Smartmixer has locked all of their ANN threads?

[AdolfinWolf]

Did anyone else notice this today? I'm not exactly sure when, but i think sometime after they stopped with their signature campaign, they locked all of their ANN threads.

https://bitcointalk.org/index.php?topic=5168505.160

On top of that, it seems that their website is becoming increasingly harder to access? Loading over clearnet doesn't work at all for me, and over tor it's about a 1/10 chance of the site actually loading.

Can Smartmixer themselves perhaps shed some light why they locked their ANN threads? Are you closing down? Have they done this before in times of maintenance (Am I missing something here?)



Anyway, a bit premature maybe, but let this thread perhaps serve as a secondary ANN where people can posts complaints/stuff they would otherwise normally post in their ANN thread.
Will delete if there's an explanation i missed / ANN gets unlocked.

Edit: As opposed to 504 errors earlier on, (Signs of ddos?) I now get 403 & 502 errors (Time to worry maybe?).

[TryNinja]

I PM'ed one of their customers and he said they disclosed in their Telegram that they are under a DDoS attack. I asked him if I could post his whole PM here and he said he prefers to wait more before creating negative reviews ahead of time.

edit: they confirmed the DDoS attack on their thread.

Also, am I the only one that thinks it's shady that they unlocked, a user posted a random good review about them, they answered this user 1 minute later and locked it again? (p.s: all of his most recent posts from December and on are talking on SmartMixer's thread)

[suchmoon]

The ANN seems to be unlocked.

Edit: was unlocked for like a minute, smartmixer posted a message, and locked it again. Doesn't seem like a smart (pun intended) thing to do when there is an attack but what do I know.

[logfiles]

I noticed that the thread was locked yesterday. I was about to report the issue in the service discussion board but then i saw the weird pattern of how some low ranking accounts had posted in the thread (more like forced reviews) before the thread got locked, so, i thought to myself maybe it was the mods who locked the thread because of that.

Now it's even more weird to lock the thread when crisis like that arises. The Best thing they would have done would be to just make an update in the thread rather than lock it.

[bones261]

Well, I was going to leave on the signature, even though I wasn't going to get paid anymore, a little longer because I wanted them to get their money's worth. Oh well, back to blank signature.

[hugeblack]

They seem to be suffering from a bug and do not want people to write/ask about it, and it may be a prelude to scamming people who use this site right now.
I don’t know if this user is saying the thing, but I quote part of it:

I came across a user on a popular dark net market site that is selling smartmixer.io code and claims there isn't enough coins to "mix" in there wallet.
also smartmixer.io has been showing 403 Forbidden all morning.

I do not think that this board is appropriate, as no fraud has occurred so far, it is better to move it to [urlhttps://bitcointalk.org/index.php?board=129.0]Reputation[/url]

[johnitrue]

Hello gentlemen, I have a big problem with this mixer.
Since yesterday.
Standby time longer than> 24 hours.

Unfortunately, only 1 answer was received to all my questions(https://bitcointalk.org/index.php?topic=5168505.msg53883886#msg53883886), which can be compared with an extract from the FAQ.

I don’t know what’s going on, but someone is clearly not in a hurry to give my money and respond to tickets, email, pm forum, and the amount is very impressive.

I won’t publish details yet, but I’ll say that yesterday I successfully exchanged 1 exchange through this service, but the second exchange - for a large amount (miracles suddenly started)

To the owner and the author of the branch, several messages were also sent - all of them without reply. Besides (https://bitcointalk.org/index.php?topic=5168505.msg53883886#msg53883886).


Also today a certain https://bitcointalk.org/index.php?action=profile;u=2765212 appeared on the forum.
He claims that allegedly somewhere source codes for sale appeared.
However, without providing any evidence.

All this looks very ridiculous, as if someone is setting the stage.

I immediately took screenshots(I do not close the tabs until the translation is completed.), I downloaded the guarantee letter, and it was sent to support by all available methods, you can see the blockchain yourself after 48 hours expire.

[AdolfinWolf]

Also today a certain https://bitcointalk.org/index.php?action=profile;u=2765212 appeared on the forum.
He claims that allegedly somewhere source codes for sale appeared.
However, without providing any evidence.

