Bitcoin Forum
December 11, 2017, 06:03:25 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2] 3 4 5 6 7 8 9 10 11 12 13 »  All
  Print  
Author Topic: [GOX] Crime Scene Investigation, Case #MG744  (Read 46543 times)
Armis
Hero Member
*****
Offline Offline

Activity: 588


Inaugural PICISI Sponsor


View Profile WWW
March 01, 2014, 08:31:24 PM
 #21

Have you looked at this analysis?

Devon Weller • 2 days ago

"I followed the 500,000 BTC for a bit beginning at https://blockchain.info/tx/b26....

The coins go through a sequence of events, where the majority is sent to a fresh address and a small bit is sent away from Mt.Gox. This repeats a few times until the majority is paid back to the main Mt.Gox address.

This happens several times, until this transaction:

https://blockchain.info/tx/478...

Here is where it starts to get interesting.

What's left of the 500,000 (429.9k) is split into roughly half and sent to 2 new address. And then each of those address splits the coins in half and sends to two new address.

The end result is that the 429k was split again to many address which each now contain less than 1,000 BTC each. I stopped following the transactions there.

Why take 429k and split it into many addresses each containing less than 1,000 BTC each?

I'd like to see someone trace all of these coins and see if they end up coming together somewhere."

End
-----------------------------------------------------------------------------------------------------

Wow My amateur 10 mins on blockchain might have been on the right track. Maybe tomorrow I should actually learn about this stuff then start following this.


That's good and it certainly counts.   As people examine various parts of the block chain many things will be discovered, most of which will be rather easy to explain some of which won't but all of it will be necessary to examine. 

The more we know the less we we need to blindly trust.

1513015406
Hero Member
*
Offline Offline

Posts: 1513015406

View Profile Personal Message (Offline)

Ignore
1513015406
Reply with quote  #2

1513015406
Report to moderator
1513015406
Hero Member
*
Offline Offline

Posts: 1513015406

View Profile Personal Message (Offline)

Ignore
1513015406
Reply with quote  #2

1513015406
Report to moderator
1513015406
Hero Member
*
Offline Offline

Posts: 1513015406

View Profile Personal Message (Offline)

Ignore
1513015406
Reply with quote  #2

1513015406
Report to moderator
The Bitcoin network protocol was designed to be extremely flexible. It can be used to create timed transactions, escrow transactions, multi-signature transactions, etc. The current features of the client only hint at what will be possible in the future.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
zyk
Full Member
***
Offline Offline

Activity: 224


View Profile
March 02, 2014, 02:17:42 AM
 #22

https://bitcointalk.org/index.php?topic=494146.new#new

Who needed the fall -guy Mark ?
analytics
Member
**
Offline Offline

Activity: 98


View Profile
March 02, 2014, 03:25:48 AM
 #23

I'm linking in my other thread, but will post here now.
https://bitcointalk.org/index.php?topic=494761.msg5456922#msg5456922


What tool allows me to take the ledger on disk and parse out records...I read from the paper i mentioned there is some python tool from Gavin.  Can anyone point to the specific script please.
Jeronimus
Member
**
Offline Offline

Activity: 97


View Profile
March 02, 2014, 03:37:09 AM
 #24

additional to what i post in here before, the addresses i linked that follow the pattern of having all zeroes in front of the dot (except the first/front digit), there is a second pattern

the second pattern is, all of the addresses that were linked to the 424k proof address karpeles sent the 424k in to proof that the exchange has all funds still have at least one transaction received of exactly 0.00777 btc

additional to this, there are many of the addresses which i linked that also include both patterns.

Quoting myself from another thread

Quote from:
i already mentioned those in this thread

https://bitcointalk.org/index.php?topic=492776.msg5437308#msg5437308


You will see that many of those wallets i linked follow two patterns.

One is all digits in front of the dot being zero (except the front digit of course)

The second pattern is, MOST of those wallets getting a 0.00777 receive transaction in.

examples

the ones that wre mentioned in that thread

https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9 50k
https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV 40k
https://blockchain.info/address/12HddUDLhRP2F8JjpKYeKaDxxt5wUvx5nq 40k
https://blockchain.info/address/16Ls6azc76ixc9Ny7AB5ZPPq6oiEL9XwXy 40k
https://blockchain.info/address/1MyGwFAJjVtB5rGJa32M6Yh46cGirUta1K 30k


others i linked in my thread following those two patterns


https://blockchain.info/address/13ssxUjmQqemuiBfJSBsr7gFX7UWU7uXNK 20k
https://blockchain.info/address/1LDWDufjU5ATbozDZY3uChb7oPAbDaiB7K 15k

https://blockchain.info/address/1MeCzxxB8eDd17DaocFLQaQtH8seVjNM67 10k
https://blockchain.info/address/19PPeuu4jPjqtefSQ2FDgKmNJ88Z5wiuJt  10k
....
a lot more 10k cold storages following the two patterns


wasn't 777 some illuminati symbol?

