[ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread

[cityglut]

xnova, phantomphreak, busoni ? anything at all ? any input any tidbits ?

We are looking at the forums, and understand that people would like an update, but it is still the case that we have heard nothing from the hacker in over 24 hours.

When we get an update we will give it to the community, however, until we hea from the hacker, there is no update to give.

[qxzn]

So the parties who were wronged:
- People who bought XCP with BTC, but did not withdraw prior to closing (that would be approximately 35000 - 7000 = 28000 XCP)

I'm one of these people. I deposited some coins, and put out some bids, I think some of them were lowballs. I don't know what got filled. I never withdrew anything. Currently my poloniex account balance shows no BTC and no XCP. Much sadness , it was nearly enough BTC to buy a new car.

I would be happy to donate some XCP or BTC to the recovery effort. And certainly I'm happy to have any trades reversed on poloniex. But it would be nice to get something back.

[halfcab123]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

[halfcab123]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

[trilli0n]

The market command was removed in an earlier update. For now, it's best to use blockscan in its place, as the GUIs emerge.

So the community is asked to trust prices published by a single, central website? I declare XCP is no longer decentralized at this point.

[Chuck]

If the hacker does not return the 80 BTC, it seems there are two options:

try to collect 80 BTC and return them to the XCP buyers who's funds were stolen,

try to collect 35,000 XCP and give them to the XCP buyers, instead


It seems the XCP route is perhaps better? I feel the community could come up with 35K XCP, but I have a hard time imagining 80 BTC. Also, the buyers wanted XCP, we know that because they had buy orders, and giving them XCP keeps them in the community so to speak.

[prophetx]

you guys all need to chill out.

exchanges charge fees and those fees should cover insurance and security costs such as this.  again assuming there is some level of sophistication in the operations.

the exchange can easily make up the amounts in fees over the course of a few weeks, maybe a couple months at most.

or the exchange can release some bond or stock on XCP and give holders a portion of their future profits to raise the 80 btc and 6100 xcp to cover their obligation.


let the hacker keep the money, he will need it as he's already broken a few written and unwritten laws.

[trilli0n]

Just a friendly reminder that even billion dollar companies have critical security flaws:

Apple security flaw could allow hackers to beat encryption

Please stop it. Pointing at security flaws in other software does not make the ones in XCP any less severe. I saw you doing that on Reddit as well. It's as if you are saying that it's perfectly normal that people are losing money due to a gaping hole in the protocol and that all is fine and expected. It doesn't go down very well. Instead, why not admit that there is a serious issue and at the same time highlight that the devs are on top of it.

[cityglut]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

We personally have offered the hacker 12 BTC, and others have stepped up and sent 700 XCP to our bug bounty program.

I would strongly encourage the community not to wait for something that is out of our control, but to proactive and either donate directly to busoni's donation address: <15buRLRW47AY9Md3mpFj17Yp6w4BtfMRjc> or our "bug bounty" donation address <14Tf35AovvRVURzd623q5i9kry2EW8WzyL>

I am not sure what you mean when you ask "what does the future hold ? Shouldn't we resume the show ?" Recent events have not stopped us from working on Counterparty: yesterday we paid out the desktop GUI bounty, xnova's web wallet will be released in beta on testnet with a week, the centralized exchange bounty will end in a few days, and the official website will be getting a major upgrade in the next few weeks.

[Bellebite2014]

you guys all need to chill out.

exchanges charge fees and those fees should cover insurance and security costs such as this.  again assuming there is some level of sophistication in the operations.

the exchange can easily make up the amounts in fees over the course of a few weeks, maybe a couple months at most.

or the exchange can release some bond or stock on XCP and give holders a portion of their future profits to raise the 80 btc and 6100 xcp to cover their obligation.


let the hacker keep the money, he will need it as he's already broken a few written and unwritten laws.

Higher fees for a while should be the best. But again, users not understanding what alpha code means wouldn't have shared the profits on those cheap coins, so, whatever. We need to have this back on poloniex, so people can find more bugs

Please trade like crazy, keep burning youself, so that people with more than half a brain can finally start trading once the protocol is robust enough. Thanks !

[halfcab123]

Yeah that's interesting why don't we all agree to slightly higher fees until the balance sheet is amended   That would be 3rd party and non protocol born.. meaning the protocol reputation is not directly affected

[ginko-B]

xnova, phantomphreak, busoni ? anything at all ? any input any tidbits ?

