EtherDelta: Might Have Been Compromised

[TyrellWellick]

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

[1715424670]

1715424670

[1715424670]

1715424670

[1715424670]

1715424670

[1715424670]

1715424670

[legoplayer245]

Heard this already, was actually compromised. Look at the hacklers wallet with the cash flowing : https://etherscan.io/address/0x3f8a37bde9b15b65c82f9cdd00192e0ba36cc5fc

[TyrellWellick]

Heard this already, was actually compromised. Look at the hacklers wallet with the cash flowing : https://etherscan.io/address/0x3f8a37bde9b15b65c82f9cdd00192e0ba36cc5fc

mygod, idk what to feel right now. Man, when I saw the news I was about to open etherdelta, but then I was hesitant so I didn't. Damn, it's like eating a whole damn elephant piece by piece.

[GoldenOrder]

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

[TryNinja]

I believe that Etherdelta itself is safe. It looks like only the DNS was compromised and because of that, the domain was hijacked and it's pointing to a phishing site.

WARNING: If you are holding funds on EtherDelta.  Do NOT open the site. The EtherDelta site is compromised and opening it may result in lost funds. If you are using BLUE beta, MetaMask, or a Ledger you should be safe. But we still do not recommend visiting ED until it's resolved.

https://twitter.com/EthereumBlue/status/943582980538281985

Because the official domain is pointing to a phishing site, after the DNS credentials were compromised. (We think)

https://twitter.com/EthereumBlue/status/943583739107561472

It's the DNS servers, not the SC keys. If the SC keys get compromised folks will have a much bigger problem.

https://twitter.com/EthereumBlue/status/943591507013111810

[bL4nkcode]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

[TyrellWellick]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Hot damn, imagine all your hardships scraping those coins and it'll just be hacked eventually oh man that's tough.

[squatter]

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using EtherDelta is crazy, why? I've done well trading there, and even when the site was compromised today I was able to remove most of my funds safely because I control the keys. The smart contract is intact; no funds have been removed.

[andthereyou]

I have used twice etherdelta it is a nice exchange however to be on the safe side. Let us stay away for a while.  

Great that I have found this thread. I am planning to buy tokens using Etherdelta this week.

[TyrellWellick]

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using EtherDelta is crazy, why? I've done well trading there, and even when the site was compromised today I was able to remove most of my funds safely because I control the keys. The smart contract is intact; no funds have been removed.

True story, despite what happened we at least are able to salvage our funds.  

[GoldenOrder]

Tutorial on how to get your tokens out of EtherDelta:https://steemit.com/etherdelta/@davidaarong/how-to-manually-transfer-tokens-off-of-etherdelta

You should already have your private key backed up. Just import it into a wallet like MEW and sweep funds to a new address to be safe. The problem is the 51,850 ETH and countless tokens stuck in the smart contract. Fortunately it looks like this was limited to the DNS. But until this is safely resolved, I have significant funds locked in the smart contract.

Follow the tutorial, you can take your tokens out even if they are locked in the smart contract.

[TyrellWellick]

I have used twice etherdelta it is a nice exchange however to be on the safe side. Let us stay away for a while.  

Great that I have found this thread. I am planning to buy tokens using Etherdelta this week.

Always happy to help sir.


We're a community after all.

[squatter]

Follow the tutorial, you can take your tokens out even if they are locked in the smart contract.

Thanks, that was more useful than I thought. But there's no instructions on how to withdraw the ETH that's in the smart contract. That's the majority of my stuck funds. Any thoughts on how to get those out?

[jtipt]

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Etherdelta compromised, shit. I think a lot of people have ETH and tokens there, hell even I had few tokens about a month ago, good thing I withdrew them in ETH when it's price was increasing. Are there any reports of anything stolen yet?

[TyrellWellick]

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Etherdelta compromised, shit. I think a lot of people have ETH and tokens there, hell even I had few tokens about a month ago, good thing I withdrew them in ETH when it's price was increasing. Are there any reports of anything stolen yet?

I don't know particularly but the hacker is using some kind of auto transfer script wherein whenever you import your public and private address, all your funds would be transferred to the hacker's address.
But your wallet itself is safe, because you see 'smart contracts' immutable, basically their website domain has been hacked and replaced by the phishing site whenever you navigate to their site, your browser directs you to their phishing site. Hence, that.


