Sinbad.io Mixer - secure, fast and easy to use

[digaran]

Ummm, hello anybody home? The site is seized, who is gonna come back? You should remove any ads related to them because the links lead to a dead end. And nobody is going to track signature payments, because did they say they were in bed with criminals and you accepted to advertise for them?  If no then there is no problem, from now on that you know however, that's another issue.

[Woodie]

The signature escrow address was also mentioned in the article as part of the Sinbad wallet address, which holds about $13,000 worth of BTC at the current price.

You and I know very well that this said escrow address isn't in the control of Sinbad, its all mistaken identity...

Worst case scenario is these guys might have been following money leaving one of Sinbad's wallet addresses and unfortunately, the sig wallet has been a receipt of btc several times which could have given the addy special recognition...otherwise it's a dead end tbh.

I hope this won't leave any trace on the participants who are being paid from the address, tiring them down with something to deal with in the exchange since the article has already started and US citizens and others are highly advised not to interact with any of those addresses in the future.

Too many innocent businesses will be affected if they are still trying to follow the money, besides as this Sig was among the biggest and every week funds were going everywhere such as exchanges,casinos, BTC ATMs,p2p transactions and funds are still in circulation...honestly good luck to them with their witch hunt because once the ball starts rolling it never stops

Coming to think of it there is strength in numbers after all  

[xtests]

The service's onion is offline, which means police managed to seize the backend server with the core mixing engine and customer data. Also the silence from the team is a possible sign of an arrest. https://bitcointalk.org/index.php?action=profile;u=3509539 Last Active:   November 27, 2023, 03:10:52 PM

Yet another example proving that an ability to code a mixer doesn't mean an ability to secure operations properly yet. If this service was following good security practices, it wouldn't let LE to find their core server in that easy way. I guess it was 1 hop after Cloudflare...

FIODNederland, when press release with the whole operation details? Ideally, something as detailed as it was for Chipmixer and Bestmixer made by your partners in the USA. Thanks.

[philipma1957]

I just read this and I will be ending my advertisement for them.

BTW one likes to see hackers get caught and the real issue is how does one ever have privacy must

we always expose every detail of out financials all the time.

I can see part of what happens is to stop 'bad' guys but most of what gets done by the gov is hurtful

to the regular guy.


Edit:

 this was post 43821

[Baofeng]

The service's onion is offline, which means police managed to seize the backend server with the core mixing engine and customer data. Also the silence from the team is a possible sign of an arrest. https://bitcointalk.org/index.php?action=profile;u=3509539 Last Active:   November 27, 2023, 03:10:52 PM

Yet another example proving that an ability to code a mixer doesn't mean an ability to secure operations properly yet. If this service was following good security practices, it wouldn't let LE to find their core server in that easy way. I guess it was 1 hop after Cloudflare...

FIODNederland, when press release with the whole operation details? Ideally, something as detailed as it was for Chipmixer and Bestmixer made by your partners in the USA. Thanks.

Here is the detailed announcement:

https://home.treasury.gov/news/press-releases/jy1933

The only difference with Chipmixer though is that the authorities are very quick to take action against Sinbad.io. Chipmixer was able to be under the radar for many years, maybe 5-6 years before it was seized.

But Sinbad was just a year old exchange if I'm not mistaken.

And for those who are awake right now and part of the campaign, majority of them have removed their signatures already.

[danim22]

It's not the first time that a service like Sinbad has been seized by a government, and the current situation is a bit unusual. For instance, if you check the Sinbad Telegram channel in the Russian language, on November 27th at 17:45 (GMT+3), the channel owner posted a message that roughly translates to: "Dear users, the service is temporarily closed for upgrades; we will notify you of the relaunch date later." This is the last message posted in the Russian channel.

So, what does this mean? It could imply that they became aware of impending issues as early as November 27th and were attempting to transfer their assets to another wallet before potential government seizure. The owner of the channel might just be an operator responsible for responding to users in both the Russian and English channels.

However, when you check the English channel, the last message was posted on November 29th at 17:40 (GMT+3), suggesting that the operator is still active. This raises two possible scenarios:

1. They might have temporarily lost access to their servers, both on the Tor network and the clearnet, and there's a possibility they will return once the issues are resolved.

2. On the other hand, it's also possible that Sinbad will never return. The lack of updates could indicate a serious problem, possibly involving the arrest of some of the project's technical team members.

Many members are likely wondering why the operator, who is apparently still active on Telegram, hasn't shared any information or provided updates regarding the current situation. It raises questions about why they don't communicate something like, "Dear members, our servers and domains have been seized, but we will return soon with a new domain and service."

The fact that the operator is online but remaining silent could suggest a lack of communication with the leadership of Sinbad. This silence leaves members wondering about the whereabouts and status of the leader. Perhaps, we'll soon find out more through news reports or other sources.

