💦 splash.tf / splash.cx - instant exchange BTC / ETH / XMR / DAI

[NotATether]

Thank you for the report!

We'll get that fixed  

Btw, is it normal for payouts to be processed in 16-24 hours?

I don't think it was like this before

[splashed]

Btw, is it normal for payouts to be processed in 16-24 hours?

I don't think it was like this before

Yes it can take some time as it goes through a manual human review. Thank you for your patience 

[splashed]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

[Forsyth Jones]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

Holy shit, I'm so sorry about what happened. Whatever happens in the future, I hope you guys can bounce back.

This wave of hacking is very disturbing. 

[examplens]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

Oops, I'm sorry to hear that.

I see that there are currently some coins in the reserves shown on the site. I assume you added new funds. I hope that you correctly recognised and fixed the errors that were misused.

[NotATether]

This is extremely bad news!

Did you use sandboxing on your servers?

[SFR10]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

Sorry to hear that If the funds currently visible on splash have nothing to do with the hacker in question, you can also try Crystal and Cipherblade's investigation services.
^{- FWIW, I'm not a fan of some of the other services that such platforms offer, but in such cases they could come in handy.}

[logfiles]

This is very unfortunate. I am just getting to know about this especially for a service that has been having it own liquidity and trying to compete with other big services

I checked the archived version from September and it looks like it was most of the the BTC and XMR that was drained. 24 hour volumes for all the swap pairs stand at 0 as of now.

[bitmover]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

Sad news. I hope you can recover your losses and that you can keep up the good service.

This kind of is  attack is terrible for the ecosystem.  A good kyc free exchange that used its own reserves..

[AnonChangeCom]

It is very sad to see exchanges using their own reserves to ensure they control the pipeline get exploited like this. Our exchange works in the same way, I guess there are risks with having a good service.

[hugeblack]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

It is unfortunate that this has happened. Is the service currently down or do you not have control over the servers/domain because I still see a balance in Reserves.

[Trêvoid]

We have been attacked, and our wallets emptied. A full post of how this happened will be published later.

For the attacker if you are seeing this. Please return our funds, and you can keep a 10% bounty, otherwise we will be contacting law enforcement.

Sorry to hear this, Splash. I’m not sure if it was him, but someone also contacted me about pentesting swap services and similar things. I’ll ask him whether it was him.

[Bitcoin_Arena]

Sorry to hear this, Splash. I’m not sure if it was him, but someone also contacted me about pentesting swap services and similar things. I’ll ask him whether it was him.

Given that he has been directly contacting the platforms regarding any vulnerability he may hwev discovered. It's highly unlikely that he just hacked and moved out the funds without talking to the Splash.tf support staff. But let's wait for his response.

[examplens]

Sorry to hear this, Splash. I’m not sure if it was him, but someone also contacted me about pentesting swap services and similar things. I’ll ask him whether it was him.

I’m not sure if what you shared has any connection to the Splash incident, but several swap exchanges have been undergoing maintenance recently, at least from what I’ve seen. It doesn’t necessarily mean it’s the same attack, but the coincidence struck me as odd.
We cannot expect that such matters will be brought to the public eye too much.

[Forsyth Jones]

I’m not sure if what you shared has any connection to the Splash incident, but several swap exchanges have been undergoing maintenance recently, at least from what I’ve seen. It doesn’t necessarily mean it’s the same attack, but the coincidence struck me as odd.
We cannot expect that such matters will be brought to the public eye too much.

I don't know if Splash is contacting anyone (or perhaps the so-called white hat).

Unfortunately, cases like this, especially involving hacks in instant exchanges, usually have no consequences, because the guy could literally be on the other side of the world. I just hope Splash stays strong to continue in this market, not everything is the end, because they still have the site active (although under maintenance, a red message appears when you simulate a swap)...

Well, the thing is to wait for their statement.