While i do think smartmixer's owners are pretty incompetent up to a certain degree, (and i've stated this numerous times in the past regarding their "fake- (one could view their given explanation as "moderately") plausible.." mixing popups, their use of anti-DDOS services such as Cloudflare, and their use of potential sockpuppets, note: that is not proven, just an allegation some people have made.), I for one still would not blindly believe they got hacked, and if their database got hacked, you'd expect the service to be offline as well etc.
Without proof it sounds dubious.


Anyway, if you have a letter of guarantee... Well, keep us updated and post that as proof if they don't do anything about your case..


Although, perhaps someone can help me here...

I just downloaded Smartmixer's letter of guarantee:

It's a JSON file that looks like this:

Code:

{
    "comment": "Never share your Letter of Guarantee with third parties. Attach this document to our Support Team only when you are facing problems with your mixing order. The Letter of Guarantee is only available during the active mixing operation. After the completion all data about your order will be deleted automatically from our database.",
    "orderHash": "509bdc054a8201782f6d86bbd065481d691869a39f54a3140dd0c09e84e12bae6c11635ec4b0ceb816eafb6e11dc50c8f0bfbeb3741e21a8a7cebef44ddb9a79",
    "orderKey" : "3eelup75ony8wgcw",
    "currency": "BTC",
    "customerCode":"f0a6oid4",
    "feePercentage": 4.9787,
    "feePerAddress": 0.00023225,
    "address": "3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr",
    "pool": "Stealth Pool",
    "createdAt": 1582320630,
    "outputs":[
            {
                "address": "3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8",
                "delay": 180,
                "percentage": 100
            }    ]
}

How can i verify this? What exactly is the message body, and what is the digital signature? Can anyone verify this signature for deposit address 3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr using above JSON in electrum / whatever?

I mean, am i retarded, or is this letter of guarantee actually a "internal" letter of guarantee? What are they talking about expiring a signature, or it only being valid during mixing? Are they nuts?

(Haven't tried myself but this feels like i would just be guessing, and it's late already, Well actually i did try, using the order hash as signature, deposit as signing adress, and comment as message, but it's not making much sense. Oh well, i'm rambling here. Should go.)



As opposed to a traditional letter of guarantee, which just looks like this, and can easily be verified??

========== START LETTER OF GUARANTEE ==========
We hereby confirm that Blender.io has generated the deposit address 3JHWRiAdk4ykB6YsoBcKFmqR5zdurTpcdk in order to transfer incoming amount (minus fee: 1.333% in total + 0.00025 BTC for every target address) to the following addresses: 100% to 3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8 after 0 hour(s). This service will be only available for all bitcoins received from Friday, 21-Feb-2020 21:31:52 UTC to Saturday, 22-Feb-2020 21:31:52 UTC with minimum amount of 0.001 BTC and maximum amount of 2918.67487656 BTC total. This letter is digitally signed by the address: 1Fd1zWsLCP8okiExCrhzvU4TD8zKYfgbZ1.
=========== END LETTER OF GUARANTEE ===========

=========== START DIGITAL SIGNATURE ===========
H9A0N0hqhxeGyYwlP0WHvBly0vtEQj1EgH033inJyslnfW2Ckvdi79ceP4YuAn4JlwyfFyBjefUoxok bjBGpZZU=
============ END DIGITAL SIGNATURE ============

[TryNinja]

I mean, am i retarded, or is this letter of garantuee actually a internal letter of garantuee?

I think you are right.

I never bothered to check their Letter of Guarantee but I don't see how this can be "verifiable" to confirm someone is mixing with the real Smartmixer. In this case, what is even the point of this "LoG"? They don't even have any staked address (At least I couldn't find any). The only addresses are the deposit and receiver ones, and in their website, I can only see the donation address at the bottom.

11. Guarantee
Before every mixing operation, our clients are committed to download the letter of guarantee. This helps, in case of any issues, which may occur during a mixing operation, to refund the funds sent to our address. In case of any issues, contact the SmartMixer support department via the chat option and attach the letter of guarantee. A refund is excluded without proof of the letter of guarantee.

https://smartmixer.io/en/terms

[johnitrue]

Also today a certain https://bitcointalk.org/index.php?action=profile;u=2765212 appeared on the forum.
He claims that allegedly somewhere source codes for sale appeared.
However, without providing any evidence.

