Hi all,
Done.
Hello,
I see that my withdrawal address has changed. Now I already changed it to my address. But I that withdrawal is "in progress" to a wrong address. Is it possible to cancel withdrawal?
Yes, we will fix it. Please send us your login via our on-site support widget if you haven't done it yet.
I'm aware there's a tech difficulty right now, and that you might be very busy working on solving it, but a lot of people have contacted me in the last 24 hours (and panicking) asking if I could contact you and ask you if you'd be able to allow them withdraw their funds to faucethub.io.
It would literally take you 10-30 minutes to add the API. Assuming this is faster than fixing the current situation.
If this is something you'd like to do, please PM me and I'm going to help you integrate it ASAP.
Thanks for contacting us. We have it in our plans, but this is not a top priority task at the moment. The real problem is not of pure technical nature. Some user accounts got compromised and we have intentionally frozen bitcoin withdrawals to give our users a chance to check their bitcoin addresses and fix them / contact support in case of a problem.
Hey, I think you should add a 2FA to the system in order to make accounts safer until you fix the problem.
Also please keep us updated on the status of the attack, and let us know if passwords were somehow leaked or it was a bug in the system; I'm sure many users will be concerned
Thanks for your advice. Yes, we should add a 2FA. In the good old days bitcoin transactions were cheap and we were auto-withdrawing micro-amounts to our users pretty often, there was almost nothing to steal. But now due to the increased bitcoin fees we are forced to keep a noticeable amount of users' money on their accounts and hence we have to take additional measures to protect them.
Regarding the status of the attack, due to a misconfiguration on our side the attacker was able to gain access to some of the user accounts. The passwords of the affected accounts probably haven't been compromised but could be altered (as well as withdrawal addresses).
We plan to fix the withdrawals, resume payments and provide a detailed report on the incident by the end of Monday.
Thank you for your patience!