wallet pernah ter exploit? tapi masih belum ditemukan penyebabnya? ya, itu yang saya rasakan beberapa bulan terakhir, hingga saat ini masih menjadi misteri. saya korban kebobolan SEED / privkey ethereum dan yg kompatibel dg ethereum, EVM, L2 dan sejenisnya. Untuk kronologi, saat itu saya baru bangun tidur ada notif, tiba-tiba 90% aset udah pada out semua baik token / NFT di semua chain yg kompatibel dg ethereum. Damn it! hari apes emang gak ada di kalender. Masih baik ada beberapa aset yg bisa diselamatkan, sebelum privkey di import ke sweeper bot oleh si peretas. Btw, saya Degen maxi, punya 2 address utama dan sama2 di import ke wallet( metamask, trustwallet, tokenpocket ). untuk seed & privkey saya simpan di 3 device, 1 pc ‘windows’ dan 2 smartphone ‘android & IOS’ juga saya simpan di cloud. file di simpan tanpa enkripsi / keamanan tambahan. ada banyak wallet Extension yang saya install di web browser. aneh nya hanya 1 wallet address saja yang ter exploit.

saya menyadari ini murni kesalahan saya, karena gak aware dengan low security management. saving files seed tanpa di enkripsi dan device selalu terkoneksi dg internet, menyimpan seed di cloud. terlalu banyak extension yang saya install tanpa nge cek reputasi developer, ada beberapa aplikasi bajakan di PC saya. Join Airdrop, testnet dan sejenisnya tanpa riset.

udah banyak yang terjadi, bahkan teman saya baru sepekan yang lalu, create new address via ImToken apk(official playstore), selang sehari kemudian balance $x000 lenyap dan beberapa wallet address lainya juga ter exploit hanya tersisakan 1 addres yang aman.

kita fokus ke topik “Wallet ter Exploitasi”. baik itu dari segi ancaman virus / low security, ataupun human error. jika kita lengah, gak ada sistem yang aman btw, dan mungkin bisa terjadi ke wallet apa saja yg kita miliki. Note: Bukan bahas hardware wallet yaa hehe, karena gak berlaku untuk people degen seperti saya.

degen = “action first, research later”

[ASK] Ancaman Virus / Low security

Bisakah sebuah website ‘SSL certificated’ maupun yang ‘Not secure’ meng exploit wallet extension?
extension dengan reputasi yang buruk, bisa meretas keamanan wallet extension yang lain?
RPC end-point provider yang tidak familiar dapat membocorkan seed / private key?
aplikasi bajakan, bagaimana itu bisa terjadi mengambil / mengobrak abrik file yang ada di PC ?
Aplikasi di playstore belum tentu secure? di Appstore juga kah?
sign message function, bisakah mengekspos privkey / seed?

Human error

gak ada yg perlu di jelaskan / di pertanyakan, kalau sering bermain-main dengan seed / privkey tinggal nunggu waktu. hehe


yang udah terlanjur wallet address sudah ke exploit, Forget it! & create a new wallet! belajar dari kesalahan, aware dg security management & tetap semangat, start again!
Jika masih ada aset yang di lock, entah staking atau claim token pada waktu yang ditentukan. dan wallet address udah terpasang sweeper bot oleh peretas. Solusinya, jika jago IT buat sendiri script untuk mengalahkan sweeper bot. atau mungkin 0% knowledge programming? cari orang trusted, jago solidity .etc! dan sesuai dg aset yang mau diambil. bisa juga menggunakan jasa flashbot(whitehat) please DYOR karena whitehat akan meminta privkey dan ada potongan x% fee aset yang mau diambil. note: semua solusi itu chance 50/50. karena bot vs bot, gak ada harapan jika melakukan secara manual. jangan tergesa gesa men judge seed/privkey ke exploit, bisa saja hanya ke drained / smart contract manipulation. Cukup Revoke, Done!


mohon pencerahannya, saya selaku gambler & degen maxi .. XD


*jika saya merasa menemukan jawaban yang pas, thread ini saya lock! karena sudah ada thread seputar phising malware dkk

#Authentication Post
Type of campaign: Ambassador
Bitcointalk Username: pokok_work
Country: Indonesia
Linkedin page address:  https://www.linkedin.com/in/bit-crypto-673b44198/


Previous Project:




Expert for :

• Local Community Manager
• Translation
• Graphic Design
• Bounty Manager

ANN memang sepi, tidak ada update signifikan & diskusi. Bahkan CEO pavelbains terakhir aktif 2018, Tim cukup sibuk saat ini, banyak perubahan dan update mengenai proyek. Setiap bulan pasti ada kejutan, baik dalam hal kemitraan, event, dll. Seperti saat ini Bluzelle udah mulai memasuki ekosistem Polkadot.




Yups, beberapa alasan juga Twitter, Tele, / sosmed yaitu sangat mudah diakses. Kita bisa leluasa bertanya mengenai proyek di grup telegram, manager community fast respond, dan cukup aktifkan notif untuk berita terbaru mengenai proyek.
 

Resss

PayPDM bounty has ended today. Thanks hunter ..

