Bitcoin Forum
September 25, 2018, 08:05:13 PM *
News: ♦♦ New info! Bitcoin Core users absolutely must upgrade to previously-announced 0.16.3 [Torrent]. All Bitcoin users should temporarily trust confirmations slightly less. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 »  All
  Print  
Author Topic: CoinLenders, Inputs.io, Tradefortress (HACK)  (Read 39020 times)
This is a self-moderated topic. If you do not want to be moderated by the person who started this topic, create a new topic.
DumbFruit
Sr. Member
****
Offline Offline

Activity: 433
Merit: 253


View Profile
November 08, 2013, 06:03:54 PM
 #1

What happened
On October 24rd 6:37am UTC+10:, Inputs.io's hot wallet, of 4000btc, was emptied by a hacker.1 2
TradeFortress claimed the hack occurred on the 26th.3

His Linode administrative account was first accessed by the hacker on Oct 23rd, from IP Address 101.0.79.18, at 11:57am UTC+10 from Australia4.

He gained access to the account by compromising the email address "lailai625@hotmail.com" and requesting a password reset from the Linode server. The reset link was automatically forwarded from the administrative email "admin@glados.cc" to "lailai625@hotmail.com".5
He did not stop forwarding emails until October 27th UTC+10.5

TradeFortress reset his Linode Manager password and logged into it by 8:25pm UTC+10.4

Between 8:25pm UTC+10 and 6:37am UTC+10, Tradefortress did not shut down the site, he did not move any of the coins to a cold wallet, he did not report the theft to local authorities, he did not notify any depositors, and he did not stop any new users from depositing to his site.

Sometime after this but before second hack, TradeFortress enabled 2FA on his Linode Manager.5

On November 8th at 6:01am UTC+10, the server was hacked again using a direct Lish connection, bypassing 2FA and stealing an additional 160 bitcoins.6

By his own admission, TradeFortress was embezzling the deposits of new users to distribute the bitcoins to users that had lost their entire deposits during the hack.

TradeFortress did not have any bitcoins stored in a cold wallet either for CoinLenders.com or Inputs.io.

CoinLenders was affected, because it had a Inputs.io wallet.


If you are a victim.
The following will help you to report to the proper authorities;

United States:
http://travel.state.gov/travel/cis_pa_tw/cis/cis_4522.html

Goal of this thread
I would like Coinlenders users and Inputs.io users to post relevant information, and I would like to put together a list of users and their claims. I have requested similar documentation from TradeFortress.

I am not interested in any kind of speculation, fiction, trolling, unbacked accusations, "pity-me" stories, or any other kind of uninformative posts. They will be deleted.

Public information regarding this hack will be collated and placed here.

This is to assist in investigation, inform those at stake, perform verification and oversight, and prune useless information.

Australian law enforcement activity
TradeFortress and his hosting provider are located in Australia, and although I do not have any hard evidence to post, I am sure that Australian law enforcement has been notified.

TradeFortress' identifying information
https://bitcointalk.org/index.php?topic=327178
http://www.abc.net.au/news/2013-11-08/bitcoin-site-hacked-founder-says/5078148

Current plans for remuneration
Inputs.io accounts are being refunded partial amounts inversely proportionate to the amount of BTC they had at Inputs.io, using a sliding scale.
As a rough estimation (see blow), deposits of over 10btc are refunded less than 50%, deposits below 10btc are refunded greater than 50%.

There has been no announcement yet regarding CoinLenders Deposits.

Inputs.io and Coinlenders account balances.
Please send a private message to me, or post below to be added to this list. You will be anonymous unless you explicitly tell me otherwise, or post the information publicly. They will not be verified unless I can get reputable documentation (Most likely from TradeFortress).

I am including interest, because that is owed even if TradeFortress is unable to pay it.

Users will be posted as [Username]:[BTC owed]:[BTC returned]:[Unverified/Verified]

