I'm MtGox, here's my side.

[MagicalTux]

Hi,

Since lots of people have been posting on http://forum.bitcoin.org/index.php?topic=20207.0 let me give you some infos too. The cat is out, so let's just as well put as much infos as I can. Kevin asked publicly me to reply, so here is my reply response.

Kevin has no buy order as of the day preceding the attack. Now, he bought 258k bitcoins at 0.01 USD per bitcoin (0.0101 if you include our 0.65% fee).

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login on hacked account
[2011/06/19 05:12:10] Kevin login on his account
[2011/06/19 05:15:10] Hacker login on hacked account
[2011/06/19 05:15:36] Hacker starts selling
[2011/06/19 05:22:35] Hacker login on hacked account
[2011/06/19 05:45:39] Hacker login on hacked account
[2011/06/19 06:08:18] Hacker login on hacked account

Kevin had only one chance that day to place his 0.01 buy order. So either he had a lot of luck, and somehow knew it was the right time to place a 0.01 buy order, or something smells fishy in there. It's not up to me to decide, but I will report this as it has become a public matter.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

[1713481652]

1713481652

[1713481652]

1713481652

[1713481652]

1713481652

[1713481652]

1713481652

[1713481652]

1713481652

[Synaptic]

Hi,

Since lots of people have been posting on http://forum.bitcoin.org/index.php?topic=20207.0 let me give you some infos too. The cat is out, so let's just as well put as much infos as I can. Kevin asked publicly me to reply, so here is my reply response.

Kevin has no buy order as of the day preceding the attack. Now, he bought 258k bitcoins at 0.01 USD per bitcoin (0.0101 if you include our 0.65% fee).

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

Kevin had only one chance that day to place his 0.01 buy order.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

EDIT: You should be glad you have the admins of this site on your side, they've suppressed a shitload of dissent about what absolute joke your little site was.

[grue]

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

that was a nice and constructive post.

also, quoting the OP = noob

[Oldminer]

Kevin has no buy order as of the day preceding the attack. Kevin had only one chance that day to place his 0.01 buy order.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

Wow..just WOW..!!!

Thanks for replying MT.

As a MtGox trader I'm behind you 1000% on Option 4 too.

[IlbiStarz]

Hi,

Since lots of people have been posting on http://forum.bitcoin.org/index.php?topic=20207.0 let me give you some infos too. The cat is out, so let's just as well put as much infos as I can. Kevin asked publicly me to reply, so here is my reply response.

Kevin has no buy order as of the day preceding the attack. Now, he bought 258k bitcoins at 0.01 USD per bitcoin (0.0101 if you include our 0.65% fee).

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

Kevin had only one chance that day to place his 0.01 buy order.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

We don't give a shit about you either.

Mt. Gox we are rooting for you guys to get back in the game!

[tymothy]

Mt Gox should not have been compromised, but the reality here is that Kevin was in possession of stolen property and is now knowingly in possession of it. The whole situation sucks, but the trades do need to be rolled back.

[Synaptic]

Hi,

Since lots of people have been posting on http://forum.bitcoin.org/index.php?topic=20207.0 let me give you some infos too. The cat is out, so let's just as well put as much infos as I can. Kevin asked publicly me to reply, so here is my reply response.

Kevin has no buy order as of the day preceding the attack. Now, he bought 258k bitcoins at 0.01 USD per bitcoin (0.0101 if you include our 0.65% fee).

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

Kevin had only one chance that day to place his 0.01 buy order.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

We don't give a shit about you either.

Mt. Gox we are rooting for you guys to get back in the game!

And we don't give a shit about us not giving a shit, either.

It's not giving a shits all the way down.

[chihlidog]

Hi,

Since lots of people have been posting on http://forum.bitcoin.org/index.php?topic=20207.0 let me give you some infos too. The cat is out, so let's just as well put as much infos as I can. Kevin asked publicly me to reply, so here is my reply response.

Kevin has no buy order as of the day preceding the attack. Now, he bought 258k bitcoins at 0.01 USD per bitcoin (0.0101 if you include our 0.65% fee).

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

Kevin had only one chance that day to place his 0.01 buy order.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

This is my take as well. The fact is that you were compromised. We've all seen absolute proof. When you decided you were going to move into real commodities of significant value, along with seeing dollar signs, you should have made SURE you were secure. This is on you. Most people will cut you a break, but you were lax on your security. YOu saw $ signs, got greedy, and didnt take necessary precautions.

