I asked Bruce a few questions by email to clear up this mystery. Here are the Q & A's, answers from Bruce in bold;
1. Your facebook page recently mentioned $15k worth of deposits in the first few days, yet the stolen/deleted bitcoins (i'm not sure which it is from what you wrote) number at 11, which is around $7500. As far as i am aware nobody was able to make any successful withdrawals from the site whilst it was running so this figure should have been more like 20btc. Can you explain the discrepancy in figures please?
The value estimate was based on 11 BTC at $1000 per coin + the value of the other coins. It was just a rough estimate that was only meant for my family and friends. It was never intended to be a precise estimate.
2. As mentioned above, can you clarify whether this was a theft or deletion of the users bitcoins?
The BTC were all stolen, while the alt coins were simply deleted. Most of the coins that came in had arrived within 24 hours of the attack. Unfortunately the automatic backup did not trigger in time to save the destroyed wallets. In hindsight I should have shut down the wallet server and manually backed it up.
3. Why did you decide to remove any mention of the site from your facebook page?
I removed it from facebook simply because i have been under attack. My facebook page is personal, not business and I will not subject my family or friends and family to the abuse that was coming in.
4. Your statement mentions that the site was as secure as possible but others have noted that, for example that you were not not sanitizing user inputs on your GET variables and other measures leaving the site open to attack. What is your response to these comments?
The site suddenly - literally overnight went from 0 users to 900. It definitely had issues, but they were not ones that would cause serious problems. SQL injections were blocked, and get variables were only used for display, not calculations, so they were not a top priority. I will admit that the site needed more work, and I probably should have kept it under wraps while that was done. I did not anticipate the HUGE burst of traffic that occurred.
5. Many of us will have holdings that may hold a fraction of their original value once you have reimbursed us, even catering for the extra 50% we are offering. Do you have a response for that, for example can you offer a btc equivalent reimbursement for the value my EAC had at the time of the attack?
This is a good point. I will do my best to make sure that people don't lose anything. Hopefully the value of the coins will increase.
6. Can you comment on why, during the uptime of the site, withdrawals were (to my knowledge) impossible to complete through any browser, despite your scrolling update on the site saying they were working?
Withdrawls were actually happening, and are recorded in the database as completed. Just before the attack happened I became aware of an issue in Mozilla, however they were working in chrome. I can provide the log of withdrawals completed if that helps
Im sure I cant withdraw in any browser , Chrome , FF and Ie .Only had fail to withdraw message .
Nice job demoniality , you rox .
