[ANN][MOON] Mooncoin: You know where it's headed! KGW exploit FIXED 4/3/2014

[KlondikeBear]

Not good .. Do we know where stolen coins are (address)? If so, is it possible to block them somehow?

Hacker addresses
2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK
2GWu3v33XYU8G6vHFaChYc6YA6edDmW1cK  
2JA3Cqf9on8YuxngxdXStCFKanAGnaQU5A  

   ..now we have to wait for Titan? Or there is something more going on with that.. ?

1. peme is investigating everything, too
2. coinflow is inspecting blockchain
3. Cryptsy has frozen an account of a hacker
4. Mooncoin wallet is under maintenance at Cryptsy, coins cannot be transferred and sold
5. you all please make sure you don't use an unencrypted wallet with unappropriate settings in .conf file, without firewall etc. It's better currently to avoid active using of a wallet till the end of investigation.
6. we are thinking of possible blockchain rollback, but it's not the best variant and we need Cryptsy agreement for that.
7. a hacker still has a chance to return coins, and tell us privately what is the security issue. He will get 1 bln Mooncoins award from us.

[1714314688]

1714314688

[1714314688]

1714314688

[1714314688]

1714314688

[agswinner]

they attack us or laughing over because Mooncoin was among the few altcoin growing while almost all were collapsing in strong downtrend, it will not be the last..
some will laugh, but I see that every day from our twitter account follow us people really serious and relevance
we are a small community but has a chance to become with the help of all very very big community in the world. I say this because I think we're touching hands with the phenomenon of this century (open source is the future! I said) 

[agswinner]

I work in primary italy bank
banks are not really against bitcoins and altcoins...bitcoin is helping banks to innovate ...


@coindesk: Top Dutch Banks Confirm Blockchain Experiments http://t.co/qk7Ex52ers http://t.co/zpNm8aaBKG

[digitalindustry]

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

No, I already posted what happened after I talked to Cryptsy's fraud dept.


This was not Cryptsy's fault - people left same RPC PASS/Login across multiple wallets and someone with daemon wallet cleared them out.

THIS IS DEFINITELY NOT PROVEN !!!

It was just a first suspicion of mine that I wrote to cryptsy.
But during the last days I tried to connect via RPC to my mooncoin wallet, testing different mooncoin.conf configurations. And it was not possible for me to reach it because the RPC Port 44663 is not  reachable from the internet because my router doesnt know what to do with port 44663. And my computer with the wallet ALWAYS was behind a router. The only way to establish connections from the outside to my wallet is with P2P Port 44664, which the wallet uses for mooncoin network communication.
As long as no one can get access to a mooncoin wallet via RPC (mooncoin.conf in server mode and no rpcuser and no rpcpass set) it is unlikely that the thief could connect via RPC !

Please help to think about other vulnerabilities so that we can find the real reason to disable it within the coming new wallet version!

What is with the SSH-Heartbleed bug?

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

--> this is also something we should think about, could you please send me details about the fedoracoin issue?

And to avoid panic: please keep your coins ALWAYS in an ENCRYPTED wallet. Then every transaction out needs the wallet passphrase. I made this mistake to not encrypt my wallet and the thief could initiate transactions, on which way ever (we have to find out).

best regards,
peme

address encryption on all Bitcoin clones is compromised, the address  key encryption is SHA256 it can be cracked -

but i doubt you are going to be able to fix that on the next mooncoin wallet ha ha

this is known by many people. 

[obivion6]

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

No, I already posted what happened after I talked to Cryptsy's fraud dept.


This was not Cryptsy's fault - people left same RPC PASS/Login across multiple wallets and someone with daemon wallet cleared them out.

THIS IS DEFINITELY NOT PROVEN !!!

It was just a first suspicion of mine that I wrote to cryptsy.
But during the last days I tried to connect via RPC to my mooncoin wallet, testing different mooncoin.conf configurations. And it was not possible for me to reach it because the RPC Port 44663 is not  reachable from the internet because my router doesnt know what to do with port 44663. And my computer with the wallet ALWAYS was behind a router. The only way to establish connections from the outside to my wallet is with P2P Port 44664, which the wallet uses for mooncoin network communication.
As long as no one can get access to a mooncoin wallet via RPC (mooncoin.conf in server mode and no rpcuser and no rpcpass set) it is unlikely that the thief could connect via RPC !

