silk road 2 hacked

[traderCJ]

Maybe it was Steve?

LOL

[CryptoNames]

Oh yeah, let's use malleability problem we never heard of before to steal your coins

We might hear few of these more.

[Mythul]

So my bitcoin just got rarer now ?

[Dalmar]

So my bitcoin just got rarer now ?

Hackers are not hodlers, but sodlers.

[goxed]

wait a second - how the hell would this vulnerability allow withdrawing unlimited amount of bitcoins?

if you withdraw coins and dupe the TX with a wrong hash you are not getting double coins in any way and why would a marketplace then refund the customer? it doesn't make any sense.

if you deposit coins and dupe the TX with a wrong hash then you may see "unconfirmed" coins under your balance that will never get any confirmations.

explain me if I misunderstand anything here

I'm guessing it happened with mutating the tx ids.

User requests withdrawal
Wallet sends funds, user mutates tx
wallet checks tx, cant find it, resends funds or credits user's account.
rinse/repeat

Just a guess, no clue how viable that really would be.

this. but i cannot believe there's no accounting code in the bkground doing daily checks.

[the_sunship]

no one believes it was an outside job from what I'm reading on the web. These guys better pray they can't be tracked

[traderCJ]

no one believes it was an outside job from what I'm reading on the web. These guys better pray they can't be tracked

Even if they did steal it and their identities were published, I don't think any harm will come to them.  Lots of empty threats and that's about it.

[chesthing]

Leaving btc on an exchange run by criminals dealing in illegal wares - what could go wrong?

[rocks]

no one believes it was an outside job from what I'm reading on the web. These guys better pray they can't be tracked

They were operating an illegal website, who is going to contact the authorities to track them down.

That is what made the real SR so unique, it was run for a long time without the operator running away with everyone's coins the first chance he got. DPR could have quietly disappeared after 1 year with >100,000 coins, but instead he stuck around and continued to run the service.

In the end this is why DPR got caught as the smart thing to do when running a website where the entire US government is after you is to cut out after making enough and run. The operators of SR 2.0 seemed to have learned the lesson well.

[derpinheimer]

no one believes it was an outside job from what I'm reading on the web. These guys better pray they can't be tracked

Even if they did steal it and their identities were published, I don't think any harm will come to them.  Lots of empty threats and that's about it.

If they are identified they wont last a few months.

[threecats]

Maybe it was Steve?

LOL

gotta say that occurred to me too  ..... all the hints he was dropping  ....

[glendall]

Re the malleability issue ,  with Gox publishing it so ...publicly, I bet these kind of attacks went up....oh maybe 10,000% ?

[Ibian]

Re the malleability issue ,  with Gox publishing it so ...publicly, I bet these kind of attacks went up....oh maybe 10,000% ?

There are no "attacks". Just lazy software managers and incompetent bookkeepers and a bunch of scammers.

[Holliday]

If you aren't the sole controller of your private keys, you don't have any bitcoins.

[traderCJ]

If you aren't the sole controller of your private keys, you don't have any bitcoins.

It is logically impossible to prove that you are the sole "controller" of the private key associated with a wallet, so I argue that no one owns any bitcoins.

[fonzie]

SR 2.0 stolen coins adress

https://blockchain.info/address/1DKH2oZtrcAAoZXsNJQnKBwKYaYdx5KrVV
also this:

http://www.theverge.com/2014/2/12/5403708/utopia-silk-road-style-marketplace-seized-by-dutch-police


Bitcoin seems to be mainly used for criminal activities, black markets or to support terrorism and money laundering the other part is for gambling and speculation.
Kinda sad for a grassroots currency , that was made to save the masses.

[Holliday]

SR 2.0 stolen coins adress

There were no coins stolen at SR 2.0, only bitcoin IOUs.

[SlaveInDebt]

[pheaonix]

no one believes it was an outside job from what I'm reading on the web. These guys better pray they can't be tracked

Even if they did steal it and their identities were published, I don't think any harm will come to them.  Lots of empty threats and that's about it.

i doubt that.

the feds have been very effective at getting inside tor markets.

silkroad2 should have never came out with the previous compromises.

security needs to be improved. at least make the feds work for it.

[solid12345]

Junkie fucks, I have no sympathy, they ruin Bitcoins image even if it is undeserved attention.