|
lucaspm98
|
 |
November 25, 2013, 09:38:30 PM |
|
Here's what Sarah had to say: "Unfortunately, I wasn't able to find out much. If you follow the stolen bitcoins from the initial 1EMztW address to the main 1Cdc4GY address, you can see a lot of smaller peels coming off this bigger amount to other addresses. If you go look at those other addresses though, a lot of them haven't actually spent their bitcoins at all (and even if they have, if you follow an extra hop, you'll still get to an address that is just sitting on the bitcoins). So basically, there's just not much to go on, and all I can really say is that it doesn't look they immediately cashed out. The only other, very speculative, thing I can think of is that the "self-change" behavior of all the addresses is the default behavior of MyWallet, so there's a chance the thief is using that wallet service and you might be able to appeal to its operator (as was done earlier this year with Strongcoin; see here: https://bitcointalk.org/index.php?topic=14085.msg1885921#msg1885921). Then again, using the same address to collect change is also a behavior of many advanced desktop clients, so that's very possibly a dead end. Anyway, sorry I couldn't be more helpful, and sorry to hear about the theft!" I didn't recognize MyWallet off the top of my head, so I looked it up and discovered that that's Blockchain's online wallet: https://blockchain.info/wallet. So if her speculation is correct, we could ask them for the money back. Although based on what it says on the My Wallet page, it doesn't look like even they have access to the money stored in there since it's encrypted before it even hits their servers. So it's *possible* that it's stored on Blockchain's servers somewhere. It's also possible that it's sitting in the thief's Armory wallet, in which case, we're obviously totally out of luck. I highly doubt the "hacker" would be smart enough to steal the bitcoins but leave 4100 bitcoins in an online wallet.  |
|
|
|
|
|
xorglub
|
|
November 25, 2013, 10:53:22 PM |
|
All the "mixing" transactions were supposedly relayed by blockchain.info. I see a fairly high probability it's indeed an online wallet.
The initial hack was different.
|
|
|
|
|
btcplayer
Newbie
 Offline
Activity: 20
Merit: 0
|
|
November 26, 2013, 02:08:20 AM |
|
How do you know his chinese name is "吴泽岳"? Hi TF/吴泽岳:
My father’s amount of bleeding in brain reached 25cc.
Look carefully, there is his blood on your money.
-----------------
Vani,faiza1990,gaston909,bradyon
Thank you so much for your warm wishes.
do you find him No, only his chinese name |
|
|
|
|
BCB
CTG
VIP
Legendary
Offline
Activity: 1078
Merit: 1002
BCJ
|
|
November 26, 2013, 02:19:37 AM |
|
Didn't TF manually sign and broadcast many of his transactions. He also attempted a double spend attack on some of the payback payment. I highly doubt he was using my wallet.
|
|
|
|
|
|
|
|
|
DebitMe
Legendary
Offline
Activity: 2800
Merit: 1012
Get Paid Crypto To Walk or Drive
|
|
November 26, 2013, 03:54:12 PM |
|
was the money deposited after the hack? So it wasnt stolen and is still in TF possession? Just want to do due diligence here. |
|
|
|
Mt. Dox
Member
Offline
Activity: 80
Merit: 10
|
|
November 26, 2013, 03:56:16 PM
Last edit: November 26, 2013, 04:13:29 PM by Mt. Dox |
|
was the money deposited after the hack? So it wasnt stolen and is still in TF possession? Just want to do due diligence here.
Well, this still warrants further investigation either way as it shows that TF was taking money from coinlenders and depositing it into his own personal wallets: Sent 11BTC to SynOps.
Repay address for record is 1BFE5QaL8TTEf2LeF81iS9cp3XXoFudFMU
The loan duration is 10 days.
This address was in the blockchain wallet linked with the email admin@glados.cc |
Help Mt. Dox bring Bitcoin scammers to justice - Donate to us: 1LAfPbb26RZ8vapELyXcMqHYEMd6g1mmrzTradeFortress - owner of now defunct websites inputs.io and coinlenders.com - 4100BTC+ missing: Full Dox - List of Bitcoin addresses with a balance |
|
|
|
|
|
|
|
halfawake
|
|
November 26, 2013, 08:39:17 PM
Last edit: November 26, 2013, 08:54:17 PM by halfawake |
|
Interesting. This prompted me to do the same investigation for my bitcoins in Coinlenders. I found the same thing: they haven't moved since June 24th. I deposited them into Coinlenders on June 22nd. This means they're still in TradeFortress's possession. (The only way this isn't the case is if he loaned them out almost immediately since they did get moved after I deposited them to Coinlenders, but only once. So it's theoretically possible that they did get loaned out, and haven't been repaid yet.) See here for details for anyone curious: https://blockchain.info/tx/b756432664ea788417d147cb139b392787e14fdbae3c128b54737e12fc94a58f |
BTC: 13kJEpqhkW5MnQhWLvum7N5v8LbTAhzeWj
|
|
|
|
gaston909
|
|
November 26, 2013, 09:21:47 PM |
|
So. Inputs and Coinlenders was a scam. This is the real story that the media missed.