CoinLenders
DumbFruit:955.24559517:199.383
Anonymous:652.92445572:0:U
MaximGuns:531.87697838:0:U
Anonymous:332.2162344:0:U
Anonymous:327.3652095:0:U
summerysnow:299.03625778:0:U
Anonymous:284.39655444:0:U
Anonymous:244:0:U
mion:236.77:0:U
druid:222.7:0:U
Bradyon:226.07010047:0:U
Anonymous:189.36658901:0:U
Anonymous:151.15913821:0:U
dwdoc1:150.42238118:0:U
Anonymous:147.46497819:0:U
Anonymous:144:U
Anonymous:112.13755308:0:U
Anonymous:102.89:0:U
drsteve:102.13386171:0:U
ohyeahok:88:0:U
hwmax:86.93779676:0:U
Anonymous:76.31622447:0:U
ninjaboon:75.23241838:0:U
docdocdoc9:53.98199194:0:U
Anonymous:47:0:U
gotpetum:43.51560284:0:U
BTCWarrior:35.62:0:U
Anonymous:32.15938119:0:U
sleger:30.88981146:0:U
goodtimes73:28.58:0:U
001sonkit:26.44:0:U
currencyforall:21.84629652:0:U
Anonymous:21.14:0:U
Anonymous:20.62151404:0:U
Anonymous:20.01551996:0:U
windywinter:20:20:U               <--Mistake
btckmtan@qq.com:19.89484849:0:U
expodryerase:18.51941806:0:U
MaxwellsDemon:17.45:U
ace207:16.68791006:0:U
4btconly:16.20130365:0:U
nsd:15.90443981:0:U
Anonymous:15.78:0:U
TwinWinNerD:15.55:0:U
flmbg:15.15:0:U
cismasu:15:0:U
Dougie 12.857412:0:U
Anonymous:10.89:0:U
toer:10.77683827:0:U
Anonymous:10.6815:0:U
dunkbc:10.5627535:0:U
davecoin:10.05859733:0:U
gog1:9.80594344:0:U
doctorbit:8.7:0:U
Anonymous:8.39168696:0:U
Anonymous:8.10636761:0:U
InvalidSnack:7.69121463:0:U
Anonymous:6.28562606:0:U
C10H15N:6.00038338:0:U
chrishastie27:5:0:U
batman:5:0:U
gravity_boy:4.01865378:0:U
misterwiser:4.00660825:0:U
gravity_boy:4.01865378:0:U
favdesdu:4:0:U
Dorpsgek:3.66741301:0:U
joele:3.65732106:0:U
mobile314:3.59998956:0:U
ezacarias:3.593:0:U
Xrim:3.5423:0:U
CoinLenders01:3.42991422:0:U
Anonymous:3.14700032:0:U
maraoz:3.0521687:0:U
davedx:3.01:0:U
wayner:2.97:0:U
efc17:2.96594563:0:U
poolbath1:2.84476076:0:U
wheelerscw2000:2.56224724:0:U
hsharrison:2.43970326:0:U
goodhope:2.08111493:0:U
EntropiaFox:1.97655724:0:U
Daytona:1.80:0:U
Anonymous:1.70787314:0:U
artbatista:1.62:0:U
mxisaac:1.50021415:0:U
smithd98@gmail.com:1.5001855:0:U
ahbartsch:1.42248522:0:U
asanerworld: 1.09027010:0:U
simonsaysmine:1.07027926:0:U
Anonymous:1.0610762:0:U
Zedeius:1.05606876:0:U
kilerz:1.05240088:U
Nesa:1.03:0:U
ccpearce:1:0:U


Total Owed:6514.894239
Total Paid:219.383

Users:94


Inputs.io
TomJeff:440:0:U
Miles:40:0:U
dwdoc1:20.795:8.59:U
HereToTrade:7.74:3.54:U
lonestar108:7.44986999:0:U
simple-dice:4.21:2.58:U -No fee, unconfirmed.
quimpstar:2.785:1.69:U -Unconfirmed
Anonymous:2.2:0:U
Korbman:1.1263595:0.85:U
Anonymous:1:0.74:U
Anonymous:1:0:U
Anonymous:0.55487:0.45:U
Anonymous:0.5:0.4:U
ChrisJ:0.2996:0:U
bitcoincasinoprojof:0.26:0.26:U
niktitan132:0.2445:0.03:U
snuff:0.2856333:0.23:U
Anonymous:0.099:0.08:U
Ashu:0.08238875:0:U
redtwitz:0.08209722:0:U
GoldBit89:0.06972042:0.06:U -No fee, unconfirmed.
Anonymous:0.63:0.5:U
misterwiser:0.03079955:0:U

Total Owed: 531.4448387
Total Paid: 20

Users:23


Food for thought..
I do not show this quote to imply that TradeFortress was a scammer, but that the problem that I find myself in, and how to try to avoid it, was written a year before this event took place. So I'm putting it here in case you find it as educational as I did;

