Network Attack on XVG / VERGE

[Dogedarkdev]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Looking at the block explorer some of the new blocks are still out of order according to the time stamps. Doesn't that suggest the exploit is still being used? I'm just having a hard time trying to figure out why you believe it only happened for 3 hours. What's to stop the exploit from being used for the rest of the night, therefore stealing more than 250k coins?

nothing, until we release the updated wallets. the way i see it, is this attack has a cost, and will end when we push the update. you aren't invested in verge though, so why are you so concerned?

[1715037074]

1715037074

[1715037074]

1715037074

[1715037074]

1715037074

[Dogedarkdev]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Sorry this is not true, the attack started on block  2007365 and ended on block 2010039 = 2674 blocks, okay lets say 2500 blocks...

One Block makes about 1560 coins, so you have 2500 * 1560 = 3.900.000 "extra" coins generated (at least!) ....

I've listed a few of the attackers addresses in the first post.. Just check them, check the balance and if you're curious, just go through all the blocks during that timespan and sum them up.. It's actually easy when you have a blockexplorer database running.. You can do it via SQL query.

not all blocks during that time were mined by them, i checked. it was much less than half from what i saw across the other pools.

edit: although it is still vulnerable until tmrw, most blocks are being found by valid pools.

[ocminer]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Sorry this is not true, the attack started on block  2007365 and ended on block 2010039 = 2674 blocks, okay lets say 2500 blocks...

One Block makes about 1560 coins, so you have 2500 * 1560 = 3.900.000 "extra" coins generated (at least!) ....

I've listed a few of the attackers addresses in the first post.. Just check them, check the balance and if you're curious, just go through all the blocks during that timespan and sum them up.. It's actually easy when you have a blockexplorer database running.. You can do it via SQL query.

not all blocks during that time were mined by them, i checked. it was much less than half from what i saw across the other pools.

Well.. I checked it as well, in fact I've got the logfiles and started working through them but I have other things todo instead of going through logfiles.. From what I see 95% of the blocks during that time went to "them".. And i'm pretty certain about that..

Okay, lets say they STILL don't have ALL of the blocks (which is wrong), there were STILL almost 3000 blocks generated during a very short time, so over 3.900.000 coins (at least) were extra-generated... Where did they go ? I don't see those blocks on the "big" pools...

[miserymachine]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Looking at the block explorer some of the new blocks are still out of order according to the time stamps. Doesn't that suggest the exploit is still being used? I'm just having a hard time trying to figure out why you believe it only happened for 3 hours. What's to stop the exploit from being used for the rest of the night, therefore stealing more than 250k coins?

nothing, until we release the updated wallets. the way i see it, is this attack has a cost, and will end when we push the update. you aren't invested in verge though, so why are you so concerned?

So you're saying that the exploit is still unresolved, correct? Also, there are lots of other people who ARE invested in your coin, that is why people are concerned.

[ChekaZ]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Sorry this is not true, the attack started on block  2007365 and ended on block 2010039 = 2674 blocks, okay lets say 2500 blocks...

One Block makes about 1560 coins, so you have 2500 * 1560 = 3.900.000 "extra" coins generated (at least!) ....

I've listed a few of the attackers addresses in the first post.. Just check them, check the balance and if you're curious, just go through all the blocks during that timespan and sum them up.. It's actually easy when you have a blockexplorer database running.. You can do it via SQL query.

not all blocks during that time were mined by them, i checked. it was much less than half from what i saw across the other pools.

Well.. I checked it as well, in fact I've got the logfiles and started working through them but I have other things todo instead of going through logfiles.. From what I see 95% of the blocks during that time went to "them".. And i'm pretty certain about that..

Okay, lets say they STILL don't have ALL of the blocks (which is wrong), there were STILL almost 3000 blocks generated during a very short time, so over 3.900.000 coins (at least) were extra-generated... Where did they go ? I don't see those blocks on the "big" pools...

You may need to explain him what a blockexplorer is that he can verify it himself  

[5o5kY]

@ChekaZ

You're more toxic then a radioactive piece of shit. Why? How does that help you? Tron fan or...?

[LinuxDude]

My wallet synced just fine and didnt get stuck on any blocks. I also sent coins from Binance to my Wallet and were confirmed on the XVG blockchain. They arrived within 1-2 mins.

[ocminer]

My wallet synced just fine and didnt get stuck on any blocks. I also sent coins from Binance to my Wallet and were confirmed on the XVG blockchain. They arrived within 1-2 mins.

They rolled back the "fix" and hopefully fork it correctly this time..

