Bitcoin Forum
March 26, 2019, 01:38:52 AM *
News: Latest Bitcoin Core release: 0.17.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 ... 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 [629] 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 ... 2037 »
  Print  
Author Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency  (Read 4548504 times)
tacotime
Legendary
*
Offline Offline

Activity: 1484
Merit: 1000



View Profile
September 04, 2014, 07:04:27 AM
 #12561

I need to crash. Fluffypony and the other devs will be up soon and will continue diagnosing it.

My guess it that it's a buffer underflow/overflow code relating to the merkle tree code, but I'm not entirely sure. The crazy block that broke the network had the following idiosyncrasies:
- Normal coinbase
- 510 tx with 0.0000000000001 inputs and 0.000000000000 outputs (effective fee 0.000000000001)
- 2 tx at the end of the block with 2.0 inputs and 1.9999999999999 outputs

--> 513 tx total included, possibly overflowing a value related to the merkle tree tx calculation somewhere (for instance, if a binary merkle tree has two branches which are allowed to contain 256 tx each, and then when you get over 512 something bad happens, eg memory access somewhere there shouldn't be)

Now, the outputs of 0.0000000000001 that were used were produced 4 days ago, so it looks like the attackers were well aware of the bug, but needed to expand the block size to get all these outputs into a single block. To do so, they emulated normal pool payout transactions but added high mixin and tx_extra content to bloat the tx. These transactions were otherwise indistinguishable from pool tx payouts, aside from occasionally using strangely large inputs. To not raise suspicion, the tx mempool was not flooded by tx, but rather 4-10 new tx were submitted whenever a new block entered the network (so that the mempool didn't look suspiciously large). Our course, we recognized these as bizarre ealier in the day and were watching the blockchain like a hawk.

Overall, it appears it was an extremely well coordinated attack to exploit an unexpected engineering flaw in the handling of merkle trees. I still don't understand why it happened, but I'm already up way too late and I need to get some sleep.

Someone will pick up where I left off.

Code:
XMR: 44GBHzv6ZyQdJkjqZje6KLZ3xSyN1hBSFAnLP6EAqJtCRVzMzZmeXTC2AHKDS9aEDTRKmo6a6o9r9j86pYfhCWDkKjbtcns
Crypto Casino Since 2014
Level Up & Get Even More Rewards!
Daily Treasure Chest
& Much More
Roll Hunt
Rakeback
Blackjack
Jackpot
Dice
Slots
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1553564332
Hero Member
*
Offline Offline

Posts: 1553564332

View Profile Personal Message (Offline)

Ignore
1553564332
Reply with quote  #2

1553564332
Report to moderator
fluffypony
Donator
Legendary
*
Offline Offline

Activity: 1260
Merit: 1024


GetMonero.org / MyMonero.com


View Profile WWW
September 04, 2014, 07:05:28 AM
 #12562

I'm up and picking up from tacotime - just need 15 mins to orient myself.

nioc
Legendary
*
Offline Offline

Activity: 1610
Merit: 1008

out of the blue and into the black


View Profile
September 04, 2014, 07:07:45 AM
 #12563

On IRC they said that mining should be suspended so I shut down my miner.  We will be told when to restart.

If you don't know where you're going any road will get you there
Kuriso
Hero Member
*****
Offline Offline

Activity: 532
Merit: 500


View Profile
September 04, 2014, 07:09:56 AM
 #12564

It looks like Mintpal and HitBTC are both still actively trading as well as withdraws and deposits are open.
smooth
Legendary
*
Offline Offline

Activity: 2072
Merit: 1077



View Profile
September 04, 2014, 07:18:18 AM
 #12565

It looks like Mintpal and HitBTC are both still actively trading as well as withdraws and deposits are open.

Trading I can't do anything about. We've tried to contact those exchanges but haven't been able to.

However, I strongly recommend that you do not attempt to do deposits or withdraws

The block chain is a mess right now and there is no way to know what would happen to your coins.

Do not engage in any transactions at this time
NeuroticFish
Legendary
*
Offline Offline

Activity: 1792
Merit: 1174


There are no mistakes. Only opportunities wasted.


View Profile
September 04, 2014, 07:21:08 AM
 #12566

Yes, create a new wallet, preferably on an offline computer, write down the seed words it gives you, and write down the public address it gives you. That is your paper wallet. Send to the wallet using the public address. Use the seed words to access the coins from it by creating a new online wallet with the '--restore-deterministic' option.

Wow, great explanation! Though I knew about the deterministic option, I somehow thought that XMR has no such thing as paper wallet.
Now... let's push my luck.. and is there any way to actually know how much is on a paper wallet without restoring it and going online? (my guess is "no", but I already guessed wrong once).


