emmnazady
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 10:00:24 PM |
|
still dint get my teeth, 3 day now.... username : emmnazady paul,please take action.
tq
|
|
|
|
Leesminer
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 10:22:48 PM |
|
Also waiting for my Teeth please user Name Leesminer
|
|
|
|
JusTrynaMakeIt
Newbie
Offline
Activity: 56
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 10:53:55 PM |
|
i am dentist.. i take all fuckin teet! ahaahahahaha!!! ![Grin](https://bitcointalk.org/Smileys/default/grin.gif)
|
|
|
|
VladMcCloud
Newbie
Offline
Activity: 31
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 10:57:24 PM |
|
Still have a zero balance for my TEETH. Username: VladMcCloud
|
|
|
|
pjcltd
Legendary
Offline
Activity: 1778
Merit: 1003
NodeMasters
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:04:13 PM |
|
Server attack (05/05/2015 0830 – 0840am GTM+1
Earlier today, GorillaEx was the victim of a successful attack resulting in a significant loss of GorillaTeeth
This attack did not affect GorillaStake.com at all and was isolated to only GorillaTeeth on GorillaEx, which had a higher than usual balance due to the coin swap. No other coins have been affected
This attack has not affected the exchange's database, users personal information, or any other account. It was isolated to a single account and a user was about to circumvent a withdrawal check thus allowing them to withdraw more coins than they should have. Furthermore, automated protections did step in and protect the bulk of the coin balance. At the time of the attack, more than 30,000 TEETH were in the wallet, meaning more than 2/3rds were protected from withdrawal
Further account audits have verified the user databases and other exchange wallets and services. The server is currently undergoing additional security verifications and will be returned to limited service shortly
We apologize for the inconvenience cause and hope you can understand our actions; our initial response was to protect everything else and deal with the fallout after
All withdrawals will remain suspended until the audit is complete
We basically have a few options at this point:
1) Rollback the GorillaTeeth blockchain, as this was the only coin affected
2) Close GorillaEx and tell everyone to fuck off
3) Ask for it back nicely, offer a fair % in exchange, and the opportunity to help us secure the site
Option number one is out of the question, as I was very vocal about that in the Mintpal situation
Option two is far too common in digital currencies, but not a stance we are ever going to take
Option three is what we are going with. If you are responsible for the attack, we will just ask nicely for you to return the funds and work with us in the future. We will cover the funds ourselves if you do not want to return them, but please don't make us do that; help us make everyone's experience nicer and more secure
Paul's return address for GorillaEx is - GcnBg6ZDJUcbmG8e86EaSZGxmM6KXtpfak - Please do the right thing, or we will cover it ourselves
|
|
|
|
freedomsr40
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:11:11 PM |
|
so are the coins we lost safe???i had about 275.... i really cant afford to just lose those...
|
|
|
|
pjcltd
Legendary
Offline
Activity: 1778
Merit: 1003
NodeMasters
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:12:32 PM |
|
so are the coins we lost safe???i had about 275.... i really cant afford to just lose those...
if the coins are not returned they will be replaced
|
|
|
|
pjcltd
Legendary
Offline
Activity: 1778
Merit: 1003
NodeMasters
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:14:04 PM |
|
I'm not going anywhere guys
Well it's 00:13 here I'll be back at 7:am gmt +1 So I'm off to bed
|
|
|
|
fonzerrellie
Legendary
Offline
Activity: 1190
Merit: 1000
Kaspa
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:17:59 PM |
|
WoW what a pathetic hater that would do that... gee someones scared of TEETH? or wanted them so bad that they do something so pathetic like that.
|
#Expanse $EXP 500 transactions 4 .1 EXP 1st Clone of ETH WAVES
|
|
|
drays
Legendary
Offline
Activity: 2576
Merit: 1073
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:25:09 PM |
|
As the malicious transaction was just few hours or minutes ago, maybe its not too late to hardfork the blockchain at some older point, so the transaction of the thief gets invalidated..?
|
... this space is not for rent ...
|
|
|
Troublesome96
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:25:57 PM |
|
WoW what a pathetic hater that would do that... gee someones scared of TEETH? or wanted them so bad that they do something so pathetic like that.
