Moderator Account may be compromised?

[bluefirecorp_]

This came across my newsfeed; https://i.imgur.com/eguNNcT.png

Not really sure which sub-topic to post in.

[1715185979]

1715185979

[1715185979]

1715185979

[NeuroticFish]

I've quoted it (and added tags) in order to show the image.

[suchmoon]

Is he really asking FBI for help with coinjoined bitcoins? Or is the twitter account that's compromised and posting nonsense?

[PX-Z]

Here's the twitter post^[1] if people will mind.

I dont know if the guy is trolling, or not. But if its true, its morr than of 211 Bitcoin was stolen to this address^[2]. He is one of bitcoin core developer, right? I wonder what wallet he is using, surely if its a hardware wallet the chance it getting compromised is low.
Also, as said, PGP is compromised too looks like the device was the one being targeted.

[1] https://twitter.com/LukeDashjr/status/1609613748364509184
[2] https://blockchair.com/bitcoin/address/1YAR6opJCfDjBNdn5bV8b5Mcu84tv92fa

[Foxpup]

Or is the twitter account that's compromised and posting nonsense?

Unless Luke posts a revocation cert for the allegedly compromised PGP key, I'm guessing it's this one.

[AB de Royse777]

Or is the twitter account that's compromised and posting nonsense?

Unless Luke posts a revocation cert for the allegedly compromised PGP key, I'm guessing it's this one.

Let's wait for it.
It's unlikely a core developer will have such low IQ.

By the way, it's not April 1st. Right? :-P

[jackg]

Or is the twitter account that's compromised and posting nonsense?

Unless Luke posts a revocation cert for the allegedly compromised PGP key, I'm guessing it's this one.

Let's wait for it.
It's unlikely a core developer will have such low IQ.

By the way, it's not April 1st. Right? :-P

My thoughts too. Surely at $18 million if you cared about the funds you'd think twice about storing them online or in any way that'd make them easier to attack. Edit: unless the funds were held by those keys to confirm whether they had been compromised or not - an attacker finding $2 million might be happier with that instant reward over trying harder to mess up more systems.

Also, the lack of signed message doesn't make much sense either - it would be one of the fastest and most reliable ways to prove the key was actually compromised rather than the twitter account.

[BayAreaCoins]

Perhaps, he should worry less about COVID and more about security.

Also, it's a pretty bad fucking sign when one of the top contributors is getting rekt.  I suspect we will see some severe dominos flopping this year.

If Luke can get hacked... a lot of others can be too.

A long time ago, I asked GoDaddy if they would please accept Bitcoin, and their response was basically "We won't ever accept Bitcoin because Bitcoins have a tendency to go missing overnight."  People have tried to paint Bitcoin as a safe investment... when it's simply not safe at all.  I love Bitcoin, but we are in new waters here and high risk as hell, in more ways than one.

I wonder how much of his code contributed to Bitcoin is leaky too.

"Luke Warm" wallets... can we add that term to the Bitcoin Wiki, please?!

[Upgrade00]

Also, it's a pretty bad fucking sign when one of the top contributors is getting rekt.  I suspect we will see some severe dominos flopping this year.

While I'm on the side that his social handle was compromised and the tweet could likely be fud created by who controls the account now, I would also say that should it be true, it doesn't reflect on the state of the Bitcoin protocol.

An experienced user can make a mistake an slip up, this doesn't make Bitcoin less safe or secure, it just means that someone wo should know better didn't.

If Luke can get hacked... a lot of others can be too.

If a lot of others don't make any mistakes when ensuring their security, they would not get compromised.

[Rizzrack]

Seems he was targeted with some malware ...


https://twitter.com/LukeDashjr/status/1593227756841578496?s=20

[NeuroticFish]

According to Peter Todd it's not a Twitter hack and it's for real
https://mobile.twitter.com/peterktodd/status/1609655629903265795

Although I fail to understand that
* everything is lost, even cold storage (come on...)
* he was asking FBI for help

FYI I've confirmed that this is real and not a Twitter hack via a mutual friend.

IIUC he used Gentoo as his desktop and didn't keep different activities separated. So backdoored software is one of many ways this could happen; he may not have been targeted.

Use @QubesOS
 people.
Quote Tweet
@LukeDashjr@BitcoinHackers.org on Mastodon

[tranthidung]

This came across my newsfeed; https://i.imgur.com/eguNNcT.png

Not really sure which sub-topic to post in.

LOL. Is it a joke or a drama for a new year?

I have never known about Luke Dash Jr. but I am thankful for your feed from which I did a search and here we go with

• [BCT FACT] Bitcointalk was originally on Bitcoin.org but ... drama
• I actually read that topic in 2019 but totally forgot it and Luke was not in my mind.
• A related announcement Forum moved to bitcointalk.org

That chat log is too long and I did not read it all. Excuse me, who is Luke Dash Jr.? Is he one of forum moderators?