There are several important notices before distribution takes place:

1. I only BM service, not related to any project.

2. give me time to count the Stakes, maybe up to 2 weeks.

3. PayPDM tokens are held by me and distributed immediately.

4. I am waiting for the team to send some ETH as GAS fee. Because ETH network is currently unstable, this was the team's decision to send me some ETH.

5. Since the bounty started, reports are sent using google form. so anyone who sends a report on this thread is considered spam and is not at stake.

---

Report form for week 8 here :

Twitter Campaign > https://forms.gle/9RaS1Lt98UJ7aN12A [spreadsheet]

Facebook campaign > https://forms.gle/PDdPfzocNBr5X4269 [spreadsheet]

---

---

---

---

Details:

• The total funds for the bounty are 3M, and will be distributed fairly according to the stake obtained.
• Bounty will run for 4-8 weeks (  team has the right to reduce or increase the duration ).
• Distribution 2 weeks after the bounty is finished.
• Distribution guaranteed by Bitcrypto | pokok_work.

General Rules:

• All participant must follow: PayPDM official group, PayPDM Channel (Required) --- PayPDM Bounty, Bitcrypto | BM & Designer (optional).
• Bounty reports should be submitted according to the timelines specified for each campaign and reports must be sent before Saturday (forum time & only social media campaign) .
• Using multiple accounts, alt accounts, cheating, spamming, Fake views, copied articles and videos, will be disqualified from the campaign.
• Disqualified member will not be paid.
• Wrong report format will not get stake.
• KYC is not required for the bounty campaign.
• all participants cannot change the payment address after registration. Check carefully before sending the form.
• Modifications to the rules can be made without prior notice to improve the Bounty Campaign.
• Participants with Red Trust (for any reason) not allowed to participate in this campaign.
• All participants must follow the rules. inappropriate behavior will cause disqualification of the campaign.
• All participants must make #Proof Of Registration (just once for all campaigns)
• Participants who are inactive for 3 consecutive weeks will be disqualified.(tolerance of rules. because I appreciate the job of a hunter. So, all participants who follow the rules will definitely get a reward.)

*allocation of 20% of all funds.

Stakes:
500 - 1000 Follower : 1 Stake / Week
1000 - 3000 Follower : 2 Stake / Week
3000 - 5000 Follower : 3 Stake / Week
5000 - 10000 Follower : 4 Stake / Week
10000 + Follower : 5 Stake / Week

Rules:
1. Must follow PayPDM official Twitter.
2. This campaign is limited to 2500 participants.
3. Only twitter accounts with more than 500 followers will be allowed.
4. Make 5 Retweet and 2 Tweet per Week ( Max. 1 Retweet per day )
5. For twet you must use our hashtag: #PYD #PayPDM #PDM
6. Audit scores must be 80% and above.
7. Must report every week, don't make a report on the thread, or you will be disqualified.

➤ Register here
➤ Submit the report with the button below:

  

   Week 1 < CLOSED(27/06/2020 - 03/07/2020 ) [Spreadsheet]
   Week 2 < CLOSED (04/07/2020 - 10/07/2020 ) [Spreadsheet]
  
   Update :
   Week 3 < CLOSED (20/07/2020 - 26/07/2020 ) [Spreadsheet]
   Week 4 < CLOSED(27/07/2020 - 02/08/2020 )[Spreadsheet]
   Week 5 < CLOSED(03/08/2020 - 09/08/2020)[Spreadsheet]
   Week 6 < CLOSED(10/08/2020 - 16/08/2020) [Spreadsheet]
   Week 7   < CLOSED (17/08/2020 - 23/08/2020) [Spreadsheet]
   Week 8   (24/08/2020 - 30/08/2020)




*allocation of 15% of all funds.

Stakes:
500 - 1000 friends : 1 Stake / Week
1000 - 3000 friends : 2 Stake / Week
3000 - 5000 friends : 3 Stake / Week
5000 + friends : 4 Stake / Week


Rules:
1. Must follow PayPDM official Facebook page.
2. This campaign is limited to 2500 participants.
3. Only facebook accounts with more than 500 friends will be allowed.
4. Make 5 Share and 2 post per Week ( Max. 1 Share per day )
5. For post you must use our hashtag: #PYD #PayPDM #PDM
6. Must report every week, don't make a report on the thread, or you will be disqualified.

➤ Register here
➤ Submit the report with the button below:
  
  

   Week 1 < CLOSED  (27/06/2020 - 03/07/2020 ) [Spreadsheet]
   Week 2 < CLOSED (04/07/2020 - 10/07/2020 ) [Spreadsheet]
  
   Update :
   Week 3 < CLOSED (20/07/2020 - 26/07/2020 ) [Spreadsheet]
   Week 4 < CLOSED(27/07/2020 - 02/08/2020 )[Spreadsheet]
   Week 5 < CLOSED(03/08/2020 - 09/08/2020)[Spreadsheet]
   Week 6 < CLOSED(10/08/2020 - 16/08/2020) [Spreadsheet]
   Week 7 < CLOSED(17/08/2020 - 23/08/2020) [Spreadsheet]
   Week 8   (24/08/2020 - 30/08/2020)
  






*allocation of 40% of all funds.