When you accessed ED before it was hacked, your wallet is safe. No need to worry. Just have to transfer it.

You can find out more  here:

https://www.reddit.com/r/ethtrader/comments/7l46ng/alert_ether_delta_hacked/

Transferring account to MEW:
https://www.reddit.com/r/EtherDelta/comments/6hrxjw/etherdelta_guides_for_first_time_users/dn6heno/

[TyrellWellick]

Damn, see the update of the current state of the hacker's wallet.


Mygod, there still victims just seconds ago.


There's still uninformed ppl out there. Man, pls. Just stop logging into ED already!

[RamonBTC]

This December many hackers seem so desperate to have easy money and this really worrisome on some point but I think etherdelta is on this matter already. So I’ll make an assumption that this issue of hacking is isolated but that is the reason why I’m not using exchanges for storing my coins.

[TyrellWellick]

This December many hackers seem so desperate to have easy money and this really worrisome on some point but I think etherdelta is on this matter already. So I’ll make an assumption that this issue of hacking is isolated but that is the reason why I’m not using exchanges for storing my coins.

Actually there's nothing to worry about, just at least don't go to ED and try to import your account for now, your funds is still safe provided that you didn't log in before the hack happened.


Yes, I think etherdelta is on this already.
Stay updated.

[rasho321]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

You don't need an account to trade there...

[jpdorn]

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

[audaciousbeing]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

There is nothing wrong in using an exchange because you cannot just do without them. If you don't use EtherDelta, you would use another one which makes it a subject of attacks. The most important is not using the exchange sites to serve the purpose of a wallet the moment you do that, you are only making yourself vulnerable to no fault of yours. Trade, make profit and withdraw to a more secure wallet where you can control everything that happens to your wallet.

With that, you are good to go, I have used EtherDelta before but only for trade so when news like this filtered the airwaves, I am at peace with myself rather than searching all through the internet looking for answers and solutions.

[CyberKuro]

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Unfortunately for those who have been hacked and heard it was better not to move your coins during the hack attempt as the hackers may use phishing-links to access your coins. Exchanges aren't a safe place to keep your portfolio for a long-term obviously, as exchange is the main target for hackers to get big fish in there and there are some cases which exchanges got hacked recently such as South Korean exchange Youbit. However, Etherdelta devs have stated the site is clear to be used since yesterday. https://twitter.com/etherdelta/status/944174879775055873

[TyrellWellick]

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

Idk man, maybe they got excited. Lmao

[TyrellWellick]

WARNING ≫ DO NOT USE EtherDelta right now!!! The DNS server has been compromised. You can lose all your funds!

Check out for more details: https://www.financemagnates.com/cryptocurrency/news/breaking-etherdelta-might-compromised/

Unfortunately for those who have been hacked and heard it was better not to move your coins during the hack attempt as the hackers may use phishing-links to access your coins. Exchanges aren't a safe place to keep your portfolio for a long-term obviously, as exchange is the main target for hackers to get big fish in there and there are some cases which exchanges got hacked recently such as South Korean exchange Youbit. However, Etherdelta devs have stated the site is clear to be used since yesterday. https://twitter.com/etherdelta/status/944174879775055873

Thank you for being informative sir. I was away for 3 days, I was not able to update the thread.

[Murloc]

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

[TyrellWellick]

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

[squatz1]

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

[TyrellWellick]

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

Yes, indeed. It's a risk and an opportunity as well this is the nature of crypto. But first and foremost we all should have our keys backed up at all times.
 

[squatter]

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

I suspect he didn't properly clear DNS resolver cache or was otherwise compromised. Many people have been using Etherdelta without issues since the announcement was made. If you're using a site like this, you should be protecting yourself with something like MetaMask (which would have prevented this).

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

The safest route was to use MEW to remove all ETH and tokens from the contract while the site was compromised. The reason you can do that is because the contract doesn't give them control of your coins. Everyone trading on Etherdelta controls their keys; the question is who is getting phished and who isn't?

The DNS compromise is plausible if we assume that these guys are amateurs. Everything about the site suggests they are. The contract is/was secure, though. I got all my funds out without issue.

