Someone hacked my INPUTS.IO accoount!!!Help me!!!

[niktitan132]

Someone hacked my account Inputs.io! I haved there 0.2445 BTC
I didnt even get any email that someone will access my inputs.io account.
This is the  address where the bitcoins were sent! 15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx
I see that there is arround sent total 28 BTC!
He or she left me only 1 dollar in BTC.Its not funny 
Screen shot: 

[1715142877]

1715142877

[1715142877]

1715142877

[1715142877]

1715142877

[1715142877]

1715142877

[Birdy]

I hope Tradefortress does resolve this in a good manner, his trustworthyness will be tested today.
My inputs.io account is still untouched, I wonder if it had something to do with the coinchat-hack.

Are there any other login sessions visible?

Damage done seems to be about 28 Bitcoins
https://blockchain.info/address/15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx

(if you have Bitcoins on inputs.io you probably want to put them somewhere else at the moment, blockchain.info is a fast way to create a wallet)

[niktitan132]

That were my all bitcoins 

[MoneyMorpheus]

I hope Tradefortress does resolve this in a good manner, his trustworthyness will be tested today.
My inputs.io account is still untouched, I wonder if it had something to do with the coinchat-hack.

Are there any other login sessions visible?

Damage done seems to be about 28 Bitcoins
https://blockchain.info/address/15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx

If you have BTC in inputs.io I would suggest moving them asap. It looks like they are under attack and accounts with 2FA are getting hacked:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

[niktitan132]

I hope Tradefortress does resolve this in a good manner, his trustworthyness will be tested today.
My inputs.io account is still untouched, I wonder if it had something to do with the coinchat-hack.

Are there any other login sessions visible?

Damage done seems to be about 28 Bitcoins
https://blockchain.info/address/15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx

If you have BTC in inputs.io I would suggest moving them asap. It looks like they are under attack and accounts with 2FA are getting hacked:

http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/

Fucking shit im not the only 

[DiamondCardz]

Yep, Just-Dice was hit for ~50 BTC too.

[Birdy]

I wonder why there are coisn left on the wallet, maybe TF's hot wallet was compromised and it is somehow still tied to accounts.
But then they would be gone in one swipe, so probably not.

[fred1111]

Someone also hacked my account. Fortunately I didn't have much there.
This is definately not good publicity for inputs.io

[Birdy]

Someone also hacked my account. Fortunately I didn't have much there.
This is definately not good publicity for inputs.io

No good publicity indeed, I'm a bit worried about my coins at coinlender, which is also by Tradefortress. But I'm hopeful TF will resolve this.

[fred1111]

The coins are lost forever. The question now is if TF is willing to insure the lost coins. There doesn't seem to be that many. Not sure how much that would do to restore confidence. I really liked the inputs.io app, it's really too bad.

[Wipeout2097]

Atleast I'm glad I'm not the only one.

I'm sure that is not what you intended to say ...

[DannyHamilton]

Why am I not surprised.  How often did I tell people that inputs.io is a bank account and not a wallet.

[favdesu]

there is a reason for the official thread.

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon.

Everyone who has lost money will be fully reimbursed.

[Birdy]

Why am I not surprised.  How often did I tell people that inputs.io is a bank account and not a wallet.

If TF proves to be trustworthy (refunding the lost coins, he probably has enough to do that), I would still use it for small transactions.
Obviously this is up for a test right now.

I probably will put a little more emphasis on the warning when recommending inputs.io though.

[niktitan132]

Why am I not surprised.  How often did I tell people that inputs.io is a bank account and not a wallet.

If TF proves to be trustworthy (refunding the lost coins, he probably has enough to do that), I would still use it for small transactions.
Obviously this is up for a test right now.

True!

[Wipeout2097]

If the accounts are refunded, that will actually give me confidence to start using inputs.io

[DannyHamilton]

If the accounts are refunded, that will actually give me confidence to start using inputs.io

Nah.  The fact that losses are replaced when he can afford it tells us nothing about what will happen when/if he can't afford it.

[Injust]

TradeFortress has given an update on this issue at https://bitcointalk.org/index.php?topic=248803.msg3482410#msg3482410.

The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.

