ANN: [OPAL] | POS | Secure Messaging |NO ICO

[bassguitarman]

OPAL PRESS RELEASE BLOCK CHAIN ROLLBACK


   Since its inception, OPAL has made significant strides to becoming a valuable asset to the cryptocoin community. An ambitious development team backed by a strong community has proven to be and will continue to be a cornerstone in the continued success of OPAL. With that being said, the OPAL team has found that a user made a malicious post within the OPAL ANN thread which included links to a manipulated version of the wallet. This wallet installs a backdoor which steals wallet.dat files from not only the OPAL wallet, but other cryptocoin wallets as well. Additionally, the user posted links to wallet downloads in other Bitcointalk threads. These downloads are also assumed to be malevolent. The hacker has stolen approximately 17% of the total OPAL coin supply, which is enough to attack the block chain. In light of this, a critical decision has been made by the community to roll back the blockchain, thereby eliminating the possibility of such an attack and to prevent further damage. The OPAL team thanks the community for acting promptly and supporting the continuing growth of OPAL.

   Please remember to only download wallets from the website www.opal-coin.com or download and complie the source yourself, which is available at https://github.com/OpalCoin/OpalCoin.

If there are any questions or concerns, please contact the OPAL team at support@opal-coin.com or on the IRC channel freenode #opalcoin.

The OPAL Team

Vote results are here: https://docs.google.com/spreadsheets/d/1ufM1_g_NcOTjZm_KjjIHaz9i83OhvOLx-RrhU93Ih_w/edit?usp=sharing

It was 73-41 at time of decision

[PhilipMorris]

OPAL PRESS RELEASE BLOCK CHAIN ROLLBACK


   Since its inception, OPAL has made significant strides to becoming a valuable asset to the cryptocoin community. An ambitious development team backed by a strong community has proven to be and will continue to be a cornerstone in the continued success of OPAL. With that being said, the OPAL team has found that a user made a malicious post within the OPAL ANN thread which included links to a manipulated version of the wallet. This wallet installs a backdoor which steals wallet.dat files from not only the OPAL wallet, but other cryptocoin wallets as well. Additionally, the user posted links to wallet downloads in other Bitcointalk threads. These downloads are also assumed to be malevolent. The hacker has stolen approximately 17% of the total OPAL coin supply, which is enough to attack the block chain. In light of this, a critical decision has been made by the community to roll back the blockchain, thereby eliminating the possibility of such an attack and to prevent further damage. The OPAL team thanks the community for acting promptly and supporting the continuing growth of OPAL.

   Please remember to only download wallets from the website www.opal-coin.com or download and complie the source yourself, which is available at https://github.com/OpalCoin/OpalCoin.

If there are any questions or concerns, please contact the OPAL team at support@opal-coin.com or on the IRC channel freenode #opalcoin.

The OPAL Team

Damn. huge hit on my investment. Did the majority of people vote Yes in the petition? Since you say; 'a critical decision has been made by the community'? Can I see the results of the petition somewhere ?

[scam_exposer]

OPAL PRESS RELEASE BLOCK CHAIN ROLLBACK


   Since its inception, OPAL has made significant strides to becoming a valuable asset to the cryptocoin community. An ambitious development team backed by a strong community has proven to be and will continue to be a cornerstone in the continued success of OPAL. With that being said, the OPAL team has found that a user made a malicious post within the OPAL ANN thread which included links to a manipulated version of the wallet. This wallet installs a backdoor which steals wallet.dat files from not only the OPAL wallet, but other cryptocoin wallets as well. Additionally, the user posted links to wallet downloads in other Bitcointalk threads. These downloads are also assumed to be malevolent. The hacker has stolen approximately 17% of the total OPAL coin supply, which is enough to attack the block chain. In light of this, a critical decision has been made by the community to roll back the blockchain, thereby eliminating the possibility of such an attack and to prevent further damage. The OPAL team thanks the community for acting promptly and supporting the continuing growth of OPAL.

   Please remember to only download wallets from the website www.opal-coin.com or download and complie the source yourself, which is available at https://github.com/OpalCoin/OpalCoin.

If there are any questions or concerns, please contact the OPAL team at support@opal-coin.com or on the IRC channel freenode #opalcoin.

