minuchi.str
Newbie
 Offline
Activity: 32
Merit: 0
|
 |
February 21, 2014, 10:23:49 AM |
|
The parties who "benefited":
- People who withdrew XCP that they bought before closing (this is the 7000)
- The hacker, who is up +80BTC
The parties who were unaffected
- People who did not have XCP on poloniex
Ideally, people who withdrew would deposit funds back into the exchange, the BTC would be redeposited, and all trades reversed, which would result in no one gaining or losing anything. However as this is not actually practical, the exchange is currently soliciting donations to try to cover the remainder.
That's the current fund situation right now.
Thanks for the good assessment of what happened at the exchange. I'm encouraging those who benefited from the low XCP prices and withdrew the XCP to offer to return it to the exchange. It might have looked like an fortuitous turn of events in your favor. However, you now know that it was caused by a bug in the protocol. It is the right thing to return what was not really yours to begin with. If you decide to keep your windfall, know that you are benefiting from the misfortune of someone else in the community. If more than 70% of the shortfall of XCP is returned to the exchange, I will personally donate 100% of all of the XCP that I would have lost (ie all of the buy orders which filled during the dump) to a bounty or donation fund for XCP. Edit: I decided to lower the barrier from 80% to 70% These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"): Tx Block BlockTime Destination Amount 4638 286727 1NCsouKcyJUsTMKtFastR6R5epE9GeYT91 Received 200 XCP 4637 286727 1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP 4636 286727 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP 4635 286727 1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP 4634 286727 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP 4633 286727 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP 4632 286727 1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP 4629 286726 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 4628 286726 1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP 4627 286722 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 4625 286722 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP 4624 286722 1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP 4623 286722 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell) these two address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP
and 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP
withdrew total of 4753XCP = 67.9% of the xcp "missing"I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex Agree on this. Also if there are any loss after this, it can be shared between poloniex, xcp developers, community and poloniex account holders |
|
|
|
|
|
|
|
|
|
|
|
|
|
Each block is stacked on top of the previous one. Adding another block to the top makes all lower blocks more difficult to remove: there is more "weight" above each block. A transaction in a block 6 blocks deep (6 confirmations) will be very difficult to remove.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
|
riceberry
|
|
February 21, 2014, 10:25:02 AM |
|
I'll donate 5% of xcp if it comes back on poloniex
And now 70 peoples repeat this and when its back forget it..?  not necessarily, maybe some will, some won't. At least it's something, I mean, what else can people say or do right now without seeing what will happen to thier xcp balance when it comes back |
|
|
|
|
peled1986
Legendary
Offline
Activity: 882
Merit: 1002
|
|
February 21, 2014, 10:33:48 AM
Last edit: February 21, 2014, 10:49:49 AM by peled1986 |
|
These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"): Tx Block BlockTime Destination Amount 4638 286727 1NCsouKcyJUsTMKtFastR6R5epE9GeYT91 Received 200 XCP 4637 286727 1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP 4636 286727 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP 4635 286727 1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP 4634 286727 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP 4633 286727 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP 4632 286727 1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP 4629 286726 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 4628 286726 1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP 4627 286722 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 4625 286722 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP 4624 286722 1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP 4623 286722 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell) these three address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP withdrew total of 6692XCP = 95.6% of the total xcp "missing" I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex (edit: in my original post i "forgot" to include the 3rd "big" address thats why I posted this again) (edit 2: i will give 0.1 btc to the "investigator" that succeeds in the matching the 3 "big" addresses  ) |
|
|
|
|
|
led_lcd
|
|
February 21, 2014, 10:51:54 AM |
|
These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"): Tx Block BlockTime Destination Amount 4638 286727 1NCsouKcyJUsTMKtFastR6R5epE9GeYT91 Received 200 XCP 4637 286727 1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP 4636 286727 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP 4635 286727 1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP 4634 286727 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP 4633 286727 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP 4632 286727 1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP 4629 286726 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 4628 286726 1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP 4627 286722 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 4625 286722 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP 4624 286722 1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP 4623 286722 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell) these three address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP withdrew total of 6692XCP = 95.6% of the total xcp "missing" I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex (edit: in my original post i "forgot" to include the 3rd "big" address thats why I posted this again) (edit 2: i will give 0.1 btc to the "investigator" that succeeds in the matching the 3 "big" addresses ) I know you mean well and recovering the XCP would be good for the community at large. There is no reason to think that these users knew that there was something malicious going on when they took their gains. Allow the users to make the choice themselves without being coerced. |
|
|
|
|
peled1986
Legendary
Offline
Activity: 882
Merit: 1002
|
|
February 21, 2014, 10:55:44 AM
Last edit: February 21, 2014, 11:06:18 AM by peled1986 |
|
I know you mean well and recovering the XCP would be good for the community at large.
