mmpool.org - 1.5% fee DGM/PPS - tx fees/vardiff/merge mine/tor

[willi9974]

and it's gone from 1AsghDJnwh7VokUonnfwgoAy6f2vRKHhHF.

https://www.blockchain.com/explorer/addresses/btc/1AsghDJnwh7VokUonnfwgoAy6f2vRKHhHF

I hope it was the pool owner, but it looks a bit strange in chunks of 0.5 btc.
And no message in news at the pool web page.

this doesn't look good at all. if it were the pool operator, i would assume he pays it directly from there or moves everything to another wallet where he then pays it out.

Denomination of 0.5 BTC each clearly gives the impression of hiding.

here you can take a look (and play with the Depth and Detail level)
https://explorer.bitquery.io/bitcoin/address/1AsghDJnwh7VokUonnfwgoAy6f2vRKHhHF/graph

Looks not really normal

[1714282144]

1714282144

[1714282144]

1714282144

[1714282144]

1714282144

[philipma1957]

Well it was nice while it lasted.

My sympathies to the big player that had 6 coins coming to him.

I am not pulling my 40th off the pool for now. Hoping for good news.

But when that address issue showed up with 6 digits matching it reeked of a key logger hack.

I also know the pool operator could have made an address with first six digits and then claim he was hacked.

Either way it sucks.

To anyone that like a small pool you could try


https://pool.laurentiapool.org/#/

he allows up to 12 miners.

you have to get a password to mine

https://pool.laurentiapool.org/#/miners
https://pool.laurentiapool.org/#/work

I am address 146UJM...gx3 if we hit today I get 2 + coins

this pool was setup by ck for minefarmbuy

https://minefarmbuy.com




@mmpool if you are fixing issues I apologize and will delete info

I am assuming mmpool is dead even though I am still mining there.


Now if mmpool is legit and I hit the block with my s17 I am also assuming the address issue is fixed.

Which would mean most coins would go to the top guy not me in number 4 spot.
We would also know if mmpool is the 'bad' guy  since the coins should go to the correct address. Since if he is honest he fixed the hack. He is freaking out he was hacked and lost a whole block to a scum bag.

Estimated Payout (top 20 submitters)

Rank   Id   DGM Estimate   Shares   Rate (MHash/s)
1   06ae84f6   4.92109358   1,160,041,864,416   0
2   0d3cd883   0.06905712   257,973,315,451   0
3   3678e892   0.01304203   47,673,450,988   0

4   1b7093a2   0.00567845   4,658,492,498   40,849,080

5   b0de62e3   0.00123914   4,534,845,786   0
6   b7b0ebdb   0.00047790   1,748,238,954   0
7   2f20f218   0.00043308   1,580,776,300   0
8   3f064418   0.00042536   1,552,811,302   0
9   6fec3c50   0.00024149   887,449,410   0
10   2d0ba29d   0.00557090   340,598,642   2,250,390
11   9b2d2a54   0.00008435   307,143,363   0
12   cb41c58e   0.00005740   217,874,719   0
13   6dae381a   0.00012285   42,000,398   224,584
14   67076efc   0.00816741   20,637,082   140,274
15   7b0f1bf1   0.00000200   7,281,075   0
16   bae498b0   0.00000118   4,290,371   0
17   12cdc2fb   0.00000050   1,827,525   0
18   779e0917   0.00002089   1,375,104   0
19   203ea097   0.00000559   1,115,264   9,010
20   3b2803f9   0.00000099   382,030   2,183

Ahh a downer for all during the holiday season.




But remember the poor souls in the Ukraine they are in a fucking war. Facing real hardship and pain.
Both the Russian soldiers and the Ukrainian people are suffering as I type.

To mmpool I hope you can let us know if you were hacked or frankly if you decided to exit in this manner.
I want to thank you for close to a decade of mining without any issues of payment. Sad if it ends this way.

[Sledge0001]

Well it was nice while it lasted.

My sympathies to the big player that had 6 coins coming to him.

I am not pulling my 40th off the pool for now. Hoping for good news.

But when that address issue showed up with 6 digits matching it reeked of a key logger hack.

I also know the pool operator could have made an address with first six digits and then claim he was hacked.

Either way it sucks.