Maybe it was someone disgruntled with the 1teeth tx fee? Maybe it was someone who was on vacation or saved their balls/10k for a rainy day and came back to see that the did not make the cutoff? I am more concerned with the exploit itself. Is this a common exploit (bc I have heard of something similar a few times)? If it is fairly known, or a similar method thereof, why was this not already secured against? Sidenote: I believe that igotspots should cover it all...why? Because he personally vouched for this exchange and he was the largest (or close) snowballs holder. If he brings some innovation to TEETH that the market likes/needs then he would be made whole again by what he has left and paid jobs in the crypto space. Just my two cents.
|
|
|
|
Troublesome96
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:29:25 PM |
|
As the malicious transaction was just few hours or minutes ago, maybe its not too late to hardfork the blockchain at some older point, so the transaction of the thief gets invalidated..?
That sounds good to me assuming necessary checkpoints exist, but the post was rather cryptic as to when it actually happened.
|
|
|
|
jc12345
Legendary
Offline
Activity: 1638
Merit: 1013
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:39:44 PM Last edit: May 05, 2015, 11:50:51 PM by jc12345 |
|
If you roll back the blockchain you will not be setting precedent as the precedent was set with Mintpal. There is no need to save face because of a previous stance on something. A third of a coin base lost is very significant and the market can be crashed by the attacker at any time. There must be generally accepted rules for a rollback eg. a theft of a certain % of coins eg. 30% or more. People cannot afford to lose such large amounts and the interest of the investors need to be placed first. We are not talking about BTC here and there will probably be a couple of roll-backs in future as well on other coins as the crypto-system is enhanced and made more robust. There is also no regulator yet and in future there will probably be such a body at some time that would need to provide approval for such a step. Also, all alts are part of R&D to build and develop the future digital currency and there will be ****ups along the way.
Ask the attacker to give the funds back by a certain time in order for him to get something out to prevent a roll-back, otherwise do go ahead with a roll-back and the attacker gets nothing. Creating a new exchange is not a trivial thing and coupling that with such a complex swopout makes it even easier for mistakes to be made with the setup and security. **** happens in crypto and lessons are learnt.
You can say about Spots what you want and much of it is probably true and much probably not, but he is doing great work regarding research and development on block chains, staking and economics and he should be allowed to continue with his work. Those that contribute to the research and projects get some profit out of it as well which is win-win. Based on the above I would say do plan A as you did and automatic fall-over to plan B if plan A fails by a certain deadline. However if Spots insists to cover the 30k coins it himself then it is up to him.
|
|
|
|
thc4me
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 93
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:42:31 PM |
|
When I first logged in to collect my teeth, a certificate warning was encountered. The certificate was from btcpool so all was OK. I just tried to access the site and encountered a new warning, the details are: "gorilla.exchange uses an invalid security certificate. The certificate is not trusted because it is self-signed. The certificate is only valid for WIN-BTSM3MS0G9T (Error code: sec_error_unknown_issuer)" Is this some part of the attack or did you install a new certificate. Do not want to try to get into the site until answered.
|
|
|
|
fonzerrellie
Legendary
Offline
Activity: 1190
Merit: 1000
Kaspa
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:42:50 PM |
|
As the malicious transaction was just few hours or minutes ago, maybe its not too late to hardfork the blockchain at some older point, so the transaction of the thief gets invalidated..?
That sounds good to me assuming necessary checkpoints exist, but the post was rather cryptic as to when it actually happened. and any transactions that happened after would become void as well so there would be butthurts from people who paid btc for theirs today. it sounds like they have a plan already, and if the team follows through and replaces it... then I'd consider them to be one of the most upstanding exchanges I've seen thus far in crypto and they will have a loyal customer in me.
|
#Expanse $EXP 500 transactions 4 .1 EXP 1st Clone of ETH WAVES
|
|
|
jc12345
Legendary
Offline
Activity: 1638
Merit: 1013
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:49:54 PM |
|
If you roll back the blockchain you will not be setting precedent as the precedent was set with Mintpal. There is no need to save face becuase of a previous stance on something. A third of a coin base lost is very significant and the market can be crashed by the attacker at any time. There must be generally accepted rules for a rollback eg. a theft of a certain % of coins eg. 30% or more. People cannot afford to lose such large amounts and the interest of the investors need to be placed first.
