Latest posts of: icusu

What happened

As we have mentioned multiple times, all of the alternative wallets were compromised. The Dev team took the needed time to gather all of the facts about what happened, and have confirmed that the developers of these wallets were not being malicious when the wallets were coded. In a hope of being completely transparent, we wanted to explain what happened. A bug in the wallets caused them to leak their private/public keyset to a server. An unknown hacker gained access to this server and extracted all of the key information from it.

What we have done so far

The first step, as many of you noticed, was to alert everyone to the issue and to encourage the creation of new wallets in official software. Next, we requested Mercatox to disable trading on the coin in an attempt to mitigate easy exiting from Aro into Fiat. The devs were then able to get a hold of the keysets which were compromised by accessing the logs on the compromised server. From there, all Aro on any of these accounts were immediately withdrawn (by the developers) into wallet

4kWXV4HMuogUcjZBEzmmQdtc1dHzta6VykhCV1HWyEXK7kRWEMJLNoMWbuDwFMTfBrq5a9VthkZfmkM kamTfwRBP

With a message from Arodev attatched. Fortunately, and thanks to our excellent Devs, we have managed to secure 95% of the compromised coins. Through all of this, something mildly amazing occurred. Octaex, the first exchange we were listed on, exit scammed earlier this year. The person responsible for this loaded their keys into one of the compromised wallets though. This means that most of the Aro that many of us had written off as lost when Octaex exit-scammed have been recovered. Yes, we have recovered the 2.2 million octaex coins!

What we are doing going forward

For the people who fall into the 5% of the coins that the hacker had already extracted category, Arodev is planning to personally reimburse. If your funds were taken by an unknown address or were sent to the wallet mentioned earlier, contact Mercury80 or Arodev on Discord with your wallet information (Privatekey:Publickey) and they will let you know what else is needed in order for you to be reimbursed. Do not be alarmed if they take a little bit of time to get the funds situated and ownership confirmed, they are manually processing all of this and WILL get to you. I promise. A major point of concern for some is the issue of masternodes which had compromised keys. To address this, there will soon be a hard fork which will disable the effected masternodes (49 in total) and all funds returned to their owners. Similar to the stolen funds process, contact Arodev or Mercury80 with your key information as well as your new CLI or Windows GUI wallet address. Regarding the recovered Octaex coins, we won't be able to reimburse everyone 100% of their lost coins due to the fact that some of them were sold prior to the recovery process. But if you did lose coins, and you are able to provide proof of any sort, contact Mercury80 or Arodev on discord. The devs feel personally responsible for this situation, as you can tell by the fact that Arodev is personally reimbursing people, and are working hard on an official cross-platform wallet that does not send any keys anywhere. If you have any further questions, reach out to myself or anyone on the Aro council for assistance. Also, thank you all for being a part of this amazing community