To anyone that like a small pool you could try


https://pool.laurentiapool.org/#/

he allows up to 12 miners.

you have to get a password to mine

https://pool.laurentiapool.org/#/miners
https://pool.laurentiapool.org/#/work

I am address 146UJM...gx3 if we hit today I get 2 + coins

this pool was setup by ck for minefarmbuy

https://minefarmbuy.com




@mmpool if you are fixing issues I apologize and will delete info

I am assuming mmpool is dead even though I am still mining there.


Now if mmpool is legit and I hit the block with my s17 I am also assuming the address issue is fixed.

Which would mean most coins would go to the top guy not me in number 4 spot.
We would also know if mmpool is the 'bad' guy  since the coins should go to the correct address. Since if he is honest he fixed the hack. He is freaking out he was hacked and lost a whole block to a scum bag.

Estimated Payout (top 20 submitters)

Rank   Id   DGM Estimate   Shares   Rate (MHash/s)
1   06ae84f6   4.92109358   1,160,041,864,416   0
2   0d3cd883   0.06905712   257,973,315,451   0
3   3678e892   0.01304203   47,673,450,988   0

4   1b7093a2   0.00567845   4,658,492,498   40,849,080

5   b0de62e3   0.00123914   4,534,845,786   0
6   b7b0ebdb   0.00047790   1,748,238,954   0
7   2f20f218   0.00043308   1,580,776,300   0
8   3f064418   0.00042536   1,552,811,302   0
9   6fec3c50   0.00024149   887,449,410   0
10   2d0ba29d   0.00557090   340,598,642   2,250,390
11   9b2d2a54   0.00008435   307,143,363   0
12   cb41c58e   0.00005740   217,874,719   0
13   6dae381a   0.00012285   42,000,398   224,584
14   67076efc   0.00816741   20,637,082   140,274
15   7b0f1bf1   0.00000200   7,281,075   0
16   bae498b0   0.00000118   4,290,371   0
17   12cdc2fb   0.00000050   1,827,525   0
18   779e0917   0.00002089   1,375,104   0
19   203ea097   0.00000559   1,115,264   9,010
20   3b2803f9   0.00000099   382,030   2,183

Ahh a downer for all during the holiday season.




But remember the poor souls in the Ukraine they are in a fucking war. Facing real hardship and pain.
Both the Russian soldiers and the Ukrainian people are suffering as I type.

To mmpool I hope you can let us know if you were hacked or frankly if you decided to exit in this manner.
I want to thank you for close to a decade of mining without any issues of payment. Sad if it ends this way.

Yeah unfortunately this has all the tell-tell signs of operator shenanigans or what is looking more like a hack...

Not cool on either account... Luckily for me I was only owed about 40-50 bucks worth of coin...

It does make me really reconsider mining to any pool that has a "pool wallet" however.

As for Laurentia pool I tried to reach out to then and offered up 1.2PH and that wasn't good enough for them so meh to them.. Wish them the best with their total of 200TH of hashrate currently.

Back on topic... Still hopeful that this gets resolved for MMPools sake.

[ctya]

The transactions look like a coin mixer.  That would imply someone is covering their tracks and the block reward was stolen from mmpool.

The theft or loss of pool funds is not the miners' responsibility.
Miners pay a 1.5% administration fee in exchange for the administration of the pool and its processes.

There is currently a debt owed to the miners. 
unfortunately, that means that it is unlikely that you will be paid for the hashes you are still contributing to the pool.

If the pool takes this loss, then the pool's financial position is weakened by that loss. 
There was a time when mmpool had a cold wallet and would pay reward shortages out from the cold wallet. 
That hasn't happened this time.  It is growing more and more unlikely.

If the miners share the loss and remove the last block from the pool history, then we have an oversized DGM payout in the next round. 
Again, it is not likely mmpool can pay more than the block reward since mmpool appears to be insolvent now.

If the last block's rewards are paid, then we know mmpool still has reserve funds from the DGM payments.  Confidence will be restored. 

For that reason, I have stopped all mining at mmpool until the last block's rewards are paid. 

[philipma1957]

I am still running 1 s17 hoping for a miracle , also driving to the farm to switch out the miner is a long trip.

I will likely go to the farm on tues after Christmas and switch it out then.

[kano]

...
The theft or loss of pool funds is not the miners' responsibility.
Miners pay a 1.5% administration fee in exchange for the administration of the pool and its processes.
...

