Bitcoin developer @lukedashjr's wallet was hacked

[franky1]

As everyone should know, a hardware wallet goes a long way in increasing convenience without sacrificing much security.

imagine having 200 bitcoins or even 100 and not knowing that.   well i guess he knew but he didn't do anything about it...

i guess he had reasons to want to keep funds on legacy and not move them to segwit via seeded passphrase hardware wallet

i found that a surprising revelation too at the end of new year after his endless segwit promoting activity years prior

even i wonder what his reasons were for someone so segwit "pro" to avoid using it and prefer to hoard coin on legacy
his big mistake was not using legacy, it was re-using the same wallet from september-december thus exposing the keys to his online home-use PC

i know commonly OG's like to keep funds on known OG addresses as a form of trophy display of being able to long-hoard without moving. it could be that
or that segwit fails to do good "sign message"/validate message features in core
along with other unfinished things they forgot about to finalise full use of segwit functionality

[1714591439]

1714591439

[1714591439]

1714591439

[1714591439]

1714591439

[CryptoHFs]

It appears more than $3 million in bitcoin was stolen. This is very sad to see and I reckon some people should not make fun of this similar to those imbeciles who are replying in this thread in Twitter.



PSA: My PGP key is compromised, and at least many of my bitcoins stolen. I have no idea how. Help please.

Source https://mobile.twitter.com/lukedashjr/status/1609613748364509184

Looks like some of it is coinjoined to 1YAR6opJCfDjBNdn5bV8b5Mcu84tv92fa

Source https://mobile.twitter.com/LukeDashjr/status/1609621375349555204

432ded946431a9612f09d73bd15ded045d11d1095ffdfe8d68306ea9b2e78930

c38a3210fbb758cfc41d9a64b7534b83aecca96f051231f15545e8e5c7365190

4b3cde50e2bce3d02e15b61957d2452e29f53d9a99e1ab14e83b6ec0f87fd851

50df1eab0bf2bd01999cea4fc531a65c17e1a285823c9ae4eab0feb7e21a11b6

Source https://mobile.twitter.com/LukeDashjr/status/1609657854113218560

Did he get any penny back? Or with all the knowledge and fame nothing seized?

[usekevin]

It was not the expected one by the developer of bitcoin.Many hackers targeting the high holder of cryptocurrency to make huge money.Most of the crypto holders move their bitcoin to the cold storage and only few not doing it.Some people who was not alive and hold huge amounts of bitcoin on their wallet will be the first priority of the hacker.This news was very shocking one,the top most person not safe their holding bitcoin.The unacceptable one is it get easy hacked.

[bbc.reporter]

It appears that we have a news update.

Luke Dashjr might be suspecting that the hacker has attended an event called CoreDev Atlanta which was on October 2022. It was also mentioned before that Luke's security on his wallet was a very complicated procedure which it will certainly not be very shocking if the hacker is also a computer programmer that might be developing a project in bitcoin.



The U.S. FBI issued a subpoena demanding personal information of the attendees at a Bitcoin core developer event in 2022, according to Mike Schmidt, co-founder of Bitcoin non-profit Brink. The FBI subpoena is allegedly in connection with Bitcoin developer Luke Dashjr’s claim that he was stolen about 216 BTC in a hack.

“As part of the investigation into Luke Dashjr’s announced theft of his bitcoins, I received a subpoena from the FBI wanting information about attendees of the October 2022 CoreDev Atlanta event in the days before TABConf 2022,” said Schmidt, in an email screenshot posted Wednesday by mikeinspace, a pseudonymous X user. “I was legally advised to cooperate.”

Schmidt, who confirmed with The Block that he sent that email, said in the message to attendees that he had provided the FBI with their first and last names, GitHub usernames and email addresses. Schmidt also said that the FBI demanded that he not disclose the subpoena for a year, which expired shortly before he sent out the email.

“I do not have any details about the investigation or whether the subpoena was due to a targeted suspect or general information gathering as part of the investigation,” Schmidt added.

The Brink co-founder told The Block that he has not been in contact with the FBI since, and declined to comment on further details.

Source https://www.theblock.co/post/287939/fbi-luke-dashjr-btc-hack

[mindrust]

With every interaction you make in the outside world or virtual world, you are risking your funds. That’s what I learned from this story. Sometimes knowing less people and having zero interaction with anyone is the best thing for you.

I’ve been getting scam/trojan emails for decades and I’ve never opened them. Most of them can’t make their way into my inbox because the email service is good at blocking them but some of them actually succeeded. And let me tell you, they are getting smarter. They started to construct these emails like it was coming from a friend.

