Bitcoin Forum
November 01, 2024, 12:59:07 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2] 3 »  All
  Print  
Author Topic: [ANN][QB] Malicious Quarkbar altcoins tracked down and eliminated  (Read 6599 times)
derrend
Hero Member
*****
Offline Offline

Activity: 707
Merit: 505



View Profile WWW
May 23, 2014, 10:16:43 PM
 #21

rogue dev must be gutted he woke up 120btc poorer this morning Cheesy
Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 23, 2014, 10:23:51 PM
 #22

rogue dev must be gutted he woke up 120btc poorer this morning Cheesy

opening his wallet to this picture:



Co-Founder and Managing Partner of Block Bastards
derrend
Hero Member
*****
Offline Offline

Activity: 707
Merit: 505



View Profile WWW
May 23, 2014, 10:41:56 PM
 #23

here is the url link to block 1 for anybody who may be interested
http://explorer.cryptocoinrevival.com/b/5UZeBvVRE
derrend
Hero Member
*****
Offline Offline

Activity: 707
Merit: 505



View Profile WWW
May 23, 2014, 10:47:34 PM
Last edit: May 24, 2014, 12:45:15 AM by derrend
 #24

opening his wallet to this picture:
Shame we couldn't find his ID, an IP address or anything would have been good. This guy is prob responsible for the Asia coin fraud plus who knows how many others Sad, Imagine if quarkbar had the rogue dev arrested, now that would also be news worthy Grin
BitcoinNational
Legendary
*
Offline Offline

Activity: 1470
Merit: 1010


Join The Blockchain Revolution In Logistics


View Profile
May 24, 2014, 01:07:35 AM
 #25

YOU BOYS ARE F*****G LEGENDS, NO OTHER WORD FOR IT, LEGENDS, CRYPTO HEROES IN FACT, CONGRATULATIONS LADS YOU NEVER FAIL TO SURPRISE  Grin Grin EPIC.

 Grin agree

                ▄██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
           ▄████▄▄▄▄▄██████████████▄
         ▄████████████████▄▄▄███████
       ▄█████████████████████████████
     ▄████████▀▀▀▀▀▀▀███████████████▄
   ▄████████▀█▀███▀        ███████████
 ▄████████▀███             ███████████
▄███████▀████                ██████████▄
███████████▀                  ██████████
 ██████▄████                   ██████▄███
  ██████▄████                 ▄█████████
   ██████▄████              ▄██████████
    ██████▄█████▄▄▄▄▄     ▄████████▀
     ██████▄████████████▄████████▀█▀██▀
      ██████████▄▄▄▄▄▄▄████████▀█▀██▀
       ██████████████████████▀█▀█▀
         ▀▀▀▀▀▀███████████▀▀▀▀
                      ▀██▀▀
─────────────────
Revolutionized.  ──


█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ █████████████▀█████ ██
██ ███ ▀█████▀      ▀█ ██
██ ███     ▀▀      ▐██ ██
██ ███▌            ███ ██
██ ████▌          ▄███ ██
██ ██████       ▄█████ ██
██ ████▄▄▄▄▄▄▄████████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀





█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ ████████████▀▀▀████ ██
██ ████████▀▀     ████ ██
██ █████▀    ▄▀  ▐████ ██
██ ██▀     ▄▀    ▐████ ██
██ ████▄▄ █▀     █████ ██
██ ██████ ▄▄█   ▐█████ ██
██ ████████████ ██████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.WHITEPAPER.
ANN Thread
Reddit

█████
██
██ █
██ █
██ █
   █

  ─────────────  Join
SMARC token ICO

█████
   ██
 █ ██
 █ ██
 █ ██
 █
YarkoL
Legendary
*
Offline Offline

Activity: 996
Merit: 1013


View Profile
May 25, 2014, 08:19:24 AM
Last edit: May 25, 2014, 08:59:05 PM by YarkoL
 #26

Epic stuff!

I'd like to know more about how the scam was accomplished.
From what I understand the batch of coins were not granted as block
reward, so then they were in transaction output?

It worries me how many other altcoins have similar scam
in them.

“God does not play dice"
Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 25, 2014, 08:24:05 AM
 #27


Epic stuff!

I'd like to know more about how the scam was accomplished.
From what I understand the batch of coins were not granted as block
reward, so then they were in transaction output?

It worries me how many other altcoins have similar scam
in them. It looks like all coins should be passed thru an independently
built block explorer check to find out..

We noticed a premine when we finally finished the explorer. Seems to be connected to beecoin and shacoin at the least.

Co-Founder and Managing Partner of Block Bastards
Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 25, 2014, 08:26:14 AM
 #28

ANNOUNCEMENT

We have another announcement this Monday that is very positive.  :-)

Co-Founder and Managing Partner of Block Bastards
YarkoL
Legendary
*
Offline Offline

Activity: 996
Merit: 1013


View Profile
May 25, 2014, 08:36:42 AM
 #29


We noticed a premine when we finally finished the explorer. Seems to be connected to beecoin and shacoin at the least.