Interesting ... the last pool to lose a block (which was the administration's fault)
members of the community paid him to continue running the pool when he wanted to quit

[philipma1957]

...
The theft or loss of pool funds is not the miners' responsibility.
Miners pay a 1.5% administration fee in exchange for the administration of the pool and its processes.
...

Interesting ... the last pool to lose a block (which was the administration's fault)
members of the community paid him to continue running the pool when he wanted to quit

IIRC He paid the guy the coin owed and was depressed did not want to do it again. We encouraged him to stay.

The operation of this pool is not offering to pay the top guy his 6 btc.


It is a bit different set of circumstances.

[kano]

LOL - right - depressed - yeah I think that's a load of crap - he'd spent all his time working on translating animated under-aged porn and didn't give a crap about the pool.
The guy had 1000's of BTC made from writing pool code and cgminer.
Personally I'd only given him a bit over 100 BTC.

He paid him 0.057 BTC - not 6.25 BTC that the block was. Worse it was block 629776 so he should have got 12.25 BTC

Payment
https://btc.com/84e2faf3615923c2c5591fd2a91fa62e07effca4c4a277fd45221d0faae03236

Block finder states his address is 1PBchjo22ED1BYdApt6xkyi5vRaiEcpCKn
https://bitcointalk.org/index.php?topic=5237323.msg54410687#msg54410687

Post somehow saying that it was "mostly" his fault - lol - who else is to blame?
https://bitcointalk.org/index.php?topic=5237323.msg54405218#msg54405218

Post about the miner seeing the block that the "pool didn't notice"
https://bitcointalk.org/index.php?topic=5237323.msg54403667#msg54403667
(though the miner said his miner said it was 2 blocks - which is very unlikely but not impossible)

[Sledge0001]

Okay then 

Let's hope the admin of the site provides an update regardless.

[paid2]

News are not good guys...

2022-12-23
Unfortunately it looks like the pool backend has been comprimised and the address in the coinbase transaction was changed to one under the attackers control. It looks like they generated an address to be similar to the original pool address. The coins haven been moved from that address, possibly to a coin mixer based on the look of the transactions. The configuration files of the pool were last changed in December 2021, a couple of days after the server experienced a reboot. I'm working on the theory that they were changed by the attacker then. I'm currently analysing the server looking for evidence. There will likely be downtime at some point as I investigate. I'm considering options on how to handle the situation and will post here after discussion with other parties involved in the pool operation and miners. If the attacker is reading this, I implore them to consider returning the funds. This is a small pool operation with a few miners, and the loss of these funds is devastating.

http://mmpool.org/news


 

[philipma1957]

Well I am still pointing a s17 and while it would not save the lost block if it hit it would help out a bit.

I will keep it pointed til 2023


Estimated Payout (top 20 submitters)

Rank   Id   DGM Estimate   Shares   Rate (MHash/s)
1   06ae84f6   4.92036759   1,160,041,864,416   0
2   0d3cd883   0.06904693   257,973,315,451   0
3   3678e892   0.01304011   47,673,450,988   0

4   1b7093a2   0.00657230   7,992,124,585   41,317,059. <<<<<< me



5   b0de62e3   0.00123896   4,534,845,786   0
6   b7b0ebdb   0.00047783   1,748,238,954   0
7   2f20f218   0.00043301   1,580,776,300   0
8   3f064418   0.00042530   1,552,811,302   0
9   6fec3c50   0.00024145   887,449,410   0
10   2d0ba29d   0.00562149   532,162,442   2,230,036
11   9b2d2a54   0.00008433   307,143,363   0
12   cb41c58e   0.00005739   217,874,719   0
13   6dae381a   0.00012783   60,627,806   227,869
14   67076efc   0.00816865   29,758,726   143,438
15   7b0f1bf1   0.00000200   7,281,075   0
16   779e0917   0.00002180   4,803,968   0
17   bae498b0   0.00000118   4,290,371   0
18   12cdc2fb   0.00000050   1,827,525   0
19   203ea097   0.00000577   1,820,928   7,788
20   3b2803f9   0.00000105   609,247   0

[ctya]

Well I am still pointing a s17 and while it would not save the lost block if it hit it would help out a bit.

I will keep it pointed til 2023

I think it's possible for mmpool to pay out all pending rewards over the next several hit blocks.

So I hope you hit it!
... and I hope mmpool pays the pending rewards.

