Just an update for ya’ll as I am in way over my head.
I was very upset at the time of my first post after loosing 13 btc. I am unable to speak privately with MCM, (he hasn’t replied to my emails). I don’t want to blame anyone, and If it turns out I am to blame I am willing to accept responsibility but some things just aren’t adding up here so I’m looking to you guys to see if anyone can help me understand what has happened.
Here are the details and timeline.
At 9 pm on 23rd of February I used MyCryptoMixer.com to mix some btc.
I was using PureVPN and google chrome in incognito mode.
I sent the 13 coins to an address I copied from the website and pasted into my hardware wallets desktop interface. Time delay of 32 minutes and fee selection 0.5
Upon sending it, I went back to the MyCryptomixer website, the nodule was on "processing mix," and I attempted to download the loG. My wifi seemed to spazz, and the page was stuck at loading. Before I knew it, it had refreshed to the "Prepare" page.
I sent a support email stating that I wasn't able to download the LoG and wanted to confirm that everything was fine with my transaction, waited for the 32 minutes to process and checked my hardware wallet -- Nothing. I waited a few more hours, thinking that perhaps since I set the fee to its lowest option that miners were taking their time on the transaction. Three hours later I checked the blockchain and it stated that the transaction had a good amount of confirmations and had gone through.
I scanned my computer for Malware, no Malware. I had also previously sent a transaction on my ledger 30 minutes prior to sending to MCM and 30 minutes after, both were uncompromised. It seems his mixer is the only common denominator in my transactions being lost that day.
Proof of outgoing transactions:
https://imgur.com/a/dERLl4OHis response on my first thread:
There are two methods to prove a transaction:
- The Letter of Guarantee. A digitally signed proof of your transaction, which indisputably guarantees the funds sent to the deposit address are going to be transferred to specified destinations, according to the settings. Even if MCM made the mistake and lost the PKs to the deposit address, it would be forced to process the order as per LoG. It is a guarantee and a very powerful tool in user's hands.
- The address belonging to MCM. It is possible for me to confirm whether the address belongs to MCM or not. In the past there were cases when the order was not processed properly and after confirming the deposit address is owned by MCM, as well as the ownership of input address used for the transaction, I was able to return coins safely.
In this case, the address does not belong to MCM, nor the user is able to present valid Letter of Guarantee. They claim the "server crashed" when trying to download LoG, yet they have "verified the PGP" on the "secure incognito mode of google chrome" and still proceeded to send substantial sum of money nonetheless. This is at the very least very strange.
There are several attacks on MCM users I am aware of, it is possible the victim fell for one of them:
- fake websites using MCM look
- tor exit nodes changing deposit addresses and the address in LoG when accessing clearnet address through HTTP
- browser addons changing the deposit address on real website
- compute programs changing the deposit address when in clipboard
It is also possible it is the malicious actor who wants to harm MCM reputation. This concerns me especially since we just had another case when the user claimed the funds were transferred to different address. Very shortly after my explanation on how it is possible to find the outgoing transaction from MCM using the disclosed information and knowing that addresses belong to MCM, they posted the txid without demonstrating any prior technical knowledge required for such blockchain analysis. Perhaps the attacker wanted to double down using the FUD created by TryNinja post, which debunked their first attempt.
I also checked another thread accusing MCM of a scam and his response earlier tonight was as follows:
Hello,
Due to the recent network load, I decided to switch the order time from 24 hours to 72 hours. A lot of users wrote over the email about their transactions not being processed, as they arrived after 24 hours from order creation. All the reported cases were resolved either thanks to the LoG or by checking whether the deposit address belonged to MCM and doing the analysis described above.
To prevent this from happening, on 05.02.2021 13:53 UTC, I decided to update order validity time from 24 hours to 72 hours, 3 days. Answering multiple emails about transactions lost due to order termination was not something I have time to do. The change was not yet propagated to the frontend, as I was not sure whether it is a temporary or permanent solution. The LoG is generated independently of the frontend, this is why it was available for full 72 hours instead of the 24 hours the frontend page was available for.
After reading the TryNinja post, not having much time at the moment, I decided to shut down the backend immediately in case something serious have happened. The backend was effectively offline from 22.02.2021 06:33 UTC to 23.02.2021 14:05 UTC, when I made sure no leaks are present.
No security was compromised. Each order is assigned unique id, it consists of 18 alpha-numeric lowercase characters, this gives us 36 ^ 18 possible combinations, roughly 1 and 28 zeros so you can imagine the number. This is enormous value, even when compensating for multiple orders being available at any time and considering finding the order id of single of them as a success, the chances of guessing and testing the order id is almost nonexistent.
The LoG generated by TryNinja is valid and confirms the transaction was successful.
As for @Cowboy310 I will post a response in his thread directly."
This is concerning. I do not know exactly what the backend being shut down means, but the shutdown occurred on the same day that I sent my transaction through. I do not know if this would have any effect on my lost transaction.
I wonder if the MyCryptoMixer has processed a volume similar to mine, despite it saying the maximum limit which as of right now is 76 btc.
I have retraced my steps on the website to check for errors on my end and really don't know what could have happened here.
