Have you tried to contact kidcratedigger? Might be he thought that was a donation...
I just realized because I didn't read carefully before. Just sent off the email. It is now looking a lot more like a PRNG bug than a malicious hack. |
|
|
|
The key was "generated" on Mar 7th.
Can you sign a message with a private key of 1Bn9ReEocMG1WEW1qYjuDrdFzEFFDCq43F to be sure that you own this private key? Seems to me that your application has bad random number generator. IFLrTIFGi3t8H1zVuKhr4FScU0RUgUWU26U8dpIyCT7XMXB0HmEFJt6ouyBTwpyhOz+3WcydRU7FQauHuyBxZGg= I think it is probable that it is a weak PRNG, but it may be that the device was compromised and altered the PRNG seed in some way. Mostly, I am wondering if the output transactions appear "suspicious", such as going to a mixer, which would imply that the other key owner targeted this address on purpose. The address does have a public label, not set by me, on blockchain.info of "000000" |
|
|
|
The key was "generated" on Mar 7th. Not my site. None of the transactions are mine, except for the input transaction on that date for 2.57~ btc which was initiated by myself by sending coin from localbitcoins. I have verified that I do have the private key by signing then verifying a message with that address. |
|
|
|
Was the wallet you used a recent release? From a new source?
The wallet has been installed on my phone for about a year through Google Play. The version on my phone was up-to-date when I checked it after the theft. |
|
|
|
Actually you should mention the app so people don't happen to lose coins if its a wallet bug.
Exactly, if there is a problem it would be good to know now so we can stop other people losing there bitcoins. It is unfortunate you lost yours but we should try to stop others losing theirs aswell if possible. It would be irresponsible to blame the wallet app publicly if the fault lies in my phone being compromised. I am in contact with support, and would like to give them a chance to figure out the cause and make it right, if they are to blame. So far, they are assuming malware, since they claim they don't have reports of similar problems from other users. If they drop the ball, they will be named. If it is a wallet bug, it must be due to a rare condition and not widespread. |
|
|
|
The only thing that intrigues me here is this : u generated new address and it previously had activity on it, before its creation ?
that shouldnt be possible if theres not something wrong with app.
Yes, apparently that is what happened. It was "generated" within the wallet app a few minutes before sending money to it in the previously mentioned transaction. It was probably was using a flawed RNG when creating the address. A huge red flag should have been the fact that there was activity on an address when you created the address, the fact that funds were spent from the address 100% means that someone else controls the private keys When I created the address, it showed no activity -- likely due to the wallet not be immediately updated with the current block chain information. |
|
|
|
Well what kind of wallet was it already?
I'm extending the courtesy of not naming the wallet, which is popular, until I can determine if it is actually the developer's fault or if my phone has compromised. |
|
|
|
Generate a few addresses and check if they also have previous activity or have you already done that?
I generated 4 more addresses, and none of them had previous activity. DEVELOPERS: When your wallets generate new addresses, you should be putting in a trap that detects if a newly generated address has previous activity, and alert you to the problem which would indicate a weak PNR. |
|
|
|
Where did you use the internet when you got funds or the such? If it was in a public place there is a chance someone may have been sniffing it (I think that is correct terminology ahah) and seen your address and login info there.
Through the Verizon 3G data network. |
|
|
|
where did u get the wallet from ? if downloaded from unreliable source, it could have been infected, and also the more probable version is that your android device
was previously backdoored from some game/app etc.
Again, never rooted. The phone is rather limited in memory, so I'm not in the habit installing or trying out new apps. All the apps that I've knowingly installed come direct from the Google playstore, plus a couple of already-paid-for apps through the Amazon appstore. Other than installing the Amazon appstore's apk file, I have not installed anything on the phone that didn't come through those app stores. The only thing that intrigues me here is this : u generated new address and it previously had activity on it, before its creation ?
that shouldnt be possible if theres not something wrong with app.
Yes, apparently that is what happened. It was "generated" within the wallet app a few minutes before sending money to it in the previously mentioned transaction. |
|
|
|
Is your phone rooted?
Nope. It is a Verizion prepaid Samsung SCH-I200PP currently running android 4.1.2. |
|
|
|
|
I just lost over 2.5 bitcoins.
I used an Android wallet, which I do not want to name just yet, pending the developer's response to the situation.
With the wallet, I generated the new address 1Bn9ReEocMG1WEW1qYjuDrdFzEFFDCq43F then sent 2.57386667 btc from localbitcoins to that address, which is txid 47b689d108a33c05405332169d3a0eb96ded33ce711fcd498ead1ba5e2b72328. This is the only transaction that I initiated with this address.
Later, when planning to move the money to paper wallets, I discovered that this address had previous activity on it, and that most of the money was swept from that address after my transaction confirmed. There are several transactions afterwards which sweep the remaining money out of that address.
I suspect either that this problem is due to a collision from a poor PNR, or it was a malware attack.
Anyone with insight on tracing btc transactions want to comment?
|
|
|
|
It is then also tempting to write out loans to people who cannot pay them necessarily back (I'm not 100% sure, but I think that the risk of default goes with the security). That's blowing bubbles in the mortgage market, and increasing indirectly the price of housing and land.
