[ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread

[watuba]

WOW!!!!!  Nice job!!!  This is the illest GUI I've seen in the cryptospace by far.   You are a master.

[TheMightyX]

Here is an update on JahPowerBits UI:



It's almost complete. I don't suppose there's still time to snag 100% of that bounty?
heh.
You already know the feature list. This iteration has animated menus, an animated screen flow and adaptive elements. Also working on several theme options (Light/dark/colors). If anyone has any suggestions for color pairings please let me know.
Working as fast as I can -_-
Will have more updates soon.

That is absolutely wonderful!!!

The best GUI I've seen since a long time.

Price will skyrocket. Wow  

Thank you so much for the kind words. It's coming along!
I do believe that if we make the protocol easier to use we will increase adoption rates ten-fold.
I suggest if anyone really wants to see their investment grow and counterparty flourish that they donate to the developers and also to JahPowerBit so he can keep developing and adding new features to the GUI.
If everyone was to donate 10 XCP you would hardly notice the difference, but it would allow us to take feature requests and add much more functionality.

[supervine]

The GUI doesn't work.
On Win XP (32bit) it said missing file msvcr100.dll
On Win 7 (64 bit) python.exe crash

[mailliam]

Okay, people seem to think donations are the best way to go. I agree. I think taxing Poloniex balances or everyone's XCP balances would be disastrous.

I have created a thread on the Counterparty forums for donations: https://forums.counterparty.co/index.php/topic,127.0.html

The total missing is actually about 6100 XCP instead of 7000, as some people had not yet withdrawn and I was able to deduct balances.

Your donations are greatly appreciated, and as soon as the missing XCP is covered, I will open up withdrawals so people can get at their XCP.

What happens if more than 6100 is donated? Don't you guys think it is better to have the devs control the donations that way if and when it goes over 6100 they can give it to

busoni and the rest can be used as donation for the devs. Busoni, don't you think you should cover a portion of that 6100 as the exchange owner? I would think at least 20%

of the 6100. You don't think you bear that much responsibility for what happened? Previous postings were right when they said a lot of people are going to hide behind

the anonymity and not donate even if they say they will. I find it hard to believe 6100 will get donated. What will you do if it is not met?

I just logged into Poloniex to see how things were going and noticed XCP was removed. I bought ~1000 XCP on the 16-17th.

BTC/XCP   Buy   0.0138   521.22052782   7.19284328 BTC   2014-02-17 06:41:52
BTC/XCP   Buy   0.0138   0.51860261   0.00715671 BTC   2014-02-17 02:21:58
BTC/XCP   Buy   0.015822   125.30630705   1.98259639 BTC   2014-02-16 19:09:24
BTC/XCP   Buy   0.015822   94.69369295   1.49824360 BTC   2014-02-16 18:04:32
BTC/XCP   Buy   0.01899   100   1.899 BTC   2014-02-16 17:41:23
BTC/XCP   Buy   0.01898   100   1.898 BTC   2014-02-16 17:41:18
BTC/XCP   Buy   0.017   9.481   0.161177 BTC   2014-02-16 16:26:13
BTC/XCP   Buy   0.017   16.59352784   0.28208997 BTC   2014-02-16 16:26:13

That is over half my total crypto holdings. Gone in a puff of smoke? Fuck me.

I don't even know what's happened. I login today and my XCP is gone. Can someone provide some answers please?

BTC/XCP   Sell   0.012   1   0.012 BTC   2014-02-19 13:51:16
BTC/XCP   Sell   0.012   1   0.012 BTC   2014-02-19 13:51:03
BTC/XCP   Sell   0.012   0.07290725   0.00087488 BTC   2014-02-19 13:50:13
BTC/XCP   Buy   0.0083   10   0.083 BTC   2014-02-18 04:25:28
BTC/XCP   Buy   0.0105   10   0.105 BTC   2014-02-17 23:15:51
BTC/XCP   Buy   0.014   3.605   0.05047 BTC   2014-02-16 19:29:31
BTC/XCP   Buy   0.016   15.96041687   0.25536666 BTC   2014-02-16 19:09:24
BTC/XCP   Sell   0.01789   3.605   0.06449345 BTC   2014-02-16 16:30:32
BTC/XCP   Buy   0.009598   0.00199938   0.00001919 BTC   2014-02-15 23:41:45
BTC/XCP   Buy   0.009897   50.8943114   0.50370099 BTC   2014-02-15 22:58:30
BTC/XCP   Buy   0.009598   10.6   0.1017388 BTC   2014-02-15 22:57:25
BTC/XCP   Buy   0.0096   2.52048139   0.02419662 BTC   2014-02-15 22:57:06

[sixteendigits]

So are we good to use version .7 of the database or should we be waiting for .8 to come out?  Wanna make a donation to Busconi but wanna be sure it is safe to do so.