It seems like where the gap lies right now is in the fact that 20+ of us either pledged or passionately insisted on a donation-based solution, but now only 3 of us have actually sent donations.  

I sent my 10%, and I am feeling a bit bummed that few others have followed suit.  Please use Jimhsu's service if you need help with importing the private keys!

At this point this is totally in the communities hands, as far as I can tell, and we need to see a whole line-up of community members donating and congratulating one-another and creating some comraderie and community spirit.

It's time this community shows what it is made of!

[qwertyqwerty]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

?? ~60 seconds passed since you ask question. relax
 please....

[520Bit]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

We personally have offered the hacker 12 BTC, and others have stepped up and sent 700 XCP to our bug bounty program.

I would strongly encourage the community not to wait for something that is out of our control, but to proactive and either donate directly to busoni's donation address: <15buRLRW47AY9Md3mpFj17Yp6w4BtfMRjc> or our "bug bounty" donation address <14Tf35AovvRVURzd623q5i9kry2EW8WzyL>

I am not sure what you mean when you ask "what does the future hold ? Shouldn't we resume the show ?" Recent events have not stopped us from working on Counterparty: yesterday we paid out the desktop GUI bounty, xnova's web wallet will be released in beta on testnet with a week, the centralized exchange bounty will end in a few days, and the official website will be getting a major upgrade in the next few weeks.

Great progress, just keep development. The community will handle this issue, it is out of all of our control, but we have to move forward to make Counterparty to be successful. I am looking forward to xnova's web wallet. After that, general people can use the DEX maybe.

[halfcab123]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

?? ~60 seconds passed since you ask question. relax
 please....

Thanks for the suggestion, hold on to those, might be worth something one day.

[qwertyqwerty]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

?? ~60 seconds passed since you ask question. relax
 please....

Thanks for the suggestion, hold on to those, might be worth something one day.

Do you know they are worth right now? Any update?
Weird. It's a full 70 seconds later, thought there would be some re-assurance by now and show could go on.
God this is such a mess -____- no update still guys?

 

[prophetx]

btw to the counterparty dev's mastercoin foundation is looking for a security auditor as well.

i know we have connected with a few but i don't know the status.  if you all want to split/share the costs of a security focused developer, that might be something that can be worked out since we will likely face similar security issues and so there likely would be some overlap in research and work.  or at the very least we may be able to give them extra work to incent them to focus on this particular domain.

i haven't talked to the chromawallet folks about this idea but I assume they would have a similar interest.

[halfcab123]

@Cityglut. In the event the hacker turns blackhat and peaces out.. what does the future hold ?  Shouldn't we resume the show ?

 

?? ~60 seconds passed since you ask question. relax
 please....

Thanks for the suggestion, hold on to those, might be worth something one day.

Do you know they are worth right now? Any update?
Weird. It's a full 70 seconds later, thought there would be some re-assurance by now and show could go on.
God this is such a mess -____- no update still guys?

 

That's pretty cute. Is this an arrogance car show ? sweet ride.

[cityglut]

btw to the counterparty dev's mastercoin foundation is looking for a security auditor as well.

i know we have connected with a few but i don't know the status.  if you all want to split/share the costs of a security focused developer, that might be something that can be worked out since we will likely face similar security issues and so there likely would be some overlap in research and work.  or at the very least we may be able to give them extra work to incent them to focus on this particular domain.

i haven't talked to the chromawallet folks about this idea but I assume they would have a similar interest.

prophetx, that is a pretty interesting offer. I think we are looking for someone full-time, but if you have some leads who could look at the code, that would be great. You can refer them to our bug bounty program, so that they know they will be rewarded if they find something.

If you could PM me with some more details, I would really appreciate it.

[520Bit]

btw to the counterparty dev's mastercoin foundation is looking for a security auditor as well.

i know we have connected with a few but i don't know the status.  if you all want to split/share the costs of a security focused developer, that might be something that can be worked out since we will likely face similar security issues and so there likely would be some overlap in research and work.  or at the very least we may be able to give them extra work to incent them to focus on this particular domain.

i haven't talked to the chromawallet folks about this idea but I assume they would have a similar interest.

+1 Team work make everyone win. And build a good ecosystem on bitcoin. XCP, MSC and Coloredcoins have the same goal, it is really good to see you guys work together.