LocalBitcoins.com exploit!

[herzmeister]

LocalBitcoins.com exploit!

Do NOT open any attachments within the site's messaging system!

https://localbitcoins.com/forums/#!/general-discussion#regarding-the-passport-imag

[superduh]

attachments such as? exe files?.....

[herzmeister]

a simple HTML with JavaScript that steals the current user's bitcoins from their on-site wallet.

over 1000 BTC stolen already.
https://blockchain.info/address/1EfEy1Ms6swbnfsL3VfLiY3asf9dhDCoCu

[herzmeister]

FAIL!

traders probably don't have their life savings in there, but they do have there what they need for their daily business

[bbit]

LocalBitcoins isn't that where people actually meet in person  why are there bitcoins on the site?

[herzmeister]

LocalBitcoins isn't that where people actually meet in person  why are there bitcoins on the site?

To put them into the site's escrow for example. And the site features not only in-person trading but also various forms of online trading.

[will1982]

Localbitcoins is one of the few places where I can pick up some BTC with Paypal (at a premium of course) . I hope this doesn't affect traders...

[herzmeister]

I hope this doesn't affect traders...

if you dare to take a glimpse into the forums right now... Rome is burning!

[will1982]

I hope this doesn't affect traders...

if you dare to take a glimpse into the forums right now... Rome is burning!

Talk of lawsuits and losses of 13BTC+
Ouch...

[stex2009]

Many lost over 5 BTC. not sure how much is true but most of the posters there are decent sellers.

[will1982]

Many lost over 5 BTC. not sure how much is true but most of the posters there are decent sellers.

Have you personally lost anything?

[BitAddict]

How it works exactly? It releases escrow? It sends bitcoins from wallet (impossible with 2FA)?

[DannyHamilton]

Many lost over 5 BTC. not sure how much is true but most of the posters there are decent sellers.

Have you personally lost anything?

I expect to be out 4.7 bitcoins depending on how they resolve the issue.

[cbhelp]

Coinbase is the way.

Hope you all get repaid.

[culexevilman]

I hope they are fixing this shit, cause a shitstorm is coming...

[Fiyasko]

My gosh, people need to stop setting up bitcoin exchange places without setting up proper security first!
So many places are getting hacked into, WHEN WILL PEOPLE LEARN!?

[BitAddict]

Great news

Attachments will stay disabled for the time being. We will think if we disable the feature altogether.
The total loss related to the file upload scam are very likely 82 BTC. I will start covering losses soon.

And cashouts are working again.

[Cryddit]

My gosh, people need to stop setting up bitcoin exchange places without setting up proper security first!
So many places are getting hacked into, WHEN WILL PEOPLE LEARN!?

People keep putting Coins into online wallets whose security they don't know crap about!  WHEN WILL PEOPLE LEARN?

[justusranvier]

If you are an active seller on LocalBitcoins it's helpful to keep some bitcoins in the wallet in order to be able to fund sales efficiently.

I keep just enough to fund the maximum sale amount I have listed in my ads.

[tclo]

I lost 2.23 BTC to this and not happy.  And you can't even do online sales unless you have BTC in your wallet because they go into escrow most of the time.