[busoni]

Okay, people seem to think donations are the best way to go. I agree. I think taxing Poloniex balances or everyone's XCP balances would be disastrous.

I have created a thread on the Counterparty forums for donations: https://forums.counterparty.co/index.php/topic,127.0.html

The total missing is actually about 6100 XCP instead of 7000, as some people had not yet withdrawn and I was able to deduct balances.

Your donations are greatly appreciated, and as soon as the missing XCP is covered, I will open up withdrawals so people can get at their XCP.

What happens if more than 6100 is donated? Don't you guys think it is better to have the devs control the donations that way if and when it goes over 6100 they can give it to

busoni and the rest can be used as donation for the devs. Busoni, don't you think you should cover a portion of that 6100 as the exchange owner? I would think at least 20%

of the 6100. You don't think you bear that much responsibility for what happened? Previous postings were right when they said a lot of people are going to hide behind

the anonymity and not donate even if they say they will. I find it hard to believe 6100 will get donated. What will you do if it is not met?

The devs could take the donations and give me what Poloniex needs, or I can take the donations and give the devs any extra. It doesn't matter. If donations do not reach 6100, then we'll have to work it out another way. The devs will probably help out, and I can help out. It isn't THAT much. People will get all of their XCP back, as long as it was not purchased during the dump.

[busoni]

In other news, I have just finished implementing a security feature that immediately freezes any currency with a discrepancy in the wallet balance vs. exchange balance. This would have prevented the dump from ever happening.

[DaFockBro]

Any updates on the DEX order book trolling?

Will the DEX order book be cleaned up at any point?

http://blockscan.com/order_book.aspx

[TheMightyX]

I just logged into Poloniex to see how things were going and noticed XCP was removed. I bought ~1000 XCP on the 16-17th.

BTC/XCP   Buy   0.0138   521.22052782   7.19284328 BTC   2014-02-17 06:41:52
BTC/XCP   Buy   0.0138   0.51860261   0.00715671 BTC   2014-02-17 02:21:58
BTC/XCP   Buy   0.015822   125.30630705   1.98259639 BTC   2014-02-16 19:09:24
BTC/XCP   Buy   0.015822   94.69369295   1.49824360 BTC   2014-02-16 18:04:32
BTC/XCP   Buy   0.01899   100   1.899 BTC   2014-02-16 17:41:23
BTC/XCP   Buy   0.01898   100   1.898 BTC   2014-02-16 17:41:18
BTC/XCP   Buy   0.017   9.481   0.161177 BTC   2014-02-16 16:26:13
BTC/XCP   Buy   0.017   16.59352784   0.28208997 BTC   2014-02-16 16:26:13

That is over half my total crypto holdings. Gone in a puff of smoke? Fuck me.

I don't even know what's happened. I login today and my XCP is gone. Can someone provide some answers please?

BTC/XCP   Sell   0.012   1   0.012 BTC   2014-02-19 13:51:16
BTC/XCP   Sell   0.012   1   0.012 BTC   2014-02-19 13:51:03
BTC/XCP   Sell   0.012   0.07290725   0.00087488 BTC   2014-02-19 13:50:13
BTC/XCP   Buy   0.0083   10   0.083 BTC   2014-02-18 04:25:28
BTC/XCP   Buy   0.0105   10   0.105 BTC   2014-02-17 23:15:51
BTC/XCP   Buy   0.014   3.605   0.05047 BTC   2014-02-16 19:29:31
BTC/XCP   Buy   0.016   15.96041687   0.25536666 BTC   2014-02-16 19:09:24
BTC/XCP   Sell   0.01789   3.605   0.06449345 BTC   2014-02-16 16:30:32
BTC/XCP   Buy   0.009598   0.00199938   0.00001919 BTC   2014-02-15 23:41:45
BTC/XCP   Buy   0.009897   50.8943114   0.50370099 BTC   2014-02-15 22:58:30
BTC/XCP   Buy   0.009598   10.6   0.1017388 BTC   2014-02-15 22:57:25
BTC/XCP   Buy   0.0096   2.52048139   0.02419662 BTC   2014-02-15 22:57:06

A malicious user used a bug in the protocol to effectively double spend (someone correct me here). He took all the XCP on poloniex and dumped them, then withdrew the BTC. Bug has been patched.

The total XCP missing from the wallet--from people who bought from the dump and made hasty withdrawals--is about 7,000 XCP.

