Bitcoin Forum
June 19, 2024, 06:43:21 PM *
News: Voting for pizza day contest
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: New Bug on Cryptsy allows users to withdraw {100.00000001Btc}  (Read 1283 times)
vuulo (OP)
Newbie
*
Offline Offline

Activity: 12
Merit: 0


View Profile
July 20, 2015, 04:41:44 PM
 #1

After playing around with cryptsy  auto exchange api i found a bug this afternoon that allows users to withdraw 1.00000001Btc after executing a forced trade with the database...

Unfortunately this bug seems to be a loophole and works for users who trade bitcoin against litecoin ...

The bug allows users withdraw 100.00000001Btc after completing a trade on the Ltc/Btc exchange page at Market: LTC/BTC (ID: 3)...

the bug is being executed by selling Ltc for Btc... in the Price Per LTC box erase the whole set of digit that appear there and paste in 0.00000001 ,Then paste 100.00000001 in the Amount LTC box after this click Submit Sell Order and you'll get a pop up that says

IMPORTANT PRICE ALERT!

Your SELL price of
0.00000001 BTC
is lower than the current top buying price of
0.01370000 BTC
All Trades Execute At Best Possible Price

once the pop up appears click This is Correct - Continue.
then you get a trade completed popup...refresh the page and you go straight to the balance page where you'll select bitcoin and withdraw bitcoin in the  Amount BTC (Min: 0.01000000 Max: 300)
 which asks the amount of bitcoin you want to withdraw simply paste in 100.00000001 the the Net Withdrawal will change to 99.99900001 BTC,immediately after this input your bitcoin wallet address and password then enter the captcha correctly then click Process Withdrwal...and there you are you've gotten 99.99900001 BTC sent to your bitcoin wallet...for this bug to work you must have at least 105 litcoins in your wallet....
ocminer
Legendary
*
Offline Offline

Activity: 2660
Merit: 1240



View Profile WWW
July 20, 2015, 04:44:45 PM
 #2

lol nice, you want ltc, huh Smiley at least 100.., not bad Smiley

EDIT: As soon as you click on "Yes, this is correct", you LOST your LTC (you sold it for 0.00001...)

suprnova pools - reliable mining pools - #suprnova on freenet
https://www.suprnova.cc - FOLLOW us @ Twitter ! twitter.com/SuprnovaPools
leps
Hero Member
*****
Offline Offline

Activity: 918
Merit: 1001


View Profile
July 20, 2015, 04:45:45 PM
 #3

i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?
ocminer
Legendary
*
Offline Offline

Activity: 2660
Merit: 1240



View Profile WWW
July 20, 2015, 04:46:01 PM
 #4

i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above

suprnova pools - reliable mining pools - #suprnova on freenet
https://www.suprnova.cc - FOLLOW us @ Twitter ! twitter.com/SuprnovaPools
leps
Hero Member
*****
Offline Offline

Activity: 918
Merit: 1001


View Profile
July 20, 2015, 04:47:33 PM
 #5

i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above

Was writing same time:)
I dont think ppl with 100ltc buy this scan attempt and i hope they wont believe it:)
vuulo (OP)
Newbie
*
Offline Offline

Activity: 12
Merit: 0


View Profile
July 20, 2015, 04:48:53 PM
 #6

lol nice, you want ltc, huh Smiley at least 100.., not bad Smiley

EDIT: As soon as you click on "Yes, this is correct", you LOST your LTC (you sold it for 0.00001...)

Just try it and you see it's a bug that's a unfixed loop of the previous cryptsy orderbook bug...i found this info in an underground forum...blackhat tho.
ocminer
Legendary
*
Offline Offline

Activity: 2660
Merit: 1240



View Profile WWW
July 20, 2015, 04:49:09 PM
 #7

i dont really get it but to me it looks like you are trying to make people sell their ltc for 1ltc=1 sat..Am i wrong?

yep, see my post above

Was writing same time:)
I dont think ppl with 100ltc buy this scan attempt and i hope they wont believe it:)

Hopefully, yes...

suprnova pools - reliable mining pools - #suprnova on freenet
https://www.suprnova.cc - FOLLOW us @ Twitter ! twitter.com/SuprnovaPools
samspaces
Legendary
*
Offline Offline