* NeuroticFish continues to read, to understand what happened with the network last night

digicoin
Legendary
*
Offline Offline

Activity: 1106
Merit: 1000



View Profile
September 04, 2014, 07:23:10 AM
 #12567

Don't panic  Smiley It is just an accident
Eleonore
Full Member
***
Offline Offline

Activity: 126
Merit: 100


View Profile
September 04, 2014, 07:30:26 AM
 #12568

Don't panic  Smiley It is just an accident
Yeah,don't be panic and don't sell your nodes for such low price.holders will win.we will see.
mrcashking
Hero Member
*****
Offline Offline

Activity: 700
Merit: 500


View Profile
September 04, 2014, 07:32:33 AM
 #12569

https://twitter.com/petertoddbtc/status/507427225927708672   uhhh ohhh
acha
Jr. Member
*
Offline Offline

Activity: 51
Merit: 10


View Profile
September 04, 2014, 07:33:36 AM
 #12570

It looks like Mintpal and HitBTC are both still actively trading as well as withdraws and deposits are open.

Trading I can't do anything about. We've tried to contact those exchanges but haven't been able to.

However, I strongly recommend that you do not attempt to do deposits or withdraws

The block chain is a mess right now and there is no way to know what would happen to your coins.

Do not engage in any transactions at this time


Unfortunately, I'm attempt send XMR...
Simplewallet log:
2014-Sep-04 08:39:49.209510 Processed block: <861e91b6a4a4969017096828732d3b951eec297c9a62e4bf997815f034bbce75>, height 202631, 93(0/93)ms
2014-Sep-04 08:39:49.214501 Spent money: 0.100000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.214501 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.100000000000
2014-Sep-04 08:39:49.219492 Spent money: 0.400000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.220490 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.400000000000
2014-Sep-04 08:39:49.226479 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.226479 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.232467 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.232467 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.237458 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.237458 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.243446 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.244445 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.251442 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.251442 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.260415 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.260415 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.268398 Spent money: 0.300000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.268398 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.300000000000
2014-Sep-04 08:39:49.274388 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.274388 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.280376 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.280376 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.285366 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.285366 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.291356 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.291356 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.296345 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.296345 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.301336 Spent money: 0.300000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.301336 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.300000000000
2014-Sep-04 08:39:49.307325 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.307325 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.312315 Spent money: 0.500000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.313313 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.500000000000
2014-Sep-04 08:39:49.318303 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.318303 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.324293 Spent money: 0.500000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.324293 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.500000000000
2014-Sep-04 08:39:49.330281 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.330281 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.336269 Spent money: 0.300000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.336269 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.300000000000
2014-Sep-04 08:39:49.342258 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.342258 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.347255 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.347255 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.353238 Spent money: 0.300000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.353238 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.300000000000
2014-Sep-04 08:39:49.359226 Spent money: 0.200000000000, with tx: <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>
2014-Sep-04 08:39:49.359226 Height 202632, transaction <87beebbfde22c48f547799be2c4f4aee4ea377a989e98be4983e9a77989938bd>, spent 0.200000000000
2014-Sep-04 08:39:49.415120 Processed block: <4b9873cee9170be4965164e77c12240106981ddfe1d012d826d2854016bd3f0f>, height 202632, 203(0/203)ms

Go to http://monerochain.info/block/7adf9703a96d2867d4678d08cfc20c2a3c1109189ed07fe82f437858cfd49377 and see:

Block
Hash   7adf9703a96d2867d4678d08cfc20c2a3c1109189ed07fe82f437858cfd49377
Height   202631
Timestamp (UTC)   2014-09-04 05:57:25
Difficulty   1,239,873,341
Reward (XMR)   14.535049504847
Transactions   1
Block Size   255
Transactions
Hash   Amount (XMR)   Size
331a22ca068a051e2def936411d8999a6f92dd4547257b333e8f56a11aa1ed28    14.535049504847    255

That's all...

It is interesting, where is my 6 XMR hang out?
Sleepyx
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
September 04, 2014, 07:33:52 AM
 #12571

gah so i cant even trade it... shit happens i guess.

Trade crypto? Check out Quatloo Trader - https://bitcointalk.org/index.php?topic=711966.0
bigj
Full Member
***
Offline Offline

Activity: 198
Merit: 100



View Profile
September 04, 2014, 07:34:24 AM
 #12572

Don't panic  Smiley It is just an accident
Yeah,don't be panic and don't sell your nodes for such low price.holders will win.we will see.

Agreed.

Funny thing: The price of BBR is not (yet?) going up -- in face of the XMR attack.
drawingthesun
Legendary
*
Offline Offline

Activity: 1134
Merit: 1002


View Profile
September 04, 2014, 07:36:07 AM
 #12573


So what? The code base is brand new and needs work. Every Monero investor should know this.