I am confused, I thought the hacker double-spent 35,000 XCP yet only 7,000 is missing?


And if he walked away with 80 BTC, but only 7,000 is missing, then he sold 80BTC for 7,000?

I don't understand what happened exactly...

The 35000 spent exploited a protocol bug and thus was reversed (it never existed in the most recent version of the database).

The 7000 constitutes withdrawals by people who sold BTC for XCP and so withdrew the "tainted" XCP. That was not reversed.
The 80 BTC constitutes funds that the hacker withdrew after selling to the above people, and has not been returned yet.

So the parties who were wronged:
- People who bought XCP with BTC, but did not withdraw prior to closing (that would be approximately 35000 - 7000 = 28000 XCP)
- People who deposited XCP who did not mean to sell at those prices (which the hacker did), that would be whatever balance poloniex has right now, minus 28000
- Poloniex, who is losing out on trading and has a loss of confidence

The parties who "benefited":
- People who withdrew XCP that they bought before closing (this is the 7000)
- The hacker, who is up +80BTC

The parties who were unaffected
- People who did not have XCP on poloniex

Ideally, people who withdrew would deposit funds back into the exchange, the BTC would be redeposited, and all trades reversed, which would result in no one gaining or losing anything. However as this is not actually practical, the exchange is currently soliciting donations to try to cover the remainder.

That's the current fund situation right now.

A clear explanation about current situation.

Your currency is not gone. As they were being held by an exchange they have a responsibility to return those funds. They are doing everything they can at the moment. Just sit tight.

[kdrop22]

The GUI doesn't work.
On Win XP (32bit) it said missing file msvcr100.dll
On Win 7 (64 bit) python.exe crash

For the msvcr100.dll error , this is due to the need for Visual Studio run time. You can install both the 32/64 bit versions of runtime from here.

http://www.faqforge.com/windows/fix-the-program-cant-start-because-msvcr100-dll-is-missing-from-your-computer-error-on-windows/

I was able to get past this error, using this. However, I am still stuck with the GUI.

Clicking "Start the Party" brings up the config Window. Click OK.
Click "Open Wallet" ,
Receive "Error message: you did not start the party".

Are there any other components that need to be installed?

[TheMightyX]

On a related note, Busoni don't you have identification information for the users who took advantage of this situation?
You have email addresses, IP addresses, BTC addresses, etc.

Could you not use this to publicly shame those involved and ask that they do the right thing and return the XCP to their rightful owners?

They are only stealing from the community. This is not a victimless crime like stealing from a bank.

We should not be using community funds to recover those funds which were depleted by malicious actions. This is a inefficient way of operating; like paying off one credit card with another credit card. We would basically be causing damage to the community to repair damage caused to the community.

Give me the emails and ip addresses if you don't want to do it.

[cityglut]

The GUI doesn't work.
On Win XP (32bit) it said missing file msvcr100.dll
On Win 7 (64 bit) python.exe crash

For the msvcr100.dll error , this is due to the need for Visual Studio run time. You can install both the 32/64 bit versions of runtime from here.

http://www.faqforge.com/windows/fix-the-program-cant-start-because-msvcr100-dll-is-missing-from-your-computer-error-on-windows/

I was able to get past this error, using this. However, I am still stuck with the GUI.

Clicking "Start the Party" brings up the config Window. Click OK.
Click "Open Wallet" ,
Receive "Error message: you did not start the party".

Are there any other components that need to be installed?

Make sure you have entered a "gui password" in the configuration file. This is the only part of the config file that is not automatically filled in, and it is easy to miss.

[Spekulatius]

I know you mean well and recovering the XCP would be good for the community at large.

There is no reason to think that these users knew that there was something malicious going on when they took their gains.

Allow the users to make the choice themselves without being coerced.

I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002)
but now we do know exactly what happened.

If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback?

the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap.

I totally agree. I just don't want people getitng the wrong ideas  

Yes why dont roll back the database to before the dump so the 6100 outstanding XCP are back to where they legitimately belong? (given busoni restores the BTC balances of those that withdrew their 6100 XCP after the dump because they would be out of BTC and XCP)

Which database are you talking about--Poloniex's or Counterparty's?

Im talking about the Counterparty Database. I guess the first attempt to roll back was well intended but was just a bit off by a few minutes with rolling back up until after the dump because the situation was not clear and a community consensus missing (still is). So by rolling back up until before the dump all the outstanding XCP will be back in their original holders pockets at Poloniex (sorry guys but the cheap XCP you withdrew are not meant to be yours) and if you busoni, refill the BTC balances of the users that withdrew their cheap XCP, everybody will be made whole again, as far as we can have an effect on it. Only the hacker's BTC would be outstanding in that case which he already pledged to return.

