I was hacked (1170btc stolen) - 500btc max BOUNTY

[EvilDave]

Damn that absolutely blows... I really hope a miracle happens and the thief does something incredibly stupid to get himself revealed.

He may already have. In addition to the BTC theft, Klee also had 6 million NXT lifted, which the thief moved on to BTER.
BTER are being co-operative and have frozen the account, and I'd be very interested to see what sort of info they have logged for the thiefs trading account and if they are prepared to release it.....now that could be comedy gold.

Like I've said before....he can run, but hiding is gonna be a little bit more difficult.

[STT]

Srsly


For that amount of bounty you can probably phone some big guns on this.  Screw making yet another alt coin, people who know their stuff should be on this and probably not just this forum but an agency that can source/advertise relevant bodies

[BurtW]

Mixing report

Chunk of 539 BTC:  5.50% done

Chunk of 410 BTC:  9.51% done

Chunk of 221 BTC:  8.97% done

I do not know if the mixing service he is using releases the cleaned coins back to him in stages during the process or waits until they are all done before payout.

Someone out there sent user cp1 a 0.00924 BTC tip through the same mixing service.  If the person that sent the mixed tip to cp1 would just let us know which mixing service they used, then we would know which mixing service the thief is using.

They would have sent the tip to this address, through the same mixer:

https://blockchain.info/address/1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj

[KeyserSozeMC]

Mixing report

Chunk of 539 BTC:  5.50% done

Chunk of 410 BTC:  9.51% done

Chunk of 221 BTC:  8.97% done

I do not know if the mixing service he is using releases the cleaned coins back to him in stages during the process or waits until they are all done before payout.

Someone out there sent user cp1 a 0.00924 BTC tip through the same mixing service.  If the person that sent the mixed tip to cp1 would just let us know which mixing service they used, then we would know which mixing service the thief is using.

They would have sent the tip to this address, through the same mixer:

https://blockchain.info/address/1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj

https://www.google.rs/?gws_rd=cr,ssl&ei=9-TBU6-PFqqAywO9l4HwCA#q=1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj ( Check all results )

https://bitcointalk.org/index.php?action=profile;u=101205

[BurtW]

Someone out there sent user cp1 a 0.00924 BTC tip through the same mixing service.  If the person that sent the mixed tip to cp1 would just let us know which mixing service they used, then we would know which mixing service the thief is using.

They would have sent the tip to this address, through the same mixer:

https://blockchain.info/address/1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj

https://www.google.rs/?gws_rd=cr,ssl&ei=9-TBU6-PFqqAywO9l4HwCA#q=1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj ( Check all results )

https://bitcointalk.org/index.php?action=profile;u=101205

Yes, I know that the address 1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj belongs to cp1.  Is there something else you are trying to contribute?

What would be nice to know is what mixing service was used to send cp1 the small 0.00924 BTC ($6) tip.  That would help us because the same mixing service is being used by the thief.

cp1 is not related to the thief in any way.  The person that sent him the tip is not related to the thief in any way.  cp1 most likely does not know who sent him the tip.  The person that sent the tip would have to step forward and let us know which mixing service he used.

[horcoff]

sp1 is advertising bitmixer.io

[Sydboy]

I would be in tears. then cut myself repeatedly.
seriously.

poor OP. I feel their pain.

you lost 500,000$

Not sure how i would react if i was losing this amount.

[BurtW]

s cp1 is advertising bitmixer.io

After reading up on how bitmixer works I believe that it is the service the thief is using.  The payment to cp1 may in fact just be an affiliate or signature payment.  Thanks for noticing the signature.  Sometimes the most obvious things are missed (by me).

Trying to trace the coins through this mixer is a dead end.

Wow this bitmixer service is cheap: 

Our current fee is 0.5% plus 0.0005 BTC for every forward address.

So to mix the stolen 1170 coins and get back totally unrelated coins he only paid about 6 BTC!

[BurtW]

I got this message through PM and I thought my answer might be interesting to others:

hi,

what have You read about bitmixer?

I found more than 7 outputs sitting here 16R14EH4v8A9GPXkAAP8gcMFBA8oxA8nbY Provided klee with that info in PM

That address is well known with criminals on the Internet

That is expected.

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

His stolen coins will and are being used to make payouts for other people so that their input coins are unrelated to their outputs.  Since some criminals (besides him) are using the system then it is expected that some of the stolen coins will be used for payouts for some other criminals in the system to known criminal addresses.

However, the important point is that there is no way to trace our thief through this system because he has already been paid out by coins totally unrelated to anything we can trace from the inputs.

BurtW

[horcoff]

I think this address is one of bitmixer hot wallet so it is not a big secret now ) look at its dynamics from March.

Totally unrelated coins will go to several address or thousands of addresses?

[horcoff]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

[jonald_fyookball]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

There will always be mixing services on the darknet.  How about instead of suggesting more regulation,
we focus on education and security?

[KeyserSozeMC]

sp1 is advertising bitmixer.io

Someone out there sent user cp1 a 0.00924 BTC tip through the same mixing service.  If the person that sent the mixed tip to cp1 would just let us know which mixing service they used, then we would know which mixing service the thief is using.

They would have sent the tip to this address, through the same mixer:

https://blockchain.info/address/1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj

https://www.google.rs/?gws_rd=cr,ssl&ei=9-TBU6-PFqqAywO9l4HwCA#q=1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj ( Check all results )

https://bitcointalk.org/index.php?action=profile;u=101205

Yes, I know that the address 1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj belongs to cp1.  Is there something else you are trying to contribute?