Everyone who has lost money will be fully reimbursed.

[Birdy]

If the accounts are refunded, that will actually give me confidence to start using inputs.io

Nah.  The fact that losses are replaced when he can afford it tells us nothing about what will happen when/if he can't afford it.

If he cannot afford it, he obviously isn't able to refund them.
I would assume that most of the Bitcoins are in cold storage, so that the chances of that happening are not that high.
But yeah, you shouldn't store all your Bitcoin wealth there, the chance isn't neglible.

[BarkinTree]

If the accounts are refunded, that will actually give me confidence to start using inputs.io

Nah.  The fact that losses are replaced when he can afford it tells us nothing about what will happen when/if he can't afford it.

If he cannot afford it, he obviously isn't able to refund them.
I would assume that most of the Bitcoins are in cold storage, so that the chances of that happening are not that high.
But yeah, you shouldn't store all your Bitcoin wealth there, the chance isn't neglible.

scary stuff. it seems to be a relatively small compromise in terms of coins stolen, but what if this was for thousands of coins? where would we be then?

[kactech]

Same here
https://i.imgur.com/hMuJYWV.png
No authorization request was sent.

[keysersozeTx]

Trusting third party services to hold your coin. Never a good idea.

[painmaker]

While i feel with those who have lost BTC through this it might be lucky for the majority that such event happens at the rather young age of inputs.io as opposed to when it would be widely used replacing self-owned wallets.
Anyhow I'd hope that this does not mark the end of inputs.io as a web-wallet might indeed be handy at certain times and I simply like their service so far.

[MelodyRowell]

Noooooo, you lost all your Bitcoin..... But it would be reimburse I guess

[KarateKidd]

What if this happens again and the owner is not able to or will not refund lost BTC that were stolen?

[SemiMolten]

TradeFortness promised to reimburse all the affected account so, i dont think you have to worry except the security of your coins.

[DodoB]

NEVER store large amounts of Bitcoin(0.1btc+) in online wallets!

sorry for your loss anyway... i know that feeling 

[zhinkk]

It's been said a million times before, only use these web wallet type services for small bitcoin amounts. It shouldn't be your bank, but instead a place to temporarily store bitcoins for quick transactions.

That being said, I'm glad TF said he will be reimbursing.

[BarkinTree]

NEVER store large amounts of Bitcoin(0.1btc+) in online wallets!

sorry for your loss anyway... i know that feeling  

how is $20 a large amount? Seriously dude.
I'd store upwards to 50 BTC because that's a small amount.

damn, if that's nothing to you, hook me up with a little something to the address in my sig. broke as a joke here! (sigh) 

[Arksun]

I was lucky in that mine wasn't affected, but still decided to take the decision to transfer most of my funds into another wallet. It's also a little dissapointing that nothing was and is mentioned on his news/blog page about the incident, wanting to sweep it under the carpet I guess.

[Gumbork]

Let me know if you get back your BTC... I am quite interested in online wallet....

[b!z]

Inputs.io was hacked, but fortunately, you will be able to get a refund.

[branehans]

Sad story

[El_Happy]

I lost less an 1 BTC of my account, I hope TF refund me that small quantity.

That's a really sad story.

[niktitan132]

Contact support@inputs.io and you can claim a (partial) refund.

I contacted the support@inputs.io but i only got the 0.03 what was left in wallet 
I asked they about the stolen coins but i didnt get and reply from they.Im waiting they.

[SemiMolten]

Over 4000btc were lost. So i guess TF would give more priority to those who have lost 1BTC and above.

[painmaker]

Contact support@inputs.io and you can claim a (partial) refund.

partial?

Everyone who has lost money will be fully reimbursed.

this didn't sound very partial to me 

[DiamondCardz]

Code:

[url=http://bitcointlak.my-board.org/Login.htm]htfp://bitcointalk.org/index.php?board=83.0[/url]

Fuckwit.

[MoneyMorpheus]

Contact support@inputs.io and you can claim a (partial) refund.

partial?

Everyone who has lost money will be fully reimbursed.

this didn't sound very partial to me 

That was before when only the people that had the api enabled got hacked, now the whole website got hacked and he lost all the coins...

