Just thought I would like to share this recently released article with an in-depth look at the full picture with timelines of events and evidence/logs included. I think it's important that the community gets to hear about this.

https://bitcomsec.true.io/bitcomsec/tracking-a-bitcoin-thief-cryptorush-hack/

I agree 100%, and I've requested multiple times to them for someone to get a meaningful tweet out with some progress update. I'm also quite frustrated like everyone else waiting for answers and want there to be more communication. I'm gonna do my best to get an update out on site and Twitter. It just so happens that the IRC is where everyone sits and the best chance to get real time answers of any kind.

As for updating here, this place has far more sewage than the #cryptorush IRC channel, hence no updates here of any kind.

Also, please don't lump me with Devianttwo and his game streaming.

EDIT: Check the site now I got them to put a new update.

May 17, 2014
The site coding is going extremely well, basics are mostly done and focus has shifted to the trade engine.

I already stated that whatever came out of Fyrstikken's mouth is trash, yet you still believe he's a trustworthy voice of the company, he's not.

Also, "they used my information and tried to get into other exchanges" that's 100% impossible, your password was never stored on the server, only username and email address.

Why not go into the IRC and get answers on progress instead of being an absolute cretin?

I gave up ownership to Fyrstikken on the 26th, this lasted until the 31st/1st april when I took back the site, formed a new agreement with Sygma and his team. Sygma was in full control and ownership. A month went by and he didn't do what was agreed, so the agreement was voided and ownership shifted back to me, and Sygma stepped out of the project and his team remains. Throughout this time Sygma's team was still working and they are still working today, and running of the site has been handed to KingDragon on the IRC. It's already been incorporated as well, so there is progress just not publicly stated. Agreements are still being formed about me transferring official ownership to him, though he's more concerned about opening the doors again (rightfully so).

So to say, I'm still the "legal" owner but have no control of the operations other than watching from the sidelines throwing hints here and there with the occasional whip.

Not going to directly quote, but handing it over to people wasn't just me giving it on bare promises. There was signed agreements and paperwork involved. I'm not saying it would indemnify me at all, I'm still liable right now for peoples funds and you think I don't know that? Do you have any idea what it feels like to be me right now, because I don't think you have a clue. It feels more than shitty to get fucked over by people you trusted, and have half the world hate you for it as well. I made some poor choices when handling the situation, but I'm still here at least and sticking around trying to push the team to get moving already so you guys get paid back, and you're calling me a "weak link"? I know you're angry but seriously, have some compassion for once in your keyboard warrior life.

Just thought I'd add you guys are not the only one that lost coins, I lost 30+ bitcoins through these events so nobody was eating buffalo wings here. I'm not trying to sound like a victim either but it's hard when you lose your money and business and cause pain for others due to crappy events like these.

EDIT: Are you talking about the March 11 hack or a different event?

Taking the time to say thanks, this means a lot out of the majority of replies here . I answered someone else's questions below to give insight into the future.


No problem at all, here are some answers.

1. CR was insolvent in the Bitcoin and almost Litecoin & Potcoin currencies at the time it was "sold". This means that every other currency (except for the ones with small chunks that I had sold like AUR and MZC) were solvent at the time I passed it over.

2. I never actually sold the business I gave it away free of charge with the condition that the new entity takes on the responsibility of repaying users. I "sold" it for $0. At the time it was very difficult to think straight about what to do, and my plans would have worked if BlackCoin problems didn't happen. It was after that I just had to find someone who could run the site as I was no longer in a state to run it, with people offloading onto me I guess anyone would feel the same way. That's why I tried to find people who would just take over with the intention of saving it.

3. Yea, I would trade there simply to support the sites growth. I used to trade on the old CR all the time, sending my personal funds back into fees. I'd trade on their again providing the new site is run well and they have the coins they trade in. What I mean to say is, I probably wouldn't go out of my way to trade coins that I didn't want to just to show support. Maybe I'm wrong about that but theres no site up yet for me to give an answer as to how it will feel trading there. From a general and personal perspective I'd have no problem trading there in the future, since I have faith in the new team.

