[ANN][STABLECOIN][POOL][PPLNS][STRATUM][1% FEE] Silverwolf's StableCoin Pool

[the1silverwolf]

And we are full again.

Going to leave it here for a little while.

[the1silverwolf]

'CASH OUT' sends to a blank page

Let me check it. one sec.

I cashed out and it worked fine for me.  Make sure you have entered your payment address and saved it.

Also, make sure your pin is correct.

is anyone else having trouble with this

Let me know if you continue to have trouble with this and we will figure it out !

I tried it again and it's still working fine.



Let me know if you are continuing to have issues.

[Pmalek]

Are total shares column precise? It says current round shares 277 for example and total shares 51, and I have already made to that moment about 2300 shares? But on the pool it says 330 current round + total?

[the1silverwolf]

Are total shares column precise? It says current round shares 277 for example and total shares 51, and I have already made to that moment about 2300 shares? But on the pool it says 330 current round + total?

It is correct, but it doesn't include blocks that haven't confirmed yet.  Since the round time is so low there are a lot of shares tied up in blocks that haven't been confirmed yet.

Give it a little time and your total shares will go up.

[zenrog]

Open registrations!!! 

[Pmalek]

Got it thanks!

[the1silverwolf]

Open registrations!!!  

Increased share difficulty again to decrease server load.  This time from 30 - 60.

I will open additional server slots in 5 minutes.

[the1silverwolf]

25 Additional Server slots open!

They won't last long!

Come and get yours now !

http://silverwolf.ath.cx/sbc

[the1silverwolf]

25 Additional Server slots open!

They won't last long!

Come and get yours now !

http://silverwolf.ath.cx/sbc

11 Left !

[the1silverwolf]

Silverwolf's SBC Pool

http://silverwolf.ath.cx/sbc

* Added networkhash display
* Added automatic user registration cap when pool exceeds 45% of network hash.  (Currently at 48.56%)

WE NEED MORE POOLS!!!

[Pmalek]

I want to confirm that your pool works great for now and payouts are fair and as expected! Keep it up !  Do you have more pools?

[the1silverwolf]

I want to confirm that your pool works great for now and payouts are fair and as expected! Keep it up !  Do you have more pools?

I'm glad you like it !

At the moment I have WDC and BBQ as well.

http://silverwolf.ath.cx/wdc

http://silverwolf.ath.cx/bbq

[the1silverwolf]

One of our users "mysbl" has figured out how to abuse the manual payout system and has stolen approx 2,300 coins from the pool.

I have disabled manual payouts until I can find & fix the vunerability.  In the mean time please use the automatic payout threshold to withdraw coins.

Thanks so much "mysbl" for ruining it for the rest of us.

This is how many coins this user withdrew : 2641.66263495
This is how many coins this user earned : 306.65277
It is userID : 432
The ip address this user connected from is : 173.230.118.194

[the1silverwolf]

The pool is a bit underfunded at the moment due to the theft.

If anyone would like to help us recover, please set a generous donation percentage.

Thank You

[the1silverwolf]

The pool is a bit underfunded at the moment due to the theft.

If anyone would like to help us recover, please set a generous donation percentage.

Thank You

I'm putting all 3 of my miners on the pool with 100% donation percentage.

This will bring us back into the black, but it will take about two days.  Your donations are appreciated.

If you wish to you may donate directly to the pool by sending to this address : sftK67MrwsbchASciNJ3FwCvhZqZaniqBZ

[ManOfKnight]

I am increasing mine to 5% donation.  Have you fixed the issue that allowed the individual to do that?

[the1silverwolf]

I am increasing mine to 5% donation.  Have you fixed the issue that allowed the individual to do that?

Thank You for helping !

I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0.

Automatic withdrawals are not subject to this vulnerability because they are run by the cron job.  They cannot be triggered manually.

Manual Withdraws have been disabled completely.  Automatic Withdraws are working normally.

I will not re-enable Manual Withdraws until I'm certain the issue has been fixed.  So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out.

[nearmiss]

I am increasing mine to 5% donation.  Have you fixed the issue that allowed the individual to do that?

I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0.

Automatic withdrawals are not subject to this vulnerability because they are run by the cron job.  They cannot be triggered manually.

Manual Withdraws have been disabled completely.  Automatic Withdraws are working normally.

I will not re-enable Manual Withdraws until I'm certain the issue has been fixed.  So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out.

probably want to consider wrapping the process in a transaction, doing the db updates first (update balance, insert into ledger), then the coin send (if the previous sql succeeded), and if the coin send succeeds commit, otherwise rollback.

That, and rate limit how frequently you can do a manual transaction.  I'm sure 60+s is reasonable for normal use.

Just a suggestion.

[the1silverwolf]

I am increasing mine to 5% donation.  Have you fixed the issue that allowed the individual to do that?

I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0.

Automatic withdrawals are not subject to this vulnerability because they are run by the cron job.  They cannot be triggered manually.

Manual Withdraws have been disabled completely.  Automatic Withdraws are working normally.

I will not re-enable Manual Withdraws until I'm certain the issue has been fixed.  So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out.

probably want to consider wrapping the process in a transaction, doing the db updates first (update balance, insert into ledger), then the coin send (if the previous sql succeeded), and if the coin send succeeds commit, otherwise rollback.

Just a suggestion.

That might still be vulnerable to the same kind of attack, I'm not sure.  

What I'm thinking is I'm going to separate the actual send function from the front end completely.

Like this :

1. The user hits the withdrawal button and a flag is set in the database.
2. 1 minute later when the cron job runs again it will send the payment, adjust the balance and ledger, and reset the flag.

That way, no matter what you can't trigger multiple payments, you'd just be setting the flag over and over again.  It wouldn't have any effect.

It would mean a short delay (up to 1 minute) in sending manual payments, but that's a pretty small inconvenience and it would help prevent new kinds of attacks as well.

[mercSuey]

I am increasing mine to 5% donation.  Have you fixed the issue that allowed the individual to do that?

Thank You for helping !

I'm pretty sure he used some kind of software or plugin to submit the post data for a manual withdrawal several times in rapid succession (all within the same second), this resulted in multiple payouts being started before the first payout was completed and his balance was reset to 0.

Automatic withdrawals are not subject to this vulnerability because they are run by the cron job.  They cannot be triggered manually.

Manual Withdraws have been disabled completely.  Automatic Withdraws are working normally.

I will not re-enable Manual Withdraws until I'm certain the issue has been fixed.  So we are safe from this happening again, we just won't be able to do manual withdrawals until I can figure it out.

Hey, about you delete that post...for obvious reasons.  At the very least, don't include details of the attack. lol