We cannot roll back BTC transactions, so what you are suggesting would require busoni to personally pay out-of-pocket for people's losses, i.e. around 100 BTC.

We hope that the hacker will do the right thing, but we cannot base our actions on that hope; we can only act "as if" the hacker has returned the BTC when he has returned the BTC. Until then, those who want to help make things right are encouraged either to donate to our "security bug" address: 14Tf35AovvRVURzd623q5i9kry2EW8WzyL or to busoni's donation address: 15buRLRW47AY9Md3mpFj17Yp6w4BtfMRjc.

No, I am only suggesting to fix the 6100 XCP outstanding issue by rolling those txs in the CP protocol back. The BTC for which those were sold should still remain on Poloniex so busoni wouldnt have to cover those from his own pocket.

The 80 BTC the hacker has to return, I have no solution for and hopefully he does return it.

If the above solution is not implemented Poloniex would be out of the 80 hacked BTC + 6100 XCP which before the hack traded for around 60 BTC. Both positions could be returned voluntary in theory by the hacker and those who withdrew their cheap XCP after the hack but I doubt it (at least the XCP). Is the benevolence of the community large enough to cover 140 BTC? Idk and I think we dont have to put that burden on the community, at least the outstanding 6100 XCP we can fix by ourselves by rolling back the hack related txs.

[danonthehill]

Is it the policy of the Counterparty devs, to make a centralized decision on reversing transactions?  

[supervine]

Installed Visual C++ Runtime 2010 and 2012. Nothing changes. (win7-64bit)
Still same error - python.exe crashed because of module msvcr100.dll

And about the donation: I would like to donate, but busoni seized all my coins. Even that not involved in latest trades. He missing 10% of coins, but hold close to heart all 100%. Give me my 90% and I will happily withdraw and never get back to your exchange.

[supervine]

Is it the policy of the Counterparty devs, to make a centralized decision on reversing transactions?  

They did not reversed transactions. They fixed the protocol. All illegal transactions (what used the security hole) just disappeared from the chain. And of course it was with community backup (like any other change in any other crypto)

[Mrrr]

Here is an update on JahPowerBits UI:



It's almost complete. I don't suppose there's still time to snag 100% of that bounty?
heh.
You already know the feature list. This iteration has animated menus, an animated screen flow and adaptive elements. Also working on several theme options (Light/dark/colors). If anyone has any suggestions for color pairings please let me know.
Working as fast as I can -_-
Will have more updates soon.

That is absolutely wonderful!!!

The best GUI I've seen since a long time.

Price will skyrocket. Wow  

Thank you so much for the kind words. It's coming along!
I do believe that if we make the protocol easier to use we will increase adoption rates ten-fold.
I suggest if anyone really wants to see their investment grow and counterparty flourish that they donate to the developers and also to JahPowerBit so he can keep developing and adding new features to the GUI.
If everyone was to donate 10 XCP you would hardly notice the difference, but it would allow us to take feature requests and add much more functionality.

This is awesome to an extend that I call AWESOME publicly. You should however be very careful with the chosen colour scheme. A flat black/white version would be good for those amongst us unwilling to click the wrong button due to vision impairment.

Furthermore you should include a help thingie with little clickable question marks beside every function. I for one, still haven't figured out all the technicalities behind XCP. And screw the not investing into things you don't understand Axiom, I invested into something I believe in.

Imma install tomorrow. Cheers.
.

[kdrop22]

I know you mean well and recovering the XCP would be good for the community at large.

There is no reason to think that these users knew that there was something malicious going on when they took their gains.

Allow the users to make the choice themselves without being coerced.

I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002)
but now we do know exactly what happened.

If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback?

the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap.

I totally agree. I just don't want people getitng the wrong ideas  

Yes why dont roll back the database to before the dump so the 6100 outstanding XCP are back to where they legitimately belong? (given busoni restores the BTC balances of those that withdrew their 6100 XCP after the dump because they would be out of BTC and XCP)

Which database are you talking about--Poloniex's or Counterparty's?

Im talking about the Counterparty Database. I guess the first attempt to roll back was well intended but was just a bit off by a few minutes with rolling back up until after the dump because the situation was not clear and a community consensus missing (still is). So by rolling back up until before the dump all the outstanding XCP will be back in their original holders pockets at Poloniex (sorry guys but the cheap XCP you withdrew are not meant to be yours) and if you busoni, refill the BTC balances of the users that withdrew their cheap XCP, everybody will be made whole again, as far as we can have an effect on it. Only the hacker's BTC would be outstanding in that case which he already pledged to return.