I am sure we will be able to compose a full list of those 0.00777 transactions containing cold storage wallets.

Many of those will NOT be MtGox wallets as 777 is like 666 a heavily used number, not just by the illuminati, but also by satanists and master trolls

source

https://bitcointalk.org/index.php?topic=495089.msg5454694#msg5454694


the 0.00777 pattern i read about in another thread, so i just wanted to connect this with what i figured out so far.
thelema93
Full Member
***
Offline Offline

Activity: 238


View Profile
March 02, 2014, 03:38:21 AM
 #25

This raises the question, who is lying?

In the Gox leaked crisis plan, it stated they had 2,000 Bitcoins to their name. This means either the document was false, Mark or an employee had lied in the document in an attempt to hide the funds or the firm have lost the private keys for the wallets rendering them nothing more than eye candy.

We are not claiming they didn't lose some coins legitimately to the malleability bug but there is no way that 500,000 coins could have been stolen. Even the planets worst auditor wouldn't have missed such a large amount of Bitcoins disappearing from the companies reserve.

Could this be an attempt to walk away with stashed Bitcoins or has the company been running on lies after finding out their wallets were missing funds and/or they lost the private keys.

This is exactly what i have been saying and everyone just calls me names and stuff.
If you watch the video: https://bitcointalk.org/index.php?topic=493858.0
He says he has 'identified the problem' and is 'working on it'
What else could that mean other than - they screwed up their wallets/keys and are trying to fix it now.

Great work you guys are doing. If we can prove they still have the coins then something surely can be done.
Jeronimus
Member
**
Offline Offline

Activity: 97


View Profile
March 02, 2014, 03:41:07 AM
 #26

This raises the question, who is lying?

In the Gox leaked crisis plan, it stated they had 2,000 Bitcoins to their name. This means either the document was false, Mark or an employee had lied in the document in an attempt to hide the funds or the firm have lost the private keys for the wallets rendering them nothing more than eye candy.

We are not claiming they didn't lose some coins legitimately to the malleability bug but there is no way that 500,000 coins could have been stolen. Even the planets worst auditor wouldn't have missed such a large amount of Bitcoins disappearing from the companies reserve.

Could this be an attempt to walk away with stashed Bitcoins or has the company been running on lies after finding out their wallets were missing funds and/or they lost the private keys.

This is exactly what i have been saying and everyone just calls me names and stuff.
If you watch the video: https://bitcointalk.org/index.php?topic=493858.0
He says he has 'identified the problem' and is 'working on it'
What else could that mean other than - they screwed up their wallets/keys and are trying to fix it now.

Great work you guys are doing. If we can prove they still have the coins then something surely can be done.

There is the question remaining still, why if this is the case, he simply does not tell us and points us to the cold storage wallets. Either manipulation or gag order or blackmail or a mix of all that.
CompNsci
Sr. Member
****
Offline Offline

Activity: 321


View Profile
March 02, 2014, 03:47:37 AM
 #27

There is now a reward for a key part of this puzzle: https://bitcointalk.org/index.php?topic=495089.0
Jeronimus
Member
**
Offline Offline

Activity: 97


View Profile
March 02, 2014, 04:20:21 AM
 #28

what is even stranger is those 0.00777 received btc to the addresses named above, seem to have happened only recently, on February the 6th 2014 and later.

edit: the 0.00777 theory being related might be a false after checking random top 100 richlist addresses. Too many of them received exactly 0.00777 btc. (mostly on febr the 6th 2014)

Maybe it is some troll or part of how the btc protocol works, resulting in many such 0.00777 transactions
thelema93
Full Member
***
Offline Offline

Activity: 238


View Profile
March 02, 2014, 04:25:32 AM
 #29

OK I JUST TRACED BITCOINS I SENT TO GOX ON:

2014-02-03 06:29:00

SENT 5 BTC TO Mt.GOX ADDRESS: 1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

TRANSACTION: https://blockchain.info/address/1CdiTM1BCifFB5KpW8L5t51PUL8NW7vW9E

NEXT my 5 BTC get's sent to: 1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

https://blockchain.info/address/1GvYWVRPyq2mQFf8w64DZtyX4ekK5taa1d

NEXT my 5 BTC get's sent to: 1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

https://blockchain.info/address/1NRUPGCqCX56DvVptV2dvNPS2UwZMsUXvA

AND IT IS STILL THERE!

SO WHY CAN'T I CLAIM THAT BACK IN COURT?