While i do think smartmixer's owners are pretty incompetent up to a certain degree, (and i've stated this numerous times in the past regarding their "fake- (one could view their given explanation as "moderately") plausible.." mixing popups, their use of anti-DDOS services such as Cloudflare, and their use of potential sockpuppets, note: that is not proven, just an allegation some people have made.), I for one still would not blindly believe they got hacked, and if their database got hacked, you'd expect the service to be offline as well etc.
Without proof it sounds dubious.


Anyway, if you have a letter of guarantee... Well, keep us updated and post that as proof if they don't do anything about your case..


Although, perhaps someone can help me here...

I just downloaded Smartmixer's letter of guarantee:

It's a JSON file that looks like this:

Code:

{
    "comment": "Never share your Letter of Guarantee with third parties. Attach this document to our Support Team only when you are facing problems with your mixing order. The Letter of Guarantee is only available during the active mixing operation. After the completion all data about your order will be deleted automatically from our database.",
    "orderHash": "509bdc054a8201782f6d86bbd065481d691869a39f54a3140dd0c09e84e12bae6c11635ec4b0ceb816eafb6e11dc50c8f0bfbeb3741e21a8a7cebef44ddb9a79",
    "orderKey" : "3eelup75ony8wgcw",
    "currency": "BTC",
    "customerCode":"f0a6oid4",
    "feePercentage": 4.9787,
    "feePerAddress": 0.00023225,
    "address": "3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr",
    "pool": "Stealth Pool",
    "createdAt": 1582320630,
    "outputs":[
            {
                "address": "3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8",
                "delay": 180,
                "percentage": 100
            }    ]
}

How can i verify this? What exactly is the message body, and what is the digital signature? Can anyone verify this signature for deposit address 3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr using above JSON in electrum / whatever?

I mean, am i retarded, or is this letter of guarantee actually a "internal" letter of guarantee? What are they talking about expiring a signature, or it only being valid during mixing? Are they nuts?

(Haven't tried myself but this feels like i would just be guessing, and it's late already, Well actually i did try, using the order hash as signature, deposit as signing adress, and comment as message, but it's not making much sense. Oh well, i'm rambling here. Should go.)



As opposed to a traditional letter of guarantee, which just looks like this, and can easily be verified??

========== START LETTER OF GUARANTEE ==========
We hereby confirm that Blender.io has generated the deposit address 3JHWRiAdk4ykB6YsoBcKFmqR5zdurTpcdk in order to transfer incoming amount (minus fee: 1.333% in total + 0.00025 BTC for every target address) to the following addresses: 100% to 3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8 after 0 hour(s). This service will be only available for all bitcoins received from Friday, 21-Feb-2020 21:31:52 UTC to Saturday, 22-Feb-2020 21:31:52 UTC with minimum amount of 0.001 BTC and maximum amount of 2918.67487656 BTC total. This letter is digitally signed by the address: 1Fd1zWsLCP8okiExCrhzvU4TD8zKYfgbZ1.
=========== END LETTER OF GUARANTEE ===========

=========== START DIGITAL SIGNATURE ===========
H9A0N0hqhxeGyYwlP0WHvBly0vtEQj1EgH033inJyslnfW2Ckvdi79ceP4YuAn4JlwyfFyBjefUoxok bjBGpZZU=
============ END DIGITAL SIGNATURE ============

I think they use extra * salt * in the hash.
Or, a certain public sequence (the order is unknown to us).

In any case, I have all their signatures issued - on hand. Moreover, I have used this mixer more than once before. And I'm a little swept away.

I'm waiting for the declared 48 ~ hours.

[FatFork]

Really strange decision to lock the thread in times of crisis. I understand that bitcointalk is not an official support channel, but what are they afraid of?
So what if they are under DDOS attack? This can happen to just about any service provider.

In the end, remaining professional and approachable with your clients is absolutely vital to ensuring stronger client relationships.

[yahoo62278]

I read an article(not sure where it was from) that the USA considers all mixers illegal due to the money laundering aspect.

Wouldn't surprise me 1 bit if the government was involved here and also looking at other mixers.

