Alitin Mint Coin Breach

[msin]

Lol, wait so if i steal hundreds of thousands of dollars worth of bitcoin, im under no obligation to give it back other than by courtesy. 

lol, you must be new here, ever heard of MtGox? Since you don't have skin in this game, go spend your time elsewhere.

Cool, noted.  So every man for themselves, if you got no skin in the game move along gotcha.  Glad we cant all stand up together we should just nik it out on our own.  Glad you got your funds back, but i think someone needs to stand up for the people that dont come on here every week, or rather meh, fuck them i got mine. Good luck to everyone i hope this all gets resolved well, later

Okay drama queen. Next time don't enter a thread making assumptions on who's responsible. Because that's exactly what you just did. You're not sticking up for anyone, you're coming in making comments without facts, maybe that's what you consider "standing together."

[1714182028]

1714182028

[1714182028]

1714182028

[1714182028]

1714182028

[1714182028]

1714182028

[zanzibar]

So a handful of people have been repaid the 2 BTC that was stolen from you. That's great, but you are still out hundreds of $'s in premium that you paid for your coin.  Meanwhile the physical bitcoin industry is left with a black eye over this event, and will likely discourage people buying funded coins from the many competent makers out there.  

We still have zero answers as far as how this could have happened, how many were impacted, and whether the rest of the keys are vulnerable.  This is either blatant theft, or criminal negligence. Either way, the last thing you guys should be doing is praising these people.  

For Alitin, this seems like a great way to spend $20-30K in good will making a few active collectors happy while riding off in the sunset with $100K+ in stolen bitcoins.  

Or they could be repaying to protect their reputation and to make things right, no one knows. It sucks all around, but most of these people bought when BTC was in the $200s-$300s, so at least they getting face value refunded at a much higher value.

[wheelz1200]

Lol, wait so if i steal hundreds of thousands of dollars worth of bitcoin, im under no obligation to give it back other than by courtesy.

lol, you must be new here, ever heard of MtGox? Since you don't have skin in this game, go spend your time elsewhere.

Cool, noted.  So every man for themselves, if you got no skin in the game move along gotcha.  Glad we cant all stand up together we should just nik it out on our own.  Glad you got your funds back, but i think someone needs to stand up for the people that dont come on here every week, or rather meh, fuck them i got mine. Good luck to everyone i hope this all gets resolved well, later

Okay drama queen. Next time don't enter a thread making assumptions on who's responsible. Because that's exactly what you just did. You're not sticking up for anyone, you're coming in making comments without facts, maybe that's what you consider "standing together."

Fine you win, typical.    Moving on then and will forget this even happened, seems thats gonna be the way anyway

Edit: "making assumptions on who's responsible", either by way of thievery or negligence i know EXACTLY who is responsible.

[bitenvy]

So a handful of people have been repaid the 2 BTC that was stolen from you. That's great, but you are still out hundreds of $'s in premium that you paid for your coin.  Meanwhile the physical bitcoin industry is left with a black eye over this event, and will likely discourage people buying funded coins from the many competent makers out there.  

We still have zero answers as far as how this could have happened, how many were impacted, and whether the rest of the keys are vulnerable.  This is either blatant theft, or criminal negligence. Either way, the last thing you guys should be doing is praising these people.  

For Alitin, this seems like a great way to spend $20-30K in good will making a few active collectors happy while riding off in the sunset with $100K+ in stolen bitcoins.  

I had attempted to get the FULL refund for coin paid.  And, they refused.  And, I was the one who noticed the funds stolen and notified them of this.  I guess I'm the bad guy again reporting this to them and ruining their reputation.      It's rather pathetic that it was stolen by an "insider" and I get only "face value" back.  Yes, I got something.  I'm happy for that.  But, we still don't know what happened and afraid we may never know... 

[klaaas]

Or they could be repaying to protect their reputation ....

Reputation was gone with the first post., A coinmakers reputation is a trust thing.

[BurtW]

So a handful of people have been repaid the 2 BTC that was stolen from you. That's great, but you are still out hundreds of $'s in premium that you paid for your coin.  Meanwhile the physical bitcoin industry is left with a black eye over this event, and will likely discourage people buying funded coins from the many competent makers out there.  