[NeuroticFish]

Excuse me, who is Luke Dash Jr.? Is he one of forum moderators?

I know that he's one of the known Bitcoin Core devs and I know that he's on other projects too and since his PGP key has to be considered compromised, people should be very careful.
About what's his role on this forum... this is his account, I don't know if he's mod on the forum.

And while OP may be wrong on the mod part, the rest is quite concerning (for both sloppiness and the actual fact he got hacked).

[dkbit98]

Asking government agency for help over Twitter was such a silly move from Luke :/
Bitcoin Knots wallet is also affected by this because it is signed by Luke Dashjr's OpenPGP key, so if you are using this wallet better stop right now.

I checked BTC address Luke posted and it's possible that he lost around 200 Bitcoin because of this, and he claims they compromised him a while ago and planned for this.
There is still a possibility that his Twitter account was hacked because nothing about this was posted on Mastodon and other platforms.
It would be great to see him making a post about this in bitcointalk forum.

Worst thing about this incident is that we have CZ ''savior'' who claims he will now FREEZE Bitcoin connected with Luke Dashjr if someone sends them to his Binance exchange.  

“Sorry to see you lose so much. Informed our security team to monitor. If it comes our way, we will freeze it. If there is anything else we can help with, please let us know. We deal with these often, and have Law Enforcement (LE) relationships worldwide”

https://twitter.com/cz_binance/status/1609663902610034691

[NeuroticFish]

I've just found out that this topic is also discussed on Bitcoin Discussions.
And @tranthidung does have a point: this may not be META material.

...So... maybe we continue there? https://bitcointalk.org/index.php?topic=5432665.0

[bluefirecorp_]

And while OP may be wrong on the mod part, the rest is quite concerning (for both sloppiness and the actual fact he got hacked).

He was moderator of the bitcoin wiki section here in meta. That changed after this post was made.

https://i.imgur.com/XIDfB3G.png

[GazetaBitcoin]

LOL. Is it a joke or a drama for a new year?

Apparently, it is not a joke...

Excuse me, who is Luke Dash Jr.? Is he one of forum moderators?

Luke-Jr is not a forum moderator, but a person very important for Bitcoin, for Bitcoin development and also for its history. He is one of the most iconic figures which worked for Bitcoin. According to his LinkedIn profile, he works on developing Bitcoin and Bitcoin Core since 2011. Among his greatest achievements, he mentions the following the following (highlight is mine):

- Longest-contributing Bitcoin Core developer, since the start of 2011
- Lead maintainer of the enhanced Bitcoin Knots derivative
- Diagnosis and addressing of various security issues, some critical to the Bitcoin network (including many CVEs)
- Assist in community outreach/education by regular interaction on Twitter and reddit, as well as occasional conferences and meetups
- Current editor/maintainer of the Bitcoin Improvement Proposals standards process and repository
- Maintainer of BFGMiner (formerly cgminer) Bitcoin mining software
- Ongoing research into protocol changes (hardforks, softforks, extension blocks, forward blocks, etc)
- Ongoing research into safe block sizes/weights, network security models, etc
- Maintain real-time Bitcoin network statistical information, monitoring network security, software being used, etc
- Maintain Gentoo packages for various software projects, including Bitcoin Core and Knots
- Helped design Segwit as a softfork (BIP 141), and updated getblocktemplate for Segwit (BIPs 9 & 145)
- Assisted in careful deployment of the BIP 148 Segwit UASF, avoiding a possible catastrophic chain split
- Wrote KYCPoll, polling software to use Bitcoin exchange KYC for human verification, to aide in measuring community support for proposals
- Research into the concept of sidechains and co-authored the original sidechains whitepaper
- Primary author of "getblocktemplate" decentralized mining protocol standard (BIP 22/23) as well as reference implementations in C and Python
- Founder and former operator of Eligius mining pool
- Provided an alternative implementation of P2SH (OP_CHECKHASHVERIFY, BIP 17)
- Designed a number of mining pool reward systems to ensure fair division of mining rewards
- Expanded BTC precision from 2 decimal points to 8.


All in all, when even such profilic coder, which such vast knowledge, gets into such situation, we all should raise question marks. What actually happened to him? How was his key compromised? What can we also do to better ourselves and avoid such situation? Is there anything he could do do avoid this? And so on...

[digaran]

Is there anything he could do do avoid this?

Stay anonymous no matter what.

[suchmoon]

Seems he was targeted with some malware ...

So he knew he was attacked a month ago and now lost the coins? Must have been a very slow hacker but the victim seems to be even slower.

[NeuroticFish]

What can we also do to better ourselves and avoid such situation? Is there anything he could do do avoid this?

Use cold storage safer, i.e. transfer tx via images, not USB stick between cold and hot storage or simply use hardware wallet.
Make sure the private keys have never been and never will be on a computer that will go online, not even for printing them.

This kind of precautions should at least keep the cold storage safe.