Poloniex account hacked and all monies traded away,TICKET NUMBER #271818

[fistfullofbtc]

surely your account details have been compromised. have you scanned your computer, checked for any network leaks, do other people have access to your computer etc. lets be honest all that effort for 17k, polo makes millions a day.

[1714550223]

1714550223

[1714550223]

1714550223

[Peanutbutterpolka]

In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?

[arsat14]

In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?

My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?

[alyssa85]

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

In that case it should be easy for Poloniex to establish who the culprit is. If BCN is very illiquid and the culprit was on the other side of the trade, there can't be many people trading it so it's just a case of them going through the ledger and working out who set the orders on the book. If they too had a Japanese IP address, then that's your man (or woman).

[not.you]

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

In that case it should be easy for Poloniex to establish who the culprit is. If BCN is very illiquid and the culprit was on the other side of the trade, there can't be many people trading it so it's just a case of them going through the ledger and working out who set the orders on the book. If they too had a Japanese IP address, then that's your man (or woman).

I agree with this.  Polo should be able to discover the account on the other end of the trades.  They may also be able to get IP records showing both accounts were trading from the same IP but if the thief used a VPN and two computers side by side that may not be the case.  The biggest problem I can see though is getting any response from polo in anything like a timely manner.  The forum is full of people with problems that polo is ignoring.  If the thief has his withdrawal "on hold" as so many others do, then there is a very small chance that polo could prevent that withdrawal and recover something.  But that all depends on them actually looking at what happened close enough to be convinced it was a theft and not a series of legitimate trades.  It sounds like if they have half a brain it should be evident.  But again, all of this requires them to even begin responding to your communications or support tickets which right now looks like it just isn't happening for anyone.

You should give some thought as to how the thief obtained your password.

[aziernest]

I would like to know the outcome of this support ticket, also whatever you do, and how quickly they responded?

[alyssa85]

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

In that case it should be easy for Poloniex to establish who the culprit is. If BCN is very illiquid and the culprit was on the other side of the trade, there can't be many people trading it so it's just a case of them going through the ledger and working out who set the orders on the book. If they too had a Japanese IP address, then that's your man (or woman).

I agree with this.  Polo should be able to discover the account on the other end of the trades.  They may also be able to get IP records showing both accounts were trading from the same IP but if the thief used a VPN and two computers side by side that may not be the case.  The biggest problem I can see though is getting any response from polo in anything like a timely manner.  The forum is full of people with problems that polo is ignoring.  If the thief has his withdrawal "on hold" as so many others do, then there is a very small chance that polo could prevent that withdrawal and recover something.  But that all depends on them actually looking at what happened close enough to be convinced it was a theft and not a series of legitimate trades.  It sounds like if they have half a brain it should be evident.  But again, all of this requires them to even begin responding to your communications or support tickets which right now looks like it just isn't happening for anyone.

Ha Ha! This might be the one time Polo's delays actually benefit a customer!

[xhienigat]

That's scary and the fact that he/she was toying your account in Poloniex too. Didn't you put like a security something on your Poloniex account though like a 2fa? I feel bad for your loss but I doubt Polo would be able to return back your losses, I do hope they get to find out from where or what IP address was used to hack your account.

[Peanutbutterpolka]

My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.

In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?

My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?

[Mr_Snipes]

In the eye of all these breaches i think it would make sense to open a warning-thread for poloniex and make it a sticky.
So many ppl who prob come here and read that 2fa could have saved them after it happened ...
My mail was compromised and thank god i had not used poloniex for anything yet.
Someone hacked into the servers or someone from the inside screws all those people - i am sure.
At this point the exchange has already burnt its reputation - just search for poloniex in this forum - full of ripoffs and successful logins from japan or china or usa.
Maybe we will see a crypto price drop soon when this exchange is burning to the ground ...

[arsat14]

My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.

No, they have not made any effort or gotten back to me yet, I have been constatnly sending them emails, and raised a ticked 4 days ago!

