Sparkzor
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 06:52:59 PM |
|
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FGKme4V4.jpg&t=665&c=tW02h8dKKyUEDw) Here are the trades the hacker made in my account. He cleared out 90% of my coins in the space of a few minutes, these trades are very quick, looks automated to me. It is certainly not a pool password because I use a different password for pools and a unique password for each exchange. Coinmarket.io, I have a friend who is a infosec specialist, can you contact me please with some info regarding site security so I can get him to audit it for me please? I REALLY don't think the vulnerability was my password here and that you may have a bigger problem. I'm a sad trader today, all the coins I was holding nearly doubled and I am left with nothing ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) Donations very welcome ![Cry](https://bitcointalk.org/Smileys/default/cry.gif) Yeah the exact same happened with me ^^
|
|
|
|
ibukovec
Newbie
Offline
Activity: 25
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 06:53:37 PM |
|
It looks like I have either been hacked or the wrong account has been given to me. Please contact me about this ASAP, thanks. From looking at trade history it seems that someone has used my account to buy 50k doges at 900 satoshie each. This wasn;t me, is there any way trade can be rolled back here? I have lost a lot of money here...
Unfortunately there is nothing we can do, your account (usename and password) are your responsibility. We will attempt to reverse the trades with users that we are 100% sure are connected to that person. Many people have got burnt by using the same user/password combination here and on some pools. Pools get hacked, passwords leak. Semi-strong passwords get cracked by dictionary attacks. There is no vulnerability server-side. Even it it were, we are not liable for any damages. I used a strong, unique password with capital, lowercase and non-alphanumeric figures. I do not think it was brute forced of hacked from a pool. I would seriously audit things server side if I were you. Do you need any info from me regarding trade reversals? Maybe the server is safe and maybe ppl use same username/psw for pool and market. But if your market worked the right way such trade should be possible at all. If you put in a rediculus high price the market should buy from best offers upwards and not right away with the wrong price. There lies your responsibility The trade the hacker made for me: Type Timestamp Amount Price Fee Total Buy Sat Jan 25 13:14:10 3574.2394775 DOGE 0.00000689 0% 0.02462651 BTC
|
|
|
|
Giggety
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 98
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 06:54:28 PM |
|
When are you guys going to fix this:
Type Timestamp Amount Price Total N/A Sat Jan 25 19:52:37 1898.3 KDC 0.00020100 0.38155830 BTC
Type is always N/A
|
|
|
|
DarknessYY
Newbie
Offline
Activity: 36
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 06:56:55 PM |
|
I recharge the 50Wdgb, but has not arrived, the wallet has been unrecognized state, Please tell me how to solve THAKNS ![Cry](https://bitcointalk.org/Smileys/default/cry.gif)
|
|
|
|
coinmarket.io (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 98
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 06:57:18 PM |
|
Go ahead and try to make an order with ridiculous price, see what happens.
|
|
|
|
DarknessYY
Newbie
Offline
Activity: 36
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:00:19 PM |
|
Go ahead and try to make an order with ridiculous price, see what happens.
I recharge the 50Wdgb, but has not arrived, the wallet has been unrecognized state, Please tell me how to solve thanks
|
|
|
|
coinmarket.io (OP)
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 98
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:02:52 PM |
|
Go ahead and try to make an order with ridiculous price, see what happens.
I recharge the 50Wdgb, but has not arrived, the wallet has been unrecognized state, Please tell me how to solve thanks Provide username and transaction ID.
|
|
|
|
BlueTunic
Newbie
Offline
Activity: 3
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:03:58 PM |
|
Hey, I signed up with you guys a while back and used a test e-mail on my account; it never actually asked me for e-mail confirmation, so when I went to actually do some trading, and withdraw coins, it sent the confirmation email to... you guessed it, the test account, which I don't have access to.
Is there any way I can get the withdrawl that I did reverted or get the confirmation e-mail sent to my actual e-mail address?
