RarityCheck VIBGYOR gilded #12 swept yesterday.

[Primo-bit]

I am the owner of VIBGYOR gilded #12 which was swept yesterday but it is still in its ICG casing.

1FrE3MbzxYMpLjh14Efv4ikoirbCpdodYZ



https://www.talkimg.com/images/2024/08/07/5J9T2.jpeg
https://www.talkimg.com/images/2024/08/07/5JB1c.jpeg

Can the owners of #1,11,13,14,15,17,20,21,22,23,24,25 report back. They were also swept yesterday.

Take a look at : https://collectible.money/

Original sales thread: https://bitcointalk.org/index.php?topic=5415734.0

Full BTC address list: https://crypto.raritycheck.com/vibgyor

Can someone please check if all of this is correct.

Edit.

This threads is getting long so I updated OP for new readers.

OP now show picture of the compromised VIBGYOR series (gilded and sliver)

What went wrong?
The private keys was in some way compromised. You can read the whole thread and make your own conclusion.
Official statement from RarityCheck.

We made a mistake. We have been doing lots of digging since morning on how this could have happened. We knew this isn't a hardware issue as we never connect any of our hardware to internet. Plus, we have no backups so this isn't a  personnel issue.

Issue is with the keygen software we used.

In full transparency, for the first version of vigilante series, and for the hole coins we have used https://github.com/bitaddress/bitaddress.org to create keys on an airgap computer.

For VIBGYOR orange we used https://github.com/walletgeneratornet/WalletGenerator.net again on an airgap computer.
Unfortunately, since morning we started digging into looks like walletgeneratornet is actually compromised.

We have learned from our mistake and we can only look forward from here. We have been refunding the clients (still few to go).

For next generation of our coins, we will use better keygens + also, print and post sample private keys before using those for the coins.

We appreciate all support from the forum members.

If you are affected by this contact raritycheck to be compensated.
https://bitcointalk.org/index.php?action=profile;u=3240980

[cygan]

i don't own any coins from this series, but what happened yesterday doesn't sound good at all
someone must have gained access to the private keys

a statement from raritycheck himself would of course be very helpful here...

[tweetious]

I also do not own any of those coins mentioned. However, the sweep transaction of 12 coins simultaneously looks really suspicious indeed.

@Primo-bit would it be possible please, to post a timestamp photo proof of the coin with the holo intact? i.e., a photo of the coin from both sides, next to a note of the current block number & the last digits of the block hash.

[krogoth]

 WTF! Not again. If they were all swept together then it's the worst case scenario that it must be an inside job like Yogg. Damn!

[raghavsood]

The address lists for raritycheck items on collectible.money were sourced directly from their website.

An archive of the address list for this set is available on archive.org (in the event that the website is taken down or edited): https://web.archive.org/web/20240304141611/https://crypto.raritycheck.com/vibgyor

The coins were swept across two transactions: 5bef768068c0604ee3dc3dd1fa1b1abef946ea474952a0c471d2bf190dd1368f and 5f3720dd75ea36efed2bffd7bc136dc8556e600d6cc94f2a82c38880e0d02b64, both mined in block 855689.

Between the two transactions, there are a total of 61 inputs, of which 13 are from the VIBGYOR Orange Gilded set.

The remaining input addresses are not in my database, and may or may not belong to collectibles (some are repeated, so likely come from a regular wallet).

If anyone is aware of the origin of those addresses, I would encourage you to share so that we have more information to work with.

There are presently 12 unpeeled items remaining in the Orange Gilded set:

Code:

9	18TjrYAfdZUTAYooK9ZeCZszw6yLGCTK3X	0.01 BTC	$571.23	2023-09-11 18:10:45 UTC	-	Unredeemed
10	1HYf3FfmA96qNj2Rwaz5nr3r7JvMDQTANt	0.01 BTC	$571.23	2023-09-11 21:22:28 UTC	-	Unredeemed
16	1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG	0.001 BTC	$57.12	2023-07-10 21:58:58 UTC	-	Unredeemed
18	19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG	0.001 BTC	$57.12	2023-07-10 21:58:58 UTC	-	Unredeemed
19	13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi	0.001 BTC	$57.12	2023-07-10 21:58:58 UTC	-	Unredeemed
33	1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb	0.001 BTC	$57.12	2023-07-10 21:58:58 UTC	-	Unredeemed
81	1JhPQSUL4rMcrEkDHssDiJrJXwHKbjDkRe	0.01 BTC	$571.23	2023-07-10 21:58:58 UTC	-	Unredeemed
82	1EebYoM2dgss72iufTbaCzc7BjpZrWPaDC	0.01 BTC	$571.23	2023-08-21 20:18:38 UTC	-	Unredeemed
84	1KhNugM436utqwBL3h2UXF6Xa1diQwg7xq	0.01 BTC	$571.23	2024-02-14 20:19:50 UTC	-	Unredeemed
88	19wWUxwBnBgxpz4ogS192yX1T9LsbHPhtL	0.01 BTC	$571.23	2023-09-24 12:23:11 UTC	-	Unredeemed
98	1C1EqyLz2zXEJtig6H2tBbYqrinUFdCS7N	0.01 BTC	$571.23	2024-03-12 23:14:55 UTC	-	Unredeemed
100	1KxfmW4ou58eMB2sVhBGitAtQ1ymvYyMjP	0.01 BTC	$571.23	2023-11-18 19:23:06 UTC	-	Unredeemed

If you own any of the remaining 12 items, it may be time to evaluate whether you would like to peel them.

Rarity Check as a whole still holds 0.538BTC across all items produced.

If you hodl any items from RC, I would encourage you to join the public telegram channel, or run "/subscribe https://collectible.money/creator/raritycheck" via the collectible money bot to receive updates when any RC items are peeled

[aoluain]

the sweep transaction of 12 coins simultaneously

Yup - red flag straight away lads - FFS this is crazy whatever excuses come out.

[raghavsood]

I don't want to assume the worst, but an auction being run by rc ended a couple of days ago without any winners being declared or closing posts: https://bitcointalk.org/index.php?topic=5504410. An auction winner has confirmed that RC reached out to them privately

The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread.

I have initiated fresh snapshots of all three published address lists:

https://crypto.raritycheck.com/2021-set-1
https://archive.is/2Gpjg

https://crypto.raritycheck.com/vibgyor
https://archive.is/Ga3VZ

https://crypto.raritycheck.com/lcs-v1
https://archive.is/DVuDS

[krogoth]

 I do hope none of these coins were sodl at any of the big auction houses.

[raghavsood]

As per my records, at auction we have seen:

Lost Coin V1 Silver #052 sold on S&B - Funded with 0.01 BTC, still funded
Rarity Check 2021 Set 1 #24 (Gilt) sold on S&B - Funded with 0.01 BTC, still funded
Rarity Check 2021 Set 1 #61 (Silver) sold on Scarce City - Funded with 0.001 BTC, still funded


Searching the Stack&Bowers archives yields a lot more, mostly unfunded - but looks like 9 and 10 from the potentially compromised VIBGYOR Orange set were sold on S&B - they are among the 12 coins that are still funded and have not been swept.

[Primo-bit]

The numbers #16,18,19,33 are only loaded with 0.001, they should have been 0.01
It's also a bit strange.

#16 https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG
#18 https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG
#19 https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi
#33 https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb

[raghavsood]

The numbers #16,18,19,33 are only loaded with 0.001, they should have been 0.01
It's also a bit strange.

#16 https://mempool.space/address/1JTSLBvp3gNn1eDy3boJWkdy25yf6ePBNG
#18 https://mempool.space/address/19uFA9DAVc9FS32Z4V5rxkJGfjKT1GiWjG
#19 https://mempool.space/address/13iHy4ok4Nvg6o9YmQgWj9VRCUzWWHR6gi
#33 https://mempool.space/address/1PRBhRKzadcfnKpsRRDUueQxjVx5NDN8Zb

I noticed that too - I wonder if those addresses were accidentally treated as Silver coins, but put onto an Orange coin.

[gpfrag]

I don't want to assume the worst, but an auction being run by rc ended a couple of days ago without any winners being declared or closing posts: https://bitcointalk.org/index.php?topic=5504410.

The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread.

I have initiated fresh snapshots of all three published address lists:

https://crypto.raritycheck.com/2021-set-1
https://archive.is/2Gpjg

https://crypto.raritycheck.com/vibgyor
https://archive.is/Ga3VZ

https://crypto.raritycheck.com/lcs-v1
https://archive.is/DVuDS

Hi Raghav
I can verify that RC did contact me about winning auction #7 yesterday and that payment was sent for VIBGYOR coins.  I will not be funding those it appears.

