nxt-e.com
|
|
March 28, 2014, 03:31:20 PM |
|
coin2 is not a pos coin, it's a normal ltc fork with premine
clearly, we could've been better in preparing and added checkpoints a few days ago but we are not idiots, and we found the problem and fixed what we could fix
pos coins are generally safer than pure pow coins however, this coin doesn't have pos blocks yet and therefore was vulnerable to 51% attack
the fix includes a hard checkpoint and lowering of pos min age so we start generating pos blocks we're also buying some hash power until pos blocks start
all coins can be attacked in some way, in theory but it's now much much harder and will only get harder as time moves on
How do you determine the attacker is not the FAC team? It won't happen again? and Only FAC team know the way.
|
|
|
|
Pondi
|
|
March 28, 2014, 03:31:53 PM |
|
We hope FAC dev can combine 2 forks together. After all, users bought those "void" coins. We spent a whole day to talk with Fac Dev on this issue. However, they insist us to eat the loss.
What is the total loss you would have to eat if the forks were left uncombined?
|
|
|
|
judit99
Member
Offline
Activity: 64
Merit: 10
|
|
March 28, 2014, 03:35:21 PM |
|
We hope FAC dev can combine 2 forks together. After all, users bought those "void" coins. We spent a whole day to talk with Fac Dev on this issue. However, they insist us to eat the loss.
The correct things you should do are: 1. Sync the new wallet. Let's your wallet back to the right blockchain. 2. Correct the user's balance back to the time before the fork. 3. Discuss with all involved users how to deal with the left issue. The thief use the fake coins to cash out about 7 BTC. See how the Polonix owner did after they got stolen. ---------------------------------------------------------------------------------------- Dear Users of Poloniex, As you may have heard, a hacker recently used an exploit to steal 12.3% of the Bitcoins on Poloniex. Details on how this happened can be found in this announcement post: https://bitcointalk.org/index.php?topic=499580.0 In order to keep Poloniex solvent, all BTC balances were deducted yesterday by 12.3%. No further deductions will occur. As soon as I have time to put it up, you will be able to view exactly how much BTC you are missing on your Balances page. I deeply regret that this happened, and am committed to repaying the debt and making Poloniex absolutely secure. Any exchange fees collected since the incident will be used to pay back the debt at regular intervals. Exchange fees will not be raised. Additionally, shares of Poloniex may be issued, the profits from which would be used to repay the debt and hire highly qualified security experts. The timing and details of this, and indeed whether it will occur, have not been decided. I invite you all to give your input on these decisions by voting in the following poll and, if desired, leaving a comment: https://bitcointalk.org/index.php?topic=500578.0 Since the incident occurred, the way withdrawals and order creation are handled has been redesigned so that all such requests are added to a global command queue, then processed sequentially. More automated checks for consistency of balances have been added. Larger percentages of coins have been moved into cold storage. And as of today, I am searching for additional developers to bolster the security of Poloniex as much as possible, and as soon as possible. Here are some specific details about the hacker. ------------------------------------------------------
|
|
|
|
lucienlu
|
|
March 28, 2014, 03:37:00 PM |
|