The OPAL Team

Epic Fail

[m30188]

How far back does the rollback go?

[PhilipMorris]

I really think you guys shouldnt rollback. The odds of the hacker attacking the blockchain are very small. This is far from easy. The damage you guys are doing to Opal will eventually cause it to decline and decline and die in the end. Really sucks for me as an investor.

I also think that by far the most investors in Opal havent even seen the petition yet. Especially if they didnt lose funds. The outcome is irrelevant.

[Scallywag]

Opal has my support , i will not sell whatever happens. Rollback is the way to go and opal wil come back bigger and better.

[m30188]

Actions need consequences. Otherwise, we're no better than bailed-out bankers.

[drm]

I support opal and will remain to do so, and believe tech and community will prevail.

[scam_exposer]

Opal has my support , i will not sell whatever happens. Rollback is the way to go and opal wil come back bigger and better.

Of course you do.  You obviously had your coins stolen.

Decentralization

Centralization

[PhilipMorris]

Im still behind Opalcoin aswell. I understand this is a very hard choice for the opal team. Best of luck!

[Voidlord]

"malwares bytes detects the malware as "Backdoor.Agent.SBFGen"


This Backdoor or another affiliated agent may reload itself after a remove

Steps to clean your desktop:

Download Malwarebytes. (go to www.malwarebytes.org check your url field has exactly this url)
while installing, uncheck the "i want to use for free Malwarebytes premium for x days...)
Double click and update it.

Reboot with safe mode choose the simple Safe mode (Without NETWORKING)
if you used USB drive while being infected, plug the USB and start a complete scan
Fix all entries (PUP/Malware/Trojan/backdoor...) except maybe your miner software cgminer/sgminer

for those who were infected AND after the remove/reboot from Malwarebytes (under the safe mode):
check if Malwarebytes re-detect it or not (Re-scan)

if yes, you could try combofix, reboot (normal mode) Download it from bleepingcomputer
Save it to your desktop.

Note: Windows 8.1 and Windows 2000 are NOT supported by ComboFix
(i.E: XP, Vista, Seven and windows 8 is supported)

If you store files here:
-Temporary Internet Files
-Temp Folder
-Windows Recycle Bin
and want to keep it, move them to a safer location before the combofix scan. (remember to replace them after the scan)

You MUST close all open Windows.
Turn off Antivirii, antimalware residents, windows update, java update... other runnning programs.
(remember to turn them on after the scan)

Run Combofix, Please note: Be Patient, dont touch your computer untill been asked by combofix, possibly for:
-the installation of the windows recovery console (click yes)
-the scan (Click 'Yes' to continue scanning for malware...)

Combofix will disconnect your computer from the Internet and it will change your clock format (after the scan it will restore them.)
You will see around 35 to 50 stages, be patient.

The Find3M windows will stay a long time, Again, Be patient.

Then a new screen appear telling you the combofix report, will be located at C:\ComboFix.txt
usefull if you want to have further analyse, you can post this log in the dedicated forum of bleepingcomputer, majorgeeks, Malwareremoval.com

When you are sure your PC is clean, you can uninstall Combofix:
For Vista/seven/8: In the Search field, type Combofix /uninstall
(type a space between "Combofix" and "/uninstall") then press enter.

For XP: click start then Run, in the Run field, type Combofix /uninstall
(type a space between "Combofix" and "/uninstall") then press enter.

Reboot (safe mode) and run a Malwarebytes full scan. You should have wipe the backdoor and any other dangerous hack.
At this point YOU MUST CHANGE ALL YOUR PASSWORDS.

hope it helps

[Coinler]

any chance bittrex can resume trading in the meantime and maybe just keep deposits and withdrawals frozen? how long can we expect to resume trading? i have btc stuck in orders on bittrex i could use to generate profits elsewhere in the meantime.

[toldy]

I fully support the rollback. If anyone can make this work, is the Opal dev's and community.

People, please scan your computers fully before the rollback takes place.

We have to design a procedure where someone's wallet.dat was stolen and it was not protected with a passphrase.  If we roll back, doesn't the hacker still have the privkeys to the addresses stored in the wallet.dat?