There is no reason to think that these users knew that there was something malicious going on when they took their gains.
Allow the users to make the choice themselves without being coerced.
I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002) but now we do know exactly what happened. If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback? the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap. |
|
|
|
|
|
Anotheranonlol
|
|
February 21, 2014, 11:05:45 AM
Last edit: February 21, 2014, 11:16:57 AM by Anotheranonlol |
|
These are the address of the people that withdrew XCP before closing of poloniex (these are the "7000"): Tx Block BlockTime Destination Amount 4638 286727 1NCsouKcyJUsTMKtFastR6R5epE9GeYT91 Received 200 XCP 4637 286727 1Q3Ar2m347z3mDEryyQbywZCXerXLKAqyh Received 71.08910852 XCP 4636 286727 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP 4635 286727 1BJiJVhvKGZPXYBUTEseQ48fwCDZ84BeCx Received 6 XCP 4634 286727 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 126.21410657 XCP 4633 286727 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 497.97347705 XCP 4632 286727 1Ljx3T5AV8izV58UepcoYAqWsHuxi6cFAC Received 7.9 XCP 4629 286726 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 4628 286726 1L2RvHFHoviCzk2CVJWhyKKYh8kzo3sbnq Received 59.9 XCP 4627 286722 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 4625 286722 18WLz4AxTRVhJ5TGQzAPTL3vEYMtJSzJSX Received 5.9 XCP 4624 286722 1C8dJGH96QAg5SBdtkJm9WDQ3bb9H7tPbb Received 170.59999931 XCP 4623 286722 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 9.9 XCP I think Busoni needs to check if these account are holding BTC and "hold them" + check if these accounts have xcp left in poloniex and subtract them. (of course after checking that these users benefited from the 35,000 xcp sell) these three address: 17yzh4iz8dsYRgWWkm83HYHZtgXqC31rzC Received 3568.9 XCP 1LArq4ZstbNo2Dcq3dg7QdtoTpvizsX52h Received 1183.7369884 XCP 1K859HgQvCCYHAMdGkU96tf9wYj1dhGogn Received 1938.9 XCP withdrew total of 6692XCP = 95.6% of the total xcp "missing" I think we should make an effort to match these address to bitcointalk users it might help to convince them to return the xcp to poloniex (edit: in my original post i "forgot" to include the 3rd "big" address thats why I posted this again) (edit 2: i will give 0.1 btc to the "investigator" that succeeds in the matching the 3 "big" addresses ) Good idea. First user who receive 3568.9 XCP link to https://bitcointalk.org/index.php?action=profile;u=204419 or a 13795438645@163.com, but also connected to some previous thefts. |
|
|
|
|
danonthehill
|
|
February 21, 2014, 11:11:06 AM |
|
Busoni,
When does Poloniex plan to restore the BTC balances on those accounts, that have had XCP removed from the balance?
|
|
|
|
|
|
led_lcd
|
|
February 21, 2014, 11:12:59 AM |
|
I know you mean well and recovering the XCP would be good for the community at large.
There is no reason to think that these users knew that there was something malicious going on when they took their gains.
Allow the users to make the choice themselves without being coerced.
I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002) but now we do know exactly what happened. If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback? the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap. I totally agree. I just don't want people getitng the wrong ideas  |
|
|
|
|
halfcab123
Full Member
Offline
Activity: 224
Merit: 100
CabTrader v2 | crypto-folio.com
|
|
February 21, 2014, 11:17:14 AM |
|
I know you mean well and recovering the XCP would be good for the community at large.