[fistfullofbtc]

I know someone started a website when there was a glitch saying polo stole money. the website went down after a week so i guess he was paid off.

you could start a class action in the usa, even the threat might spur them to investigate. have tiy tried twitter facebook,, they are making 10s of millions a day.

[arsat14]

Thanks, I am thinking of taking some legal action, problem is i am based in London and all my savings (17000) is gone

[Jaerin]

Thanks, I am thinking of taking some legal action, problem is i am based in London and all my savings (17000) is gone

Except that you can't prove that you didn't just use a VPN to do it yourself.  This is the problem unless you can get some evidence of a specific person doing this then you are just as much a possible suspect as anyone else.  In fact you are likely more of a suspect because you had access to the password already.  Can you see why this is going to be a problem?

Internet transactions and connections are inherently risky.  Poloniex is NOT the custodian of your account, you are.  YOU alone are responsible for the security of your account and password.  That information very well can be compromised from a Poloniex database, but you are still responsible if there are losses incurred. 

If you brought a case against them you would need to be able to prove that Poloniex was hacked and you have no way to do that.  If Poloniex at some point announced their database had been compromised then you might have the ability to bring a case.  If not you would need to get enough potential victims together to convince a judge or attorney general that there was something bigger going on to issue a search warrant or evidentiary discovery of logging data then MAYBE you might find the info you needed to potentially prove a case.  The problem is you will need likely at least 5-10+ victims totalling enough money to convince a lawyer willing to bring such a case against them.  In the end though their defense has the simple task to say that you made the choice not to protect your account using all means available to you and they have done all their legal due diligence by providing multi-layer protections to prevent unauthorized access and you chose not to use them, therefore you are at fault.

You're going to have to throw more money at the problem to even have a semblance of a chance to get this moving.  It sucks that this happened and I'm sorry to hear about it, but this was a risk you took, not Poloniex.

[dissident]

How are these people getting into these accounts so easily?  Do that many people really have trojans on their computer?   Is it that easy to phish or brute force a password without 2 factor authentication enabled?  Even without 2 factor authentication my passwords are 15+ character random ASCII generated from grc's password generator. (Example password:  PJZO@w#(P/fZ75"rXAg) I haven't had any attempts to access my account much less somebody who got ahold of the password, and even then they would need 2 factor authentication.

Does poloniex have a limit to your number of attempts?  A way to curb this would be 5 unsuccessful password attempts on any given account per day.

[trade-and-train]

Hi Guys,

First of please be nice and constructive. I had my fortune stolen away and I am at a very bad place, infact I am depressed ($17000 worth of my savings that took me more than 8 years to save). I would appreciate if you guys can give me honest suggestions of what to do or if there is any chance Poloniex will refund me for the hack that happened.

So here is what happened as I sent email to Poloniex but they have not responded to me yet:

TICKET NUMBER # 271818

Dear Poloniex,
My account was hacked this morning at 2:50 am BST (british standard time). I am devastated as I had upwards of $17000 worth of portfolio of coins. Someone logged into my account, converted all the coins to BTC first, then to BCN, then he went on to a very illiquid BCN/XMR and started buying high and selling very low at huge spreads. I suspect he was on the other side of the trade to profit from it. I am sure you can easily find out who the culprit by checking on the other side of the trade.
Please check the activity between 2:50 am - 3:00 am BST (british standard time). This is a clear theft where your site has been hacked to gain access to my account and upwards of $17000 was stolen from my account.
I have contacted the Attorney General at your state who has advised me to contact you directly first before taking it further with him.
I have the evidence of the email I received at 2:50 am BST, the ip address where it was logged in from and I have also downloaded the transactions to prove it.
Please look into this issue asap and get back to me please. This is my hard earned savings over past 7 years and I will leave no stone unturned to get this resolved.
Thanks

So here is the email above. Please suggest what to do, I have also reported it to Police and action fraud. I did not have 2FA. I did not use this password on any other sites.
I know I am very silly not to have 2FA. This thread is all about what options I have, please suggest.