Please help to think about other vulnerabilities so that we can find the real reason to disable it within the coming new wallet version!

What is with the SSH-Heartbleed bug?

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

--> this is also something we should think about, could you please send me details about the fedoracoin issue?

And to avoid panic: please keep your coins ALWAYS in an ENCRYPTED wallet. Then every transaction out needs the wallet passphrase. I made this mistake to not encrypt my wallet and the thief could initiate transactions, on which way ever (we have to find out).

best regards,
peme

None of this is good for Moon. The video is finished, but idk if i want to post it.... Have a good day Mooners, I hope this is fixed. Tired of losing money

[agswinner]

Paper wallet offline generated is super secure, web wallet coinspot (serious developers) Captcha /username password ,2fa email confirm,super secure, exchange cryptsy username password 2fa email confirm and new function "Locked" 1, 4, etc hours with email confirm and email countdown super secure..my coins are safe!
The use creates value ..pc wallets Windows Mac etc are obsolete in any case for people...next year
my work will make new mobile wallets super secure....

[agswinner]

i will continue to buy ....any type of permit issue will be resolved know personally experienced engineers Safety

[agswinner]

Please Sell to me at 23 i buy everything...

[agswinner]

this posting about key encryption SHA256 can be cracked is bullshit. It's possible in theory with quantum computer power and would need trillions of trillions of trillions computations...forget it.

[gormadoc]

...
and most computerpower is used for mining instead of cracking passwords 

[marcoman22]

I am unable to sync my wallet .Can anybody help me with some nodes ?

[agswinner]

addnode=198.50.148.134
addnode=107.150.38.154
addnode=198.27.80.162
addnode=162.243.57.246
addnode=24.182.115.122
addnode=178.33.116.119
addnode=188.165.2.147

[digitalindustry]

this posting about key encryption SHA256 can be cracked is bullshit. It's possible in theory with quantum computer power and would need trillions of trillions of trillions computations...forget it.

you realize I'm not talking about the blockchain ?

regardless i do not think that is what happened here in this case -

Moon has just been born, it has a lot of consolidation this is a very cheap price.

[agswinner]

this posting about key encryption SHA256 can be cracked is bullshit. It's possible in theory with quantum computer power and would need trillions of trillions of trillions computations...forget it.

you realize I'm not talking about the blockchain ?

regardless i do not think that is what happened here in this case -

Moon has just been born, it has a lot of consolidation this is a very cheap price.

Yes...cheap price...

[marcoman22]

addnode=198.50.148.134
addnode=107.150.38.154
addnode=198.27.80.162
addnode=162.243.57.246
addnode=24.182.115.122
addnode=178.33.116.119
addnode=188.165.2.147

Wallet sync complete . Thanks for nodes

[agswinner]

@BitcoinGarden: RT @CryptoCoinsNews: Interview with johoe, the White Hat Hacker Who Returned 800+ Bitcoins to http://t.co/GagF8iA4Ww http://t.co/WOOpR0EX0L

[thevictimofuktyranny]

addnode=198.50.148.134
addnode=107.150.38.154
addnode=198.27.80.162
addnode=162.243.57.246
addnode=24.182.115.122
addnode=178.33.116.119
addnode=188.165.2.147

Wallet sync complete . Thanks for nodes

Hi,

What rpcport= number did you use, trying to sync

Thank You

[coinflow]

addnode=198.50.148.134
addnode=107.150.38.154
addnode=198.27.80.162
addnode=162.243.57.246
addnode=24.182.115.122
addnode=178.33.116.119
addnode=188.165.2.147

Wallet sync complete . Thanks for nodes

Hi,

What rpcport= number did you use, trying to sync

Thank You

You don't need any RPC-port-related settings in the mooncoin.conf
If you really need to create a mooncoin.conf, ONLY use addnodes.

Even better, add the nodes via the console.

[agswinner]

@MooncoinItalia: Generate secure addresses  https://t.co/RmjAuknLoe @CryptoAnnounce @CryptoAdvice

[patryk006]

[WTB] 6 mln moon vs 1,5 LTC