Bitcoin was crap as a stack of cards at one point, it even had freaking goto loops in the code.
Labteck
Sr. Member
****
Offline Offline

Activity: 312
Merit: 250


View Profile
September 04, 2014, 07:40:35 AM
 #12574

Seems that Monero is totally broken.

▄████████████████████████████████████████████████████████▄
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
████████████████████  █████████████████████████████████████
███████████████████  ██████████████████████████████████████
██████████████████  ███████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
 ▀███████████████████████████████████████████████████████▀
       VIORCOIN[by_conty] ▄████████████████████████████████████████████████████████▄
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
████████████████████  █████████████████████████████████████
███████████████████  ██████████████████████████████████████
██████████████████  ███████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
██████████████████████████████████████████████████████████
 ▀███████████████████████████████████████████████████████▀
        Make International Calls
      Cheap and More Secure
mrcashking
Hero Member
*****
Offline Offline

Activity: 700
Merit: 500


View Profile
September 04, 2014, 07:41:36 AM
 #12575

not just monero but all cryptonote coins are at risk.
Peter Todd
Legendary
*
Offline Offline

Activity: 1106
Merit: 1001


View Profile
September 04, 2014, 07:42:28 AM
 #12576


So what? The code base is brand new and needs work. Every Monero investor should know this.

Bitcoin was crap as a stack of cards at one point, it even had freaking goto loops in the code.

Lets keep the record straight: Bitcoin v1.0 had significantly better code quality than Cryptonote does from what I've seen; I just checked and there weren't any goto statements in the codebase. Cleaning up this mess isn't going to be easy, although it certainly is doable.

I'd strongly suggest taking the good part of Cryptonote - the ring signatures - and porting them over to the Satoshi codebase. Monero could be re-released based on that much better codebase and the UTXO set ported over at the same time so all coin owners on the old system were coin owners on the new system.

ExtremeFacials.com
Member
**
Offline Offline

Activity: 191
Merit: 10


View Profile
September 04, 2014, 07:49:17 AM
 #12577


So what? The code base is brand new and needs work. Every Monero investor should know this.

Bitcoin was crap as a stack of cards at one point, it even had freaking goto loops in the code.

Lets keep the record straight: Bitcoin v1.0 had significantly better code quality than Cryptonote does from what I've seen; I just checked and there weren't any goto statements in the codebase. Cleaning up this mess isn't going to be easy, although it certainly is doable.

I'd strongly suggest taking the good part of Cryptonote - the ring signatures - and porting them over to the Satoshi codebase. Monero could be re-released based on that much better codebase and the UTXO set ported over at the same time so all coin owners on the old system were coin owners on the new system.

Cool idea, let's do that
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
September 04, 2014, 07:49:33 AM
 #12578

It looks like Mintpal and HitBTC are both still actively trading as well as withdraws and deposits are open.

Trading I can't do anything about. We've tried to contact those exchanges but haven't been able to.

However, I strongly recommend that you do not attempt to do deposits or withdraws

The block chain is a mess right now and there is no way to know what would happen to your coins.

Do not engage in any transactions at this time

I got in touch with freeworm and he says he froze XMR at bter
Let me know when it is all clear to resume

James

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
jpouza
Legendary
*
Offline Offline

Activity: 1442
Merit: 1005


View Profile
September 04, 2014, 07:51:19 AM
 #12579

Don't panic!

Wow! Bittrex also disabled monero wallet and market as safe measure.
dnaleor
Legendary
*
Offline Offline

Activity: 1442
Merit: 1000


Want privacy? Use Monero!


View Profile
September 04, 2014, 07:52:36 AM
 #12580


So what? The code base is brand new and needs work. Every Monero investor should know this.

Bitcoin was crap as a stack of cards at one point, it even had freaking goto loops in the code.

Lets keep the record straight: Bitcoin v1.0 had significantly better code quality than Cryptonote does from what I've seen; I just checked and there weren't any goto statements in the codebase. Cleaning up this mess isn't going to be easy, although it certainly is doable.

I'd strongly suggest taking the good part of Cryptonote - the ring signatures - and porting them over to the Satoshi codebase. Monero could be re-released based on that much better codebase and the UTXO set ported over at the same time so all coin owners on the old system were coin owners on the new system.

what about the bug that created billions of BTC?

Searching for a trusted escrow service? Check my trust. I use a Trezor device for my escrow services, so your coins are safe. Fee: 0.5% or 0.05 BTC, whichever is lower
I support the largest public transparent p2p ledger Bitcoin (16TwXyEmpz7xKHbyVufZECXGFmUH9wHUyW) and the best private fungible digital cash Monero (dnaleor.weuse.cash)
Cetere mi opinias ke Dasho estas detruenda.     |     1Credit - Fair emission, better than BTC > CLCqECaYpCahgKRsXJiVBzgsiz57ZHfr4u
Pages: « 1 ... 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 [629] 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 ... 2037 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!