[whisperitplease]

My wallet synced just fine and didnt get stuck on any blocks. I also sent coins from Binance to my Wallet and were confirmed on the XVG blockchain. They arrived within 1-2 mins.

My wallet has only synced once since the initial attack.  Yiimp shows a transaction from 50 minutes ago, but it hasn't hit my wallet.  

[siege3967]

I just came here to say that the verge team is still full on trying to act like this is no big deal. They're acting like the issue is resolved on telegram and are banning anyone who point people to this thread. The exploit is being exploited right now...

[khaled0111]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Looking at the block explorer some of the new blocks are still out of order according to the time stamps. Doesn't that suggest the exploit is still being used? I'm just having a hard time trying to figure out why you believe it only happened for 3 hours. What's to stop the exploit from being used for the rest of the night, therefore stealing more than 250k coins?

nothing, until we release the updated wallets. the way i see it, is this attack has a cost, and will end when we push the update. you aren't invested in verge though, so why are you so concerned?

I hope you will release the update as soon as possible and stop the hackers attacks.
Even if he didn't invest with you, he still have the right to share his thoughts (respectfully), you have to consider him or any one else as a potential investor.

[CHIEF56]

I just came here to say that the verge team is still full on trying to act like this is no big deal. They're acting like the issue is resolved on telegram and are banning anyone who point people to this thread. The exploit is being exploited right now...

Meanwhile, I'm watching millions in USD being siphoned off. RIP

[AnabolicRampage]

I'm just here for the drama, I have my popcorn ready.

[Mcoinzy]

we are not doing a rollback and we are preparing a fork to patch this up.

Sorry to mess up this thread and topic a bit, but after i do not get for hours an answer on twitter, neither does the email function on the Verge homepage work, nor does someone respond on the Verge Bitcoin thread i have to try my luck here.

I visited some hours ago the official Verge Twitter profil to read the news about the hash hack. While reading the tweed i noticed several messages offering a compensation for the attack by Verge. Send x Eth and you get some bonus back. Sounded legit to me as it was affilated to the hash attack and i suffered from it as well having had some hours only orphaned blocks on all my baikals, hence i fall victim to this damn scam on the official twitter page.

Now, while i have myself for sure some vault for this i'am seriously angry about how on the official verge twitter page 100s of scams and fake messages that say they got the ETH back are tolerated and nobody cares about it?!?! How is this possible. After i realized i got scammed i even made a post in this tweet that its a scam and to remove it asap, nothing happened and people still fall after that scam. Only on that scam by now 12+ Eth have been transfered the last hours. .

Damn, i'am not a twitter guy and very rarely use it, but from an official Verge twitter profil i personal await its clean and at very least if this for some reason is not possible that there are warning messages about these scams!!!! But no, nothing, the whole official Verge Twitter profil is FULL of scams that are tolerated and people like me, fall victims to it. Fine, i lost some 1.8 ETH, but hourly these scams seems to collect a huge amount of ETH that way and nobody there at Verge cares?

Seriously, so far i wondered about the twitter decision to ban crypto, but i begin to understand the decision. They must get shitload of complains from victims like me.....

And what makes me even more angry ... no response:
- Messaged some hours ago verge on twitter .... nothing, scams are staying and getting more and more
- Put a tweet on the Verge tweet to remove the scams .... nothing, scams are just staying there
- posted in the official bitcointalk Verge thread, nothing ......
- tried to email Verge about the ongoing scams .... email function on the homepage isn't even working, it just loads forever. And after 5 attempts to load it still loads after 2 hours, lol.

I'am writting this as a XVG miner and lover, but this all makes me really sad and angry .....

Sorry to say, but this has been a huge problem for some time. Bots post on every single crypto profile with the same exact scam, people probably ignored you because they thought you were joking about it, since people literally joke about getting ripped off by these scammers,,, because we have seen it literally every post for months. Im very sorry for your loss sir, but you cant go placeing blame on others

[siege3967]

we're putting out an update, and it will fix it. that's what we can do. it's the best we can do. no, they did not 13 hours of coins. it was some blocks during a 3 hour period.

something around ~250k coins, and the attack probably cost alot more than that, luckily.

we are glad this was brought to our attention, and we are already working on a sophisticated block verification routine.

Looking at the block explorer some of the new blocks are still out of order according to the time stamps. Doesn't that suggest the exploit is still being used? I'm just having a hard time trying to figure out why you believe it only happened for 3 hours. What's to stop the exploit from being used for the rest of the night, therefore stealing more than 250k coins?

nothing, until we release the updated wallets. the way i see it, is this attack has a cost, and will end when we push the update. you aren't invested in verge though, so why are you so concerned?

