Bitcoin Forum
June 23, 2024, 05:01:49 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 25, 2021, 05:54:17 PM
my coins got moved out of the deposit wallet address in this transaction

https://live.blockcypher.com/btc/tx/d2c6417b2fd81d93fad5f7ca32be7f260b6520ca5b1d5956f5c62bcd7e207f74/

@note-message is your tx in here? i see other coins on the merge transaction but I only deposited to one of them
2  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 25, 2021, 04:22:29 PM
Quote from: ChipMixer on January 24, 2021, 11:35:02 PM
Important announcement

There has been successful attack on ChipMixer communication integrity. Small part of traffic to/from ChipMixer.com website has been compromised. Please read on to decide what to do next.

If you are using Tor and .onion to access ChipMixer - you are not affected.

If you are not using Tor and visit .com to access ChipMixer - there is a chance you have been affected. Sweep all chips you have received in last 7 days and treat them as linked with your deposit.

If you are using Tor and .com to access ChipMixer - please stop it and start using Tor with .onion. This is very bad for your privacy and your funds safety. Please read second part of this message. Also there is a chance you have been affected. Sweep all chips you have received in last 7 days and treat them as linked with your deposit.

Details of attack

Over last few days IP address of .com server have been switched to another server for about 30 minutes about 3 times per day. Attacker used it to create valid SSL certificate and then served their own version of service with minor cosmetic changes.
There were four effects:
1. If your session already started - your browser sent your cookies (session token) to attacker and they withdrawn and sweeped your chips.
2. If you created new session - attacker displayed their deposit address and you have never received your chips.
3. If you accessed .com only to get .onion address - attacker displayed their .onion address.
4. If you tried to redeem voucher - it was not redeemed instantly - you should redeem it as soon as possible.
This affected small part of customers and we assume it was motivated to steal Bitcoins not privacy - if you were using .com and were not affected - you should still assume your privacy has been affected.

None of the servers were compromised. Mitigations are in place.

If you are using Tor to access .com - you may be affected by different attack made with Tor Exit Node. At least one of them proxies .com using forged SSL certificate and replaces all bitcoin addresses to theirs.

Looks like a repeat of this, not sure what "mitigations" were in place but they clearly didnt work because there was an SSL certificate issued yesterday for Chipmixer. My funds are still lost and no reply from admin.
3  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 25, 2021, 04:15:30 PM
SSL Certificate is changing on the clearnet website.....

https://i.imgur.com/Uj5smma.png
https://i.imgur.com/eO7oKbv.png

Why would the expiration date / signature change? There is no way that a faulty browser extension could fake an SSL certificate. I validated both certificates with letsencrypt and both are good.
4  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 25, 2021, 02:04:39 PM
Reading up in the thread there was a previous incident with an SSL certificate change. I just checked and the SSL certificate was different than the one I was issued for my transaction.

I took these screenshots a while ago



Go check the site now, the expiration dates and signatures are different

Not sure why they would be flipping between valid SSL certificates and selectively scamming on one cert.
5  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 25, 2021, 03:01:06 AM
I checked SSL, domain etc... as usual. All checked out, I didnt look at page source though but visually it looked fine. No reply yet, but I read the thread up and they seem to have a good reputation for solving customer problems. Still think members should be on alert that the mixer may be currently broken.
6  Economy / Service Announcements / Re: [ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented on: September 24, 2021, 10:49:45 PM
CAUTION ON CHIPMIXER - POTENTIAL EXIT SCAM

Just submitted a TX a few hours ago and still no chips from chipmixer. Big amount, concerned about an exit scam here. I have emailed support but just want to make other members aware to use this site with caution.

TX has 10+ confirms on the network and the session token isnt showing any coins + the deposit address changed.

It would make sense for them to exit scam on a very large TX like this (>2.5BTC)
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!