It hasn't been stolen, it is just sitting in some dormant wallet of Gox's.
bitcoinminer
Sr. Member
****
Offline Offline

Activity: 322



View Profile
March 02, 2014, 07:00:41 AM
 #30


SO WHY CAN'T I CLAIM THAT BACK IN COURT?[/b]


Your unregulated electronic funny munny has no power here Smiley

Be fearful when others are greedy, and greedy when others are fearful.

-Warren Buffett
Buffer Overflow
Legendary
*
Offline Offline

Activity: 1652



View Profile
March 02, 2014, 07:10:34 AM
 #31

He says he has 'identified the problem' and is 'working on it'
What else could that mean other than - they screwed up their wallets/keys and are trying to fix it now.

Maybe, just maybe; *gasp*; he could be lying!

I really would ignore anything Mark tells you.

papamoi
Sr. Member
****
Offline Offline

Activity: 378


View Profile
March 02, 2014, 08:18:10 AM
 #32

following
T.Stuart
Sr. Member
****
Offline Offline

Activity: 476


PikcioChain ICO Starts on 24th of November


View Profile
March 02, 2014, 10:16:36 AM
 #33


He says he has 'identified the problem' and is 'working on it'
What else could that mean other than - they screwed up their wallets/keys and are trying to fix it now.


thelema93 I am not calling you names but I do advise you to get used to the fact that the odds are strongly stacked against those (including myself) owed money by Gox.

I think that the forensic analysis of the blockchain going on is extremely important and I take my hat off to those involved. I want to know just like everyone else where the btc went. But you must understand that even if every last satoshi is accounted for this does not mean everything will be OK.

In any case, now that the legal machine is whirring into action it will be a minimum of several months before complete closure. So if you have a job, a family, a life to get on with... then make sure you carry on, because this is going to take time to unwind.


███  █████
███  ██  ██
██    ██  ██
██  ███  ██
██  █  █  ██
      █  █  ██
██  █  █
██  █  █  ██
██  ███  ██
██  ██    ██
██  ██  ███
█████  ███
PIKCIOCHAIN                         ▄▄█████▄▄
                        ██▀     ▀██
                       ██  ▄███▄  ██
                      ██  ███████  ██
                      ██  ███████  ██
                       ██  ▀███▀  ██
        ▄▄▄▄▄▄▄▄      ▄███▄     ▄██
     ▄████████████▄ ▄██▀ ▀▀█████▀▀
   ▄████▀▀▀▀▀▀▀▀████▄              ▄▄▄▄▄
  ███▀            ▀███           ▄█████████▄
 ███▀              ▀███        ▄███▀▀   ▀▀██▀
███▀     ▄████▄     ▀███      ▄██▀
███     ████████     ████████████
███     ████████     ████████████
███▄     ▀████▀     ▄███      ▀██▄
 ███▄              ▄███        ▀███▄▄   ▄▄██▄
  ███▄            ▄███           ▀█████████▀
   ▀████▄▄▄▄▄▄▄▄████▀               ▀▀▀▀▀
     ▀████████████▀
        ▀▀▀▀▀▀▀▀

███  ███
███  █  █
█      █  █
█  ███  █
█  █  █  █
    █  █  █
█  █  █
█  █  █  █
█  ███  █
█  █      █
█  █  ███
███  ███

███  ███
███  █  █
█      █  █
█  ███  █
█  █  █  █
    █  █  █
█  █  █
█  █  █  █
█  ███  █
█  █      █
█  █  ███
███  ███
//  ANN Thread  //  Whitepaper  //
║══   ICO ​Starts 24th ​Nov ​2017   ══║
//  Facebook  //  Twitter  //  Telegram  //

███  █████
███  ██  ██
██    ██  ██
██  ███  ██
██  █  █  ██
      █  █  ██
██  █  █
██  █  █  ██
██  ███  ██
██  ██    ██
██  ██  ███
█████  ███
alfabitcoin
Sr. Member
****
Offline Offline

Activity: 476


View Profile
March 02, 2014, 10:32:20 AM
 #34

777 can mean jackpot or access permission chmod.
smagt7
Newbie
*
Offline Offline

Activity: 19


View Profile
March 02, 2014, 01:52:58 PM
 #35

Hi,
Firstable, sorry for my english, I'm french.

I "had" 13 bitcoins on my account mtgox (8 i bought on the site, 4 i tranfered to mtgox from another plateform)
I "had" 1700 euros on my account mtgox (and 400 more in transaction, from gox to my french bank account, tranfert with statut confirmed but not sent, in process they said...)

What can I do? What should I do?
If you have bitoin and money in mtgox, there are meant to have the same destiny or is it possible to get back your money, in a different way?

In the blockchain, I see 4 transactions (which match the 4 deposit i made in mtogox). Is it useful? What can i do about it?

Thank you for you help and hope precious advices.

