BIPS Wallet security breach

[allincoin]

"To protect the successful merchant processing business BIPS has decided to temporarily close down its consumer wallet initiative."

Concerned


"BIPS has been a target of a coordinated attack and subsequent security breached. Several consumer wallets have been compromised and BIPS will be contacting the affected users."

When?

"All existing users will be asked to transfer bitcoins to other wallet solutions, and users affected by the security breach will be contacted."

How?

I among other have emailed support(at)bips(dot)me and as far as I can tell no one has heard back..  some additional communication would be fantastic.

[bitcoindigi]

so BIPS has been TradeFortress'd?

[allincoin]

I'd like to believe that isn't the case.  I'll keep the thread up to date if/ when I hear from BIPS service

[dominicwin]

Ouch! terrible to see that. Secure your bitcoins!

[allincoin]

To think I moved them only days prior from MTGox...  Is there a recommended wallet service to use?  I know large amounts should be kept in cold storage.  Is the wallet service from blockchain a good one to store a small amount of coin?

[allincoin]

Thanks, Now I'll go to sleep with my fingers crossed hoping my coins are not lost or stolen...

[dantes]

It would appear BIPS has lost most or all the bitcoins that were held in its consumer wallets, among them some of mine.

https://bitcointalk.org/index.php?topic=252308.msg3645043#msg3645043https://bips.me/press

There seems to be a conspiracy of silence around this. 
And now they have put the payments part of the site back up, without any announcement - do they plan to try and pretend that nothing has happened?

Strange as BIPS is shown on the original bitcoin.org page as a ‘recommended’ web wallet. 


Why are they still shown on bitcoin.org as a 'recommended' web wallet?

[allincoin]

unbelievably frustrating....  I didn't own a lot of coins but the ones I purchased I paid less than $100 each for.  I wonder if there is a special risk insurance company out there that would write a policy to protect companies like this.

[dominicwin]

blockchain is a good choice for a wallet when you need to transfer what not. I personally don't store any online unless I am planning on immediately transferring.

[thebitcoinme]

Security is key with these things. So much things to worry about.

[allincoin]

I got a vague email from BIPS this morning letting me know about the statement they released on November 19th..  No details about what they plan to do yet...

[monbux]

hm, that sucks.  When I was a newbie I sent 0.05 BTC out to another wallet, and it never arrived.  It just said "Claim Email'.  I never got my coins back, and support never answered nor worked on their site.  Hopefully they'll go up again...

[cubicdissection]

I've emailed and PM'd them with no reply.  The silence is disconcerting, as is the timing of the "hack". It would be foolish to simply take things on their word and and walk away from thousands in BTC.  Who's to say they didn't simply walk away with the funds?   

I'm not saying "theft" yet, but if BIPS wants me to believe they got hacked, the burden of proof is going to be on them to prove it.  If they will not, or if they continue this silence, I and others will get law enforcement involved.  I'm already in touch with other BIPS users, some of whom are in Denmark and have easy access to the police there.

[dominicwin]

Is there an amount yet announced?

[cubicdissection]

Dominic, not so far.  Kris Henrikson is the owner and he's not saying much at all.  I had literally that day (the 15th) written in my planner to move my BTC to a more secure place.  I got home that night, researched paper wallets, set one up, went to log in to BIPS and boom they're down.  I earned those BTC selling puzzles on my website back when they were around $100.  Can't afford to replace them at todays prices.  Feel sick...this is a loss of more than just BTC, it's my hopes for the long term value that's down the drain.  I'm gonna go smoke a Rocky Patel I've been saving and see if that helps :-/

[assortmentofsorts]

I got this PM from Kris yesterday:

We are working very hard to restored after server filesystem wiped out, I don't know what else to say right know pending another statement from BIPS.
Please trust and believe in me, that I will do my best to make everything right again.

I'm just hoping its a simple filesystem wipe out which can be backed up easily. I'm trusting and believing still, hoping I get the coins back. Have always supported BIPS since its inception (see my sig) and have also helped fix bugs (got rewarded for it too) and also open-sourced an API client for free. Trusted because I knew the owner was not anonymous and wouldn't possibly be stupid enough to do a TradeFortress. It'll be great if Kris is open about his problems with the community.

[allincoin]

Crossing fingers again tonight it seems..  Quite stressfull... Anyone know if I can sell my kidney to replace my coins?

[dominicwin]

Dominic, not so far.  Kris Henrikson is the owner and he's not saying much at all.  I had literally that day (the 15th) written in my planner to move my BTC to a more secure place.  I got home that night, researched paper wallets, set one up, went to log in to BIPS and boom they're down.  I earned those BTC selling puzzles on my website back when they were around $100.  Can't afford to replace them at todays prices.  Feel sick...this is a loss of more than just BTC, it's my hopes for the long term value that's down the drain.  I'm gonna go smoke a Rocky Patel I've been saving and see if that helps :-/

So sorry! Hope you recover it all!

[cubicdissection]

So sorry! Hope you recover it all!

Thanks man.  Don't suppose you want to buy some really nice puzzles? I take BTC

www.cubicdissection.com

[dominicwin]

So sorry! Hope you recover it all!

Thanks man.  Don't suppose you want to buy some really nice puzzles? I take BTC

www.cubicdissection.com

They do look good! Checked the site out. I'm not really much of a puzzle enthusiast though.