Bitcoin Forum
December 13, 2017, 05:37:45 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Mtgox account hacked and emptied by huge mining fee  (Read 2611 times)
bhy
Newbie
*
Offline Offline

Activity: 16


View Profile
October 17, 2013, 03:00:22 PM
 #1

My friend received an email saying a Germany IP address 188.93.8.82 logged into his Mtgox account and made withdrawal. He then came into the account and saw several withdrawals like this:
https://i.imgur.com/zgPYK4Z.jpg

The hacker made several 1 satoshi withdrawal but very high withdrawal fee like 2 or 4 BTC. All withdrawal fee are paid as network transaction fees to miner. You could see the satoshis gone to this address: http://blockchain.info/address/14WPGYVtrVTVWuBsNFArXvXXpxWKJ676yv

My friend has 2FA. But he stored a backup of the 2FA barcode in his harddisk. He emailed Mtgox. But Mtgox basically say it's not their fault.


Several questions:

Does the hacker laundering the stolen BTCs by transaction fee? Then how could the hacker make sure he got the block mined?

How could Mtgox even allow this to happen? At the Mtgox withdrawal page there's "Pay 0.005BTC Fee For Faster Processing (Required for Transactions below 0.01 BTC)", but that doesn't mean such huge fee could be paid.

The mining fee all went to BTC Guild. We are trying to contact BTC Guild and hope to get some coin back...

1513143465
Hero Member
*
Offline Offline

Posts: 1513143465

View Profile Personal Message (Offline)

Ignore
1513143465
Reply with quote  #2

1513143465
Report to moderator
1513143465
Hero Member
*
Offline Offline

Posts: 1513143465

View Profile Personal Message (Offline)

Ignore
1513143465
Reply with quote  #2

1513143465
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
murraypaul
Sr. Member
****
Offline Offline

Activity: 476


View Profile
October 17, 2013, 03:02:10 PM
 #2

Does the hacker laundering the stolen BTCs by transaction fee? Then how could the hacker make sure he got the block mined?

Isn't it more likely that he just screwed up, and meant to send the 2BTC to himself rather than as a fee?

BTC: 16TgAGdiTSsTWSsBDphebNJCFr1NT78xFW
SRC: scefi1XMhq91n3oF5FrE3HqddVvvCZP9KB
Birdy
Sr. Member
****
Offline Offline

Activity: 364



View Profile
October 17, 2013, 03:11:10 PM
 #3

As they were all included in a block by BTC Guild - the biggest mining pool, I don't think the hacker got those coins.
Maybe the hacker screwed up the script of his walletstealer?
bhy
Newbie
*
Offline Offline

Activity: 16


View Profile
October 17, 2013, 03:13:02 PM
 #4

Isn't it more likely that he just screwed up, and meant to send the 2BTC to himself rather than as a fee?

You mean the hacker screwed up? Maybe. However the transactions are sent by Mtgox. And how could Mtgox sent transaction with such a huge fee?
kik1977
Hero Member
*****
Offline Offline

Activity: 585


Wherever I may roam


View Profile
October 17, 2013, 03:34:38 PM
 #5

Isn't it more likely that he just screwed up, and meant to send the 2BTC to himself rather than as a fee?

You mean the hacker screwed up? Maybe. However the transactions are sent by Mtgox. And how could Mtgox sent transaction with such a huge fee?

No, I guess he means if your friend made a mistake and put the 2BTC as a fee while what he wanted to do was sending 2BTC..

We are like butterflies who flutter for a day and think it is forever
bhy
Newbie
*
Offline Offline

Activity: 16


View Profile
October 17, 2013, 03:39:23 PM
 #6

No, I guess he means if your friend made a mistake and put the 2BTC as a fee while what he wanted to do was sending 2BTC..

Note that these transactions are all made from Mtgox. And in the Mtgox withdrawal interface there's no way for you to set a 2BTC fee.

I think there could be some buggy problem in Mtgox to allow this happen.
Birdy
Sr. Member
****
Offline Offline

Activity: 364



View Profile
October 17, 2013, 04:04:02 PM
 #7

No, I guess he means if your friend made a mistake and put the 2BTC as a fee while what he wanted to do was sending 2BTC..
7 times in a row?