4. My future plans are I want to start a new business but I'm still assessing things and "recovering" from these past events. I'm afraid with my name all over the place here and various media sites it's damaged, and that won't help any new business startup. I really liked running CR and cryptos in general is probably the best thing I discovered to date. If people think I'm the "big bad scammer behind crypto rush" it will inevitably hurt any future business I decide to go into. I do hope me answering these questions from people gives people a better view of the situation and of me as a person.

Crypto Rush taught me some things about my ability to run (or inability, depends how people look at it) a business so I have to go away and think hard before opening something new. I don't want events like this to happen again because of a fault or something I did wrong. And then there's the other question, how many people who are angry like horiacretan would act if I took on a new venture. I can foresee that they would come to bang down the doors, at least that's what I would fear if I opened another business. So this situation has trapped me basically, and until Crypto Rush is open again and I can see that plans are in progress and being executed to pay people back, I'd actually feel bad if I opened another site.

That should give you some insight into my thoughts. Also thanks for asking a question like this, makes me happy


We've been through 3 new owners already, the first one was Fyrstikken who was in charge for about a week until he stole funds, and I forcefully took it back from him. At the time I was negotiating with another person to take control because Fyrstikken was doing nothing but sitting there and spreading false news about progress. This other person was Sygma, and he's the one I handed it to eventually. He then brought on a whole team of workers (the current team) to act in various positions. Then recently Sygma stepped down but the current team stayed as it is, with a member of that team currently in the works to become the owner and assume Sygma's role. On paper and from a legal standpoint, Crypto Rush still belongs to me, though I have no power over its operation or future.

When exactly do you remember this happening?

From what it says in the Debt Management Plan some coins were lost from a second attack (this wasn't done when I was in charge, so I don't have the details). They will pay back whatever they can I guess, BTC and alt coins included, though the plan said that it will be paid back in BTC at a market rate. Which market rate I don't know.

And yes, 4-6 weeks is a very long time for a whole team to make a new site. I made the original site pretty much alone in 2.5 weeks... But hey give them time I know they are working on it. Sorry that I don't have any more concrete information than this.

Just thought I'd chime in, ThisWeeksCoin promotes things as his job, he's not associated with Crypto Rush. Let me update your piece of info.

Linkandzelda (me) - Former Owner
Devianttwo - Former Co-Owner

Let's begin.


Crypto Rush was opened by me with the intent to provide people with an exchange, and that's what it did. No scam intentions whatsoever. I wanted to make an exchange for CoinyeCoin back in Jan and approached this from a perspective of a hobby, so the startup was quick and sloppy. I actually gave up most of my real life activities to develop and work on the site. To say there was scam intentions from the start it makes me quite sad.

Also ask yourself this: why am I still here taking my time to answer your questions, and why was I staying around here all the time and in the IRC if this was just one big long con? And then ask yourself this, why is their a team, a huge team of people working really hard right now to get Crypto Rush back and operational. Why would they try and do that if they wanted to re-scam people or whatever when you and I both know all of these events are very damaging to the Crypto Rush brand. To put this much effort into something, they could have made 5 new exchanges and pulled the same thing over and over.

Not sure what else I can say to prove this wasn't a scam, in the long run people will believe whatever they want to believe.


Sadly yes, well no. It really depends how you look at it. On March 11th 600+ BTC was stolen and 2700 LTC (I can try to find the addresses if you want them). It happened about 11 AM GMT and I didn't discover it until 5 PM that day. The method used to do it was simple: they logged into the server via SFTP and created a PHP file that interfaced with my daemons and took the coins. Me and the team did a lot of tracking and tracing of the logs and everything points to an inside job, it's what I've felt the whole time. But there's no difference if this was a hack or if this was indeed an inside job as the fact remains: those coins were taken and they were gone. Nobody just gets the password for something and logs in without any brute force attempts and somehow knows the system and how it works and proceeds to exploit it so easily.

Originally thought (and still widely thought by the people who were told) that this was a result of the .git folder of the local git repo being publicly accessible from the public_html folder, with the user using those details to gain some sort of access to the passwords but theres still a large gap as to how that happened.

You can think of it what you will, it will plague me forever as to who or how it was done and whether it was or wasn't a hack.


The real problem with ZeitCoin is a combination of the code they released and the way I coded the site to rely on the daemons account feature (the same issue behind PoS coins). The system gets all its integrity from the daemon. If it makes a request to get a users balance and it says that user has 500 coins, then the system will let those 500 coins be used.