They shared a snippet of suspicious code in the form of seemingly innocent but
unncecessary function. Shacoin used that function in concealing the true
money supply when requested thru RPC, but QuarkBar did not as far as I could see.

But since the premine was found via block explorer and not in source code, it
would be interesting to know how could it have been concealed so that it passed the standard
checking procedures in the client.

“God does not play dice"
micryon
Full Member
***
Offline Offline

Activity: 154
Merit: 100


View Profile WWW
May 25, 2014, 08:44:24 AM
 #30

fyi i posted about the analysis of the code a few weeks ago.. you can look for the signature in other coins just doing a github search.. unfortunately the thread got lost in the sea of other stuff: https://bitcointalk.org/index.php?topic=595056.0


VTC: Vi5NxyF6FPCCEQDrsDcA34P8pXe1Yck21y
PDR: PP3EQsV3oX9bBkjpsnESguMHz3tfMqHXhy PlanetDollar
Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 25, 2014, 12:06:56 PM
 #31


We noticed a premine when we finally finished the explorer. Seems to be connected to beecoin and shacoin at the least.

They shared a snippet of suspicious code in the form of seemingly innocent but
unncecessary function. Shacoin used that function in concealing the true
money supply when requested thru RPC, but QuarkBar did not as far as I could see.

But since the premine was found via block explorer and not in source code, it
would be interesting to know how could it have been concealed so that it passed the standard
checking procedures in the client.

We already got rid of the code, but we had no way to see the true coin count, because there was no explorer. Once we had it, we could see there were way too many coins. The current coin count of 10.9 million represents the total amount - frozen wallets.

Co-Founder and Managing Partner of Block Bastards
sylwt
Full Member
***
Offline Offline

Activity: 140
Merit: 100


View Profile
May 25, 2014, 12:49:35 PM
 #32

what???
Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 25, 2014, 01:42:44 PM
 #33

what???

what what? Smiley

Co-Founder and Managing Partner of Block Bastards
YarkoL
Legendary
*
Offline Offline

Activity: 996
Merit: 1013


View Profile
May 25, 2014, 05:21:35 PM
Last edit: May 25, 2014, 05:32:03 PM by YarkoL
 #34

If the 15,482,256 Quarkbar were in block 1, I have hard
time understanding how could that block could be included
in the chain, since in the code the block reward is defined as 256 coins.

Consequently blocks that have different rewards
would have been rejected (by wallets and clients
built from the code at Github).

Maybe the hidden premine could be in the
genesis block (block 0) and then one could fork the
source but hardcode the block in the new version as well.

“God does not play dice"
dukektm
Hero Member
*****
Offline Offline

Activity: 690
Merit: 500


View Profile
May 26, 2014, 03:32:46 AM
 #35

Great news!!!! Grin

Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 26, 2014, 01:29:33 PM
Last edit: May 26, 2014, 01:42:06 PM by Jonesd
 #36

Update


Frozen scammer assets handed over to Quarkbar, Beecoin and Shacoin communities

When the Quarkbar developers managed to track down the malicious premine coins, they were also able to track the coins back to a trading account of Allcoin.com. Together with this exchange it was decided to freeze this account. Allcoin noticed the account was also used for selling Shacoin and Beecoin, so there is reason to believe the scam is also related to those coins.

Allcoin decided to hand over the frozen coins to the three communities. Each community will receive about 0.15 BTC that they can use to strengthen themselves.

The Cryptocoin Revival Foundation and Allcoin are very proud of getting the funds away from the scammer and give it backto where it belongs, the community.

The official statement can be found here.

Co-Founder and Managing Partner of Block Bastards
Stinky_Pete
Hero Member
*****
Offline Offline

Activity: 560
Merit: 500


View Profile
May 26, 2014, 01:43:57 PM
 #37

Awesome stuff! Thank you from a SHACoin miner.

Jonesd (OP)
Legendary
*
Offline Offline

Activity: 1876
Merit: 1014



View Profile
May 26, 2014, 01:45:38 PM
 #38

Awesome stuff! Thank you from a SHACoin miner.

You're welcome Smiley

Co-Founder and Managing Partner of Block Bastards
shursight
Hero Member
*****
Offline Offline

Activity: 728
Merit: 500


View Profile WWW
May 26, 2014, 03:14:28 PM
 #39

Very good for all three communities.  Smiley


++++++
+++++++   ++++++
+++++++  +++++++
++++++   +++++++
+++++  +++++++++
      ++++++++++     
+++++++  +++++++
+++++++   ++++++
++++++++  ++++++
++++++++   +++++
++++++++   +++++
+++++++

XRPNow
Ripple Price & News
XRP Price / Ripple News /
XRP Price Prediction

++     
++
++
++
++
++
++
++
++
++
++
++

COINDOO
Latest Blockchain and Cryptocurrency News   
Bitcoin News Today

++     
++
++
++
++
++
++
++
++
++
++
++

THECCPRESS
Blockchain & Cryptocurrency Tabloid
Blockchain News Today
popolite11
Sr. Member
****
Offline Offline

Activity: 882
Merit: 250



View Profile
May 26, 2014, 03:22:01 PM
 #40

good work , these coin are now no good.
Pages: « 1 [2] 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!