I did pay RC to fund the coins I won in auction #6. (lcs-v1 set#31)  I asked him to hold off on funding until MJ confirmed receipt and I know that he had inquired at least once but thankfully MJ was at the conference.  Both coins I won have not been funded and I have politely asked RC to just refund me the 'extra' I paid to fund.

https://www.blockchain.com/explorer/addresses/btc/1Awy3XJcHA2E3Bqg3zkRdEcG6zRo4WsT5A
https://www.blockchain.com/explorer/addresses/btc/14A3qM7PA5VJ5c5qrCsQiookPJDbN3YQpx

I can also say that I've done a few transactions with RC and he's always made things right.  Wonder how that set got compromised though.  

[raghavsood]

I don't want to assume the worst, but an auction being run by rc ended a couple of days ago without any winners being declared or closing posts: https://bitcointalk.org/index.php?topic=5504410.

The https://crypto.raritycheck.com/ website is still up. For now, it does seem to update in realtime - the balances for the swept coins are now 0, as opposed to non-zero in my archive.org link earlier in the thread.

I have initiated fresh snapshots of all three published address lists:

https://crypto.raritycheck.com/2021-set-1
https://archive.is/2Gpjg

https://crypto.raritycheck.com/vibgyor
https://archive.is/Ga3VZ

https://crypto.raritycheck.com/lcs-v1
https://archive.is/DVuDS

Hi Raghav
I can verify that RC did contact me about winning auction #7 yesterday and that payment was sent for VIBGYOR coins.  I will not be funding those it appears.

I did pay RC to fund the coins I won in auction #6. (lcs-v1 set#31)  I asked him to hold off on funding until MJ confirmed receipt and I know that he had inquired at least once but thankfully MJ was at the conference.  Both coins I won have not been funded and I have politely asked RC to just refund me the 'extra' I paid to fund.

https://www.blockchain.com/explorer/addresses/btc/1Awy3XJcHA2E3Bqg3zkRdEcG6zRo4WsT5A
https://www.blockchain.com/explorer/addresses/btc/14A3qM7PA5VJ5c5qrCsQiookPJDbN3YQpx

I can also say that I've done a few transactions with RC and he's always made things right.  Wonder how that set got compromised though.  

That's good to hear - hopefully we can hear from him on what's going on with the VIBGYOR orange set soon.

In the meantime, I've flagged the RC collections on the tracker site - naturally, these flags will be removed if merited once an explanation for the swept keys is provided.

[raghavsood]

I am looking to purchase up to 3 "compromised" coins with intact holos which have been swept.

I will pay the full 0.01 BTC face value, shipped to MJ.

This is for analyzing the item and for posterity.

 

[krogoth]

 Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it!

[Primo-bit]

Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it!

Only some of the gilded 0.01 had been swept. 13pcs in total.

[MoparMiningLLC]

I have had 3 of the VIBGY'O'R coins - both #64's and #89 gilded - all 3 were not sold as loaded.

I have a few other RC coins also not sold loaded.

This will call into question their key process as being compromised - now the question is was it intentional or just sloppy?

RC has (per the profile) been online "recently"


also noting their last auction which ended August 4th has a last post by RC at 13 hours prior to it's ending with no closure to that auction.

https://bitcointalk.org/index.php?topic=5504410.0

I do see above that gpfrag had won one of those lots.

[Suzuki Matt]

Yup, my #48 was swept.

[Suzuki Matt]

Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it!

Yes they were.. My #48 silver 0.001btc was swept. Just checked.


Edit: icg mislabeled my slab so it was the wrong Addy. I have since found the proper address and it is currently still funded. Sorry for any confusion.

[raghavsood]

Does anyone know if any other coins were swept as well? Were the 0.001 BTC value ones swept? I just realized by looking at the sales thread I own one...but God only knows where I placed it!

Yes they were.. My #48 silver 0.001btc was swept. Just checked.

Can you share the address and images of the intact hologram with a timestamp?

As per my list, the VIBGYOR Silver #48 is still intact - the address matches the one published on the raritycheck website.

If the actual coin has a different address from what is published and has been swept, things may be a lot worse than we thought.