What would be nice to know is what mixing service was used to send cp1 the small 0.00924 BTC ($6) tip.  That would help us because the same mixing service is being used by the thief.

cp1 is not related to the thief in any way.  The person that sent him the tip is not related to the thief in any way.  cp1 most likely does not know who sent him the tip.  The person that sent the tip would have to step forward and let us know which mixing service he used.

[BurtW]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

No, he already has his new coins.  His old coins are being cut up over time to be used to pay out other customers.  An interesting process to watch and track if you like that sort of thing.  But, totally pointless as far as tracking the thief of interest.

He is done mixing the coins.  We are just seeing the process of choping up his input coins into managable chunks for later use by the mixer as outputs for other customers.

How about this:

I believe it is one of the failings of the design of Bitcoin and the original work done by Satoshi that the Bitcoin network does not automatically mix all coins in all transactions!

That is the opposite of your opinion, expressed here:

authorities should ban mixing services or this services should know their customers!

[horcoff]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

Knowing their customer would defeat the purpose ...

As far as I understand, the purpose could be to hide Your money from other peers (old partners so on, who could explore blockchain), not from trusted 3rd party especially which does this hiding

And for honest person it is nothing to hide. For dummies You could always create several address and claime you sold btc for pizza )

PS. I believe governments will grow with idea to provide each citizen with official btc address and to oblige receiving salary there as well as paying taxes from there - it would be very convenient for them ) and no hiding from authorities as in the banking system

[BurtW]

As far as I understand, the purpose could be to hide Your money from other peers (old partners so on, who could explore blockchain), not from trusted 3rd party especially which does this hiding

And for honest person it is nothing to hide. For dummies You could always create several address and claime you sold btc for pizza )

PS. I believe governments will grow with idea to provide each citizen with official btc address and to oblige receiving salary there as well as paying taxes from there - it would be very convenient for them ) and no hiding from authorities as in the banking system

If you really believe that please post all of your bank account, savings account and other account numbers here so we can all see exactly how much you have in your accounts and exactly how much money you make.

Think.

Thanks.

[cp1]

Mixing report

Chunk of 539 BTC:  5.50% done

Chunk of 410 BTC:  9.51% done

Chunk of 221 BTC:  8.97% done

I do not know if the mixing service he is using releases the cleaned coins back to him in stages during the process or waits until they are all done before payout.

Someone out there sent user cp1 a 0.00924 BTC tip through the same mixing service.  If the person that sent the mixed tip to cp1 would just let us know which mixing service they used, then we would know which mixing service the thief is using.

They would have sent the tip to this address, through the same mixer:

https://blockchain.info/address/1TipMeWsx7KNoX6Lap3Vh3PM8B8EYuRJj

That's the weekly payment for my sig, which is for the Bitmixer.io mixing service.  So the hacker is using this service which must mix it with their own coins and pay their signature campaign from that pool.  You should contact the operator (BITMIXER.IO on these forums).

[horcoff]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

There will always be mixing services on the darknet.  How about instead of suggesting more regulation,
we focus on education and security?

In terms of security and usability (no offline if You use btc), I would provide such a scheme: 1) each btc exchange/mining pool - new email (prefferably with 2fa, but not obvious); 2) configuring resending messages from emails - mostly for approving payments; 3) Do not logging at that emails as well as do not receiving any other messages there, only from knowh btc services 4) establish 2fa for login at btc exchange/mining pool (with google auth saved and .zip encrypted at some mail with unsuspicious topic of letter sent to yourselves with zip included) 5) establish 3fa for withdrawals with sms code 6) some codes for emails back up in cold storage or in parolled zip at other email

[horcoff]

He put in all the stolen coins and got back totally unrelated coins, minus the fee.

No, less than 10% is processed to small chunks, other sit in 3 main addresses ( could find here https://blockchain.info/tree/60074944) but they will also go as new clients like sp1 will create enough demand on them ((( authorities should ban mixing services or this services should know their customers!

No, he already has his new coins.  His old coins are being cut up over time to be used to pay out other customers.  An interesting process to watch and track if you like that sort of thing.  But, totally pointless as far as tracking the thief of interest.

He is done mixing the coins.  We are just seeing the process of choping up his input coins into managable chunks for later use by the mixer as outputs for other customers.

How about this:

I believe it is one of the failings of the design of Bitcoin and the original work done by Satoshi that the Bitcoin network does not automatically mix all coins in all transactions!

That is the opposite of your opinion, expressed here:

authorities should ban mixing services or this services should know their customers!

You will see authorities fighting darkcoin for that reason )

[horcoff]

As far as I understand, the purpose could be to hide Your money from other peers (old partners so on, who could explore blockchain), not from trusted 3rd party especially which does this hiding

And for honest person it is nothing to hide. For dummies You could always create several address and claime you sold btc for pizza )

PS. I believe governments will grow with idea to provide each citizen with official btc address and to oblige receiving salary there as well as paying taxes from there - it would be very convenient for them ) and no hiding from authorities as in the banking system

If you really believe that please post all of your bank account, savings account and other account numbers here so we can all see exactly how much you have in your accounts and exactly how much money you make.

Think.

Thanks.

Haven't You heard about publicly available tax declarations? or real estate registries? The matter is You do not provide thieves with info where to steal money, just legalizing Your incomes in civilized society to spend them in this society. ON THE OTHER HAND Your living address should obviously be hidden. So we should protect our lives and health by hiding info - money should not be hidden, but accounted and smartly invested.