[ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread

[NexxusDrako]

Thank you for coming forward; this will help us greatly in figuring out what happened.

No problem, I wanna get to the bottom of this as much as you do. There is a fair amount of money at stake here, and we need to make sure it's stable and secure.

[BitcoinTangibleTrust]

Hi all,

I created a simple website which allows to lookup any unspent output from every address:
http://redeem.bitwatch.co/
Furthermore a raw transaction can be created which collects and combines unspent outputs whereby outputs from multiple addresses can be used.

The most important feature: standard multi signature outputs are included and it's very easy to redeem Mastercoin or Counterparty dust.

Please note: this is experimental and feedback is appreciated.

I would like to verify that I used this system and recovered about 0.19173119 BTC courtesy Master Bitcoin Dev dexX7 for which I will be using to buy more XCP.
Proof here: https://blockchain.info/tx/720fb4d10efe0837da761a4ec8e182a29cde6bdd91b8cca8b35ce027b42dd697

Thank you for a great service dexX7
Everyone who uses Counterparty should use this to get their unspent outputs.

Regards,
BitcoinTangibleTrust Team

[xnova]

Thank you for coming forward; this will help us greatly in figuring out what happened.

No problem, I wanna get to the bottom of this as much as you do. There is a fair amount of money at stake here, and we need to make sure it's stable and secure.

Thank you guys. I've asked NexxusDrako a number of questions, which I'll post below:

1. What is the OS and OS version, as well as browser and browser version?

2. What browser plugins do you have installed? Any software config changes recently in the last few days?

3. Was the BTC stolen after being transferred to the new wallet? If so, how soon after you transferred the BTC over did they disappear?

4. Did you generate the passphrase for your new wallet at the new wallet site, or did you just reuse your old wallet pass phrase?

5. Did you ever access the wallet on another machine?

6. Are you running antivirus? Is it up to date?

7. Please download and install: http://www.zemana.com/product/antilogger-free/overview/
Once installed, let us know if it finds anything.

8. Did you click on any "odd" or risky links in the last few days?

9. Have you copied your private key to your clipboard ever?

10. In the blockchain transaction where the funds go to that address, are all of those source addresses listed yours?

11. Any other details???


Anyone who runs into this issue, please provide us this background information.

At this point we're reviewing our security (just in case this is not a client-side keylogger type issue and is an issue on our end). It does not appear like any modified server-side JS code (and we use numerous server-side security precautions, such as 2 factor auth for ssh access, anyhow).

I will be rebuilding the primary wallet server on a server at the host where we've had no problem, and switching to that later today (this should not disrupt wallet access, beyond potentially a 10 minute downtime during the switch).

In the meantime, perhaps you two can compare notes to see if there's anything in common. We are also investigating technical ways to add 2 factor authentication into the wallet.

[NexxusDrako]

-snip-

Thank you for the email, it took me about 10 minutes to find it, as it was on my web client in spam, and Outlook doesn't download that folder. You will be happy to know that I have replied and support the development team in this stressful time.

[PhantomPhreak]

How i can transfer ownership after i dont have any "asset coin" anymore in account? Actually i see there Issued: amount Bal: 0. But transfer ownership button no working.  Any send etc button no working in old wallet. Only show info from arrow menu working.
And thanks offer halfcab, i have cp access too but i try solve with this webwallet when have now start

Need to go sleep and fix when wake up 10 am maybe i only doing something wrong

If the buttons aren't doing anything at all, that's a bug in Counterwallet.

[PhantomPhreak]

Should we use new  XCP LOGO at  http://coinmarketcap.com/ ?

That'd be great, yes. Thanks.

[danielpbarron]

Thank you guys. I've asked NexxusDrako a number of questions, which I'll post below:

1. What is the OS and OS version, as well as browser and browser version?

Ubuntu Linux Release 12.04 (precise) -- 32-bit Kernel Linux 3.8.0-38-generic

Google Chrome -- Version 33.0.1750.152 Ubuntu 12.04 (256984)

2. What browser plugins do you have installed? Any software config changes recently in the last few days?

I think I may have recently disabled ad-block.

I also have the following extensions:

• pastbin
• bitly
• wolframalpha
• blockchain
• greenaddress.it
• tweet deck

and the following plugins:

• DivX Web Player version 1.4.0.233
• Adobe Flash Player - Version: 11.2 r202
• Windows Media Player Plug-in 10 (compatible; Totem)
• QuickTime Plug-in 7.6.6
• Chromoting Viewer
• VLC Multimedia Plugin (compatible Totem 3.0.1)
• Google Talk
• iTunes Application Detector

3. Was the BTC stolen after being transferred to the new wallet? If so, how soon after you transferred the BTC over did they disappear?

Yes.

Sent:   (Fee: 0.0002 BTC - Size: 1523 bytes) 2014-04-16 12:39:50
Lost:   (Fee: 0.00119448 BTC - Size: 192 bytes) 2014-04-16 14:16:47

about an hour and a half

4. Did you generate the passphrase for your new wallet at the new wallet site, or did you just reuse your old wallet pass phrase?

I generated a new passphrase at the new wallet site.

5. Did you ever access the wallet on another machine?

No.

6. Are you running antivirus? Is it up to date?

No.

7. Please download and install: http://www.zemana.com/product/antilogger-free/overview/
Once installed, let us know if it finds anything.

Can't; windows only

8. Did you click on any "odd" or risky links in the last few days?

Yes, earlier in the morning on the day in question, I recall clicking a URI to an image in IRC, and it is my understanding that this is a potential way to introduce malware.

9. Have you copied your private key to your clipboard ever?

I may have, but if I did, it was after the loss.

