Not using a gui. This is the Linux client. I can download the Gui and give it a try, but if the linux client will not work, then I will not be able to get my pool back up.

So since I have downloaded and installed the updated client I get the following message when trying to send coins or even list addresses:

error: {"code":-2,"message":"Safe mode: WARNING: Displayed transactions may not be correct!  You may need to upgrade, or other nodes may need to upgrade."}

Any Ideas?

ezcoind getinfo comes back with this:

{
    "version" : 60404,
    "protocolversion" : 60002,
    "walletversion" : 60000,
    "balance" : 1.00000000,
    "blocks" : 261845,
    "connections" : 3,
    "proxy" : "",
    "difficulty" : 1.98868119,
    "testnet" : false,
    "keypoololdest" : 1384058410,
    "keypoolsize" : 101,
    "paytxfee" : 0.00000000,
    "mininput" : 0.00010000,
    "unlocked_until" : 0,
    "errors" : "WARNING: Displayed transactions may not be correct!  You may need to upgrade, or other nodes may need to upgrade."
}

I think this is the newest version and I am connected to two other clients also on 6.4.4

One of the nodes is still on 6.4.2.

Pool available at http://elc.pnwminer.com

VARDIFF
Stratum
PPLNS
Intro Fee 1.25%
First 5 users who sign up and mine for 48 hours will get their fees set to zero after the 48 hour time period. Permanently!

UPDATE: The 5 no-fee spots have now been claimed!

http://sbc.pnwminer.com updated to v1.5

http://sbc.pnwminer.com has been updated with the v1.4 client.

Login..
Create account..
Create a worker..
Connect with  stratum+tcp://stratum.pnwminer.com:3335

Agreed on the brand new install thing. They are approaching 3 weeks on one and almost 4 on the other, but oh well. Oh and phone went through factory reset in the past week after I got a new version of Android rolled out to me. Was just easier to install it and then do a factory rest and reinstall apps. Oh and  no on the phone password. Separate passwords for everything.

Will update thread as needed once I have more info.

Moved everything in other posts into this so I can everything in order....

Will be honest... less than concerned about 3.5 BTC... more concerned about continuing to use the service. All other things aside, if someone can bypass 2FA, that is bad....  I would be perfectly happy if they would just verify what IP the actual BTC-SendTo came from and if it had to enter a 2FA to finish the transaction.

The reason I shrugged off the possible compromise is because both machines are brand new installation that get automated AV, rootkit, and secondary spyware scans weekly. No extra programs get put on them (other than MS Office, which some would argue are viruses by themselves ), for just the reason of preventing a possible compromise. Both have firewalls locally and at a router/gateway level. And I am the only one with any sort of logon access to them. Yes I am quite "retentive" about anything regarding password security.

Can't give any response to the Cloudflare comment as I have yet to be invited to one of their parties 

All that aside, it has been definitely verified that I do not have api access, so that leaves web access. Assuming my machine was compromised, the order of things necessary to do what was done would be this:

1. Login to computer or use something like RAT to control system.
2. Open web browser and login to CampBX with the weekly, unique-to-that-site, 14 char alpha/num/special character password.
3. Get my phone and enter the 2FA code to finish login.
4. Cancel all pending orders/withdrawal/ACH transfers.
5. Convert all assets into BTC.
5. Transfer BTC to alternate address and verify it using 2FA again.

So unless I was sleep trading and sending my BTC to random address that were getting a lot of other BTC funneled into them, it is unlikely anyone could pull off this kind of withdrawal.

Even if I logged into my account, sold off everything, sat a hacker down at my computer, took them to the transfer screen, and told them to take my BTC, they still would not have been able to perform a BTC-SendTo without physical access to my phone which has my 2FA auth on it. And no, I sincerely doubt someone has cloned my phone, apps and all.

As for timing on login, my last login was roughly 10.5 hours before this happened, and the whole thing happened in a timeframe of about 12 minutes. The withdrawl was to another BTC address, so it was a fast situation. I did not logon again until late the next day to find the issue.

Not much to update yet, but I did get a short message from Keyur asking what my username was and if 2FA was still active on the account. Answered him and that was about 4-5 hours ago. Still waiting to hear what they are going to do. Oh, but I DID verify that I do not have the API turned on, so that was not it. I am starting to lean more towards someone got it my session accidentally via some sort of redirection/cookie error and decided to make the most of it.

Only other option is that someone got my password (EXTREMELY UNLIKELY) and ALSO found a way to bypass 2FA.

Come on, Keyur....  Give me something to work with here.

