not sure if I can help but I've made some trades on the DEX. Actually I've encountered a simultaneous trade with someone else (within the same block) he was first and since he took the whole order I end up with an unfilled buy order. I think that your are sure of your position as soon as the block is mined (and as long as there is no fork in BTC, which is quite rare) About the latency arbitrages you're talking about, I have no clue but I'm really interested about this possibility and how to avoid it. I've also red that DEXes are not (and will probably never be) suited for HFT (I remember Vitalik saying that somewhere in this thread) I have no trading vocabulary but I see the DEX as a low frequency (10m) trading engine. Which is already quite a nice innovation ! |
|
|
|
One important question: The big buy order in DEX is a scam? or not?
Its a "troll order" to clean up all the sell orders. 0.09999910 btc per xcp is "above market price" - so the buyer never intended to pay the BTC using BTCpay. anyways this problem is fixed now using "fee" by the seller. Indeed, now you can easily bypass this order by putting a fee bigger than 0.0005 (0,05%) I don't get exacly how it is calculated though, but it seems that orders like this one are not matched by the troll order any more, which is a good thing (low fee possible) 4661 50 XCP 0.013 BTC/XCP 0.65 BTC A clarification in the FAQ or the wiki is welcome (with examples) to let the genuine users know how to use the DEX efficiently without spending too much in fees. PS: a scam, stricto sensu, is impossible on the DEX since it is a trustless system (and that's the beauty of it) |
|
|
|
Even forgetting (!) for a moment the insurance and how we've been screwed by starting mining 1 day before cut-off. I still have a doubt. 2.88 per share, with 100.000 shares = 288 TH/s Only 80674 shares available... but the initial order to both providers will (?) be fulfilled.  So, does this mean that: A) each share will have 3.569923 GH/s or B) we will only get enough mining power to cover 2.88 * 80674 = 232.341 TH/s Where are the 19326 shares? Who is owning them? Also, and this is disturbing for me, if all machines were delivered (or confirmed so), where are them? Are maybe mining already for something else? If people (shareholders) are screaming here... I assume that if those 19326 shares are in Cryptix wallet, he should be the most concerned about mining at full power, receiving the 100% additional power and so on. I understand he may not want to scare us, but ... why do we get answers on a bloody excel and not on all other questions? I think that the unsold share shouldn't be taken into account. CryptX won't buy Gh/s for those share, they were removed as soon as the mining as started, meaning that no mining power will be bought for those. (at least that ho I understand it) About the 20% for feb, no statement has been done by CryptX, but if they don't give the 20% for Feb, it could be seen as little abusive from them. Meanwhile, if we we are far from hashing @ 2.88/share today, so let's wait we reach that number and then we'll discuss/complain. |
|
|
|
Hello,
I had some XCPs at Poloniex, but in the sell order, and did not get affected by this issue whatsoever.
It is highly likely that I get them back, no?
Thanks in advance
50-50 Probably more than 90% sure you'll get them back if no order was executed. XCP mess was fixed with a rollback. The issue is now on the BTC side, which can obviously not being rolled back. The grey hat hacker has stolen (borrowed to make a point?) around 80 BTC from Poloniex. |
|
|
|
That's completely defeating the purpose of PoB.
How so? We've burned BTC to get a fixed amount of XCP. Issuing more XCP would make counterparty based on a lie. That's why I think it's not gonna happen, it's completely on the opposite of (what appears to be) the philosophy of the devs. Please, why don't everybody wait for the smoke to clears out and then we'll discuss. I've not lost a penny in this, but I'll stick together with the community if a bounty/ compensation fund or whatever clever decision is made. |
|
|
|
... I wonder if it is technically realistic? How would this solution actually be implemented?
Hard code into the next version, recognizing an address that PhantomPhreak controls as having a balance of 35,000 XCP on the first block. Then, PhantomPhreak sends this to busoni. I would think it could be a 1 liner, not too hard? I would hope that, if this is done, we can also set a date for when this type of fix is permanently "off limits". Maybe 6-12 months from now. In other words, a date where we all agree it is no longer Alpha software, but Beta. And secondly, raise a pool of funds (controlled by PhantomPhreak?) to have a security audit done by an outside party, before we declare the transition from Alpha to Beta. I would donate to this and I think many others would too. That's completely defeating the purpose of PoB. Not Going to Happen. Busoni is still working a solution, wait for a proposal and then we'll start discussing for a compensation if someone is in the red. It's in alpha, it is written in red in the first post, these kind of things were going to happen, and might happen again (with a lower probability now) Personally I've traded a tiny part of my XCP on poloniex, because trading more than 2-3% of your holdings at this stage is foolish. If I lose them because of a bug in the alpha, a hack on an exchange, of whatever, I wouldn't complain. |
|
|
|
When does this troll order expire? 0.01738562 BTC/XCP
It won't expire for a while, but it doesn't matter, because any orders to sell XCP for BTC with a non-trivial (e.g. default) 'fee required' will bypass it now. In fact, there are a couple open sell orders, so the next match should happen when someone tries to buy XCP on the distributed exchange. thanks, that's what the answer I was looking for ! |
|
|
|
Hum hum... On Feb 12, I dropped the nuclear warhead. It was what I expected and I managed to exit my position entirely on DOGE.
C'est à pisser de rire, il est encore plus ridicule que ce que je pensais ! |
|
|
|
This unfortunately looks like Poloniex got hacked. http://blockscan.com/address.aspx?q=19rVQ91AgrYmbpX6Sjxw6qCoP2Q1YFcn5bThis address received 35k from Poloniex and immediately redeposited it. Poloniex at the time had a balance of roughly 50k, so unless a big whale had been buying all along this is very fishy. There's no reason for an immediate redeposit unless someone had managed to get Poloniex to pay out to them. Also strange is how there is no intermediate deposit address used--the transfers are going directly into the central wallet. Here is another transfer of 35k: http://blockscan.com/address.aspx?q=1HMoHdzaHm9cHR8FjekGRtkkydoHfgaC8SPerhaps the hacker/exploiter is going for another round? I really hope I'm wrong. It does look as though either the central wallet or Poloniex's internal processes have been compromised. Please don't spread FUD as long as you don't know exactly what's going on. |
|
|
|
Si on prend Fontas, il pump tour a tour les crypto de BTC-e, pas toutes, mais certaines, avant de les dumper Une fois habitué aux niveaux pré et post pump, on peut deviner en avance qu'il va repumper, en acheter en avance, et dumper en avance sans etre trop gourmand pour ne pas passer apres lui. du coup, on profite des vagues qu'il fait dans le bassin. Bien sur, je ne conseil pas d'écouter ni même lire ce qu'il annonce  Oui, mais un jour il s'est fait pieger à son propre jeu et il a été incapable de bouger un malheureux sell wall de 50 BTC sur FTC... Il a annulé sa pump comme une merde et depuis on a plus trop entendu parler de lui... Je pense que Wolong va bientot le rejoindre dans son hall of fame des branleurs. |
|
|
|
|
Show Posts