10. In the blockchain transaction where the funds go to that address, are all of those source addresses listed yours?

My BTC were all in the one address, which is: 13ikC8398HhciFWkqPCrRHWUBASGxhBY4m

11. Any other details???

Nothing else has happened; nothing else appears to be compromised. My XCP and assets are still there too.

[NexxusDrako]

-snip-

For comparison my email response, word for word:

1. It looks like you are using Chrome? What version.
About page says Version 34.0.1847.116 m

2. What Chrome plugins do you have installed?
NationStates++, AdBlock Plus, Google Docs and Web of Trust

3. Was the BTC stolen from your old wallet balance, or your new wallet balance?
New wallet, as I did not have enough BTC balance to transfer from old wallet.

4. Did you generate the passphrase for your new wallet at the new wallet site, or did you just reuse your old wallet passphrase?
I generated a new wallet passphrase.

5. If stolen from your new wallet balance, how soon after you transferred the BTC over did they disappear?
Around 6 to 8 hours later.

6. Did you ever access the wallet on another machine?
No.

7. Are you running antivirus? Is it up to date? AVG Free, up to date.

8. Please download and install: http://www.zemana.com/product/antilogger-free/overview/ Once installed, let us know if it finds anything.
It found nothing, but thanks for the good software.

9. Did you click on any "odd" or risky links in the last few days?
No, I always try and keep away from that sort of thing.

10. Have you copied your private key to your clipboard ever?
Once, and that was into a Word Document to print out as a Paper Wallet. As soon as I had pasted, I wrote gibberish and copied that.

11. Any other details??? As for the transaction, I only own the address I have listed in the email, none of the others are mine.

Seems we are partly similar on Question 1 and 9, the same on 4, 5, 10 and 11 and different on the rest. I'm not sure what to make of the whole Ubuntu thing, I believe that's up to the devs to figure out. (Questions quoted are from danielpbarron's post)

[romerun]

interesting. I used the same passphrase as the old.counterwallet. I did not regenerate and my BTC is fine.

[td services]

Anyone know if the Zemana Antilogger Free includes clipboard antilogging as well as keystroke antilogging. Zemana has a paid version of a clipboard antilogger but it isn't listed under products on their main page.

[halfcab123]

While I understand we have pressing technical objectives, I'd like to take this time to thank LED_LCD for getting the ball rolling on donating to my new marketing initiative!

https://bitcointalk.org/index.php?topic=395761.msg6249776#msg6249776

[mindtomatter]

Master coin has maid safe coin fundraiser using it, which is hoping to raise 8mil using master coin tokens, therefore this is quite big for msc and could push the price up a lot further.

Yes I was interested to see that. Should we as a community reach out to the maid safe people and see if there is interest in launching on counterparty as well?

BTW is Adam Levine still planning on launching LTB coin on CP? Anyone know?

Soft launch  (feature lite) is planned for april 25th.

[supersuber]

Counterparty - What we are witnessing could be the equivalent of the invention of http on top of TCP/IP

[scriptcloud]

imo, maid safe coin looks like a scam.  this will deal a big blow to master coin

[lckjy]

so good the coin is.

[sparta_cuss]

imo, maid safe coin looks like a scam.  this will deal a big blow to master coin

Are you sure? This looks like a pretty legitimate project.
http://bitcoinmagazine.com/12397/maidsafe-is-making-data-safe/

[Chang Hum]

imo, maid safe coin looks like a scam.  this will deal a big blow to master coin

I understand they're taking millions of dollars of mastercoin funding privately from a single individual at the current market price! Possibly turning JR?? into an overnight multimillionaire from this crowd-source-coin-sell!

Added by edit: Also all funds raised by bitcoin externally go into mastercoin (again by private seller or market forces would force them to pay by bitcoin because of the fixed rate 0.08)

Something stinks how can a start-up of this size and ambition be so oblivious to the fact the price isn't real as there's no volume to sell. Either entire startup corps have completely lost the plot here or it's a scam to get market rate for mastercoins!!

Has anyone technical looked into what they've produced, it's beyond me to build it. No one talking publicly from their organisation seems to have a clue about crypto in general though.

[Chang Hum]

I wonder if the guy who's effectively won the lottery through this IPO, will try and manipulate the price.... wouldn't cost a lot relatively to make Mastercoin worth double!

[halfcab123]

I wonder if the guy who's effectively won the lottery through this IPO, will try and manipulate the price.... wouldn't cost a lot relatively to make Mastercoin worth double!

Yeah he could sell like 10 - 15% of his holdings in offline transactions... and then use the cash to buy bitcoin or if he sold for bitcoin, just go in and sweep through the sell order book...

[halfcab123]

Just out of concern of the message being lost in through the pages. I'm working diligently on getting funds raised to purchase the remaining equipment I need in order to produce a high-quality commercial for Counterparty. Here is a repost/cross-post. Any assets which are purchased with the communities donation, I will be turning over to Counterparty Marketing at their request; whether that means I am requested to film additional content, or actually have the items shipped somewhere else.


- aka Halfcab123

At this time, I need to raise money for:

• Polaroid PLTRIC Carbon Fiber Tripod - 65"  $102
• 10' x 20' Blue Muslin hand-painted backdrop   $47.62
• Handsfree professional lapel mic 12'  $56.56
• Lumiere L62011 Portable Studio Kit Lighting  $202
• Aluminum Backdrop Stand - 10'  $66.67

• TOTAL: $525 (1.17 BTC)

I was able to cut this in half from the previous quote, this also includes shipping.


If I can raise the 1.17 BTC to help with this initiative I will greatfully spend the rest out of my own pocket, (if needed)

Here's the saved wishlist on TigerDirect -- > http://goo.gl/8YtriV


DONATION ADDRESS: 13CVPDZRvAHiKtNJm3x36jREPDdtocXf4p


Current Donors:
LED_LCD  0.1
Flayaway  ??