Thanks in advance


HERE IS HOW THE ATTACK UNFOLDED

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

STEP 1: CONVERTING ALL MY COINS TO BTC

Date   Market   Category   Type   Price   Amount
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010483   1590.715688
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010413   448.875
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.0001041   1805.496701
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010409   3144.41261
26/06/2017 02:55   DASH/BTC   Exchange   Sell   0.06699959   0.89588201
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002954   335.598172
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000295   774.6756601
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002931   3.41180585
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000293   3.41297029
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002925   341.8808419
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002923   3.42114367
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002922   3.42231449
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002921   3.42348611
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000292   3.42465854
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002919   3.42583177
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002918   3.4270058
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002917   3.42818064
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002916   3.42935629
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002915   3.43053274
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002913   3.43288806
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002912   3.43406694
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002911   3.43524663
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000291   3.43642712
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002909   3.43760843
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002908   3.43879055
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   3.43997349
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   4467.303294
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158738   484.8682556
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158737   313.9317444
26/06/2017 02:56   XRP/BTC   Exchange   Sell   0.00010416   999.6340003
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540007   3.25036868
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540006   7.1795983
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540001   5.2431235


STEP 2: EXCHANGE BTC FOR BCN

Date   Market   Category   Type   Price   Amount
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   59272.84047
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   178.1245725
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   13321.02993
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   69900
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   80995.4
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   120185.7244
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   602409.6386
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   367221.477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   26745.53571
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   44136.3825
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   34648.81477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   131.5789474
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   4647.389196
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   654545.0659
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   218000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   185.4027405
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   26623.01727
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   986.5
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1322
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   412161.8432
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   150.0663717
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   378442.6232
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   175000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   14621.3292
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   91423.83194
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1538148.525
26/06/2017 02:57   BCN/BTC   Exchange   Buy   0.00000114   315275.8772



STEP 3:  BUY HIGH AND SELL LOW ON BCN/XMR (potentially sitting on the other side collecting the spread)