This system is obviously far from perfect at the current time. For one, as it is nascent there exists the incentive to follow short term goals : build an identity up to whatever value, then strip it by taking the money and splitting. This has happened so far numerous times, and from a certain perspective it may seem the main economic activity surrounding Bitcoin at the moment, greatly compounded by the yet inept identity-valuation methods used by participants, their unwarranted self confidence (everyone thinks they’re a great judge of men, and everyone thinks their particular assumptions are both correct and warranted), their imbecillic pride manifested in the stupidest way it could, ie trying to keep “things” under wraps and all the rest of typically human failure. For the other, as it is nascent very little is in fact understood or generally known about it, and so gross mistakes happen quite cavalierly.7 -Mircea Popescu

1transaction; http://blockchain.info/tx/9536feebe3a50b94f85ca27d56e669a7209bd4188385d55c5b97227c95cf7f74
2address; http://blockchain.info/address/1EMztWbGCBBrUAHquVeNjWpJKcB8gBzAFx
3https://bitcointalk.org/index.php?topic=248803.msg3505966#msg3505966
4https://bitcointalk.org/index.php?topic=283756.msg3505394#msg3505394
5https://bitcointalk.org/index.php?topic=328053.msg3632208#msg3632208
6http://blockchain.info/tx/d9fd404d60cc65e77a0ab460524d112f1a851430ed431b5aa6840bdf9c42355f
7http://trilema.com/2012/gpg-contracts/

By their (dumb) fruits shall ye know them indeed...
1537905913
Hero Member
*
Offline Offline

Posts: 1537905913

View Profile Personal Message (Offline)

Ignore
1537905913
Reply with quote  #2

1537905913
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1537905913
Hero Member
*
Offline Offline

Posts: 1537905913

View Profile Personal Message (Offline)

Ignore
1537905913
Reply with quote  #2

1537905913
Report to moderator
1537905913
Hero Member
*
Offline Offline

Posts: 1537905913

View Profile Personal Message (Offline)

Ignore
1537905913
Reply with quote  #2

1537905913
Report to moderator
1537905913
Hero Member
*
Offline Offline

Posts: 1537905913

View Profile Personal Message (Offline)

Ignore
1537905913
Reply with quote  #2

1537905913
Report to moderator
wayner
Newbie
*
Offline Offline

Activity: 52
Merit: 0


View Profile
November 08, 2013, 06:24:53 PM
 #2

Coinlenders: wayner:2.97:0:U

Edit: And thankyou for putting this together.
katie.mckinley
Full Member
***
Offline Offline

Activity: 131
Merit: 100


old user name chris3spice


View Profile
November 08, 2013, 06:34:53 PM
 #3

Meh why not...my user name for CoinLenders is doctorbit

doctorbit:8.7:0:U
DumbFruit
Sr. Member
****
Offline Offline

Activity: 433
Merit: 253


View Profile
November 08, 2013, 06:39:46 PM
 #4

Edit: And thankyou for putting this together.
You're welcome.

By their (dumb) fruits shall ye know them indeed...
quimpstar
Newbie
*
Offline Offline

Activity: 29
Merit: 0


View Profile
November 08, 2013, 06:49:38 PM
 #5

quimpstar:2.785:0:U
DumbFruit
Sr. Member
****
Offline Offline

Activity: 433
Merit: 253


View Profile
November 08, 2013, 06:51:47 PM
 #6

quimpstar:2.785:0:U

Is that in Inputs.io or CoinLenders? If it's Inputs, be sure to email them at support@inputs.io for a partial refund.

By their (dumb) fruits shall ye know them indeed...
bradyon
Full Member
***
Offline Offline

Activity: 172
Merit: 100


TradeFortress has to pay his debitors


View Profile
November 08, 2013, 06:57:14 PM
 #7

Thanks, Dumbfruit.

PM sent to you.

I'm a big loser of coinlenders.

Coinlenders:bradyon:226:0:U
quimpstar
Newbie
*
Offline Offline

Activity: 29
Merit: 0


View Profile
November 08, 2013, 06:59:54 PM
 #8

quimpstar:2.785:0:U

Is that in Inputs.io or CoinLenders? If it's Inputs, be sure to email them at support@inputs.io for a partial refund.
Its for Inputs.io and I've emailed them several times with no response.
Zedeius
Newbie
*
Offline Offline

Activity: 18
Merit: 0


View Profile
November 08, 2013, 07:52:52 PM
 #9

Coinlenders: Zedeius:1:0:U

Thanks!
ChaosFox
Full Member
***
Offline Offline

Activity: 179
Merit: 100


Certified fox posing as a cat posing as a human


View Profile
November 08, 2013, 08:03:34 PM
 #10

Meh, might as well. Thanks for taking the initiative, DumbFruit.

