|
Elmojo
|
 |
December 25, 2013, 06:44:46 PM |
|
This is just my personal opinion but I am continuing to mine on this pool. Having watched this play out both here & on the IRC channel I feel confident that I am unlikely to lose any more BTC to this hack.
Thank you for the intelligent answer. |
|
|
|
|
|
|
|
|
|
|
|
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
glon
|
|
December 25, 2013, 07:40:18 PM |
|
Lost 0.6 BTC to this hack. Wow, what a Christmas.
Bracing for the worst, hoping for the best now. We need a straight up answer -will we get reimbursed or not?
|
|
|
|
|
|
Ultimist
|
|
December 25, 2013, 08:53:38 PM |
|
Did the hack affect new signups?
A friend of mine has tried to sign up on both IE and Firefox, but keeps getting this error:
INSERT command denied to user 'node'@'li58-8.members.linode.com' for table 'users'
|
|
|
|
|
aTriz
|
|
December 25, 2013, 09:26:32 PM |
|
NEWS:
1. Site is currently in lockdown, NO LOGINS or WITHDRAWALS for now.
2. You can continue to mine with Hashcows if you choose, you will be paid.
3. We will not be making any quick, hash decisions, I understand that many of you are upset/angry, but nobody wins if we do not take our time in this matter and look at all avenues. The only thing I can assure you is we are both working on MULTIPLE ends to figure out what happened and how we are going to rectify this.
The community behind hashcows is truly amazing, from the bad times to the good, most of you have stuck by our side, we appreciate all the support you all have shown.
Merry Christmas,
Hashcows Team
Hopefully will have some more updates within the coming days.
|
|
|
|
|
Elmojo
|
|
December 25, 2013, 09:40:46 PM |
|
NEWS:
1. Site is currently in lockdown, NO LOGINS or WITHDRAWALS for now.
2. You can continue to mine with Hashcows if you choose, you will be paid.
3. We will not be making any quick, hash decisions, I understand that many of you are upset/angry, but nobody wins if we do not take our time in this matter and look at all avenues. The only thing I can assure you is we are both working on MULTIPLE ends to figure out what happened and how we are going to rectify this.
EXACTLY the type of update I was hoping to see, great job Cows! |
|
|
|
|
|
skyhigh2004
|
|
December 25, 2013, 09:42:18 PM |
|
NEWS:
1. Site is currently in lockdown, NO LOGINS or WITHDRAWALS for now.
2. You can continue to mine with Hashcows if you choose, you will be paid.
3. We will not be making any quick, hash decisions, I understand that many of you are upset/angry, but nobody wins if we do not take our time in this matter and look at all avenues. The only thing I can assure you is we are both working on MULTIPLE ends to figure out what happened and how we are going to rectify this.
The community behind hashcows is truly amazing, from the bad times to the good, most of you have stuck by our side, we appreciate all the support you all have shown.
Merry Christmas,
Hashcows Team
Hopefully will have some more updates within the coming days.
Thanks for a small update but I hope you have an answer about the lost coins sooner than a few days. I can't even log in to see "if/what" was stolen. At this point the lack of info from admins about what's going on doesn't help out trust in the pool. I can't even find out if my account was hacked. |
BTC:157BZV5z5dEdEoE5KSr5D7CQGXamLpsZ7n LTC:LYCf5PnQpXCCmpR4ka3mR8DFDe5hKhTdfc
MEC:MAgTT8QdhVCkgHTkUoKvs4w1TQvv3NU99v DGC:D8Ubh9oYTpSe1HEBptY8wf6ZrPpj7bhkV5
FTC:6hb1VsGzkej4kSsssGA4FMnkCoVp7PLi8D PXC:PqQwQKJoYxGSVrKtVfDa5aaJVL9Yevhb2b
|
|
|
Tasweb
Member
 Offline
Activity: 112
Merit: 10
|
|
December 25, 2013, 09:54:02 PM |
|
I doubt your actual account was hacked, this looks like an sql injection done via the website exploiting a security flaw in the sites code. I'm guessing they exposed the database and then injected their own payout address into every payout record. I'm guessing every single account has had it's payout address changed. Mine has. I was able to login a while ago and found my payout address has been changed to 13R87ropkDKzDEuVeQoX64kkcLvPWVdTKH. I haven't lost any coin but would have if the auto payout threshold had been reached.
|
|
|
|
|
|
|
|
coyote
Newbie
Offline
Activity: 58
Merit: 0
|
|
December 26, 2013, 12:01:40 AM |
|
Seems like a very fair report to me. |
|
|
|
|
sprmacholo
Newbie
Offline
Activity: 14
Merit: 0
|
|
December 26, 2013, 12:48:58 AM |
|
mining seems to be working normally, I never logged out of the site to begin with and my est and confirmed balance keeps updating
just can't withdraw or get payouts, as previously stated
|
|
|
|
|
|
yorich
|
|
December 26, 2013, 12:49:59 AM
Last edit: December 26, 2013, 01:02:39 AM by yorich |
|
is there a password reset link somewhere? I can't login to check to see if I was affected, it doesn't take my password. Edit: just saw the post about being locked down. That explains things  |
|
|
|
|
|
willittobe
|
|
December 26, 2013, 12:58:05 AM |
|
Yeah, I was logged in when all this went down. My payout address was not changed, nothing bad happened, but I still decided to change my password. But, the site was already in read-only lockdown, so it didn't work.