Ask the attacker to give the funds back by a certain time in order for him to get something out to prevent a roll-back, otherwise do go ahead with a roll-back and the attacker gets nothing. Creating a new exchange is not a trivial thing and coupling that with such a complex swopout makes it even easier for mistakes to be made with the setup and security. **** happens in crypto and lessons are learnt.
You can say about Spots what you want and much of it is probably true and much probably not, but he is doing great work regarding research and development on block chains, staking and economics and he should be allowed to continue with his work. Those that contribute to the research and projects get some profit out of it as well which is win-win. Based on the above I would say do plan A as you did and automatic fall-over to plan B if plan A fails by a certain deadline.
they mean 1/3 of teeth on exchange not total. he say only 11000 teeth gone before audit check froze it Ok thats about 10% then. mmm tough call.
|
|
|
|
Troublesome96
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2015, 11:58:22 PM |
|
Is there a blockexplorer up for TEETH?
It would interesting to see when this occurred and how many tx's were used, also, allowing us to follow the coins.
And allow more people to potentially investigate the tx's. Potentially turning up the heat on the culprit and at the very least allowing more eyes. (Especially while some are off to bed)
It also appears that c-cex locked down their teeth market as well.
|
|
|
|
fonzerrellie
Legendary
Offline
Activity: 1190
Merit: 1000
Kaspa
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 06, 2015, 12:03:13 AM |
|
Is there a blockexplorer up for TEETH?
It would interesting to see when this occurred and how many tx's were used, also, allowing us to follow the coins.
And allow more people to potentially investigate the tx's. Potentially turning up the heat on the culprit and at the very least allowing more eyes. (Especially while some are off to bed)
It also appears that c-cex locked down their teeth market as well.
yup they closed it down pretty quick... good job cc ex ![Cool](https://bitcointalk.org/Smileys/default/cool.gif)
|
#Expanse $EXP 500 transactions 4 .1 EXP 1st Clone of ETH WAVES
|
|
|
Troublesome96
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 06, 2015, 12:12:36 AM Last edit: May 06, 2015, 12:32:39 AM by Troublesome96 |
|
As the malicious transaction was just few hours or minutes ago, maybe its not too late to hardfork the blockchain at some older point, so the transaction of the thief gets invalidated..?
That sounds good to me assuming necessary checkpoints exist, but the post was rather cryptic as to when it actually happened. and any transactions that happened after would become void as well so there would be butthurts from people who paid btc for theirs today. it sounds like they have a plan already, and if the team follows through and replaces it... then I'd consider them to be one of the most upstanding exchanges I've seen thus far in crypto and they will have a loyal customer in me. We are unable to see market volume on both exchanges now that they were locked down. And we do not know what time the attacked actually occurred, yet. But over the last 18hrs the volume of both exchanges was very small when compared to the total value of ~10,000 TEETH. Rolling back to the attack time itself and recreating actual trades that occurred since then on both chains might only end up being a 5btc loss or less. Will it take some work, sure...but I believe if actually thought over it might actually be the best case scenario. This would not be a full rollback, just rolling back to the tx before the attack and then recreating trade histories of the 2 exchanges which are off chain (I am guessing less than 50 buy/sells total between the exchanges). I am sure I am missing some details that I hope come as responses so that this may be looked at as a viable option. EDIT: Until then, if anyone has the availability to throw together an explorer or some pull with one of the major explorer sites now would be the time to ask for a pro bono explorer. EDIT 2: From how I am looking at it, with the above proposed rollback, the only thing lost would be btc and it would be limited to how much the thief dumped on the 2 markets combined.
|
|
|
|
|
|