[examplens]

Well, this is not what I expected, but unfortunately, mixers are always the target of investigation, so this is not completely unexpected. It's a bit strange to me if it's really the same team behind Sinbad, as it was behind Blender, why they weren't more anonymous this time, that is, why they didn't use the domain and hosting via offshore countries. I don't see that any amount of Bitcoin was confiscated from them, only some addresses were recognized, so I believe that the same team will return for the third time with a new name.

also strange that the escrow address was only filled with new funds this week, when the website was seized supposedly on november 27 - did the person who sent the sats to R777 not know about it at that moment?
we are eagerly awaiting a statement from Royse777

Honestly, I interpret this as their honourable move, they did not want to deceive anyone. Of course, if they knew about this outcome earlier, they still decided to be honest to the end.
Also, their latest activity on telegram is part of the support and solving of the mixing issue of one user.

[xtests]

Here is the detailed announcement:

https://home.treasury.gov/news/press-releases/jy1933

Please... This is nothing more like an announcement of the OFAC listing and by it's no means detailed. By detailed I mean something like this: https://www.justice.gov/opa/press-release/file/1574581/download

The only difference with Chipmixer though is that the authorities are very quick to take action against Sinbad.io. Chipmixer was able to be under the radar for many years, maybe 5-6 years before it was seized.

Because of bad security practices, probably even worse than Chipmixer's operator had. Having some basic security considerations like proxying your end server via clearnet reverse-proxies over Tor to avoid the whole operation seized is something that even a beginner .onion site operator would know to do. There is no excuse for someone operating a mixer to have their core (backend) server seized as there are many ways to hide it from cybercrime investigations even without recurring to offshore hosting. Having a few servers and basic network routing skills would be enough to prevent this.

Being sanctioned by OFAC shouldn't mean end of world to some serious project like a mixer, especially when it was already expected if you are aware of recent mixer criminalization announced in USA and aware of historical timeline related to other mixers.

Such events just show how some mixer operators neglect security of their users and operations, that's all. If they cared enough, they wouldn't be seized that easily by the law enforcement.

Law enforcement agents who work on cybercrime are not some kind of gods, they are mere humans with knowledge+training in espionage and some extra powers to request information on certain resources on the Internet. They are pretty avoidable by having some certain itsec+opsec expertise, which is required for a mixer operator in my opinion. But now we are at some absurd point where we have some mixers here who offer their service via Telegram bots, which is unbelievable and absolutely ridiculous, considering that someone with expertise in security would know that Telegram bots are not end-to-end encrypted giving permission to anyone who works for Telegram extracting all the chat logs and providing to LE. And what is more ridiculous is that there are reputable members here who trust such services being completely unaware of the consequences. Some of your favorite mixers here are literally feeding you to LE.

[NotATether]

FIODNederland, when press release with the whole operation details? Ideally, something as detailed as it was for Chipmixer and Bestmixer made by your partners in the USA. Thanks.

I'm pretty sure that's a government-controlled account and will basically never post casually to random people like us 

[PytagoraZ]

FIODNederland, when press release with the whole operation details? Ideally, something as detailed as it was for Chipmixer and Bestmixer made by your partners in the USA. Thanks.

I'm pretty sure that's a government-controlled account and will basically never post casually to random people like us  

Yes, I agree too. Will they be here and start monitoring mixer activity?

btw, the account immediately had 3 neg trust 

[virasog]

Honestly, I interpret this as their honourable move, they did not want to deceive anyone. Of course, if they knew about this outcome earlier, they still decided to be honest to the end.
Also, their latest activity on telegram is part of the support and solving of the mixing issue of one user.

If that is the case and they knew what's coming, does this also means that the put the site down deliberately and thought that they will come back again once the dust settles.

Or perhaps they were in negotiations with the law enforcement departments and when they reach to no consensus, eventually they were seized. I know it's just assumptions of what could have happened, the fact is that SinBad is no more, Leaving a lot of questions of which mixers we can trust  

[Synchronice]

Whoever made this graphics, really made my day. I couldn't imagine if they'd use aqua and purple colors on left and right sides from the simbad.io's user interface color palette.

@FIODNederland: Can you confirm this account belongs to FIOD, by posting the username in fiod.nl/Bitcointalk.txt? If so, I'll leave neutral feedback confirming you are who you say you are, which will add greatly to your credibility.

Copper Membership means you've paid using Bitcoin. Interesting

He is just a troll who is trying to scare people.

The only difference with Chipmixer though is that the authorities are very quick to take action against Sinbad.io. Chipmixer was able to be under the radar for many years, maybe 5-6 years before it was seized.

But Sinbad was just a year old exchange if I'm not mistaken.

The difference is that Blockchain Analyses companies are improving every day. So have mixers to do in order to survive.

By the way, this Lazarus Group is so amazing. People from North Korea, where one among 100000 rarely has access on computer and internet, manage to create a group that plays with the USA like cat plays with mouse. Lazarus group is a fictional character created by the US to catch whoever they don't like. For me it looks like they are fighting against privacy with fictional reasons.