NXT-E is always syncing with official block chain and using official nodes.Yesterday, there are more than 6950000 coins deposit to fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy our exchange, including 1.5 million coins. Not to mention, poloniex probably received more. http://fac.blockx.info/ showed the same records until they are updated. The dev team said the coins were distributed to so many people. Everyone got 1000 fac. But this amount is so huge, probably more than 10 million coins, which leads us to wonder who can possibly have such amount of Farincoins besides dev team themselves. We need explanation that the coins that Faircoin team rolled back is because of 51% attack or they come from the 15 million coins that were claimed gone missing when the first time distribution. So Dev team deposit them maliciously, and after trading btc, rollback the blockchain to cover up and prepare the next attack. Because they "fixed" the problem so quickly and easily, even if BTC team can't fix 51% attack. Either reasons are huge risks. And it could happen again. So to protect Faircoin investors, NXT-E decided to suspend the market and withdraws until dev team give all of us a reasonable proof and show everyone that they handle it satisfied. There is no false on our side. nxt-e 平台一直和官方的 blockchain 保持同步检查,也一直使用官方提供的node ,昨天我们被存入6950000 fac(150万未确认)全部来自于一个 nxt-e 的一个全新账户! fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy , http://fac.blockx.info/ 也有相同的存款(今日被更新后消失了)。 不用说poloniex可能接受了更多的FAC存款,据我们观察,他们大约也被存入 650万 fac. Faircoin开发队声称fac被分发给非常多的人,每人1000个fac。但是这次存入的数量如此巨大,预估超过1000万个fac,让我们怀疑除了Faircoin的开发人员,谁还有如此数量的币呢? 官方回滚的650万, 现在我们需要官方用证据来解释!回滚的650万是因为 fac 受到 51% 攻击产生的假账,还是它是属于官方声称丢失的 1500万的一部分(官方恶意存入后,交易BTC后,blockchain 回滚,消灭证据) 上述两种原因都将是FAC未来重大隐患,它随时还会发生,因此NXT-e做出 暂停FAC存取款的决定,直到官方给出合理的证据,证明上述问题得到妥善解决。因此 nxt-e并没有发生过错误。 ------------------------------------------------------------------------------------- 还记得官方曾经说最后的 1500万币弄丢了(鬼才相信开发者不保留钱包),我们市场中有很多不成熟的币也有分叉的情况,但是没有一个官方像 fac 这样无法沟通的。 也没有任何一个币出现如此巨大的问题。 C2 和 FAC 同样都属于 POW 币,算力低,理论上都容易被 51% 攻击。 C2的市值更高,在 bter 中成交量更大, 试想一下,如果你是黑客,都能发起 51%攻击,选择C2收益会更好! 因此我们怀疑 51% 攻击即使具备条件也是很困难的。 综上:我们有理由怀疑 FAC团队因为前期分裂导致 1500万币被个人拿到,昨天来抛售,官方却扮演了无辜的角色来充当 中心端 进行回滚。 试想其他平台还敢接受这个币吗? 我们和亲爱的用户一样希望得到真相,假如被 51% 就请提供证据! 官方的币确实发出来了,昨晚也确实51之后分叉了,今天钱包更新了,可以看下之前所有的post再决定怎么做,我记得中国社区通知过你们分叉了,你们每当回事,造成了用户的损失,我们对nxt-e表示很失望。希望你们能妥善处理这件事,不要伤了玩家的心,谢谢。在我看来nxt-e还不错,挺喜欢在那里交易的。 Regard 我觉得你可以先冻结昨晚交易的帐户,一点点排查,然后让现在情绪比较激烈的玩家先冷静,最好少表态,因为你们的随意表态会造成玩家恐慌 谢谢 恶意用户交易后,就立即取走了BTC,提款使用了代理,分别来自德国、捷克、瑞典。 我们也是考虑再三,我们不会像MH370那样捂着掖着,信息第一时间公开是我们的责任。(今天上午一直在和 FAC 官方沟通,之前也有币分叉,都很良好的解决,FAC的官方看起来就是蛮横不讲理,甚至这里回复我们不负责任的都是他们的号,你可以试着顺藤摸瓜) 这些人可能真的就是不同的恶意用户,据我所知有的人抓住了你们睡觉比较薄弱的时间,利用这个时机砸了很多fork出来的假币,有些国外投机分子,知道你们察觉后肯定会冻结帐户,就提btc走人了,我就通过一个朋友知道有几个人这么做了,他们开了代理或者就在国外。 so it is hard to solve. need a balance between customer and platform
|
|
|
|
judit99
Member
Offline
Activity: 64
Merit: 10
|
|
March 28, 2014, 03:37:26 PM |
|
coin2 is not a pos coin, it's a normal ltc fork with premine
clearly, we could've been better in preparing and added checkpoints a few days ago but we are not idiots, and we found the problem and fixed what we could fix
pos coins are generally safer than pure pow coins however, this coin doesn't have pos blocks yet and therefore was vulnerable to 51% attack
the fix includes a hard checkpoint and lowering of pos min age so we start generating pos blocks we're also buying some hash power until pos blocks start
all coins can be attacked in some way, in theory but it's now much much harder and will only get harder as time moves on
How do you determine the attacker is not the FAC team? It won't happen again? and Only FAC team know the way.Why don't you point out this doubt before having FAC on your exchange? If you know the risk, why do you let your user risk it? The users all trusted your exchange. That is why they trade on it.