There is no reason to think that these users knew that there was something malicious going on when they took their gains.
Allow the users to make the choice themselves without being coerced.
I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002) but now we do know exactly what happened. If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback? the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap. I totally agree. I just don't want people getitng the wrong ideas Ok so we know Led_Lcd is one of em' lol, jk. |
DayTrade with less exposure to risk, by setting buy and sell spreads with CabTrader v2, buy now @ crypto-folio.com
|
|
|
|
porqupine
|
|
February 21, 2014, 12:14:42 PM |
|
People are so good at spamming about donations when it comes to bailing out their own money.
|
|
|
|
|
|
Spratan
|
|
February 21, 2014, 12:24:20 PM |
|
Hi,
I strongly believe in XCP and its future. Just to say that I burned from Blockchain.info and I dont have enough skills to implement the client...I will donate 100 XCP when I can (when something simplier works). It is not just a excuse to delay, else I will not bother to mention it publicly...Generally, If there was a GUI client, there would be more donations.
My thought is I prefer XCP not to be traded anywhere because it is obvious it is not ready today for mass adoption, especially for assets and shares. It has been removed from coinmarketcap and it is better. When it comes back in a near future, it must be bulletproof and enter with a 100 M$ cap at least, and not this """insignificant""" 15 M$ cap we had yesterday, not better than Quarks, nor in the TOP 10 !
|
|
|
|
|
Bellebite2014
Newbie
Offline
Activity: 56
Merit: 0
|
|
February 21, 2014, 12:42:34 PM |
|
People are so good at spamming about donations when it comes to bailing out their own money.
So true. This is alpha level software. It is weeks old. Those things have to be expected, and it would be even scarier and no one found any bugs. If someone is selling you a brand new Ferrari for 1000 USD ? What would you do ? Buy it and then complain to an official retailer ? Don't you see anything fishy? But some people were fine buying XCP at a fifth (20%) of the actual value... Of course... And now they are crying like a bunch of french girls? This is insane. Those people with some skill for crying, I am sure, would have been more than happy to share the profits of their cheap coins if everything was fine, right? It is always easy to complain when you make mistakes. And now they want everyone to tip in, or create more coins ? Do you think you are Bernanke ? Just man up, take the loss, start a petition to get your money back or cure cancer if you want, but let's just move on. We have kickass devs that fixed the reported issues in a matter of hours, and are still working on it as I type right now. And no one really cares to be on coinmarketcap or whatever at this stage. Are you in XCP just for a few weeks ? Really ? Good things will come in time if greedy french drama queens can stop their whining. |
|
|
|
|
|
cityglut
|
|
February 21, 2014, 01:18:26 PM
Last edit: February 21, 2014, 01:31:06 PM by cityglut |
|
The development team has extended a 12 BTC reward to the hacker for finding the security flaws, contingent upon returning the missing BTC. We are waiting to hear back.
We have offered these BTC out of our pockets, but, beyond that, we hope the community can pull together to make things right. As a reminder, the donation address for the security bouty is: <14Tf35AovvRVURzd623q5i9kry2EW8WzyL>.
What we do next depends on what the hacker does.
Regarding the discussion on a XCP "tax" or "re-burn", we can state this: The strength of Counterparty's community helps differentiate us from other projects, and it is precisely that strength which makes it clear it is best not to introduce a new burn period.
While the protocol will become more secure and robust as time goes on and our community grows, it is also the case that if there are serious bugs in the future, more people will be affected, and, as a project, Counterparty will have more to lose. Our decisions now will determine how the community evolves, and by demonstrating our collective firmness, we are setting important precedent for the future: those who invest in XCP are investing in a currency with a stable money supply, the integrity of which will be maintained even in difficult circumstances.
Take Bitcoin as an example: there have been times in Bitcoin's history where a serious bug could have been dealt with by, for example, increasing the total number of Bitcoins. If this had happened, would Bitcoin still be seen as an example of stable money supply and good store-of-value?