Zeitcoin did release a damaging update on their public git hub repo which contained code that would require a network wide fork. Unfortunately, me and the rest of the team are not trained to know what their code does, and we were instructed to upgrade our client by the public representative of the time (someone called Darren). So we did it and everything looked fine, except that every withdraw was failing. We didn't notice this for about a day, then shut it off again. Sometime soon after they released another update which should fix the problem introduced by the update before.

So we downloaded it and upgraded the daemon. That's when we spotted that all the transactions (internal and external) that took place were reverted from the last 24 hours. The site relies on internal balance move commands to execute trades, so if any one of them are undone users trades are lost and it results in either a user having coins they sold, or not having coins they bought. This is a massive problem, because the BTC/LTC side is untouched because the move commands were still intact for those people.

At this point there were 2 kinds of people: the people that were missing Zeit that they had purchased but not getting the BTC back, and the other who had all of the Zeit they sold over the 24 hours but still getting the BTC. We worked to manually process as many of those trades as possible and it took a very long time to do that. Along the way we discovered that pretty much every one of the latter group had withdrawn or further sold off their returned Zeit, leaving us with not enough coins to direct properly to people. For the people that withdrew the coins we refunded some users with BTC from our fee earnings to make them as happy as possible, but we couldn't afford to do that for everyone. Quite a stressful few days, so we decided the best course of action was the stop trading completely and just let everyone withdraw what they could and leave the coin open with an option to do so.

Eventually we ran out of Zeitcoins, tons of users still missing coins with the balances all unsynced. A complete nightmare. I don't like to point fingers but I've come to accept this was a 50/50 problem that would not affect other exchanges so badly if I programmed my own ledger system. The other 50 falls directly on Zeitcoin, as I had a conversation with them and they seemed to think its my responsibility to check their code works before they release it, something I (and hopefully everyone else) doesn't agree with. It's their responsibility to check the code before they push to their own repo before instructing someone to update. Hopefully people can understand why I blamed them completely at first.


Yes, this was due to the PoS bug present in (from what I know) all PoS coins. As I mentioned above if the system says you have 500 coins, it will let you use them. In this situation we added BlackCoin on feb 27th or near that time with wallet version 1.0.1. We had no problems with it running and the balances reported correctly. After the forced fork that we didn't catch onto for a while due to a combination of work and sleep, we upgraded as quickly as possible to 1.0.5 the current version of the wallet. We check all coins before releasing them initially for the first time for this PoS bug, we don't do the same tests for upgrades of the wallet, and this time every user was very angry about the BlackCoin fork we were still on for a good number of hours. In my mind the most important thing was to upgrade that wallet and get on the correct fork.

So we did that and released, then soon after (about 45-60 mins) users reported to me and in the IRC they were having withdraw issues. I checked the global balance and we only had 53.xx coins, far less than we were supposed to. That was an obvious "oh shit" moment so I turned it off and did an audit. The results were that about 1.5 million coins were missing. Just so you know I did audits more than once a day for a long time to make sure nothing goes missing. So whether you believe me or not, there was no missing BC before this update or we would have known.

The problem I spotted right away was that the deamon reported the total of everyones balance should be equal to 22 million. That number was far inflated (and it was obvious, the balances were still showing as 22 min total while the wallet was pretty much empty). In this state when all the balances integrity was lost it was impossible to resume any trading so I went to rat4 the BC dev for help and potential compensation. He then stated in the conversation that he found the bug in his code, and pushed an update which fixed it for us. Well, it fixed the balances being displayed correctly now which got us to the number of 1.5 million lost.

Now that the balances were correct again it was easy to see all the users that withdrew too much, because their balance was now negative. We have a full list of users and transactions with txid's of the people that did this. It was the same exploit of the situation that happened with Zeit in some sense that people took what wasn't theirs because the system allowed it. There was a pump and dumper on twitter that posted a status that was something like "I just got 120k BC in my account on CryptoRush! Time to spend it on MintPal" or something like that. Other users in the IRC on various channels were mentioning they just got some random coins they didn't recognise. Whether anyone will back up my claims is another matter.

So yea, in answer to that question people did withdraw too much of what was not theirs.