|
|
|
|
youngcave
|
|
March 28, 2014, 03:37:39 PM |
|
好吧,我错了,既然是三方,那第三方也要发表了哈哈 NXT-E:bittrex第一时间就关闭FAC交易了,polo也只是被砸了一波,就关闭FAC的提现和交易了。我们群主昨晚九点左右就提醒你们FAC出现分叉了,但是一直到四小时后出现砸盘,你们没有任何反应。 The dev:发个币都能把币发丢的你们,是凭的什么这么快速的解决假币的问题的?我好像记得一开始丢失的币,你们花了一星期才找到的吧。这次神奇出现的几百万,你们花几小时就找到了? Users: 我们的币在哪里?免费发的币,免费收回了哈哈。
|
|
|
|
y3804
|
|
March 28, 2014, 03:37:46 PM |
|
We hope FAC dev can combine 2 forks together. After all, users bought those "void" coins. We spent a whole day to talk with Fac Dev on this issue. However, they insist us to eat the loss.
The correct things you should do are: 1. Sync the new wallet. Let's your wallet back to the right blockchain. 2. Correct the user's balance back to the time before the fork.3. Discuss with all involved users how to deal with the left issue. The thief use the fake coins to cash out about 7 BTC. See how the Polonix owner did after they got stolen. ---------------------------------------------------------------------------------------- Dear Users of Poloniex, As you may have heard, a hacker recently used an exploit to steal 12.3% of the Bitcoins on Poloniex. Details on how this happened can be found in this announcement post: https://bitcointalk.org/index.php?topic=499580.0 In order to keep Poloniex solvent, all BTC balances were deducted yesterday by 12.3%. No further deductions will occur. As soon as I have time to put it up, you will be able to view exactly how much BTC you are missing on your Balances page. I deeply regret that this happened, and am committed to repaying the debt and making Poloniex absolutely secure. Any exchange fees collected since the incident will be used to pay back the debt at regular intervals. Exchange fees will not be raised. Additionally, shares of Poloniex may be issued, the profits from which would be used to repay the debt and hire highly qualified security experts. The timing and details of this, and indeed whether it will occur, have not been decided. I invite you all to give your input on these decisions by voting in the following poll and, if desired, leaving a comment: https://bitcointalk.org/index.php?topic=500578.0 Since the incident occurred, the way withdrawals and order creation are handled has been redesigned so that all such requests are added to a global command queue, then processed sequentially. More automated checks for consistency of balances have been added. Larger percentages of coins have been moved into cold storage. And as of today, I am searching for additional developers to bolster the security of Poloniex as much as possible, and as soon as possible. Here are some specific details about the hacker. ------------------------------------------------------ No. That's the wrong thing to do. There is no need to correct the user balances. People took a risk and decided to put buy orders even after hearing the events. They're the one to blame, not the exchange.
|
|
|
|
lucienlu
|
|
March 28, 2014, 03:39:47 PM |
|
We hope FAC dev can combine 2 forks together. After all, users bought those "void" coins. We spent a whole day to talk with Fac Dev on this issue. However, they insist us to eat the loss.