Date   Market   Category   Type   Price   Amount
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.887E-05   4674.970916
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   80735.18691
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   7.57050629
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5.94189602
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5441.088052
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.885E-05   8906.780966
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.882E-05   523.2942593
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.861E-05   3977.657
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000586   3300.7546
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.853E-05   141.66457
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.799E-05   8620.83829
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.762E-05   13994.92212
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.746E-05   104.0725224
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.735E-05   168943.4675
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.731E-05   536.1849055
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000572   91.74545454
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.699E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.695E-05   358.2730872
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.607E-05   39329.59247
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.606E-05   12105.36604
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   35714.28554
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   44642.85714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   93.41535714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.599E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.598E-05   1.80421579
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.586E-05   1118.808514
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.513E-05   90694.72157
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000551   2283.690563
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   990
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   1000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   38499.04
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.499E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.483E-05   1139.918108
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.473E-05   45673.07692
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   37037.03704
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.379E-05   1161.83961
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000535   47004.15421
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.347E-05   46751.9685
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000533   1988.743152
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.325E-05   20944.09527
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000532   187969.9248
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000053   34423.65019
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.276E-05   1184.620779
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000525   27526.34213
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.223E-05   38292.16925
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.221E-05   47883.06452
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   11979.19308
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   556.8425
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.181E-05   1.94943061
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.121E-05   58582.30892
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   19607.84314
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.094E-05   49070.24793
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   8238.9328
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   5680
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.987E-05   17022.35808
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.977E-05   60277.27547
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.968E-05   50317.79661
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000495   202020.202
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   13425.43367
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   1059
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   5756.03
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.881E-05   22848.10393
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.842E-05   51630.43478
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   10.625
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   131516.4717
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.795E-05   24272.80944
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.783E-05   2.11164541
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000475   16.03052631
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.715E-05   53013.39286
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000471   213.4694268
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4264707.907
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000602   3164.0142
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.021E-05   2916.2629
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.074E-05   2493.666412
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.105E-05   10828.10402
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.113E-05   4074.274417
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   116.1580385
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   9713.187093
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000063   7980
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.309E-05   298.8293266
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.326E-05   201.8952973
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.327E-05   400681.0796
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   4759.920572
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   340969.5528
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.349E-05   570.5983376
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.366E-05   234.9259049
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.426E-05   2845.660706
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.441E-05   98.01294347
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.516E-05   550.543843
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.547E-05   15274.17138
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.573E-05   2500
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.585E-05   1.8
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.599E-05   120263.334
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000066   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.611E-05   21422.44154
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   360.6507619
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   112350.767
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.658E-05   3415.547555
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.663E-05   806.9169328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000667   42437.93762
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000668   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.681E-05   304.6794857
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   19970
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   3206873.721
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.634E-05   1700.12886
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4485532.328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.118E-05   1121.922674
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.298E-05   134779.4884
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.559E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1051437.124
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1983484.409
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.701E-05   24430.74249
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   3158417.117
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.697E-05   121882.2575
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   2114199.137
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   2230491.191
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.242E-05   97892.15736
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.657E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   381120.4842
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978764
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1062006.459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.0000534   10666.77678
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1492923.806
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   2549.400068
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   50988.05572
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.198E-05   408422.6922
26/06/2017 02:59   BCN/XMR   Exchange   Buy   0.000062   5427.485332
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.228E-05   36147.77078
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   647567.6459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.584E-05   857.6760387
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1093964.004
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   799807.093
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   797807.5753
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.657E-05   380818.5655
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.659E-05   20000
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   157521.6889
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   556944.4037
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   383236.4612
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.617E-05   9044.32432
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   391300.0835
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   278723.3007
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.217E-05   19139.35231
26/06/2017 02:59   BCN/XMR   Exchange   Sell   4.701E-05   6400.635184
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   252486.505
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   3536.569787
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   100976.5906
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.617E-05   10955.67568
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.699E-05   84161.39945
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   199131.16
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   140697.8605
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   140346.1158
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.614E-05   111708.5747
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   7131.833572
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   104297.4697
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.612E-05   79981.08567
26/06/2017 03:00   BCN/XMR   Exchange   Sell   4.831E-05   8927.255227
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   70853.87773

hello the exact same thing happened to me yesterday, someone hacked into my account and sold all my coins and started to buy bcn, this has happened to a few other people also, also if you check bcn on polo its having problems so its clearly happened to a few people, when i logged onto my account they was in my account then i got locked out, froze my account straight away and contacted poloniex

[alyssa85]

My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.

So what letter of the alphabet are you, and is this your first name or surname?

[Jaerin]

The simple fix to this is to enable 2FA on your account.  It's really not that big of a deal if you have a phone.  The 10 seconds it takes to look up an account would eliminate all of this heartache.

If you don't have the ability to have 2FA then you really shouldn't have money in your accounts.

It is so simple to hack people's accounts without that kind of protection.

[Mr_Snipes]

I kinda disagree on "its easy to hack" - we all have accounts for mail, ebay, paypal and so forth which store some value.
No arguing that 2fa is an important countermeasure- but i would not feel very safe at this exchange anymore.
A little while ago only people who used VPN had had 2fa with special tokens. And somehow we have not all had sudden successful logins in our paypals
or whatever - these guys got owned in some way and do not admit it. Even if someone got a hold of the hashed passwords, a good salting of these hashes could have prevented this.
Going there saying "hey i have 2fa, i am safe" feels a bit wrong for me . You never know what happens next in this hostile environment...
I am going to delete my account there, they have not even responded to my request and that is the last nail in the coffin for my trust.

[pinkflower]

Dropping by to say, Im sorry bro. But theres no chance you are getting all that money back. What you should have done was withdraw all your coins to a wallet and back up your private keys and encrypt them.

Thats the price you pay for being negligent.