[ctya]

http://mmpool.org/news

2022-12-28
I've received an email from someone claiming responsibility for stealing the coins, with proof that they obtained access to the server through an exploit. I'll post an update here about the correspondence with them soon. The pool server is currently down while the software and setup is audited.

[philipma1957]

maybe he can do something to fix what happened.

[paramind22]

I wonder how much time and study the admin put into cybersecurity. 

[paid2]

maybe he can do something to fix what happened.

Personally, I can't find a scenario where the hacker would find it beneficial to return the funds.

On my end, I still doubt the administrator's good faith. It seems completely insane to not check the address associated with the coinbase after a random server reboot.

I'm waiting to see, but I'm not optimistic.

[philipma1957]

maybe he can do something to fix what happened.

Personally, I can't find a scenario where the hacker would find it beneficial to return the funds.

On my end, I still doubt the administrator's good faith. It seems completely insane to not check the address associated with the coinbase after a random server reboot.

I'm waiting to see, but I'm not optimistic.

Ultimately the pool op is responsible. One miner lost just over 6 coins and maybe the reward of 0.18 also belongs to him.

Its close to $100,000 loss for that miner. The rest of us lost maybe 1 or 2k split between us.

My loss is 0.011 just under 200 usd and I was not on the pool when the block was hit so I did not get the reward.

As for the hacker giving the coin back you never know. Stranger things have happened.

My s17 is pointed to the pool but is rolling over at the moment to the secondary pool.

[o_solo_miner]

It is very unlikley a hacker would return the coins after sending them through a mixer, what cost them also some amount of the coins.
If they realy intend to return the btc, they had just contacted the pool owner and let the btc sit where they are.
I think this swedish pool is nuts and the money is gone.
I never understand why the op refused to post on BCT any longer.

[ctya]

I have emailed admin@mmpool.org several times since 27 December 2022 and I have received no reply since then.

The admin assured me in 2021 that the pool would remain operational and encouraged more mining.  I rented mining rigs and found the majority of the blocks in 2021.
Those rewards were paid out as promised.  The admin encouraged more mining

This year, I mined more and doubled down in the last quarter to try to find a block before the end of the year for this pool.
It was a long and difficult round with low luck.  It seemed to go on forever.  I went in deeper.
A block was found and I was elated to get some of the year-long investment back... or so I thought.

We were robbed before the payout happened.
The admin put the pool on hold for an audit and then dropped communications.

I have been patient, but this is fraud.
I don't have any other course of action: I will find the admin in person and continue the conversation.   
I emailed the admin to say exactly that message today.  Still no reply.   

So, backing up to last year...
On 27 December, I received this final message for 2022.  At the time I agreed to keep it confidential while the admin worked out the details.  But since I have had no reply, here are all the details of that final message.  The typos and removed information was exactly as I received it.  The facts don't match what actually happened since the alleged perpetrator talks about 2016 and 2017 and this all went down between December 2021 and December 2022.  But anyway, here it is.

I have been contacted by the person who took the pool funds today. They have provided proof that they accessed the server. They apparently gained access a long time ago, and waited for the opportunity to obtain the funds. Here's part of their communication:

===
The btc server was accesed first with user [removed}, I checked that wallet that was stored local and I see 0 transactions.
I copied that wallet and go away for months.
I keeped an eye on that public addreses from pool and I see no transactionas from 2016 or 2017 and I go away.
after some time I come back and check again that address and I see some coinbase transactions from some block mined.
I come back to that btc server and I tried to modified the pool config file but no admin privilege and I tried to got admin privilege with a linux kernel expl.
but was a btc server crash first time and then the root privilege escalation was succesful.
I put a new mining address and keep waiting months.
after a lot of time in a day I received a mining pool notification and bang the block mined.
==

They say the funds are "in a safe place" and asked my to email them back for details which I have done today. Please keep the specific details above confidential for now while I communicate with them. I'll let you know as soon as they reply, or within 24 hours if I haven't heard back.

Somebody please quote this post for me. 
I will apologize if I am so lucky to be wrong about this fraud ... or I will find the admin and discuss it in person.


        ctya
(Calmer Than You Are )

[NotFuzzyWarm]

Did better than a quote: archived this page along with screenshot at Archive.org  https://web.archive.org/web/20230106012819/https://bitcointalk.org/index.php?topic=559011.2000