Inputs.io | Instant Payments, Offchain API, Secure Wallet, 235k+ BTC transferred

[superbit]

Where are you getting all these addresses from?

[superbit]

Maybe you are getting them from here, either way this is a MAJOR issue:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

TradeFortress any comments??

[rynmln]

Where are you getting all these addresses from?

Maybe you are getting them from here, either way this is a MAJOR issue:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

TradeFortress any comments??

That's correct. He is sleeping apparently. Although coinchat seems to be down. EDIT: I guess coinchat has been down for a few days.

[superbit]

Where are you getting all these addresses from?

Maybe you are getting them from here, either way this is a MAJOR issue:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

TradeFortress any comments??

That's correct. He is sleeping apparently. Although coinchat seems to be down.

Hopefully someone has a way to get a hold of him in an emergency

[pedrog]

The address has now more than 28 BTCs: https://blockchain.info/address/15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx

[favdesu]

so any strange logins in your Authorization Management visible?

[superbit]

so any strange logins in your Authorization Management visible?

So far everyone who is saying they have been hacked is saying no as per the reddit link.

[wtfvanity]

Don't see this in here, if anyone is interested:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

[InwardContour]

no word from TF? i am very worried. my btc were all intact this morning before i read this, but i wont have access until tonight..... fingers crossed, i can't afford this.... no more online wallets for me?

[InwardContour]

crap, just realized that i have a 0 limit for 48 hours too.... will have to reset the limit and set an alarm to insta-withdraw when the limit is raised

[🏰 TradeFortress 🏰]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

[niktitan132]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

Thank you!

[gaston909]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

Top man!

[InwardContour]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

i assume you will make an announcement detailing the full extent of the compromise and what is being done to patch the vulnerability? this makes me very worried to keep funds on there?

i never enabled api key. are my wallets secure?

[Open4lies]

Everyone who has lost money will be fully reimbursed.

Thank you, it is the way to go

[DannyDisco]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

i assume you will make an announcement detailing the full extent of the compromise and what is being done to patch the vulnerability? this makes me very worried to keep funds on there?

i never enabled api key. are my wallets secure?

I would assume so. API keys are very dangerous. They have full access to your account. Never enable api keys for an account you are actually using if you are not using it for development purposes. Create secondary accounts if you want to play with API's. Everyone should also make sure all their accounts on other exchanges/online wallets don't have API's enabled if you aren't using them.

In either case. I have withdrawn my funds temporarily until we get a proper update and a full understanding of what happened.

[BarkinTree]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

i assume you will make an announcement detailing the full extent of the compromise and what is being done to patch the vulnerability? this makes me very worried to keep funds on there?

i never enabled api key. are my wallets secure?

I would assume so. API keys are very dangerous. They have full access to your account. Never enable api keys for an account you are actually using if you are not using it for development purposes. Create secondary accounts if you want to play with API's. Everyone should also make sure all their accounts on other exchanges/online wallets don't have API's enabled if you aren't using them.

In either case. I have withdrawn my funds temporarily until we get a proper update and a full understanding of what happened.

same here. i look forward to hearing an update from TF regarding the extent of what happened. another reminder not to keep much on online wallets..... unfortunately..... i felt safe with all of inputs security features.

[Zakryze]

When will my bitcoin be refunded?
Do you need my address?

[mobile]

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

Oblivious to what was going on today, I withdrew from coinlenders & have not received it in inputs. I assume the reasoning behind this is related to this situation. Thanks in advance for your hard work and service provisions. Godspeed...

[giantdragon]

0.12843117 BTC gone from my account "dailybitcoins" to the 15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx. Please make a refund.