|
|
|
|
|
DebitMe
Legendary
Offline
Activity: 2800
Merit: 1012
Get Paid Crypto To Walk or Drive
|
|
November 26, 2013, 09:51:31 PM |
|
Interesting. This prompted me to do the same investigation for my bitcoins in Coinlenders. I found the same thing: they haven't moved since June 24th. I deposited them into Coinlenders on June 22nd. This means they're still in TradeFortress's possession. (The only way this isn't the case is if he loaned them out almost immediately since they did get moved after I deposited them to Coinlenders, but only once. So it's theoretically possible that they did get loaned out, and haven't been repaid yet.) See here for details for anyone curious: https://blockchain.info/tx/b756432664ea788417d147cb139b392787e14fdbae3c128b54737e12fc94a58fI doubt that they were loaned out as it would not make sense to make a loan to someone and then that person never do anything with the coins loaned to them, so probably still in TF possession. This just keeps getting more interesting. |
|
|
|
qbitx
Newbie
Offline
Activity: 34
Merit: 0
|
|
November 26, 2013, 10:02:41 PM |
|
"Somebody gonna get a hurt real bad... Not going to say who but I think you know him very well!" -- Russel Peters.
|
|
|
|
|
|
halfawake
|
|
November 26, 2013, 10:19:14 PM |
|
So. Inputs and Coinlenders was a scam. This is the real story that the media missed.
Yes, yes it was. A scam or another ponzi scheme. |
BTC: 13kJEpqhkW5MnQhWLvum7N5v8LbTAhzeWj
|
|
|
|
halfawake
|
|
November 26, 2013, 10:21:43 PM |
|
I doubt that they were loaned out as it would not make sense to make a loan to someone and then that person never do anything with the coins loaned to them, so probably still in TF possession. This just keeps getting more interesting.
Oh, I quite agree. It's possible, but it wouldn't make any sense, so the logical conclusion is that TF's just sitting on them somewhere. After seeing this, I'm really tempted to send TF another email asking for my money back. Doubt it'd do any good though, at this point. |
BTC: 13kJEpqhkW5MnQhWLvum7N5v8LbTAhzeWj
|
|
|
qbitx
Newbie
Offline
Activity: 34
Merit: 0
|
|
November 27, 2013, 12:10:52 AM
Last edit: November 27, 2013, 12:37:12 AM by qbitx |
|
I followed some transaction history myself just for kicks, These are the results I found from my Inputs/CL deposits for anyone that may be interested. Perhaps more of us should post their findings? Initial deposit: https://blockchain.info/tx/148abefc28a16195eacf888d065d845b76f12cdd53f0ef278738b1da372e1cc0114yugTxx2thCw7CxAKyqes8KM6T72Hohi - One of my wallets. Current value is 0 1ArJVWBJG2qdofFsWMWhXJWwjVgx4hq9LW - The Inputs IO wallet I sent to for the initial deposit. Current value is 0 https://blockchain.info/tx/abb65fee5d7e7b6997a5e3d7f1ce86270b010f8ec86f20f09ce51c0a359c98bcTransaction was made 2013-07-28, which is only 2 days after I started my "CD" with CoinLenders. 1DEPogxtJfQdwJa7WboujYMDYXGV2T2T6n - Unknown, I had originally assumed that this address was owned by whoever the BTC was loaned out to. The 50 BTC amount seemed like a nice round number for a loan.. After following the transaction for a few hops though, now it appears that it's just part of a chain of "Mixing" addresses that all have a final balance of 0 BTC. [EDIT] I didn't really want to follow the taint analysis very far, but this is what I found after ~5 minutes https://blockchain.info/address/1PemyGsGeWaFzaR6TChY5ubQp5SFpPqqT9 This address has 10.7102250864% taint from the 1DEP address above and appears to be heavily involved with the chain of "Mixing". It has a count of 40 on the taint analysis (I honestly have no idea what that means). I just found it interesting that this account gets so many incoming transactions of exactly 5 BTC... https://blockchain.info/address/12tcJxPwLHbByn8NPHpPqwzhdRDoJQuHWs This address was fed large amounts by the '1Pemy' address above, and currently has 3010 BTC at the time of making this post. That's all I've got. |
|
|
|
|
|
stenkross
|
|
November 27, 2013, 01:58:36 PM |
|
I traced my deposits as well. 2013-06-07 my deposit ended up in its currently final destination (the address has no output tx), namely this address: http://blockchain.info/en/address/1EU29NuckRY8VfVoDJCe8w6a5LQTFS8wk1It has almost 3k coins, and if you look careful, 1GLados (TF's personal address) is also depositing coins here. I asked TF about it, and here is his reply: Hi,
Yeah, BTCOxygen (who I previously regarded as very trusted) kept the coins and completely stopped contact with me when I wanted my money back in Sept this year.
I don't have much hope that he'll suddenly decide to give the BTC back.
The tx from my deposit and 1Glados is regarding 1k coins, I don't know if CL have lended more than that to BTCOxygen, but 1k coins is a minimum. It seem like btcoxygen is running a mining pool, but stopped paying out mining rewards a while ago (thread: https://bitcointalk.org/index.php?topic=127815.400 ). Unless someone knows where to find this btcoxygen guy, I guess we can forget about the (at least) 1k CL did lend btcoxygen. |
|
|
|
|
|
|
|
Martijnvdc
|
|
November 27, 2013, 02:09:35 PM |
|
NO WAY...
the excrement has hit the fan.
TF is not getting away with this...
|
|
|
|
|
|