I hope you will release the update as soon as possible and stop the hackers attacks.
Even if he didn't invest with you, he still have the right to share his thoughts (respectfully), you have to consider him or any one else as a potential investor.

The dev has always been nonchalant about stuff like this. Almost acts like it's not his fault.

[mvd]

I just came here to say that the verge team is still full on trying to act like this is no big deal. They're acting like the issue is resolved on telegram and are banning anyone who point people to this thread. The exploit is being exploited right now...

Based on what I see from the dev postings here it's apparent that if ocminer had never brought this to everyone's attention, the XVG team would have never admitted to or disclosed what happened.

Trying to downplay and being flippant about the severity here is just pissing on the XVG faithful.

[LinuxDude]

I just came here to say that the verge team is still full on trying to act like this is no big deal. They're acting like the issue is resolved on telegram and are banning anyone who point people to this thread. The exploit is being exploited right now...

Sounds to me like you're fudding to try to drive the price down.

[siege3967]

I just came here to say that the verge team is still full on trying to act like this is no big deal. They're acting like the issue is resolved on telegram and are banning anyone who point people to this thread. The exploit is being exploited right now...

Sounds to me like you're fudding to try to drive the price down.

FUD- fear, uncertainty and doubt. There's nothing uncertain or doubtful about this. You xvg fanboys use acronyms you don't know the meaning of a lot.

[EVERYUSERNAMEISTAKEN]

Sounds to me like you're fudding to try to drive the price down.

Sounds like to me you have no clue what you're talking about because he's not wrong.

[boxalex]

we are not doing a rollback and we are preparing a fork to patch this up.

Sorry to mess up this thread and topic a bit, but after i do not get for hours an answer on twitter, neither does the email function on the Verge homepage work, nor does someone respond on the Verge Bitcoin thread i have to try my luck here.

I visited some hours ago the official Verge Twitter profil to read the news about the hash hack. While reading the tweed i noticed several messages offering a compensation for the attack by Verge. Send x Eth and you get some bonus back. Sounded legit to me as it was affilated to the hash attack and i suffered from it as well having had some hours only orphaned blocks on all my baikals, hence i fall victim to this damn scam on the official twitter page.

Now, while i have myself for sure some vault for this i'am seriously angry about how on the official verge twitter page 100s of scams and fake messages that say they got the ETH back are tolerated and nobody cares about it?!?! How is this possible. After i realized i got scammed i even made a post in this tweet that its a scam and to remove it asap, nothing happened and people still fall after that scam. Only on that scam by now 12+ Eth have been transfered the last hours. .

Damn, i'am not a twitter guy and very rarely use it, but from an official Verge twitter profil i personal await its clean and at very least if this for some reason is not possible that there are warning messages about these scams!!!! But no, nothing, the whole official Verge Twitter profil is FULL of scams that are tolerated and people like me, fall victims to it. Fine, i lost some 1.8 ETH, but hourly these scams seems to collect a huge amount of ETH that way and nobody there at Verge cares?

Seriously, so far i wondered about the twitter decision to ban crypto, but i begin to understand the decision. They must get shitload of complains from victims like me.....

And what makes me even more angry ... no response:
- Messaged some hours ago verge on twitter .... nothing, scams are staying and getting more and more
- Put a tweet on the Verge tweet to remove the scams .... nothing, scams are just staying there
- posted in the official bitcointalk Verge thread, nothing ......
- tried to email Verge about the ongoing scams .... email function on the homepage isn't even working, it just loads forever. And after 5 attempts to load it still loads after 2 hours, lol.

I'am writting this as a XVG miner and lover, but this all makes me really sad and angry .....

Sorry to say, but this has been a huge problem for some time. Bots post on every single crypto profile with the same exact scam, people probably ignored you because they thought you were joking about it, since people literally joke about getting ripped off by these scammers,,, because we have seen it literally every post for months. Im very sorry for your loss sir, but you cant go placeing blame on others

I'am well aware of my own vault and in my 25 years internet career its the first time i got scammed. (Seems its never too late, lol).
BUT, i see the vault has well partly at others. For example why is there no delete button for the profil owner/user to delete such scam messages. This, in my opinon, opens just all doors for such scams. Second, if a given person/company is aware of such nonstop scam activity, the very least they can do is to set a huge warning banner/message above all other things.

And again, i would have been fully on alert if this was any random side/forum/advert/whatever, but being on a well known official company profil/site took my guard down, hence why i ask for warning messages/banner to prevent others to fall into such scam trap and lose their money. 1.8 ETH i lost, ok, not that much, but not a bit either, but there are people that send even a lot more. The least