Quote
And in the Mtgox withdrawal interface there's no way for you to set a 2BTC fee.

I think there could be some buggy problem in Mtgox to allow this happen.
Maybe it was sent over the Api or something like that.
(I don't use Gox, so I don't know what's possible there, but I've read they have some kind of api feature)
ninjaboon
Legendary
*
Offline Offline

Activity: 1708



View Profile WWW
October 18, 2013, 09:43:17 AM
 #8

Did your friend install antivirus or a firewall on his PC?

Did your friend use Windows or Linux?

There seems to be plenty of malware going around and we need to be vigilant.


Leehoya
Full Member
***
Offline Offline

Activity: 140


View Profile
October 18, 2013, 10:59:48 AM
 #9

Tell your friend to use linux or install a anti virus. I dont really think anyone who wants the bitcoin would use such a huge amount of transaction fees, he might be fooling around and trolling.

MadHasher
Jr. Member
*
Offline Offline

Activity: 30


View Profile
October 18, 2013, 07:55:00 PM
 #10

If your "friend" wants to shed some light on a possible hack on MtGox that could have gone unnoticed, EVERYONE would appreciate it. Otherwise, not much else you can do (I guess) since, as pointed out, the only way this seems possible is by MtGox being hacked, which would mean he would be entitled to get his BTC back from them.
joesmoe2012
Hero Member
*****
Offline Offline

Activity: 756


Ching-Chang;Ding-Dong


View Profile WWW
October 18, 2013, 09:01:21 PM
 #11

Maybe it can be submitted via the API somehow, but there's not a way in the web interface to even specify a fee that high. Have you contacted gox support? What did they say?

MAbtc
Hero Member
*****
Offline Offline

Activity: 574


View Profile
October 18, 2013, 11:51:27 PM
 #12

Maybe it can be submitted via the API somehow, but there's not a way in the web interface to even specify a fee that high. Have you contacted gox support? What did they say?
This is what I am confused about. I don't trade on Gox, so excuse my noobish sentiment, but do you have a choice re the fee you pay on BTC withdrawal there? Like, on Bitstamp, there is no fee on BTC withdrawals, and on BTC-E, it is like .001 fee.
vm1990
Legendary
*
Offline Offline

Activity: 1260


bloginhell.me


View Profile WWW
October 19, 2013, 05:26:29 PM
 #13

sounds like they went trough the API this would allow them to mess up the transaction fees.. the only transaction fee you can choose is a tick box of 0.005 so its either a server exploit of API exploit both of which could or couldnt be your friends fault but should be serious concern to mtgox..

▄▄▄▄▄▄
▄▄▄▄
▄▄
▄▄▄▄▄▄
▄▄▄▄
▄▄
▄▄▄▄▄▄
▄▄▄▄
▄▄
.JOIN THE CLUB !
 Bitcointalk.club
▄▄▄▄▄▄
▄▄▄▄
▄▄
BLOG:  www.bloginhell.me        BTC: 192tyaiwWxJ2UhSxUCbQW4JuA3Le5CEhWH                 Free 5GB Storage Cloud.Bloginhell.me 
Dougie
Full Member
***
Offline Offline

Activity: 211


You are not special.


View Profile
October 20, 2013, 07:38:53 AM
 #14

Tell him to contact BTC Guild with proof of what happened and they should give him his coins back. Generally pools pay back accidentally high transaction fees and this is a similar situation only the hackers mistake works in his favour.

Lurking since 2011...
1J4DhU3q6RxxCTfAAcg5ExVK6FfxkmzkTH
Delerium
Newbie
*
Offline Offline

Activity: 18



View Profile
October 20, 2013, 10:49:21 AM
 #15

sounds like they went trough the API this would allow them to mess up the transaction fees.. the only transaction fee you can choose is a tick box of 0.005 so its either a server exploit of API exploit both of which could or couldnt be your friends fault but should be serious concern to mtgox..

This - website does not allow you to change the amount of the trading fee. You've had your key and secret stolen somehow from your local machine. 2FA will not help in this instance unfortunatley.

Delerium - IRC Helper
MtGox FAQs and Announcements:  *Link Removed*
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!