[SinBad.io]

Hello everyone
I will make an official announcement soon,please wait

[LoyceV]

The service's onion is offline, which means police managed to seize the backend server

It's offline, unlike CM's .onion, which was seized. That's a big difference.

https://home.treasury.gov/news/press-releases/jy1933

Allow me to post selective quotes (read the whole article for the full context):

While we encourage responsible innovation in the digital asset ecosystem, we will not hesitate to take action against illicit actors.
~
The ultimate goal of sanctions is not to punish but to bring about a positive change in behavior.

btw, the account immediately had 3 neg trust  

That's just to prevent them from joining a signature campaign later
Seriously though: 2 of the 3 negatives are for "impersonating". That can be clarified with one small text file.

I'm pretty sure that's a government-controlled account

The only alternative is an impersonator with impeccable timing. That's not very likely.

He is just a troll

Unlikely. The account was created 2.5 hours before fiod.nl published this article, and posted about it 6 minutes after publication.

People from North Korea, where one among 100000 rarely has access on computer and internet, manage to create a group that plays with the USA like cat plays with mouse.

Food must be a very strong motivator
Seriously though: that's not so hard to believe. Same for Iran. Most hackers have to fear prosecution. State hackers don't have that problem.

[examplens]

The service's onion is offline, which means police managed to seize the backend server

It's offline, unlike CM's .onion, which was seized. That's a big difference.

In this case, there is also not an extensive and detailed report as there was in the case of CM. Also, I did not find anywhere that any amount of Bitcoin was confiscated, only two addresses were marked and that with relatively small amounts.

btw, the account immediately had 3 neg trust  

That's just to prevent them from joining a signature campaign later
Seriously though: 2 of the 3 negatives are for "impersonating". That can be clarified with one small text file.

I don't think they care about things here, trust ratings, signature campaigns or anything. The account was created only to present certain information and will probably no longer be active.
Although I am quite convinced that the person who wrote those posts from that account, is not the first time on Bitcointalk. I'm quite surprised by the promptness with which they informed us that they had seized someone's website.

[NotATether]

Hello everyone
I will make an official announcement soon,please wait

Holy shit!

He's still around! 

[holydarkness]

The signature escrow address was also mentioned in the article as part of the Sinbad wallet address, which holds about $13,000 worth of BTC at the current price.

You and I know very well that this said escrow address isn't in the control of Sinbad, its all mistaken identity...

Worst case scenario is these guys might have been following money leaving one of Sinbad's wallet addresses and unfortunately, the sig wallet has been a receipt of btc several times which could have given the addy special recognition...otherwise it's a dead end tbh.
[...]

Wondering about this when I stumbled upon it yesterday, I got curious because the finding is rather shallow for an inter-governmental investigation. Two emails and two addresses, both info can be easily unearthed by anyone strolling around in, perhaps, less than an hour. The escrow address was practically being published every week during campaign update, and I am somewhat sure the two emails are what's listed on SinBad's website, the "adv" and "support". I don't think it should be a finding worth mentioning by a joint-country investigations.

And then I looked at the press release by two of the govt.'s official website and AFAIK, none actually mentioned these email and wallet addresses. The article mentioned OFAC designate these addresses, banning US citizens and everyone from interacting with these addresses. But in OFAC's own press release, there is no mention of this. The closest is this passage, with still no specific mention of the addresses:

As a result of today’s action, all property and interests in property of the entity described above that are in the United States or in the possession or control of U.S. persons must be blocked and reported to OFAC. OFAC’s regulations generally prohibit all dealings by U.S. persons or within the United States (including transactions transiting the United States) that involve any property or interests in property of a blocked or designated entity.

In addition, persons that engage in certain transactions with the entity designated today may themselves be exposed to sanctions.

I think what happens here was the Journalist trying to make a situation looks more serious and dire. He derived the information from the press release, took a quick search of SinBad's available "property", and wrote them like what we read now.

[examplens]

Hello everyone
I will make an official announcement soon,please wait

Holy shit!

He's still around! 

Some twisted things are going on here. They left a similar update on the Telegram channel, but they denied that the service was seized. Is it possible that it is a hack? If so, why did certain authorities immediately publish this news?

Hello
I will post the official announcement about the latest news soon
The service is not seized and will be restored after maintenance is finished

[LoyceV]

Is it possible that it is a hack?

A hack on fiod.nl and treasury.gov?

If so, why did certain authorities immediately publish this news?

I'm pretty sure they don't publish third party press releases.

[NotATether]

Some twisted things are going on here. They left a similar update on the Telegram channel, but they denied that the service was seized. Is it possible that it is a hack? If so, why did certain authorities immediately publish this news?

Hello
I will post the official announcement about the latest news soon
The service is not seized and will be restored after maintenance is finished

You are right. It also raises some questions about the events that happened yesterday.

If the service was not seized, then why was a FIDO account running around posting a takedown banner? And also the press releases.

If the service was indeed seized, then, frankly, what the hell is going on? A reboot of the service off of some codebase is happening? There are so many questions.

Edit: I keep writing "FIDO", it's actually FIOD, my bad