The seriousness of this bug should not be underplayed, but by taking our growing pains in their stride, we are strengthening Counterparty for the future.
|
|
|
|
|
|
|
|
username here
|
|
February 21, 2014, 01:34:41 PM |
|
Those who traded on poloniex took the risk that something bad would happen to the centralized exchange. And it did. Why did the hacker not try withdrawing funds from a random large address before the central exchange was up? Because he had no way of cashing out a large quantity of BTCs quickly. Poloniex gave him that opportunity by having lax risk controls.
You all were so happy when that poloniex took XCP, look at what happened the price skyrocketed!! making you all rich! But now you all blame poloniex for being "centralized" and the users who wanted to buy XCP , as "they should have known"! "it's risky!" Yeah OK last time I had looked at the Decentralized exchange there were hardly any XCP for sale, and all very overpriced. and hard to use, you have to know command line to use it. Yeah good luck getting new people into the community that way. You can't have your Cake and eat it too, without poloniex and those people buying XCP for ten times what it was worth, you'd just have worthless XCP... so don't blame poloneix or it's users. Only "lax risk control" is dealing with XCP in first place, you should thank , not criticize, I'll make a prediction here today, you will not see another "centralized exchange" take XCP any time soon after the way people jump to attack Busonli when he first report bug, and now how you say he "took a risk" - yes to your advantage , only to his disadvantage This is an excellent point. |
|
|
|
|
Anotheranonlol
|
|
February 21, 2014, 01:36:44 PM |
|
very nice. Looking forward to collecting a sandwich  |
|
|
|
PhantomPhreak (OP)
Sr. Member
Offline
Activity: 476
Merit: 300
Counterparty Chief Scientist and Co-Founder
|
|
February 21, 2014, 01:51:22 PM |
|
very nice. Looking forward to collecting a sandwich Haha. I just reported that myself.  |
|
|
|
|
|
qtgwith
|
|
February 21, 2014, 01:57:08 PM |
|
The development team has extended a 12 BTC reward to the hacker for finding the security flaws, contingent upon returning the missing BTC. We are waiting to hear back.
We have offered these BTC out of our pockets, but, beyond that, we hope the community can pull together to make things right. As a reminder, the donation address for the security bouty is: <14Tf35AovvRVURzd623q5i9kry2EW8WzyL>.
What we do next depends on what the hacker does.
Regarding the discussion on a XCP "tax" or "re-burn", we can state this: The strength of Counterparty's community helps differentiate us from other projects, and it is precisely that strength which makes it clear it is best not to introduce a new burn period.
While the protocol will become more secure and robust as time goes on and our community grows, it is also the case that if there are serious bugs in the future, more people will be affected, and, as a project, Counterparty will have more to lose. Our decisions now will determine how the community evolves, and by demonstrating our collective firmness, we are setting important precedent for the future: those who invest in XCP are investing in a currency with a stable money supply, the integrity of which will be maintained even in difficult circumstances.
Take Bitcoin as an example: there have been times in Bitcoin's history where a serious bug could have been dealt with by, for example, increasing the total number of Bitcoins. If this had happened, would Bitcoin still be seen as an example of stable money supply and good store-of-value?
The seriousness of this bug should not be underplayed, but by taking our growing pains in their stride, we are strengthening Counterparty for the future.
Absolutely agree with you! "re-burn" or "tax" will kill Counterparty XCP and become a joke. |
|
|
|
|
xnova
Sr. Member
Offline
Activity: 390
Merit: 254
Counterparty Developer
|
|
February 21, 2014, 01:59:55 PM |
|
very nice. Looking forward to collecting a sandwich Hah! Ooops, for some reason, an old edit got restored that had that $4 category (we had taken it out). Still, we will honor this as our first bug bounty find! Send your address to bounties@counterparty.co and we'll send you some BTC dust. |
|
|
|
xnova
Sr. Member
Offline
Activity: 390
Merit: 254
Counterparty Developer
|
|
February 21, 2014, 02:00:28 PM |
|
very nice. Looking forward to collecting a sandwich Haha. I just reported that myself. YOU do not qualify. |
|
|
|
|