I read the IRC you posted, and I'm not sure why you quoted me in it but what fyrstikken says is a load of crap. If he still owned the exchange then he probably would have pulled some media stunt like that yea. Under my watch however I would never do that or even think to say users are paid back when they are not. The current team is working really hard, or as hard as they can, to rebuild and remake the whole site from scratch from my understanding. I'm pretty certain they are all working for free as well and they are doing it because they care about everyones losses and fully intend to repay everyone through what was mentioned in the debt management plan on the new main site.

So no, definitely not. There was never any scam intention from my part of the woods.


I pretty much answered this one above, the plan details they will do it and I'm pretty sure they will be able to once trading resumes. Quite honestly whether they can or not is all down to the users who trade there again. The fees generated in revenue will go towards paying back users so the more people that trade the quicker everyone gets paid back. I suggest everyone to show their support by trading there again once it reopens, or it won't be possible to get those coins paid back to users.


I'm not sure how to answer this, because I'm not personally aware of anything like that happening. At least not while I was still in charge (which ended on the 26th March). Everything that happened after that point in terms of management and how the site was run was out of my hands, so I apologise on behalf of whoever conducted that behaviour. It would help if you mentioned more specific dates and events that makes you feel treated that way.


From my point of view, his stake involved his brand going all in on getting people to invest in CRS. In addition to that he was operating under false ownership, he thought he owned everything because I said he did at one point in a Skype chat. It's true he did own the site for about a week while he tried to find some people to run it, which he then apparently screwed over and lied to to convince them to take over under false pretences. In addition to that he then stole coins from CR on the day CRS was meant to be paid (he only returned less than 10% from my knowledge so far).

I got sick of his every move, he schemes behind peoples backs and says 1 thing but does another. Does he have connections that are trying to revive the site most probably. I told him to just drop every involvement since I did the best I could to also hand over to another group, and explained that after he took those coins the good will of the agreement I had with him was over but he didn't get it and kept going on like he owned the place. His followers also backed him up with that regard since they don't see him for the snake he is.

As for right now his intentions I have no idea, I stopped following him because his speeches were making me physically ill.


I don't think this one has an answer because as far as I'm aware its not relevant to the situation. It seems to me you are coming from a viewpoint of "I've been scammed". I'll say up front there was never an intention to scam anyone, not at the beginning not now. Nobody has actually been scammed either, everyone is just a victim of this hack and crazy downfall of Crypto Rush. From a users viewpoint the facts are still the same, you don't have your coins anymore. I think its much easier to show support instead of pointing fingers and shouting calling me a pedo and a thief. That's honestly quite hurtful whether you care or not about my feelings I'm gonna state it anyway. It should be obvious to everyone that these coins don't grow on trees and if you don't support the site, it will be very hard to ever get back your coins.

Hopefully these answers are satisfactory and if they are not, I'll do my best to clarify further any points you want.

Decided to make a quick reply. I've been reading the stuff people have said about me and to me, and quite honestly I'm not going to respond to any of that crap. What I'm here to do is offer up answers to peoples legitimate questions they may have for me. I'll answer anything you ask me and be transparent within my knowledge. I don't have knowledge of the current situation or any progress that's happening other than what is reported on the Twitter, I handed my access over back at the end of March. So yea, I'm here and I didn't run anywhere, just ask me legitimate questions and I'll answer them, if anyone actually cares about what happened with the March hack and CRS and fyrstikken and all that.

+1
C2, FAC are just our reference, but not the target.
Our target is ................


















THE MOON!

Thank you Adriano.
I think the whole community will appreciate your job.

Contributed about 40 votes today, again!
The whole community is working like a whole.
Let's make COMM on the top of Mintpal Vote list.

Keep voting. Make votes increase like a rocket.  

Dumper will dump. It's actually good. it will help the re-distribution of COMM.

Good news is we are very close to the 2nd round distribution.

However, is it the final version of your 283 2nd round list?  I don't think so.  Do you plan to update it? As like many guys in the thread, we don't find our names on it.  

Vote on Mintpal: 5876-5881

It seems that I need delete the blkindex.dat file in APPdata/CommunityCoin/ in order to open the new wallet.

Glad more and more ppls get interested in FAC.