What is the total loss you would have to eat if the forks were left uncombined? I dont want to combine!!!
|
|
|
|
judit99
Member
Offline
Activity: 64
Merit: 10
|
|
March 28, 2014, 03:40:03 PM |
|
我什么都不想说了!作者剩下的1500万,确实已经发送出来了!你已经上了平台, 有人也说及时通知你了,但是你们的反应确这么慢。我们客户在你们平台交易,您连这点的安全都不能解决吗,确实有国高的风范! 散户是无辜的,作者做了自己该做的,平台。你咋说。你无缘无故的就扣留币了。您们没有一点安全意识吗。 您的平台真的想做大吗。 Someone informed them at the first time by QQ. No response at all. I don't know how NXT-E will deal with those REAL coin which is deposited before fork!
|
|
|
|
shadypepe
|
|
March 28, 2014, 03:40:47 PM |
|
as i see it no fake coins were deposited to poloniex right? so they could simply move on?
|
CZd9oh4FWe4f1TB69YyedxnuGyHt21zEPu
|
|
|
SomeRelax
|
|
March 28, 2014, 03:41:28 PM |
|
wow @nxt-e.com you really like to put all the faults on dev team and staying with forked blockchane what is it? how much did you invest in fake FAC during fork?
|
|
|
|
judit99
Member
Offline
Activity: 64
Merit: 10
|
|
March 28, 2014, 03:42:05 PM |
|
We hope FAC dev can combine 2 forks together. After all, users bought those "void" coins. We spent a whole day to talk with Fac Dev on this issue. However, they insist us to eat the loss.
The correct things you should do are: 1. Sync the new wallet. Let's your wallet back to the right blockchain. 2. Correct the user's balance back to the time before the fork.3. Discuss with all involved users how to deal with the left issue. The thief use the fake coins to cash out about 7 BTC. See how the Polonix owner did after they got stolen. ---------------------------------------------------------------------------------------- Dear Users of Poloniex, As you may have heard, a hacker recently used an exploit to steal 12.3% of the Bitcoins on Poloniex. Details on how this happened can be found in this announcement post: https://bitcointalk.org/index.php?topic=499580.0 In order to keep Poloniex solvent, all BTC balances were deducted yesterday by 12.3%. No further deductions will occur. As soon as I have time to put it up, you will be able to view exactly how much BTC you are missing on your Balances page. I deeply regret that this happened, and am committed to repaying the debt and making Poloniex absolutely secure. Any exchange fees collected since the incident will be used to pay back the debt at regular intervals. Exchange fees will not be raised. Additionally, shares of Poloniex may be issued, the profits from which would be used to repay the debt and hire highly qualified security experts. The timing and details of this, and indeed whether it will occur, have not been decided. I invite you all to give your input on these decisions by voting in the following poll and, if desired, leaving a comment: https://bitcointalk.org/index.php?topic=500578.0 Since the incident occurred, the way withdrawals and order creation are handled has been redesigned so that all such requests are added to a global command queue, then processed sequentially. More automated checks for consistency of balances have been added. Larger percentages of coins have been moved into cold storage. And as of today, I am searching for additional developers to bolster the security of Poloniex as much as possible, and as soon as possible. Here are some specific details about the hacker. ------------------------------------------------------ No. That's the wrong thing to do. There is no need to correct the user balances. People took a risk and decided to put buy orders even after hearing the events. They're the one to blame, not the exchange. You misunderstood me! I mean the balance before fork happened! That's the REAL coin in the right blockchain which the user deposited into NXT-E before fork.
|
|
|
|
fair-cointeam (OP)
Member
Offline
Activity: 70
Merit: 10
|
|
March 28, 2014, 03:43:14 PM |
|
there is no combine option technically, it's just not possible
|
|
|
|
y3804
|
|
March 28, 2014, 03:44:15 PM |
|
You misunderstood me! I mean the balance before fork happened! That's the REAL coin in the right blockchain which the user deposited into NXT-E before fork.