We still have zero answers as far as how this could have happened, how many were impacted, and whether the rest of the keys are vulnerable.  This is either blatant theft, or criminal negligence. Either way, the last thing you guys should be doing is praising these people.  

For Alitin, this seems like a great way to spend $20-30K in good will making a few active collectors happy while riding off in the sunset with $100K+ in stolen bitcoins.  

I had attempted to get the FULL refund for coin paid.  And, they refused.  And, I was the one who noticed the funds stolen and notified them of this.  I guess I'm the bad guy again reporting this to them and ruining their reputation.      It's rather pathetic that it was stolen by an "insider" and I get only "face value" back.  Yes, I got something.  I'm happy for that.  But, we still don't know what happened and afraid we may never know... 

I feel very happy/lucky to get my BTC back and I also got to keep the silver coin, which is still a work of art.  As we all know usually the outcome is that everyone gets shafted and never sees their BTC again.  That has happened to me many times to the tune of a lot of BTC.  To have a business, who has already closed up shop due to lack of sales, come back and even try to make things right is a breath of fresh air in this cesspool of scammers that gravitate to Bitcoin.

BTW I am not praising their security measures - they most obviously sucked at that.  What I am praising is their response to the theft.  It has been wonderful.  Light years ahead of the next best response that I personally endured - Bitfinex "spreading the pain" among all their customers.  Now, to be fair, Bitfinex is paying us all back over time out of their profits and own pockets and I appreciate that.  But here we have an immediate response and and immediate settlement.  Totally cool.

[coins101]

It would be interesting to know a little more about the process for creating the public / private keys.

It could be that the thief is an insider, or that someone has figured out how to attack a number generator for a particular connected chain.

[buckrogers]

It would be interesting to know a little more about the process for creating the public / private keys.

It could be that the thief is an insider, or that someone has figured out how to attack a number generator for a particular connected chain.

As most respectable coin makers wil tell you, you should never retain any copies of the private keys, and they should be destroyed after they are applied, so something like this would not be possible.

Plus the computer you are generating these keys with should NEVER touch the internet.

So a "connected" chain is a very bad idea.

thanks!

[defcon23]

It would be interesting to know a little more about the process for creating the public / private keys.

It could be that the thief is an insider, or that someone has figured out how to attack a number generator for a particular connected chain.

[quote

As most respectable coin makers wil tell you, you should never retain any copies of the private keys, and they should be destroyed after they are applied, so something like this would not be possible.

Plus the computer you are generating these keys with should NEVER touch the internet.

So a "connected" chain is a very bad idea.

thanks!

Thank you for this comment. that's really kind and appreciated.

you are right : all is based on what OP said ...   that's all.   so , if he need to refund few more guys  to have "few more guy who trust him" .... let's do this !   damn : if all precautions were taken, no problem were happend !    is private keys were properly destroyed or NOT ?

[msin]

Is there any progress on who is responsible?

[Zepher]

Is there any progress on who is responsible?

I have failed to get any more information than is already posted on this forum.

I want this list of 600 addresses published. I (and others) want to know exactly how many coins were affected. The fact that they are not doing this makes me believe there are more than ~60 coins/10% affected.

[defcon23]

Is there any progress on who is responsible?

I have failed to get any more information than is already posted on this forum.

I want this list of 600 addresses published. I (and others) want to know exactly how many coins were affected. The fact that they are not doing this makes me believe there are more than ~60 coins/10% affected.

yeah .. true  : as you can see they are even still for sale around few places on the web .... lol


IE: https://www.cryptodechange.com/product/alitin-silver-adam-smith/



i'm curious to see what would happen in case of buying some ....  

[Ticked]

To my knowledge, this is the first time that pictures of these coins have been released. I have been given permission to post these, so you guys looking now are the first to see them.

Look at this freshly minted 2BTC, 2oz silver coin with Adam Smith, father of modern economics:

Security Schematic: https://www.alitinmint.com/Images/Schematic.png



Heads:


Tails (Simulated Bitcoin Address):


Feedback welcome!

Forgot to mention that they will publish all of the bitcoin addresses online and a status for each coin. Around 50 have been pre-sold. I am buying 5 myself.

They publish all of the public addresses on their website as they ship them. I got an early one because I am related to the artist and because I bought a larger amount.