AIG, considered "too big to fail" sold them default insurance that they weren't "big enough to honor" without the fed bailing them out. Remember, they gave themselves bonuses for pulling off that scam after 2008. |
|
|
|
In the RBD, actually, money isn't printed "just like that", but an asset is chosen to be "monetized". Be it land, stock, gold, whatever. If the RBD is applied honestly, it just looks like as if that asset is taken out of the economy and "destroyed" (stored irreversibly in vaults) in a way, and REPLACED by fiat money. It is as if the asset itself were now enforced to be "money", but that for practical purposes, we use paper instead of physically that asset.
The state could, for instance, just declare that land is legal tender. But it isn't practical to go to the grocery and buy vegetables with 20 cm^2 of land. So in order to make that more practical, the central bank buys up the actual land, and issues paper instead, that is "good for so much land".
This did happen in the time period leading up to 2008. The fed kept interest rates low, to the point where they didn't pay for inflation. Homeowners got home equity loans (converting land to government fiat demand deposits) With all that free-to-borrow money, a bubble formed in the real-estate market, to the point where garbage loans were backed by unrealistic bubble-inflated assets. When the whole thing collapsed, the fed ended up "printing" nearly $4 trillion USD to prop it up. |
|
|
|
Would you want to know if those 7000 coins were coming from the addresses that are part of the BTER heist before you made the purchase or not???
If you say you don't care, then I think you are not being a responsible member of society. You should care and you it is easy to check, so why not do it.
I spend cash money at the grocery store all the time. Never have they asked for the source of the cash, nor my identity, for buying groceries. Legally in the USA, you are not required to report a cash transaction to the government unless it exceeds $10,000. |
|
|
|
But the obvious thing I overlooked: They cant use bitcoin because of its volatility. In their case, they would *need* to keep it "all in bitcoin" with no cashing out to USD, because they have no banking. In that scenario, Bitcoin is not a feasible solution. The only people who can hold Bitcoin these days are speculators.
Chicken and egg problem. If the marijuana industry sees that it is more efficient to deal with bitcoin rather than bricks of currency, and the state government has a self-interest in promoting the new industry, then it will promote the use of bitcoin as legal tender (paying state taxes), easing regulations for non-bank businesses to convert between dollars, etc. Stores will be more interested in using a BitPay-like systems to accept payments since there will be a significant amount of people that work in the marijuana industry that get paid in bitcoin. As a real bitcoin economy develops out of necessity, the bitcoin price will rise and become less volatile when it reaches a new equilibrium. |
|
|
|
That's right. I am also aware that the word is used nowadays to describe paper money.
Fiat paper money and bitcoin both have no value for direct use, that is probably the connection, but bitcoin is not fiat.
Then you do realize that this is an informal and highly inaccurate use of the term, and not the technical definition used by economists. War is peace, my friend. No, the technical definition is what I wrote above. And war is certainly not peace, why would you say that? The technical definition of a fiat currency is a currency with no intrinsic value, is it simply declared to be money (like US Dollars after Nixon's 1971 executive order, like bitcoin) The use of fiat to mean "evil gubmit money" is a colloquialism used by some libertarians with roots in the US Dollar transition from a commodity-backed currency to a fiat currency. "War is Peace" is a snarky example from the novel "1984" of what happens when words are redefined to further political rhetoric. |
|
|
|
For many people marijuana=crime. Yeah well, it's time for that to change. For many people in the early 1990s, internet = some nonsense cyber toy for nerds. Do not forget that the majority of internet traffic in the early years was for the consumption of pornography. |
|
|
|
For many people marijuana=crime. Places where marijuana is legal are very rare. So I would be very cautious in connecting these two things. For average Joe who does not have clue about bitcoin it would be very easy to connect shady substances with illegal sources of money etc. What can lead to bad press for bitcoin...
If you believe in polls, legal recreational marijuana has recently exceeded 50% approval by American citizens. I don't think that number is going down, and there is a significant number of investors getting involved with this new industry. I think this is a limited opportunity for bitcoin. Federal laws prohibit the marijuana industry from using the federal banking system for a federally prohibited substance. If the states of Colorado and Washington (and future legal states) want to protect their new industries and new tax revenue (rather than allowing it to revert to criminal cartels and dealing with government costs of prosecuting and imprisoning users and traffickers) then it would be in their best interests to promote the use of bitcoin within their states. A useful bitcoin economy could gain a foothold outside of the banking system -- until the banking system wants their piece of the pie. With some corporations spending more on federal lobbyists to preserve corporate tax loopholes and lower corporate tax rates than they actually spend on federal taxes, this will come sooner than later. |
|
|
|
That's right. I am also aware that the word is used nowadays to describe paper money.
Fiat paper money and bitcoin both have no value for direct use, that is probably the connection, but bitcoin is not fiat.
Then you do realize that this is an informal and highly inaccurate use of the term, and not the technical definition used by economists. War is peace, my friend. |
|
|
|
|
Show Posts