Article Campaign 25% [CLOSED!!]

Stakes:
High quality: 50 stakes
Normal quality: 20 stakes
Low quality: 10 stakes
Rejected: 0

Rules:
1. Articles should be original and unique with a minimum of 500 words. Dont copy from other participant or ANN thread, whitepaper.
2. New website not allowed. Bitcointalk accounts at least 1 month old are allowed.
3. Each participant can write 1 article only.
4. Published Articles must include at least 2 images of the project.
5. Your post should include link website, whitepaper, Ann thread, and official social media account.
6. Provide your bitcointalk username, bitcointalk profile link, and your telegram username at the end your article.
7. Article submission will be closed 1 week before the end of the bounty.



Youtube Campaign 15% [CLOSED!!]

Stakes:
High quality: 50 stakes
Normal quality: 20 stakes
Low quality: 10 stakes
Rejected: 0

Rules:
1. New Channel not allowed.
2. Bitcointalk accounts at least 1 month old are allowed.
2. Create the video with unique contents and upload to Youtube.
3. You need to have more than 500 subscribers on your Channel.
4. Your video description should include link website, whitepaper, Ann thread, and official social media account.
5. Provide your bitcointalk username, bitcointalk profile link, and your telegram username at the video description.
6. Article submission will be closed 1 week before the end of the bounty.







*allocation of 10% of all funds.

Stakes:

1 stakes per participant

Rules:
1. Must follow our official telegram:  PayPDM official group, PayPDM Channel (Required) --- PayPDM Bounty, Bitcrypto | BM & Designer (optional)
2. Set your name. Example : "Name | www.paypdm.org''. Only one project is allowed in your Telegram name.
3. Be active on the group, discuss with our team and other member.
4. spam will be disqualified. bounty discussion here:
5. You must wear PayPDM username (Name | www.paypdm.org) until the end of the campaign to receive your stakes.

➤ Register here




*allocation of 10% of all funds.

Stakes:

Translate Bounty Thread: 100 stakes


Rules:
1. Translators must be a native speaker of the aforementioned languages.
2. Google Translate and other online translators are not allowed.
3. Translator has previous work (portfolio).
4. Do not start the translation before getting approval from the BM.

Avaible language : [CLOSED!!]

 

---

---

---

---

---

Indonesian translation is available. please visit this thread.

No, I am not from any project team, I am only paid to create ANN threads and post them. I have contacted the team, and he said that he would answer questions about the project.

---

apologize in advance, I cannot explain about this project. we wait for the official team, and I'm also curious how he will explain about this project.

Reserved

Proof of joined post
Bitcointalk username: pokok_work
Campaign in which you participate: Articles campaign

#Proof of Authentication
Campaign: Content
Bitcointalk username: pokok_work
Bitcointalk URL link: https://bitcointalk.org/index.php?action=profile;u=2076739

ETH address: 0xa62737E792984f0303B78586c3278FAfb4339597


Article link:

1. https://www.bitcryptoview.com/2020/03/digital-gold-stable-coin-gold-is-used.html

2. https://steemit.com/stablecoin/@cryptovetok/digital-gold-x-blockchain-the-combination-of-the-two-makes-the-solution-for-the-investment-industry-reliable-and-safe

I think if Google will make its own currency that will be made like a stable and centralized coin, Google is very compliant with the regulations set by every country in the world so that their products are accepted by all people. of course if google does, surely crypto fans will cause controversy, I think bitcoin will remain victorious in the next few decades.

It's most likely due to bitcoin halving soon and Eth investors are starting to sell it to buy bitcoin, and I think so. we'll see, at a certain point that determines the direction of the trend. I think Eth stays strong at $200+. considering also that this year the altseason will start, of course this incident I am sure Eth is still a king with high volatility.

I followed someone famous and experienced in the crypto field only as a reference and learning, because he was successful and I also followed in his footsteps, but the decision is still in my hands, so I do not fully follow these people, because whatever seems successful sometimes can fall down.

Actually I'm also confused by all this. where it is not in accordance with the objectives of crypto ie everything must be transparent, a little confused sometimes see that the DEX volume is very small when compared with the exchange of centralization. the actual facts we receive are indeed like this, maybe later if everyone has regained consciousness. people's interest in an exchange is indeed in features, safety, and comfort. DEX, if it is seen, is too monotonous in my opinion, but I am sure that in the future DEX is superior, considering that it is also often related to data misuse.

If you are not good at analyzing the fundamentals of a project for a long period of selling it immediately is a good step and indeed the average bounty hunter will dump tokens / coins if they feel fair enough with their work. I personally also hold the longest for only about 2 months, because indeed what we get later is not in accordance with the expectations or actual facts. but there are some of my friends they are very good at analyzing projects for the long term, from the results of the bounty he has earned a lot of money.

Maybe many who build websites that support metamask. recently many airdrops have to use metamask as account validation and accept tokens. the use of metamask for beginners in the crypto world is very suitable, because it is very easy to use and safe, rather than storing a private key. not surprised by this incident, because 2020 is full of positive news about crypto.