Let's do this patiently and methodically.

[MadGhost]

any chance bittrex can resume trading in the meantime and maybe just keep deposits and withdrawals frozen? how long can we expect to resume trading? i have btc stuck in orders on bittrex i could use to generate profits elsewhere in the meantime.

well iam alsowating for the same but no updates on trading.

[StonerStanley]

"malwares bytes detect the malware as "Backdoor.Agent.SBFGen"


This Backdoor or another affiliated agent may reload itself after a remove

Steps to clean your desktop:

Download and Update Malwarebytes.
reboot with safe mode choose the simple Safe mode (Without NETWORKING)
if you used USB drive while being infected, plug the USB and start a complete scan
Fix all entries (PUP/Malware/Trojan/backdoor...) except maybe your miner software cgminer/sgminer

for those who were infected AND after the remove/reboot from Malwarebytes (under the safe mode):
check if Malwarebytes re-detect it or not (Re-scan)

if yes, you could try combofix, reboot (normal mode) Download it from bleepingcomputer
Save it to your desktop.

Note: Windows 8.1 and Windows 2000 are NOT supported by ComboFix
(i.E: XP, Vista, Seven and windows 8 is supported)

If you store files here:
-Temporary Internet Files
-Temp Folder
-Windows Recycle Bin
and want to keep it, move them to a safer location before the combofix scan. (remember to replace them after the scan)

You MUST close all open Windows.
turn off Antivirii, antimalware residents, windows update, java update... other runnning programs.
(remember to turn them on after the scan)

Run Combofix, Please note: Be Patient, dont touch your computer untill been asked by combofix, possibly for:
-the installation of the windows recovery console (click yes)
-the scan (Click 'Yes' to continue scanning for malware...)

Combofix will disconnect your computer from the Internet and it will change your clock format (after the scan it will restore them.)
you will see around 35 to 50 stages, be patient.

the Find3M windows will stay a long time, Again, Be patient.

then a new screen appear telling you the combofix report, will be located at C:\ComboFix.txt
usefull if you want to have further analyse, you can post this log in the dedicated forum of bleepingcomputer, majorgeeks, Malwareremoval.com

When you are sure your PC is clean, you can uninstall Combofix:
For Vista/seven/8: In the Search field, type Combofix /uninstall
(type a space between "Combofix" and "/uninstall") then press enter.

For XP: click start then Run, in the Run field, type Combofix /uninstall
(type a space between "Combofix" and "/uninstall") then press enter.

Reboot (safe mode) and run a Malwarebytes full scan. You should have wipe the backdoor and any other dangerous hack.
At this point YOU MUST CHANGE ALL YOUR PASSWORDS.

Malwares bytes already delete startup key / method, and malware files

"This Backdoor or another affiliated agent may reload itself after a remove"

If you remove the malware it can't reload. If a malware reload is because you do not kill the persistence (here the persistence was "csrss.exe", in the same folder as "windhcp.exe", and detected by malwares byte also)

This malware is not really smart don't worry.

(combofix is helpful when some of your system files are corrupted, by malwares)

[m30188]

OPAL trading was halted several days ago on Poloniex; was that related to this attack?

[NoobKidOnTheBlock]

Does this mean I'll lose the OPALCoins that I have on the Bittrex exchange? That's the only place I have some right now and wanted to know if I would still have them
?

[2fresh]

No you won't.

[PhilipMorris]

OPAL trading was halted several days ago on Poloniex; was that related to this attack?

Probably not, I believe I read it was some normal maintence

[Voidlord]

Malwares bytes already delete startup key / method, and malware files (otherwise h

"This Backdoor or another affiliated agent may reload itself after a remove"

If you remove the malware it can't reload. If a malware reload is because you do not kill the persistence (here the persistence was "csrss.exe", in the same folder as "windhcp.exe", and detected by malwares byte also)

This malware is not really smart don't worry.

(combofix is helpful when some of your system files are corrupted, by malwares)

Ok, thanks StonerStanley, So during the corruption, the backdoor/the attacker can't install other malware/exploit ?


if yes my only advice (for corrupted wallets) will be "CHANGE ALL YOUR PASSWORDS".