Yes, if the amounts were sent before the fork to the exchange and not traded, then NXT-E will have to cover those losses unfortunately. But in other cases, the exchange is not to blame. BTW NXT-E, you have no reason to think the dev is the attacker. Why would he destroy the reputation of his own coin?? He invested so much time/effort into the distribution model. About the 15M missing coins: It's really easy to corrupt a wallet by sending multiple transactions. I actually did corrupt my Faircoin wallet twice three days ago but fortunately I had backups.
|
|
|
|
lucienlu
|
|
March 28, 2014, 03:47:20 PM |
|
Looks like we won't need the static IP, it's connecting pretty well new windows wallet can be found here: https://mega.co.nz/#!0g4BBBgQ!dw7pym94UVjX4wKFMTmbVIAEMaV0_4WlbbbGoyyr1Wksource code on github is updated you have 2 options: *** whatever happens, back up wallet.datoption 1update faircoind/faircoin-qt with new version, and run faircoind -rescanthis will invalidate the corrupt blockchain and rebuild the correct one. this will take a few mintues please do this option if you can! option 2backup wallet.dat remove all files except wallet.dat and faircoin.conf in FairCoin directory from %appdata% (windows) or ~/.FairCoin (linux) update faircoind and faircoin-qt and run normally this will download the blockchain from a good node. option 1 is preferred for network security please don't mine if you don't have at least 2-3 connected nodes So 1st option only require to download the new version without deleting the previous one and run fairocoind? option one cannot find the method...so have to try option two
|
|
|
|
y3804
|
|
March 28, 2014, 03:50:17 PM |
|
Looks like we won't need the static IP, it's connecting pretty well new windows wallet can be found here: https://mega.co.nz/#!0g4BBBgQ!dw7pym94UVjX4wKFMTmbVIAEMaV0_4WlbbbGoyyr1Wksource code on github is updated you have 2 options: *** whatever happens, back up wallet.datoption 1update faircoind/faircoin-qt with new version, and run faircoind -rescanthis will invalidate the corrupt blockchain and rebuild the correct one. this will take a few mintues please do this option if you can! option 2backup wallet.dat remove all files except wallet.dat and faircoin.conf in FairCoin directory from %appdata% (windows) or ~/.FairCoin (linux) update faircoind and faircoin-qt and run normally this will download the blockchain from a good node. option 1 is preferred for network security please don't mine if you don't have at least 2-3 connected nodes So 1st option only require to download the new version without deleting the previous one and run fairocoind? option one cannot find the method...so have to try option two No. Try option one. Download wallet, extract wallet to C:/Faircoin Open terminal (CMD) with (Windows Key + R), write cmd, press enter CD C:/Faircoin faircoind -rescan wait 10 minutes
|
|
|
|
Pondi
|
|
March 28, 2014, 03:50:43 PM |
|
You misunderstood me! I mean the balance before fork happened! That's the REAL coin in the right blockchain which the user deposited into NXT-E before fork.
Yes, if the amounts were sent before the fork to the exchange and not traded, then NXT-E will have to cover those losses unfortunately. But in other cases, the exchange is not to blame. Well actually the legitamate balances held at NXT-e and not traded are technically not losses as the account holders have clear title to those FAC so they should be returned to the owners as they have nothing to do with the theft.