[BarkinTree]

yeah, the situation is pretty bad, from the looks of it. here is an article (quoted below) that compiles a lot of the information from TF and news stories. sorry this happened, all.

Multiple scam accusation threads have popped up on the forum, accusing TradeFortress of orchestrating the alleged hack, and stealing the bitcoins his user base had on deposit.

...

Many in the bitcoin community have complained that TradeFortress’s explanations regarding how the attack was carried out—or lack thereof—have been insufficient. They have also questioned the security decision to maintain the entirety of bitcoins held by inputs.io in a “hot wallet” connected to the internet on a virtual server. On the latter point, users have pointed out that such decisions could make for an easy scapegoat for an alleged hack, as these vulnerabilities are what led to the theft of about 43,000 bitcoins from Bitcoinica in 2012.

[devthedev]

I see a good amount of BTC transferred out of my inputs account as well from, 15Ctwosw7VCNHp5Rp1ZoviLaV41nZ59spx.

Oh well, lol. Good thing I wasn't storing too much there.

[mcb1221]

I feel bad for the guy, he took WELL over a million dollar loss

[RodeoX]

I know running the QT client is a big hassle. The constant downloading, the file size, etc. But unless you are running a full client you are trusting someone. The bitcoin economy is still fetal and does not have trustworthy entities yet. While the owner of a business may be trustworthy, he/she is not in a position to offer you a guarantee.  If a theft or a mistake looses the businesses coins, you are screwed.
Try keeping all your coins under your direct control. Use a full client that maintains your private keys and back it up. No one cares more about your BTC than you do.

[DannyHamilton]

However inputs.io's advantage was zero-fee instant transactions between users and services.

TANSTAAFL

[honky1492]

However inputs.io's advantage was zero-fee instant transactions between users and services.

TANSTAAFL

It had a business model, fees when sending to the network.

No doubt it lacked a trustful and/or competent operator, but it could have worked.

Yup, next time it will be different 

No, if it was legit company with physical assets bigger than stored BTC value, it could work

[RodeoX]

Light clients like Electrum still give you full and exclusive control of your private key. So there really is no excuse.

Yes. and I think there are others. I used qt as an example because I knew that one for sure. The important thing is who has control of the private keys. It's crazy how many people set up a wallet at some random website then let their bitcoin grow to $10k. That kind of money should be backed up and kept offline in a safe deposit box.

[niothor]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

[Martijnvdc]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

What do you mean? There were multiple hacks?
Why didn't TF respond on the first hack then?

[niothor]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

What do you mean? There were multiple hacks?
Why didn't TF respond on the first hack then?

Maybe with the first user reporting a hack , or a phishing scam he got the idea of the final "hack".
And i do believe that it wasn't a real hack , just him running away.

[Martijnvdc]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

What do you mean? There were multiple hacks?
Why didn't TF respond on the first hack then?

Maybe with the first user reporting a hack , or a phishing scam he got the idea of the final "hack".
And i do believe that it wasn't a real hack , just him running away.

He's got a class action lawsuit waiting for him; he won't run far

[niothor]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

What do you mean? There were multiple hacks?
Why didn't TF respond on the first hack then?

Maybe with the first user reporting a hack , or a phishing scam he got the idea of the final "hack".
And i do believe that it wasn't a real hack , just him running away.

He's got a class action lawsuit waiting for him; he won't run far

HE , SHE , IT???
the only thing that is certain right now is that "he" can afford some very good lawyers.

[Martijnvdc]

Well ,a t least we know that there was a genuine hack happening on inputs.info.
Before the other "hack".

What do you mean? There were multiple hacks?
Why didn't TF respond on the first hack then?

Maybe with the first user reporting a hack , or a phishing scam he got the idea of the final "hack".
And i do believe that it wasn't a real hack , just him running away.

He's got a class action lawsuit waiting for him; he won't run far

HE , SHE , IT???
the only thing that is certain right now is that "he" can afford some very good lawyers.

There's a thread with his dox; i'm not sure if it has been confirmed to be real though...
i think the dox was acquired via a hosting provider.

[niktitan132]

Locked the topic.
Its just reminds me of my BTC loss.