Funds Lost
Deposits lost on Poloniex
6100 XCP  
80 BTC
********************
Donations till now:
41 XCP
0.0002172 BTC
There will be a few users who voluntarily return the XCP, however I doubt it will be much.
Even though we remain hopeful, the chances of the BTC being return decrease day by day.
********************
So, the options right now are:

A) Poloniex: distributes the loss of 6100 XCP + 80 BTC among all holders (XCP sellers and buyers on the exchange).
I assume this will be around a 25% tax/loss.
B) Counterparty Devs rollback, the transactions(withdrawals) that were made at the 0.002 price (taking advantage of the hack)
and we deal with the 80 BTC, using a combination of donations and tax on the remaining accounts.
I assume this will be around a 12% loss.

Either one of those choices won't be pleasant, but busconi and the devs would need to take some form of action.

[sixteendigits]

I know you mean well and recovering the XCP would be good for the community at large.

There is no reason to think that these users knew that there was something malicious going on when they took their gains.

Allow the users to make the choice themselves without being coerced.

I don't think any user knew that there was something malicious going on when they took their gains (I myself bought some xcp @ 0.002)
but now we do know exactly what happened.

If i understand what you are saying than why don't allow all of poloniex users to make the choice for themselves and don't rollback?

the answer is simple in my opinion - if we can get everything back to where it was before the 35,000 xcp sell that will be the best thing for all users. For clarification i don't think any treats should be used i just think it will be helpful if we knew who we need to speak to in order to get this situation behind us asap.

I totally agree. I just don't want people getitng the wrong ideas  

Yes why dont roll back the database to before the dump so the 6100 outstanding XCP are back to where they legitimately belong? (given busoni restores the BTC balances of those that withdrew their 6100 XCP after the dump because they would be out of BTC and XCP)

Which database are you talking about--Poloniex's or Counterparty's?

Im talking about the Counterparty Database. I guess the first attempt to roll back was well intended but was just a bit off by a few minutes with rolling back up until after the dump because the situation was not clear and a community consensus missing (still is). So by rolling back up until before the dump all the outstanding XCP will be back in their original holders pockets at Poloniex (sorry guys but the cheap XCP you withdrew are not meant to be yours) and if you busoni, refill the BTC balances of the users that withdrew their cheap XCP, everybody will be made whole again, as far as we can have an effect on it. Only the hacker's BTC would be outstanding in that case which he already pledged to return.

Funds Lost
Deposits lost on Poloniex
6100 XCP  
80 BTC
********************
Donations till now:
41 XCP
0.0002172 BTC
There will be a few users who voluntarily return the XCP, however I doubt it will be much.
Even though we remain hopeful, the chances of the BTC being return decrease day by day.
********************
So, the options right now are:

A) Poloniex: distributes the loss of 6100 XCP + 80 BTC among all holders (XCP sellers and buyers on the exchange).
I assume this will be around a 25% tax/loss.
B) Counterparty Devs rollback, the transactions(withdrawals) that were made at the 0.002 price (taking advantage of the hack)
and we deal with the 80 BTC, using a combination of donations and tax on the remaining accounts.
I assume this will be around a 12% loss.

Either one of those choices won't be pleasant, but busconi and the devs would need to take some form of action.

I'm going to donate but someone needs to tell me if it is safe to use database version .7 or are we using .8 now?

[TheMightyX]

No, I am only suggesting to fix the 6100 XCP outstanding issue by rolling those txs in the CP protocol back. The BTC for which those were sold should still remain on Poloniex so busoni wouldnt have to cover those from his own pocket.

The 80 BTC the hacker has to return, I have no solution for and hopefully he does return it.

If the above solution is not implemented Poloniex would be out of the 80 hacked BTC + 6100 XCP which before the hack traded for around 60 BTC. Both positions could be returned voluntary in theory by the hacker and those who withdrew their cheap XCP after the hack but I doubt it (at least the XCP). Is the benevolence of the community large enough to cover 140 BTC? Idk and I think we dont have to put that burden on the community, at least the outstanding 6100 XCP we can fix by ourselves by rolling back the hack related txs.

This is quite heavy and something that should not be taken lightly, for the future of the community and protocol itself.
I myself am in favor of Poloniex not being left with a 140 BTC bill which they will obviously not be able to pay. This will most likely bankrupt the site and cause it to shut down. Surely they could not operate after having incurred such losses. That being said; rolling back the protocol? nope.