Magali
Lauda
Legendary
*
Offline Offline

Activity: 1694


GUNBOT Licenses -20% with ref. code 'GrumpyKitty'


View Profile WWW
March 02, 2014, 02:17:33 PM
 #36

He probably hast quite a good portion of the coins that were 'allegedly' lost.
I just did random clicking from one of the addresses to find one that still has 50k BTC on it.


          ▄▄█████▌▐█████▄▄
       ▄█████████▌    ▀▀▀███▄
     ▄███████████▌  ▄▄▄▄   ▀██▄
   ▄█████████████▌  ▀▄▄▀     ▀██▄
  ▐██████████████▌  ▄▄▄▄       ▀█▌
 ▐███████████████▌             ▀█▌
 ████████████████▌  ▀▀▀█         ██
▐████████████████▌  ▄▄▄▄         ██▌
▐████████████████▌  ▀  ▀         ██▌
 ████████████████▌  █▀▀█         ██
 ▐███████████████▌  ▀▀▀▀        ▄█▌
  ▐██████████████▌  ▀▀▀▀       ▄█▌
   ▀█████████████▌  ▀▀█▀     ▄██▀
     ▀███████████▌  ▀▀▀▀   ▄██▀
       ▀█████████▌    ▄▄▄███▀
          ▀▀█████▌▐█████▀▀
▬◉▬
▬◉▬
▬◉▬
▬◉▬
▬◉▬
▬◉▬
▬◉▬
▬◉▬
      ▄▄▄
 ▄▄█████████▄▄
  ▀▀▀▀▀▀▀▀▀▀▀
   █▌▐█ █▌▐█
   █▌▐█ █▌▐█
 ▄███████████▄
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄






▄█████████████▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
███████████████
██▀▀█▀▀████████
▀█████████████▀
Armis
Hero Member
*****
Offline Offline

Activity: 588


Inaugural PICISI Sponsor


View Profile WWW
March 02, 2014, 06:59:54 PM
 #37

... to trace where the GOX coins are.  They already compiled a nice list of addresses and institutions.   The institutions have the ID's of the users.
http://cseweb.ucsd.edu/~smeiklejohn/files/imc13.pdf

Given the size of these thefts, it shouldn't be hard to start placing some names to thefts. We need Gox to release some internal transaction info or at least contract with these folks to find who has it.
My bet is the US government has already been working with this group in tracing silk road transactions, perhaps sheep marketplace as well.

Never rest until these folks are caught, nor allow bitcoin to grow without showing there is some self policing going on, or deep regulations.


"With these thefts, our ability to track the stolen money provides evidence that even the most motivated Bitcoin users (i.e., crimi-
nals) are engaging in idioms of use that allow us to erode their anonymity. While one might argue that thieves could easily thwart
our analysis, as Heuristic 2 is admittedly not robust in the face of adversarial behavior, our observation is that — at least at present —
none of the criminals we studied seem to have taken such precautions. We further argue that the fairly direct flow of bitcoins from
the point of theft to the deposit with an exchange provides some evidence that using exchanges to cash out at scale is inevitable, and
thus that — again, at present — Bitcoin does not provide a particularly easy or effective way to transact large volumes of illicitly-
obtained money."

papamoi
Sr. Member
****
Offline Offline

Activity: 378


View Profile
March 02, 2014, 07:03:55 PM
 #38


what do you think of this ?

http://www.reddit.com/r/Bitcoin/comments/1zc54t/evidence_that_karpeles_still_has_the_coins/cfsdexm
Armis
Hero Member
*****
Offline Offline

Activity: 588


Inaugural PICISI Sponsor


View Profile WWW
March 02, 2014, 07:19:50 PM
 #39



I'm unfamiliar with reddit, so I got confused both at the facts of the matter as well as who was saying what to whom.

Biomech
Legendary
*
Offline Offline

Activity: 1204


Anarchy is not chaos.


View Profile
March 02, 2014, 07:51:57 PM
 #40

So who stole $300,000,0000 USD worth of Bitcoins and got away with it?

PRIME SUSPECTS:

All Mt. Gox staff:

Mark Karpeles
Gay Butchery Gonzales
+ the rest

ROUND EM UP, LIE DETECTOR THEM


There is a very good reason why "lie detectors", more correctly known as a polygraph, are not admissable evidence. They do not reliably indicate truth, they just measure changes in heart rate, breathing, and galvanic skin response. Anyone with imagination and a modicum of self control can make the operator believe/disbelieve anything they want to. A sociopath will always "beat" a lie detector. So will a practitioner or meditation, yoga, or anything else where iron self discipline is a component.

Now sodium amytal/pentothal and a competent psychologist....

Buy Bitcoins with Paypal, Credit card, or other methods. Send me a PM or a text to 208-451-2665.
Pages: « 1 [2] 3 4 5 6 7 8 9 10 11 12 13 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!