Show Posts
i just got word freshmarket is being held hostage 
this message was posted in the chatbox or coinex.pw
UTC_Ultracoin:
I'm really sorry to say this, but it seems that our security system wasn't enough. Just now i received a message from someone that he has hacked our exchange, and if we want to stop this, we have to pay 10 BTC. Obviously, we are not going to pay our users' money, and we temporarily closed the exchange. We have made an secutity audit to see what's missing, and found ~1200 LTC stolen (nearly 40% of all LTC), nearly ~50% of LEAFcoins, and ~20% NYANcoins. All other currencies remained nearly unchanged. Just now we deciding what refund can we make (dev team has nearly 200 LTC on their own, and i can give up some too). We will make a message after we have an agreement. We will 100% refund all other (not-leaf, nyan or LTC) currencies, and try to refund as much ltc as we can. As i see, it was sql-injection, but it doesn't helped him much - all passwords are stored as hashed ones. So he just brute-forced all low-security passwords to steal their money. So if you haven't got email auth - it is possible that your account was just jacked. I also have possible ideas about openex malware in source code, but without proofs i can't do anything.
this message was posted in the chatbox or coinex.pw
UTC_Ultracoin:
I'm really sorry to say this, but it seems that our security system wasn't enough. Just now i received a message from someone that he has hacked our exchange, and if we want to stop this, we have to pay 10 BTC. Obviously, we are not going to pay our users' money, and we temporarily closed the exchange. We have made an secutity audit to see what's missing, and found ~1200 LTC stolen (nearly 40% of all LTC), nearly ~50% of LEAFcoins, and ~20% NYANcoins. All other currencies remained nearly unchanged. Just now we deciding what refund can we make (dev team has nearly 200 LTC on their own, and i can give up some too). We will make a message after we have an agreement. We will 100% refund all other (not-leaf, nyan or LTC) currencies, and try to refund as much ltc as we can. As i see, it was sql-injection, but it doesn't helped him much - all passwords are stored as hashed ones. So he just brute-forced all low-security passwords to steal their money. So if you haven't got email auth - it is possible that your account was just jacked. I also have possible ideas about openex malware in source code, but without proofs i can't do anything.
https://freshmarket.co.in -took the money and made an excuse ..is something normal this days .
I lost all my UTC ...time to move on to other coin
you had to be special ...keep your idea and i keep farming UTC:)
with 1Mh/s I get 100coin/24h 
can't even use edit profile !!