We'll just have to wait for the operators to resolve all this before we can log in again.
|
|
|
|
|
dalamar96
|
|
December 26, 2013, 03:07:13 AM |
|
My payout address was changed, but nothing was taken out. Still not going to mine until the payout addy gets changed back.
|
|
|
|
|
swiftshoot
|
|
December 26, 2013, 03:17:59 AM |
|
would be nice if Bitcoin had a feature to stop coin theft like this...
Either way, this can be tracked and found... Bitcoin is NOT like Fiat cash... IT IS Traceable.
I would give 25% of my loss as a reward to catching the crook.
With 40-400 BTC at stake, 10-100 BTC as a reward for bringing the guy to justice would be a nice reward...
Anyone else care to chip into the reward system and get people investigating to catch the MoFu?
time to make a bitcoin assassination fund on the hit market! Never... This is not what I asked for... I asked for getting this guy and bringing him to Justice. Not to assassinate him. I would love to see the guy ROT in jail and let the "shower" guys take good care of him. |
Build your own Cloud Miner! https://cex.io/r/1/swiftshoot/0/ to Make your BTC Mine for you. 3% referral bonus if you sign up others... please use my referral code if you want to join. You can also redeem your hardware after you get enough GHS. btc: ltc: other altcoins: send me PM for address. |
|
|
|
swiftshoot
|
|
December 26, 2013, 03:26:13 AM |
|
Ops should reimburse users, but only partially - if someone is too stupid to leave 0.5+ BTC on pool ran by two (doesn´t matter how honest) guys, where no one can expect robust security platform, deserves nothing more than loose it. During 6 months of mining I lost coins in various scams (Unocs, Orbit Coin, PhenixEx..) and I learned one thing - You are on enemy territory and if You loose, it was by your mistake so blame no one but You.
aTriz and nearmiss did great job here, so stop complain and try to be supportive.
The only person stupid here is you... Be supportive for a bunch of f... amateurs. I WANT MY FUCKING MONEY BACK Glad you are being so mature about all this, we can tell who are the adults in the room! In other news, we continue to have login's/payouts DISABLED, we will update here and in IRC within a few hours after me and nearmiss have a sit down and discuss things. ~Hashcows Team~ P.S. Merry Christmas everyone, sorry to start it off with this bad day! The one thing I would like to honestly know is how they broke into the system and changed everything. In my view, it seems like they broke in by the SQL Database server and mass changed the bitcoin withdrawal address, maybe changed the 4 digit pin code and then triggered the withdrawals. Or they issued the SQL execute command to process the withdrawals bypassing the security protocols. Either way, if Hashcows knows how they did it, please provide detailed evidence and if there was a fault by the software or human error, step forward and announce it. If it is software, it would be best to patch it asap. If Human error, well, you know what to do then... |
Build your own Cloud Miner! https://cex.io/r/1/swiftshoot/0/ to Make your BTC Mine for you. 3% referral bonus if you sign up others... please use my referral code if you want to join. You can also redeem your hardware after you get enough GHS. btc: ltc: other altcoins: send me PM for address. |
|
|
StephenP
Newbie
Offline
Activity: 54
Merit: 0
|
|
December 26, 2013, 05:53:51 AM |
|
Never... This is not what I asked for... I asked for getting this guy and bringing him to Justice. Not to assassinate him.
I would love to see the guy ROT in jail and let the "shower" guys take good care of him.
His death would be justice. Alternatives would be chopping both his hands off and blinding him.  |
|
|
|
|
|
phrozenspite
|
|
December 26, 2013, 05:55:23 AM |
|
Never... This is not what I asked for... I asked for getting this guy and bringing him to Justice. Not to assassinate him.
I would love to see the guy ROT in jail and let the "shower" guys take good care of him.
His death would be justice. Alternatives would be chopping both his hands off and blinding him. gas leak/faulty wiring/loose bolts on car |
|
|
|
Sovietaced
Member
Offline
Activity: 224
Merit: 10
|
|
December 26, 2013, 06:07:21 AM |
|
would be nice if Bitcoin had a feature to stop coin theft like this...
Either way, this can be tracked and found... Bitcoin is NOT like Fiat cash... IT IS Traceable.
I would give 25% of my loss as a reward to catching the crook.
With 40-400 BTC at stake, 10-100 BTC as a reward for bringing the guy to justice would be a nice reward...
Anyone else care to chip into the reward system and get people investigating to catch the MoFu?
time to make a bitcoin assassination fund on the hit market! Never... This is not what I asked for... I asked for getting this guy and bringing him to Justice. Not to assassinate him. I would love to see the guy ROT in jail and let the "shower" guys take good care of him. it was a joke |
|
|
|
|
|
Humanxlemming
|
|
December 26, 2013, 06:26:38 AM |
|
I'm sure the admins will have a way of repaying the missing coins like 0 fees or something like that but right now they are trying to fix what the hacker did.
|
|
|
|
|
|