[h0lybyte]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

Using etherdelta was never crazy and it is no one's fault to use etherdelta like complex but good exchange because this hack can happen even with those exchanges whom you trust. Fortunately my coins are still safe with etherdelta, i can say this is one of the greatest exchanges in the market.
I have been using it since a year and never faced any suspecious activities with my account, my friends also like etherdelta

[bayu7adi]

etherdelta may be the last option if the available exchanger does not receive my KYC verification jajajaj
the price is a bit different, but it is not a problem for a exchanger that is not complicated ... just need GAS GAS GAS and GAS

[TyrellWellick]

I've seen this tweet yeaterday: https://twitter.com/Socal_crypto/status/944411391775166464
It looks like they still have some issues os maybe this guy leaked hisprivate key during the first day. The only reason why people are using ED is because the other exchanged don't wand to list that much tokens.

Damn, but I think he's the first after the Hack. Well keep our eyes peeled. Please keep this post updated, because I am. Damn, We'll have to scrape for more information regarding the issue. Please stay updated.

I suspect he didn't properly clear DNS resolver cache or was otherwise compromised. Many people have been using Etherdelta without issues since the announcement was made. If you're using a site like this, you should be protecting yourself with something like MetaMask (which would have prevented this).

*new owners*
*hacked 1 hour later*
 This looks suspicious as fuck

I'd change the term from *hackers* to exit scam, nothing that is too weird in the environment of crypto which isnt too rare (kinda sad) because crypto is something which you can't get back AT ALL.

Kinda sad that this sort of exchange has been compromised and stolen from. It gives a bad name to everyone in Crypto as it gives the mentality -- that people are going to lose out once they get involved.

If you don't own your keys you own nothing

The safest route was to use MEW to remove all ETH and tokens from the contract while the site was compromised. The reason you can do that is because the contract doesn't give them control of your coins. Everyone trading on Etherdelta controls their keys; the question is who is getting phished and who isn't?

The DNS compromise is plausible if we assume that these guys are amateurs. Everything about the site suggests they are. The contract is/was secure, though. I got all my funds out without issue.

Me too sir, the moment I knew about what happened, I deleted my 'bookmarked' page of ED. Since, then it's very advisable to use other wallet means, like MEW for example.

[beerlover]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

It is really a crazy thing and I am sure a lot of people won't still have got hold of this news ? What is the latest now ?
Has anything been done so far ?

Looking at the hackers address, I really imagine what these guys are always thinking when doing stuffs like this but it is their world. A lot has been stolen already and I hope they end up not getting to steal a lot more.

Anyway, thanks for the warning OP. I hope something is being done about it. That is crazy as these guys are really just busy trying their hands on every strong account they can get to and I imagine how many people are going to end up losing their funds in this process. How can we even be safe anymore and I can imagine not getting this news and making a huge transaction.

[spngebob]

Decentralized exchanges should be safe.
It wouldn't surprise me if this was inside job.
Etherdelta has all tokens listed but i think they will need lots of time to gain trust from people again. Problem is that most tokens can't be traded anywhere except ED.

[TyrellWellick]

I feel sorry to those who been included on this hacked. But its your fault on the very first place. Using that exchange to trade is crazy, that's why I never put my traded coins and never make any account/s there.

It is really a crazy thing and I am sure a lot of people won't still have got hold of this news ? What is the latest now ?
Has anything been done so far ?

Looking at the hackers address, I really imagine what these guys are always thinking when doing stuffs like this but it is their world. A lot has been stolen already and I hope they end up not getting to steal a lot more.

Anyway, thanks for the warning OP. I hope something is being done about it. That is crazy as these guys are really just busy trying their hands on every strong account they can get to and I imagine how many people are going to end up losing their funds in this process. How can we even be safe anymore and I can imagine not getting this news and making a huge transaction.

Man, even weeks after the hack the people are still afraid about what might happen if they use ED even after they themselves said that it's okay now. I transferred all my funds to MEW. Just so you know you can always do that.

Etherdelta has been a very convenient place to trade tokens but now that people lost a lot of money, they just can't get back community's trust anymore.
As you can see here they've been doing their best to reconstruct/upgrade the whole system: https://twitter.com/etherdelta/status/944175650767810560