It could very well be just me. DB corruption can occur anywhere at any time. It could have been a bad session cookie that someone else got and decided to make the most of. But even if was an attack through my account, they would still have needed my phone to get the 2FA code to enable BTC-SendTo.

The other possibility is that they used the API, which was not active on my account. Hypothetically, if they did it that way, that means that either they still had to bypass 2FA or 2FA is not in use for BTC-SendTo in the API, which makes the entire 2FA worthless. I mean, if they cannot login to website without 2FA, great, but if they can get around that by doing a man-in-the-middle to obtain a password and then use that password to perform a BTC-SendTo withdrawal, then 2FA on their site is meaningless. On the other hand if 2FA IS needed for the API, then either 2FA does not work on their site in it's entirety or the attacker has a different method of attack.

Either way I am still hoping this is just a db issue, if not, then I am very wary of continuing to use their system for fear of another breach.

I am going to give them the benefit of the doubt, but I just logged in to CampBX.comr website and ALL of my funds were gone, cash and BTC. Almost $3500 worth. I am using 2FA and a less than week old random 14 character password, so my guess is that there is something wrong with their site or it got hacked last night. All of the transactions were done within a few minutes of each other, so I assume this was someone who had a bot and found a backdoor in their API, the only problem is, I do not have the API active on my account. Still doesn't explain how they could transfer out without either an email or using 2FA. Most likely a database bug and I will accept that, as long as they reverse the transactions. I will come back and post more once I get a response. I will give them 24hrs to fix this.

I guess we will all find out how CampBX responds to emergency situations.

Best I can tell you right now, it that Bitbar has dynamic fees and it appears to be based on both amount of transaction and the age of the coin. Looking back through my logs, I found that transfers that were happening before the boom were taking only .001 or no fees at all. As the average age of the coins in my pool wallet got younger, TXFees starting increasing. I am seeing now fees anywhere from .001 for small transfers up to .008 for very large transfers.

I have not seen any recent transfers that are fee-free though.

I hope that helps a little.

Do you mean TX Fees? I know how MOST of this coin works, but could you be more specific as to what you are asking? I will tell you that it IS like other POS/POW coins in that, if you hoard them long enough, you start getting POS blocks (interest, for lack of a better term), which to me seems to mean it is something you hold onto. The reward is inversely connected to difficulty. More difficulty = lower reward.

What other info are you looking for?

Registrations are now open again at btb.pnwminer.com

Bitgem client on http://btg.pnwminer.com has been updated.

Well, I do not know of any other Mastercoin (MST) pools and I am closing mine down due to not enough solid nodes to connect to. I have spoken to the guys at Cryptsy and I suggested, since it is not a coin that can not be reliably mined, that it might be time to delist it.

If anyone wants to fight for Mastercoin (MST), I suggest getting the dev to setup a (SOLID) seed node and convince the guys at Cryptsy that there is still some utility left in this currency.

I am getting out now.

Due to lack of interest, I am closing my EZCoin pool effective Dec 1, 2013. Please withdraw your coins before then and use the pool at McKenzie Mining  http://ezc.mckenziemining.net

Try deleting your blockchain (blk*.dat and the database/ folder) and peers.dat, but NOT your wallet.dat (that would be bad). Then use a conf file similar to this:

server=1
gen=0
daemon=1
rpcuser=yourrpcusername
rpcpassword=yourpassword
rpcport=8100
port=8099
rpcallowip=127.0.0.1
addnode=btb.cryptocoinexplorer.com

Connecting directly to the block explorer should get you up to the current block. From there you should start getting additional peers connecting.

I repeat.. you can delete everything from your profile folder, but DO NOT delete your wallet.dat. Before you start the client you should only have wallet.dat and bitbar.conf in the folder

You get that Batch #2 tracking number yet?   Chomping at the bit (pardon the pun) to get me some Fury!

Ok, so I have now had 3 people ask me about my old StableCoin Pool and I have decided to start mining it again also, so it is back up and going and, since I now have newer hardware and CPU/Mem to spare, the pool should be around for quite a while.

http://sbc.pnwminer.com

Happy Mining!

I have actually already tried contacting the dev via pm a few times over the past couple of days (and his profile shows that he HAS been online during that time), but he has not answered any of my PMs.

Maybe I have been completely misreading this thread, but I am PRETTY sure MSTCoin and Hydroponica are the same person. MSTCoin has not been around for a while, but Hydroponica has.

Hydroponica, Man I just need to know if I should keep my pool alive while you fix this or is the coin dead? Any response (public or private) would be appreciated.