One of these days as I get older and dumber I might click on that filth wondering what it has to tell me.

Could happen to any of us.

We are only as good as our last win.

[Jason Brendon]

is everybody really taking the piss? Another boat accident.

i guess he had reasons to want to keep funds on legacy and not move them to segwit via seeded passphrase hardware wallet

i found that a surprising revelation too at the end of new year after his endless segwit promoting activity years prior

even i wonder what his reasons were for someone so segwit "pro" to avoid using it and prefer to hoard coin on legacy
his big mistake was not using legacy, it was re-using the same wallet from september-december thus exposing the keys to his online home-use PC

what are the reasons you think he's not using segwit but is a segwit activist at the same time?

[mrust_mobile]

is everybody really taking the piss? Another boat accident.

Yeah a boating accident where the FBI is involved and asking people's data. Do you have any idea what would happen to Luke if the Feds notice he was lying? (that's if he was lying which I doubt) He won't be seeing any day light for a long time probably.

People already mentioned that shit a year ago.

This is not a prank on a bitcoin forum, that's real life. When you lie to the authorities there will be serious consequences. Is there anyone who lied to the FBI and still got away in history? Sure. the question would be, is it worth it?

The amount mentioned in the OP was $3m at that time (216 btc, $15m now), is it worth going to prison to save $5m tax monney?

Would ya? Would yaaa?


Also don't do post bursting (post one after another without someone else says something first), that's against the forum rules.

[Jason Brendon]

is everybody really taking the piss? Another boat accident.

Yeah a boating accident where the FBI is involved and asking people's data. Do you have any idea what would happen to Luke if the Feds notice he was lying? (that's if he was lying which I doubt) He won't be seeing any day light for a long time probably.

People already mentioned that shit a year ago.

This is not a prank on a bitcoin forum, that's real life. When you lie to the authorities there will be serious consequences. Is there anyone who lied to the FBI and still got away in history? Sure. the question would be, is it worth it?

The amount mentioned in the OP was $3m at that time (216 btc, $15m now), is it worth going to prison to save $5m tax monney?

Would ya? Would yaaa?


Also don't do post bursting (post one after another without someone else says something first), that's against the forum rules.

Thank you for the tips on the post bursting. Well, FBI will investigate this case if you don't let them? He could tell the public he lost funds and not turn to FBI? Who said he has?

[franky1]

what are the reasons you think he's not using segwit but is a segwit activist at the same time?

segwit was a rushjob to activate, sponsors had deadlines that devs had to be met, even Luke got a pay day for getting it activated before november 2017 corporate contract deadline, even if he didnt personally want it/use/trust it/ care about it as a utility.. money makes people do stupid things
as for LukeJr's/FBI stuff
seems this latest update assumes Luke JR compromised his keys/computer at that CoreDev Atlanta event

if he cant even remember how many people touched his device holding alot of coins(or access to remote server holding coin).. he should not have had that much coin on a device(or server with access via device) that so many people could touch

hindsight and all.. people should learn from others mistakes..
dont travel with hoards of coin. just take what you need
dont allow people to finger your devices, wallets or your pockets if you dont even know their names

[fillippone]

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory”, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

[Skybuck]

What was stolen ?

btc as in bitcoin core ?

or some other kind of bitcoin:

as in:
bsv ? cw etc

[CODE200]

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

I mean, FBI's still trying to be the good guys even though they're a part of an evil organization which is the US government and they can't really do anything about this because they need to deal with it as this is a crime and no way that you'd want to be dismissing this because I'm sure that Luke would escalate this by saying that the FBI is impartial and doesn't treat everyone equally. It's such a scary thing to me when this happens to people that are prominent in tech and are really good with technology, even if you're so good and vigilant with your security, it's funny how you can still be a victim of this kind of attacks, and it always makes me paranoid that if they can get attacked then I would be no match no matter how cautious I'll be with my security.

What was stolen ?

btc as in bitcoin core ?

or some other kind of bitcoin:

as in:
bsv ? cw etc

Bitcoins my friend, I don't think you can steal the bitcoin core.

[OcTradism]

It appears that we have a news update.

It's interesting update and I only see it today.

The amount mentioned in the OP was $3m at that time (216 btc, $15m now), is it worth going to prison to save $5m tax monney?

Would ya? Would yaaa?

Playing around many governmental authorities is not smart and I doubt that Luke planed to do this with this accident theory. He puts himself under investigation from authorities and if he lied, he will be in jail. It is real risk even I am not a lawyer and not live in the USA.