Give me your username, i'll confirm your withdrawal manually and you will crate an another account with the right details after that. BlueTunic
|
|
|
|
incorrect
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:05:10 PM |
|
Could you do the same for me with the email? I can't get a verification either.
|
|
|
|
mrbildo
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 102
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:05:37 PM |
|
It looks very obvious to me that the exchange was hacked last night, what is the explanation for the downtime all night last night? How come your dev lost SSH access all night? I do not think that this occurrence and the fact that users are finding their accounts hacked during the night is a complete coincidence.
Again, I request information on the security measures present on the exchange so that I can have them independently audit. I am 90% sure the vulnerability was not my password, it was non-dictionary, unique and had caps, lower case and non alphanumerics, not the type of password is is easy to crack in that small a time window.
The high order filling was a bug, and combined with possible breach to site security constitutes a working vulnerability. There was a 0.25btc bounty for this advertised a while back.
|
|
|
|
DarknessYY
Newbie
Offline
Activity: 36
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:08:16 PM |
|
Go ahead and try to make an order with ridiculous price, see what happens.
I recharge the 50Wdgb, but has not arrived, the wallet has been unrecognized state, Please tell me how to solve thanks Provide username and transaction ID. username:yysqsd transaction ID:5022decc8836924e94a7371c249d7dbaaee53c94455a92f08fd6abfdedb29dd4 thanks ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
Nullu
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:10:31 PM |
|
FFS. Coinmarket just went down as I requested a BTC withdrawal.
I'm going to throw a fit if that vanishes.
|
BTC - 14kYyhhWZwSJFHAjNTtyhRVSu157nE92gF
|
|
|
podyx
Legendary
Offline
Activity: 2338
Merit: 1035
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:10:38 PM |
|
Site is down?
|
|
|
|
BlueTunic
Newbie
Offline
Activity: 3
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:11:51 PM |
|
Just want to say, Coinmarket handled my issue with no problems and the btc that I was transferring is now sitting pretty in my wallet. Thank you for your support, Coinmarket ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
mrbildo
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 102
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:12:32 PM |
|
Site is down for me too. Maybe someone's password is being hacked again...
|
|
|
|
AdamT
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:13:42 PM |
|
Could you do the same for me with the email? I can't get a verification either.
Me as well, user: deep Withdrew 50k NOBL yesterday morning, no conf email. Please push through manually, much appreciated!
|
|
|
|
incorrect
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:15:20 PM |
|
Me as well, user: deep
Withdrew 50k NOBL yesterday morning, no conf email. Please push through manually, much appreciated!
Username: Near I really hope we can sort this out soon I want to sleep knowing my coins are safe. ![Wink](https://bitcointalk.org/Smileys/default/wink.gif)
|
|
|
|
podyx
Legendary
Offline
Activity: 2338
Merit: 1035
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:17:07 PM |
|
My 80 KDC that I sent when site went down was duplicated lol
not alot of money but just letting you know, if you want them back or something
|
|
|
|
Nullu
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:19:49 PM |
|
My 80 KDC that I sent when site went down was duplicated lol
not alot of money but just letting you know, if you want them back or something
If it was a glitch I doubt those coins actually exist. I wouldn't risk trying to sell them or you may end up with a negative balance. FYI, my BTC withdrawal never went through when the site went down. Once it was back up I made the withdrawal and recieved the BTC instantly. Love how fast this site is. Hope they continue developing it.
|
BTC - 14kYyhhWZwSJFHAjNTtyhRVSu157nE92gF
|
|
|
ibukovec
Newbie
Offline
Activity: 25
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
January 25, 2014, 07:21:48 PM |
|
Go ahead and try to make an order with ridiculous price, see what happens.
If it works right now it dosnt mean it did today when the hacker made the orders. If it worked then right then the thief is one of you or your server was hacked.
|
|
|
|
|