[hazek]

I believe MagicalTux.

[kgo]

What is this supposed to indicate?  That Kevin put his sell order in before the selloff began, rather than during or after the 30-some minute trade finished up, like he said?

[bitplane]

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

I don't understand. Which account? Kevin and the hacker used the same account?

[Batouzo]

- Having to deal with FBI, provide logs and proof

Need more CIA in Bitcoin, the free and libertarian money for everyone!

Auditor gets all the passwords, CIA then gets all the logs?
How much information will be given to whom exactly? What about any kind of banking privacy - I hope this will be handled better then up to date?

[Torminalis]

The fact is that you were compromised. We've all seen absolute proof. When you decided you were going to move into real commodities of significant value, along with seeing dollar signs, you should have made SURE you were secure. This is on you. Most people will cut you a break, but you were lax on your security. YOu saw $ signs, got greedy, and didnt take necessary precautions.

Good job you were here to remind him too, otherwise where would we be?

[MagicalTux]

We don't give a shit.

You were stupid and ill equipped, and you should admit defeat.

This is my take as well. The fact is that you were compromised. We've all seen absolute proof. When you decided you were going to move into real commodities of significant value, along with seeing dollar signs, you should have made SURE you were secure. This is on you. Most people will cut you a break, but you were lax on your security. YOu saw $ signs, got greedy, and didnt take necessary precautions.

If you think installing new securities and recoding everything can be done instantly. Mt.Gox had a growth far too fast to give us enough time for this, and we did our best to fix every found problem.

In the end however the accounts were leaked because of something completely different...

[RandyMarsh]

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

I don't understand. Which account? Kevin and the hacker used the same account?

Yeah Please Explain this Jargon, And what is it that you're implying by it?

[nux]

Is there any ETA as to when mtgox.com will be operational again?

Thanks

[kjj]

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

Kevin had only one chance that day to place his 0.01 buy order. So either he had a lot of luck, and somehow knew it was the right time to place a 0.01 buy order, or something smells fishy in there. It's not up to me to decide, but I will report this as it has become a public matter.

Therefore I choose option 4:

Option 4: Mt Gox signals this to the competent authorities
+ We are safe
+ We may even have a chance of catching our hacker if Kevin knows him
+ We can rollback without having to worry
- Having to deal with FBI, provide logs and proof

I really want to believe that Kevin is telling the truth, and that he is just an innocent bystander in all of this.

But under the circumstances, and considering that we are talking about (maybe) millions of dollars, I can understand why you would be suspicious and want it properly investigated.

Here's hoping that they catch the guy, and also that Kevin isn't involved.

[IlbiStarz]

What is this supposed to indicate?  That Kevin put his sell order in before the selloff began, rather than during or after the 30-some minute trade finished up, like he said?

This indicates that Kevin put that buy order for 0.01 almost an hour before the hacker started selling off everything. Which is a bit suspicious, I mean, who puts in buy orders for one cents, and $3000 worth of it to boot?

[Synaptic]

What is this supposed to indicate?  That Kevin put his sell order in before the selloff began, rather than during or after the 30-some minute trade finished up, like he said?

Hey, doesn't matter either way.

THEY'RE GETTING THE AUTHORITIES INVOLVED.

And the authorities will be like "oh, so you were running what?  

A securities exchange?

 A what exchange?  

Ok, so you held the equivalent of multiple millions of dollars on your site?

Ok, and then you just, GAVE your ENTIRE database to a third party?  

Ok, and did you verify the absolute security of this third party?

You didn't...no, you didn't."

And they go from there.

MagicalTux, you are a fucking idiot, and should have saved your breath and your time and go simper away while trying to salvage your failed little pathetic website.

[kjj]

Let me show you the login logs for our hacker guy on his account full of bitcoins, and Kevin:

Code:

[2011/06/19 05:00:02] Hacker login
[2011/06/19 05:12:10] Kevin login
[2011/06/19 05:15:10] Hacker login
[2011/06/19 05:22:35] Hacker login
[2011/06/19 05:45:39] Hacker login
[2011/06/19 06:08:18] Hacker login

I don't understand. Which account? Kevin and the hacker used the same account?

Yeah Please Explain this Jargon, And what is it that you're implying by it?

He is saying that Kevin logged in 12 minutes after the attacker logged in to start the attack.  Not damning by itself, and almost certainly a coincidence, but still a connection that needs to be followed up, particularly in light of how it all played out.