I've been doing some digging.  This account rubs me the wrong way.  He posted information/photos about Alitin releases several times that was NEW information to the public.  What other coin producer doesn't do their own advertising? Strange, at the least.

ALL of his photos have been removed.  These photos (above and more in his post history) were available on 03/09/16. I'm sorry I didn't take screenshots of this.  I reviewed everything with "Alitin" in this forum tagged in it when the news of the breach hit me, you'll have to take my word for it, unless there's a better solution to proving this - if necessary. 

And the last two quotes above drive their own questions...  Where did this information come from? What happened to this list? Did it ever exist?

I don't know what else to do. I don't like driving a witchhunt, but something is weird here.

[digicoinuser]

IMO, a public address list for a coin release should be PUBLIC and posted somewhere for users to verify. 

I'm assuming there is some reason the list isn't shared yet and hopefully it's a good one.

[msin]

yeah .. true  : as you can see they are even still for sale around few places on the web .... lol

IE: https://www.cryptodechange.com/product/alitin-silver-adam-smith/

i'm curious to see what would happen in case of buying some ....  

cryptodechange bought those directly from Alitin unfunded. He was sending BTC to the address before sending the coins out to people who purchased them. I think he is selling some of them unfunded if interested.

[defcon23]

yeah .. true  : as you can see they are even still for sale around few

""This is the first coin produced by Alitin Mint with only 600 produced! Each coin comes in a well presented display case along with a certificate of authentication, which is personally signed by Alitin administration. The private keys are engraved along the edging of the coin which is concealed and protected in a tamper proof case. Coins will be funded with 2.0 BTC by Crypto de Change upon delivery confirmation, as agreed with Alitin Mint.""

places on the web .... lol

IE: https://www.cryptodechange.com/product/alitin-silver-adam-smith/

i'm curious to see what would happen in case of buying some ....  

cryptodechange bought those directly from Alitin unfunded. He was sending BTC to the address before sending the coins out to people who purchased them. I think he is selling some of them unfunded if interested.

ah ...; thank you for those clarifications then..

Edit:


yup: you're right , was missing this part :

""This is the first coin produced by Alitin Mint with only 600 produced! Each coin comes in a well presented display case along with a certificate of authentication, which is personally signed by Alitin administration. The private keys are engraved along the edging of the coin which is concealed and protected in a tamper proof case. Coins will be funded with 2.0 BTC by Crypto de Change upon delivery confirmation, as agreed with Alitin Mint.""

so: it become urgent to finaly have a clear listing...

[teeGUMES]

yeah .. true  : as you can see they are even still for sale around few places on the web .... lol

IE: https://www.cryptodechange.com/product/alitin-silver-adam-smith/

i'm curious to see what would happen in case of buying some ....  

cryptodechange bought those directly from Alitin unfunded. He was sending BTC to the address before sending the coins out to people who purchased them. I think he is selling some of them unfunded if interested.

actually he waits til you received the coin and confirmed it was in good condition. I had one in the mail and received it two days after the theft. Thankfully cryptodechange refunded my 2btc immediately after we saw the thread.

[OgNasty]

IMO, a public address list for a coin release should be PUBLIC and posted somewhere for users to verify. 

I agree.  I've tried to push for this to be the standard for quite some time now.  Buyers should really consider things like this when making their purchases.  If you can't trust the coin maker to be transparent about their liability, how can you trust them to keep your funds safe?

[zanzibar]

IMO, a public address list for a coin release should be PUBLIC and posted somewhere for users to verify. 

I agree.  I've tried to push for this to be the standard for quite some time now.  Buyers should really consider things like this when making their purchases.  If you can't trust the coin maker to be transparent about their liability, how can you trust them to keep your funds safe?

To me it's starting to look like the founders were involved and assume that most buyers haven't checked their coins or aren't present here.

[Zepher]

They have done their bests to refunds the one that where ripped. and OP was kind by email.

(I don't even have the impacted serie, but another product they made after.)

~snip~

Which product are you referring to, if you don't mind? The Joan of Arc Coin, or is there something else that none of us are aware of..?

IMO, a public address list for a coin release should be PUBLIC and posted somewhere for users to verify. 

I have a feeling we will never see this list of 600 addresses. Enough requests have been made now.