Just speculation but someone could prob google and find the article I'm referring to. Not home or I would.

[suchmoon]

I read an article(not sure where it was from) that the USA considers all mixers illegal due to the money laundering aspect.

Wouldn't surprise me 1 bit if the government was involved here and also looking at other mixers.

Just speculation but someone could prob google and find the article I'm referring to. Not home or I would.

I'm guessing you mean this: https://bitcointalk.org/index.php?topic=5227233.msg53877730#msg53877730

Which is not quite making all mixing illegal, just stating the obvious that money laundering is illegal.

As for smartmixer, if they were taken down by the government we would probably see an FBI logo on their website instead of intermittent errors.

[keyscore44]

I read an article(not sure where it was from) that the USA considers all mixers illegal due to the money laundering aspect.

Wouldn't surprise me 1 bit if the government was involved here and also looking at other mixers.

Just speculation but someone could prob google and find the article I'm referring to. Not home or I would.

I'm guessing you mean this: https://bitcointalk.org/index.php?topic=5227233.msg53877730#msg53877730

Which is not quite making all mixing illegal, just stating the obvious that money laundering is illegal.

As for smartmixer, if they were taken down by the government we would probably see an FBI logo on their website instead of intermittent errors.

I don't think the FBI could have reasons to close any mixing service. At least not at the moment where there is no law prohibiting such a service. For a simple reason - the mixer cannot verify the customer.
However, it is possible that some government office has sent warnings to mixers that they will soon be banned. In my opinion, this is unlikely. It seems more real to me to introduce the need to KYC verification, but this would be synonymous with closing the mixer, as it would interfere with the basic function it does.

[johnitrue]

Gentlemen, I'm going to write a scam sheet, but I do not want to publish logs for everyone.

Tell me, which of the oldies member of the forum will be able to verify and assure them?

[AdolfinWolf]

Gentlemen, I'm going to write a scam sheet, but I do not want to publish logs for everyone.

Tell me, which of the oldies member of the forum will be able to verify and assure them?

I'm not sure anyone can verify your claims, which was the entire point i was making yesterday.

if we look at the Letter Of Guarantee, it seems that the only people who can verify it are Smartmixer themselves, not a third party, as opposed to traditional letter's of guarantees.

Now if you ask me, that's a flawed implementation of a LOG, but apparently no one seems to care or have seen this as of now? ()

I think you are right.

I never bothered to check their Letter of Guarantee but I don't see how this can be "verifiable" to confirm someone is mixing with the real Smartmixer. In this case, what is even the point of this "LoG"? They don't even have any staked address (At least I couldn't find any). The only addresses are the deposit and receiver ones, and in their website, I can only see the donation address at the bottom.

This is so funny. The funny thing being that i don't even know whether they did this intentionally or not.


Perhaps we can use BlockSci/WalletExplorer to cluster Smartmixer's deposit adresses and see whether they would match the claims you're making, but that probably wouldn't be completely foolproof.

[johnitrue]

Gentlemen, I'm going to write a scam sheet, but I do not want to publish logs for everyone.

Tell me, which of the oldies member of the forum will be able to verify and assure them?

I'm not sure anyone can verify your claims, which was the entire point i was making yesterday.

if we look at the Letter Of Guarantee, it seems that the only people who can verify it are Smartmixer themselves, not a third party, as opposed to traditional letter's of guarantees.

Now if you ask me, that's a flawed implementation of a LOG, but apparently no one seems to care or have seen this as of now? ()

I think you are right.

I never bothered to check their Letter of Guarantee but I don't see how this can be "verifiable" to confirm someone is mixing with the real Smartmixer. In this case, what is even the point of this "LoG"? They don't even have any staked address (At least I couldn't find any). The only addresses are the deposit and receiver ones, and in their website, I can only see the donation address at the bottom.

This is so funny. The funny thing being that i don't even know whether they did this intentionally or not.


Perhaps we can use BlockSci/WalletExplorer to cluster Smartmixer's deposit adresses and see whether they would match the claims you're making, but that wouldn't be completely foolproof probably.

In addition to the log, I have screenshots that I took right away, a lot of other information that is closely related to log and indicates this, blockchain, timestamps, my attempts to communicate(not only tickets), my personal messages on the forum - no response.