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

I didn't expect Luke to do that with FBI too. Three-dimensional chess with FBI, FED and more authorities look to be too much risky for Luke. If he initiates the three-dimensional chess, it's unbelievable.

Save tax? Unrealistic. In jail? More realistic.

[bbc.reporter]

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

I very much think that this will certainly be a normal reaction for anyone who has millions of his own property stolen from him. No can laugh at him or criticize him for calling the FBI. I assume that he is a tax payer, it is his right. Also for this case, Luke will never trick the FBI. He will certainly be caught and sent to prison. The guards might also think he is Sam Bankman Fried's lost twin hehehee.

[mrust_mobile]

The guards might also think he is Sam Bankman Fried's lost twin hehehee.

Sam Bankman or...



Sorry I had to do this.

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

I very much think that this will certainly be a normal reaction for anyone who has millions of his own property stolen from him. No can laugh at him or criticize him for calling the FBI.

I've found fillippone's reaction a bit weird too. What's wrong with calling the FBI? Isn't it their job to catch the criminals? Do we automatically convert to criminals when we use Bitcoin?   Our protector and savior the government save us from these bad people!

[franky1]

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

I very much think that this will certainly be a normal reaction for anyone who has millions of his own property stolen from him. No can laugh at him or criticize him for calling the FBI.

I've found fillippone's reaction a bit weird too. What's wrong with calling the FBI? Isn't it their job to catch the criminals? Do we automatically convert to criminals when we use Bitcoin?   Our protector and savior the government save us from these bad people!

back in the days of the hack. many thought Ljr was doing a tax dodge by saying he lost funds to claim a tax loss rather then gains(some call these government seizure requests of things like someones guns/assets/taxes, as having a 'boating accident' where their registered guns/boat/taxes was lost to the sea)..
to avoid government seizure
so when resorting to asking FBI to find the hacker/funds, seems more like a real theft as oppose to a 'boating accident' tax seizure dodge

also many 'privacy guys' think bitcoin is all about trying to keep government agencies away from themselves and bitcoin

[cryptosize]

Have they managed to trace the stolen 216 BTC?

I would expect chain analysis to be involved in such a theft...

[headingnorth]

So was he not even using a passphrase? I'm assuming he wasn't using a multisig setup.

Hard to believe someone with his level of knowledge wasn't using something as simple as a passphrase. With the large amount of funds involved
and his advanced technical expertise he should have been using a multisig setup but if not then the next best thing would be a passphrase aka hidden wallet.

If Dashjr was using a passphrase there would be little chance anyone could get access to his bitcoin, even if they had his seedphrase.
The other possibility is that he was using a passphrase but stored it in the same location as his seedphrase, but that would totally defeat the purpose of a passphrase.

Your passphrase should be stored only in your head IMO.

[franky1]

So was he not even using a passphrase? I'm assuming he wasn't using a multisig setup.

Hard to believe someone with his level of knowledge wasn't using something as simple as a passphrase. With the large amount of funds involved
and his advanced technical expertise he should have been using a multisig setup but if not then the next best thing would be a passphrase aka hidden wallet.

If Dashjr was using a passphrase there would be little chance anyone could get access to his bitcoin, even if they had his seedphrase.
The other possibility is that he was using a passphrase but stored it in the same location as his seedphrase, but that would totally defeat the purpose of a passphrase.

Your passphrase should be stored only in your head IMO.

by all accounts and use of common sense to stitch the stories/revelations together

he did not use seeds, he did not use passphrase.
he had funds on LEGACY private key(which pre-dates seeds) on a hotwallet accessible via a server, which was accessible via a device which he carried with him to a conference/meetup which he must have allowed strangers/multiple people access or exposure to

passphrases, seeds, private keys are only secure if they are cold stored(airgapped/physically not on a device)... and not in a active wallet of an open node thats is remotely accessible/stranger accessible

it doesnt matter in this case if its a passphrase, seed, private key if key(of any format) is in a node is operating as a hotwallet

eg a desktop login password is only as good as the human ensuring they log out when they step away from their desk

[NotATether]

Wow.
I didn't expect him to resort to FBI.
Yeah, this pretty much rules out the “boating accident theory”, as it ever was a true scenario here. Seems like a dumb strategy for an OG like Luke.
Or maybe he’s playing three-dimensional chess with the FEDS here, relying on very sophisticated obfuscating technologies here, to save the proverbial 5 million dollars.

Why the fuck would you want to save an extra 5 million dollars in taxes if you had the chance to get most of your money, literally millions more, back? This isn't "All or Nothing".