[ANN][MOON] Mooncoin: You know where it's headed! KGW exploit FIXED 4/3/2014

[JimHendrix]

Yes, I have some more, but will keep those in case we reach 60 again or dip under 11. Right now Im in profit, so I basically have a free MOON ride!

Lol someone bought all my MOON from the dump to 11. Thanks! Made almost 80% in profits 

i bought some.you have some more?
i hope you are a millionaire by now...
Merry Christmas!

[perrie454]

Yes, I have some more, but will keep those in case we reach 60 again or dip under 11. Right now Im in profit, so I basically have a free MOON ride!

Lol someone bought all my MOON from the dump to 11. Thanks! Made almost 80% in profits 

i bought some.you have some more?
i hope you are a millionaire by now...
Merry Christmas!

You should wriite a book of your successful trading with mooncoin 

[agswinner]

Great hendrix today fed fomc i open short position on the future eur/usd ...
you could do a lot more gains in the stock market future CME..

Now eur/usd futures -1,12 

[Zeta0S]

any good pool?

[agswinner]

OFFICIAL POOL LIST
Multipool.us: http://multipool.us

Mooncoin P2Pool: Mooncoin P2Pool

moon.bitember.com: http://moon.bitember.com

[agswinner]

Great hendrix today fed fomc i open short position on the future eur/usd ...
you could do a lot more gains in the stock market future CME..

Now eur usd futures -1,12 

[MoonWhale]

Whoever owns 2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK needs to be taken down. He's stolen 6 billions. How can we track this thief?

[Nthused]

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

[hgu5]

Whoever owns 2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK needs to be taken down. He's stolen 6 billions. How can we track this thief?

These addresses were also cleared from different wallets, where there was more than one address:
2SQDhN8NE4Sk92MikERTzkz4a6PBuJ3HnB
2aaiutvFC3nm7vuSM5AST51ANX9PztFKqe
and kept on:

2JA3Cqf9on8YuxngxdXStCFKanAGnaQU5A
2GWu3v33XYU8G6vHFaChYc6YA6edDmW1cK
together over 11 billions Moon.

[Vlad2Vlad]

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

No, I already posted what happened after I talked to Cryptsy's fraud dept.


This was not Cryptsy's fault - people left same RPC PASS/Login across multiple wallets and someone with daemon wallet cleared them out.

[agswinner]

sooner or later we will know ....they are investigating ...

when the situation will be clear we will collect donations for compensation to cheat people

[peme]

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

No, I already posted what happened after I talked to Cryptsy's fraud dept.


This was not Cryptsy's fault - people left same RPC PASS/Login across multiple wallets and someone with daemon wallet cleared them out.

THIS IS DEFINITELY NOT PROVEN !!!

It was just a first suspicion of mine that I wrote to cryptsy.
But during the last days I tried to connect via RPC to my mooncoin wallet, testing different mooncoin.conf configurations. And it was not possible for me to reach it because the RPC Port 44663 is not  reachable from the internet because my router doesnt know what to do with port 44663. And my computer with the wallet ALWAYS was behind a router. The only way to establish connections from the outside to my wallet is with P2P Port 44664, which the wallet uses for mooncoin network communication.
As long as no one can get access to a mooncoin wallet via RPC (mooncoin.conf in server mode and no rpcuser and no rpcpass set) it is unlikely that the thief could connect via RPC !

Please help to think about other vulnerabilities so that we can find the real reason to disable it within the coming new wallet version!

What is with the SSH-Heartbleed bug?

Does MoonCoin have the same backdoor as TIPS to steal wallets even with the private key ?

I was reading a document and you can "apparently" clone other peoples wallets and even though there is a private key you can still gain access to it by making a mould....

Maybe that is what happened.

--> this is also something we should think about, could you please send me details about the fedoracoin issue?

And to avoid panic: please keep your coins ALWAYS in an ENCRYPTED wallet. Then every transaction out needs the wallet passphrase. I made this mistake to not encrypt my wallet and the thief could initiate transactions, on which way ever (we have to find out).

best regards,
peme

[KlondikeBear]

The community has finally decided to invite an independent auditor, Titan, an experienced cryptocoder, Luckycoin developer since 2013, to investigate Mooncoin script.
He has promised to complete it till Christmas. He will decompile a wallet and will investigate new and old open sources, too.

If you have ideas on what an independent auditor should focus his attention, please share it, or PM him directly: https://bitcointalk.org/index.php?action=profile;u=124654

4 wallets have been suffered since December 7:

2SQDhN8NE4Sk92MikERTzkz4a6PBuJ3HnB
2Z25JRcYYnvN52wJQy4FxZZPhnesBwiiqP
2bfkzvCAvvBASYZihFC66QykKiQNz2xgJ4
2aaiutvFC3nm7vuSM5AST51ANX9PztFKqe

Total coins stolen around 17.5 bln.

Currently there is no evidence that all Mooncoin wallets were compromised, but let's be careful and wait for the end of investigation before final conclusions.

[kotwica666]

Not good .. Do we know where stolen coins are (address)? If so, is it possible to block them somehow?

[agswinner]

Not good .. Do we know where stolen coins are (address)? If so, is it possible to block them somehow?

Hacker addresses
2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK
2GWu3v33XYU8G6vHFaChYc6YA6edDmW1cK 
2JA3Cqf9on8YuxngxdXStCFKanAGnaQU5A 

[kotwica666]

Not good .. Do we know where stolen coins are (address)? If so, is it possible to block them somehow?

Hacker addresses
2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK
2GWu3v33XYU8G6vHFaChYc6YA6edDmW1cK 
2JA3Cqf9on8YuxngxdXStCFKanAGnaQU5A 

   ..now we have to wait for Titan? Or there is something more going on with that.. ?

[agswinner]

@Daniel_Gomezz: Con Steve Wozniak, co-fundador de Apple e inventor de la computadora personal. http://t.co/nuI5m6cgvU
Follow us....on twitter

[agswinner]

@GerardoSordo: En desayuno organizado por @EntIrl conociendo la manera de vincular negocios de Irlanda con México #business http://t.co/GHbxioX3xT

Follow us on twitter ....

[KlondikeBear]

Not good .. Do we know where stolen coins are (address)? If so, is it possible to block them somehow?

Hacker addresses
2DMfpxPiMtpVDVyrxQAAmfBbZnDH4XCMfK
2GWu3v33XYU8G6vHFaChYc6YA6edDmW1cK  
2JA3Cqf9on8YuxngxdXStCFKanAGnaQU5A  

   ..now we have to wait for Titan? Or there is something more going on with that.. ?

1. peme is investigating everything, too
2. coinflow is inspecting blockchain
3. Cryptsy has frozen an account of a hacker
4. Mooncoin wallet is under maintenance at Cryptsy, coins cannot be transferred and sold
5. you all please make sure you don't use an unencrypted wallet with unappropriate settings in .conf file, without firewall etc. It's better currently to avoid active using of a wallet till the end of investigation.
6. we are thinking of possible blockchain rollback, but it's not the best variant and we need Cryptsy agreement for that.
7. a hacker still has a chance to return coins, and tell us privately what is the security issue. He will get 1 bln Mooncoins award from us.

[agswinner]

they attack us or laughing over because Mooncoin was among the few altcoin growing while almost all were collapsing in strong downtrend, it will not be the last..
some will laugh, but I see that every day from our twitter account follow us people really serious and relevance
we are a small community but has a chance to become with the help of all very very big community in the world. I say this because I think we're touching hands with the phenomenon of this century (open source is the future! I said)