Activity: 1453
Merit: 1030


View Profile
July 20, 2015, 04:59:23 PM
 #8

We'll find out if greed makes blind.
BitcoiNaked
Sr. Member
****
Offline Offline

Activity: 456
Merit: 250


View Profile
July 20, 2015, 05:06:10 PM
 #9

Why is this piece of shit scammer not banned yet?
tiggytomb
Legendary
*
Offline Offline

Activity: 1848
Merit: 1000


View Profile
July 20, 2015, 05:07:31 PM
 #10

If this is a bug and actually does work which I doubt, the right thing to do would be to notify Crypsy of this issue surely? Otherwise this is simply stealing and you end up beng no better then all the scammers out there.  Also if this worked why would you want to shsre this and not just keep repeating it yourself.

People please don't fall for this.
bitspill
Legendary
*
Offline Offline

Activity: 2086
Merit: 1015



View Profile
July 20, 2015, 05:12:24 PM
 #11

Even if the sell price is set to .00000001 btc the trade will occur at the highest buy order or approximately 0.0136 btc currently however dumping 100 ltc wouldnt even change the price much.

{ BitSpill }
talkbitcoin
Legendary
*
Offline Offline

Activity: 1372
Merit: 1032


All I know is that I know nothing.


View Profile
July 20, 2015, 06:05:27 PM
 #12

give us screen shot or it didn't happen.

you want others to sell their LTC at 1 satoshi for a fake bug!!

......
.L I V E C O I N . N E T.
.
..PROFITBOX..
██  █████████████████████████
  █████████▄      ▄██████████
█████████████▄  ▄████████████
    █████████████████████████
  ██████████▀    ▀█ ▀████████
████  █████▀  ▄▄  ▀█  ▀██████
  ████████▀  ▄██▄  ▀█   ▀████
    ██████   ▀██▀   ██   ████
  █████████▄      ▄██████████
██  █████████▄  ▄████████████
  ███████████████████████████
██  █████████████████████████
  █████████████████████▀ ███
█████████████████████▀   ███
    █████████████▀     ████
  █████████████▀   ██    ████
████  █████▀     ██    ████
  ███████▀   ██    ██    ████
    █████    ██    ██    ████
  ███████    ██    ██    ████
██  █████    ██    ██    ████
  ███████████████████████████
.....
Raskal
Member
**
Offline Offline

Activity: 67
Merit: 10

A Fools Paradise Is A Wise Man's Hell


View Profile
July 20, 2015, 06:16:55 PM
 #13

LMMFAO...

This is a new one, however you get an F- for effort in creating this scam...

Atleast photoshop some cryptsy screenshots or fake some wallet transactions, something...

I know we're all a bunch of morans here but you didn't even try very hard...

Hey guys I can turn 1.37btc worth of litecoin into 100btc but out of the kindness of my heart I will publicly tell everyone how to do it so cryptsy will discover and close the FAKE loophole...

WHAT A DUMBASS, I'M SURPRISED YOU WERE SMART ENOUGH TO MAKE A FAKE BTCTALK PROFILE TO POST THIS AND NOT JUST USE YOUR REAL ACCOUNT...
Sparood
Full Member
***
Offline Offline

Activity: 170
Merit: 100


View Profile
July 20, 2015, 06:19:31 PM
 #14

Wow thanks for the tip, this really works!!!

mullick
Legendary
*
Offline Offline

Activity: 1064
Merit: 1002


View Profile
July 20, 2015, 06:52:30 PM
 #15

I received this ticket. Tried to replicate on our dev cluster. And I could not. I believe the user is trying to get people to sell LTC
wlefever
Legendary
*
Offline Offline

Activity: 1174
Merit: 1001



View Profile
July 22, 2015, 03:00:00 PM
 #16

Even if the sell price is set to .00000001 btc the trade will occur at the highest buy order or approximately 0.0136 btc currently however dumping 100 ltc wouldnt even change the price much.
+1

NorrisK
Legendary
*
Offline Offline

Activity: 1946
Merit: 1007



View Profile
July 23, 2015, 01:11:37 PM
 #17

I received this ticket. Tried to replicate on our dev cluster. And I could not. I believe the user is trying to get people to sell LTC

Good thing that you checked this out, would be very bad if it for some reason was working..

TS is probably a daytrader trying to use this to force the price down a little to enter again.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!