|
|
|
|
nxt-e.com
|
|
March 28, 2014, 03:52:27 PM |
|
我什么都不想说了!作者剩下的1500万,确实已经发送出来了!你已经上了平台,有人也说及时通知你了,但是你们的反应确这么慢。 我们客户在你们平台交易,您连这点的安全都不能解决吗,确实有国高的风范! 散户是无辜的,作者做了自己该做的,平台。你咋说。你无缘无故的就扣留币了。您们没有一点安全意识吗。 您的平台真的想做大吗。 请问,你是马甲吗? 作者联系过我们两次,一次在 BTT里, 一次通过我们网站的 "支持“ --------------------------------------------------------------------------------------------- (No subject) « Sent to: nxt-e.com on: 2014-03-27, 22:11:17 » Reply with quoteQuote ReplyReply Remove this messageDelete
Hi, Faircoin has been forked. please stop trading it. we're working to undo the damage and we'll let you know as soon as the issue is resolve one way or another. thank you, faircoin dev team -----------------------------------------------------------------------------------------------论坛时间需要 + 8 也就是中国时间: 28日 凌晨 6:00 ,没有人会天天盯着论坛的。 作者应该及时给我们发邮件,我们都有手机提醒的,客服是 24小时在线。 作者给我们网站支持发送支持是 28日 9:00 (UTC : 2014-03-28 1:00 ) 我们有邮件为证, 9:10 分我们就关闭了存取款。 ------------------------------------------------------------------------------------------------ 我们收到的错误存款来自于 27日 17:05 --- 27日 20:05Status: 0/unconfirmed Date: 2014/3/27 19:01 From: unknown To: fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy (own address) Credit: 1500000.00 FAC Net amount: +1500000.00 FAC Transaction ID: 8151b8834bcfe2651d97b581015abf1485769c08b880ca2f6f42f70da8e327b6 Status: 0/unconfirmed Date: 2014/3/27 18:38 From: unknown To: fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy (own address) Credit: 5000000.00 FAC Net amount: +5000000.00 FAC Transaction ID: 98954b1a8bb6448b2c6c83de2620bac1833a0e1206e18550ce2a152218653030 Status: 0/unconfirmed Date: 2014/3/27 17:21 From: unknown To: fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy (own address) Credit: 400000.00 FAC Net amount: +400000.00 FAC Transaction ID: 824d512eef5c70ca8a94c4b940b3cf87c14d922a7fb14184999ad4f6593be3a7 Status: 0/unconfirmed Date: 2014/3/27 17:05 From: unknown To: fJ7BxMa2B1waqXXyVccVoKf5HMNb2T7sXy (own address) Credit: 50000.00 FAC Net amount: +50000.00 FAC Transaction ID: 661fbb4c486793e30654c20945c183317027b45e983a0f5900e95d7f53e8eeab ------------------------------------------------------------------------------------------------------------------------------ 全部早于任何作者通知我们的时间! 在FAC问题上,NXT-E 没有任何过失!
|
|
|
|
judit99
Member
Offline
Activity: 64
Merit: 10
|
|
March 28, 2014, 03:54:38 PM |
|
You misunderstood me! I mean the balance before fork happened! That's the REAL coin in the right blockchain which the user deposited into NXT-E before fork.
Yes, if the amounts were sent before the fork to the exchange and not traded, then NXT-E will have to cover those losses unfortunately. But in other cases, the exchange is not to blame. Well actually the legitamate balances held at NXT-e and not traded are technically not losses as the account holders have clear title to those FAC so they should be returned to the owners as they have nothing to do with the theft. Yes, you are right. Technically, NXT-E have all the balances in their wallet as they sync it which is legit before fork. There is not reason for NXT-E to eat these REAL coin of users. The loss comes only from the fake ~5-6millions coins, which cashed out about 7-8 BTC. In brief, the real FAC are still there, in the NXT-E's wallet. The loss is BTC, belong to those users buying the "cheap" FAC yesterday.
|
|
|
|
Pondi
|
|
March 28, 2014, 03:58:28 PM |
|
You misunderstood me! I mean the balance before fork happened! That's the REAL coin in the right blockchain which the user deposited into NXT-E before fork.
Yes, if the amounts were sent before the fork to the exchange and not traded, then NXT-E will have to cover those losses unfortunately. But in other cases, the exchange is not to blame. Well actually the legitamate balances held at NXT-e and not traded are technically not losses as the account holders have clear title to those FAC so they should be returned to the owners as they have nothing to do with the theft. Yes, you are right. Technically, NXT-E have all the balances in their wallet as they sync it which is legit before fork. There is not reason for NXT-E to eat these REAL coin of users. The loss comes only from the fake ~5-6millions coins, which cashed out about 7-8 BTC. In brief, the real FAC are still there, in the NXT-E's wallet. The loss is BTC, belong to those users buying the "cheap" FAC yesterday. correct
|
|
|
|
|