epancis
Member
Offline
Activity: 69
Merit: 10
|
|
November 15, 2017, 03:39:11 PM |
|
all my coins are in my local wallet am i good?
|
|
|
|
Phore (OP)
|
|
November 15, 2017, 04:03:41 PM |
|
Dear Community,
At approximately 6pm EST on November 15th, 2017 we became aware of a hostile actor that had exploited a staking bug within the Phore code (block 89969 2017-11-14 20:36:39). In order to protect our community we immediately contacted the exchange that listed Phore and requested that they cease all active trading and withdrawals. Our primary goal since the discovery was to be 100% transparent and responsive around this issue.
To address this exploit, we’re rewinding to the point in when the major exploit occurred. We will be conducting a 'rollback' in order to ensure that this has minimal impact on our community. We ask each and every one of you to follow the instructions posted above and on our socials. At present, we do not foresee that this will impact our proposed roadmap or timelines. We are currently working with CoinsMarkets to identify the best course of action for those who conducted trades following block 89969.
This is a blessing in disguise and comes at the right time for us since we can now fix this issue early on in Phore. It has also strengthened our resolve to develop a more stable and secure chain. We will continue to work with out community to resolve any ongoing concerns and to continue to build Phore.
|
|
|
|
Phore (OP)
|
|
November 15, 2017, 04:06:05 PM |
|
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 04:06:56 PM |
|
I like the way you've handled this so far.
You've done exactly what you should have done to protect people and the coin itself.
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 04:08:55 PM |
|
all my coins are in my local wallet am i good?
No, you need to get the private keys of every address that has Phore in it. Backing up wallet.dat isn't enough.
|
|
|
|
epancis
Member
Offline
Activity: 69
Merit: 10
|
|
November 15, 2017, 04:31:08 PM |
|
when i enter the command dumpprivkey and then my address is kicks back saying "  Error: Please enter the wallet passphrase with walletpassphrase first. (code -13) "
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 04:45:13 PM |
|
when i enter the command dumpprivkey and then my address is kicks back saying "  Error: Please enter the wallet passphrase with walletpassphrase first. (code -13) "
Unlock.
|
|
|
|
NoxX
|
|
November 15, 2017, 04:45:42 PM |
|
when i enter the command dumpprivkey and then my address is kicks back saying "  Error: Please enter the wallet passphrase with walletpassphrase first. (code -13) "
Unlock the wallet before the dumpprivkey command in the console
|
|
|
|
NoxX
|
|
November 15, 2017, 04:52:14 PM |
|
It's maybe a bit early to tell, but do you think other coins based on PIVX are also vulnerable to this exploit?
EDIT: Also, when things have calmed down a bit, maybe someone can explain what exactly happened. I am looking at block 89969, but it looks the same as 89925, 89905, 89900 etc. to me.
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 04:53:52 PM Last edit: November 15, 2017, 06:52:41 PM by burnedbyfees |
|
In debug console type:
walletpassphrase yourpassphrasehere 600
listaddressgroupings (this gives you a list of you addresses with coins in them, copy them)
dumpprivkey youraddresshhere
Copy keys to text file.
Everyone needs to do this.
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 04:57:06 PM |
|
Also everyone needs to be aware not to do OTC trading, if you buy Phore in this way you'll lose it went it's rolled back.
|
|
|
|
lentyna
|
|
November 15, 2017, 06:14:10 PM |
|
I bought PHR on CoinsMarkets just before it went offline so it means all my money is lost as I don't see PHR in my wallet nor BTC?
|
|
|
|
LemonAndFriesOne
Legendary
Offline
Activity: 1050
Merit: 1000
|
|
November 15, 2017, 06:26:45 PM |
|
What about masternodes? I just shut off mine, good enough I think right
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 06:33:58 PM |
|
What about masternodes? I just shut off mine, good enough I think right
Get the private keys for every Phore address you have with money in it. Pointless to stake right now as there's going to be a rollback.
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 06:39:27 PM |
|
I bought PHR on CoinsMarkets just before it went offline so it means all my money is lost as I don't see PHR in my wallet nor BTC?
Cooinsmarkets has a record of what you bought. Don't forget this is pre-burn the coinswap isn't done yet, so there might be a way to make people who bought whole, I have no idea what the plan is but hopefully the devs can do the fairest thing for everyone.
|
|
|
|
LemonAndFriesOne
Legendary
Offline
Activity: 1050
Merit: 1000
|
|
November 15, 2017, 06:54:34 PM |
|
What about masternodes? I just shut off mine, good enough I think right
Get the private keys for every Phore address you have with money in it. Pointless to stake right now as there's going to be a rollback. Ok, the guide is not loading from dropbox but I did a few backups via dumping the private keys from the wallet. I don't know what the commands for a linux VPS to get private keys from a masternode are, would be useful to know
|
|
|
|
burnedbyfees
|
|
November 15, 2017, 07:01:02 PM |
|
What about masternodes? I just shut off mine, good enough I think right
Get the private keys for every Phore address you have with money in it. Pointless to stake right now as there's going to be a rollback. Ok, the guide is not loading from dropbox but I did a few backups via dumping the private keys from the wallet. I don't know what the commands for a linux VPS to get private keys from a masternode are, would be useful to know I only know how to do it for Windows wallet but I assumed the debug console commands for the wallet were the same for all OS. So I don't know, but you'll find someone who does on Discord. https://discordapp.com/invite/Aucncz5
|
|
|
|
shinep
|
|
November 15, 2017, 07:04:54 PM |
|
What about masternodes? I just shut off mine, good enough I think right
Get the private keys for every Phore address you have with money in it. Pointless to stake right now as there's going to be a rollback. Ok, the guide is not loading from dropbox but I did a few backups via dumping the private keys from the wallet. I don't know what the commands for a linux VPS to get private keys from a masternode are, would be useful to know I only know how to do it for Windows wallet but I assumed the debug console commands for the wallet were the same for all OS. So I don't know, but you'll find someone who does on Discord. https://discordapp.com/invite/Aucncz5Try phore-cli dumpprivkey your-address
|
|
|
|
sausagedog
Newbie
Offline
Activity: 54
Merit: 0
|
|
November 15, 2017, 09:53:02 PM |
|
It's maybe a bit early to tell, but do you think other coins based on PIVX are also vulnerable to this exploit?
EDIT: Also, when things have calmed down a bit, maybe someone can explain what exactly happened. I am looking at block 89969, but it looks the same as 89925, 89905, 89900 etc. to me.
https://chainz.cryptoid.info/phr/address.dws?PVjkYWPsrkAAid1M1MPj6cNNHUCcoH4zQr.htmSee staking rewards. I'd just like to say how well the Phore team has responded to and handled this. Finding the issue, contacting the exchange to cease trading, then finding a solution which is good for absolutely everybody. All within such a short space of time. 100% Transparency and top notch communication through every channel. Its in times of adversity we see peoples true colors. The devs and the rest of the team have all shone in this situation. Good on you guys.
|
|
|
|
litas
Member
Offline
Activity: 73
Merit: 10
|
|
November 16, 2017, 03:30:39 AM |
|
Any idea when it's gonna go back on exchanges?
|
|
|
|
|