CoinLenders: EntropiaFox:1.97655724:0:U

Look! An ad-free signature!
acis4283
Newbie
*
Offline Offline

Activity: 23
Merit: 0


View Profile
November 08, 2013, 08:18:15 PM
 #11


Coinlenders:cismasu:15:0:U

Thank you for making a thread like this!  I'm in a tight situation because of this and would like to see how this situation evolves.
Simonsays
Newbie
*
Offline Offline

Activity: 40
Merit: 0



View Profile
November 08, 2013, 09:28:36 PM
 #12

coinlenders:simonsaysmine:1.07027926:0:U

May not be a lot to some, but it is to me.

Appreciate you putting this thread together.

C10H15N
Hero Member
*****
Offline Offline

Activity: 808
Merit: 1004



View Profile
November 08, 2013, 09:59:59 PM
 #13

Coinlenders:Anonymous:6.28562606:0:U

Edit: PM sent with inputs.io/Coinlenders account info.

Only when the tide goes out do you discover who's been swimming naked. -Warren Buffett
scousesmoker
Member
**
Offline Offline

Activity: 89
Merit: 10


View Profile
November 08, 2013, 10:17:15 PM
 #14

Username for CL is chrishastie27(part of my e-mail which I use to login)

chrishastie27:5.0:U

Not very much to some but a months wages at this exchange rate pretty much all the BTC I have tied up here, been a user for some time.... preferred it without inputs.io even before all this. suppose there is still a glimmer of hope in the distance of getting a large portion of my BTC back  Huh

this is scousesmoker Smiley
CryptoUser01
Newbie
*
Offline Offline

Activity: 26
Merit: 0


View Profile
November 08, 2013, 10:28:28 PM
 #15

CoinLenders01:3.42991422:0:U

Thanks Dumbfruit. I originally found that article about sytech the other day and found that very interesting. I'll be interested to see what if anything comes of it. Considering it's going to be a challenge to do forensics on a non-police reported incident and they may not have authority to do so. But maybe they will be able to sway TF to give it a shot.

If there is anything I can do to help, let me know.

Thanks,

CryptoUser01
DumbFruit
Sr. Member
****
Offline Offline

Activity: 433
Merit: 253


View Profile
November 08, 2013, 11:22:08 PM
 #16

Well, it was either this or the fetal position, I chose this by a small margin.

It is clear that TradeFortress is liable for the full amounts owed, and anything less than that is in abdication of his responsibility. When I deposited with him, I had full faith that if anything like this happened he would do everything he could to make it right.

Looking forward to his announcement.

Edit: Redacted stuff.

By their (dumb) fruits shall ye know them indeed...
dwdoc
Legendary
*
Offline Offline

Activity: 966
Merit: 1000


- - -Caveat Aleo- - -


View Profile
November 08, 2013, 11:22:44 PM
 #17

Coinlenders dwdoc1:150.42238118:0

Inputs.io dwdoc1:20.795:8.59

Good luck with this project!
If nothing else it will be interesting to see if he owed more than the missing 4100.
xorglub
Full Member
***
Offline Offline

Activity: 204
Merit: 100


View Profile
November 08, 2013, 11:51:54 PM
 #18

PM sent. Crossing fingers we'll get most of our coins back one way or another.

It would also be beneficial to do a headcount of who took loans from there, to get a better feeling of (amount of coins in TF's wallet (or stolen) / amount of money "in the wild").
dwdoc
Legendary
*
Offline Offline

Activity: 966
Merit: 1000


- - -Caveat Aleo- - -


View Profile
November 08, 2013, 11:59:38 PM
 #19

We are already up to 2100 in unreimbursed coins. Looks like the total is going to be a lot more than 4100.
batman, not crabman
Full Member
***
Offline Offline

Activity: 127
Merit: 100


View Profile
November 09, 2013, 12:21:05 AM
 #20

Coinlenders:   batman:5:0:U

Mine got lost as I tried to withdraw them on 5-11-13 (Aussies use dd-mm-yy because it isn't stupid:) )
I never wanted inputs.io, it was forced on me as a CL user.

A horse walks into a bar and the barman says "Give me some Bitcoin!"
17TDYWdeL3GU2fsMSpV7itLYS2UJ91dCDx
Pages: [1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!