2.157 BTC stolen from BTC-E.com (PSA)

[slu2]

I have no idea what the fuck.

I put a sell order 21.11.14 of LTC to BTC, for all of my LTC.  So that I could pay of a BTCJAM loan.

I was waiting for my coinbase purchase to clear (7 days).

I logged in today to BTC-e.com, to find out the proceeds from my LTC sale were withdrawn to;

#997618811    -0.157 BTC    Withdrawal BTC to address 16bJETW4QDGh4w386kFwwnNBVeTbwGmwNm    21.11.14
18:29:29    yes
#997617599    -2 BTC    Withdrawal BTC to address 16bJETW4QDGh4w386kFwwnNBVeTbwGmwNm    21.11.14
18:28:53



I am devastated.  I have no idea how I will pay my BTCJam loan back now.   I will only have the 2 BTC that I purchased on Coinbase to pay the 4.25 BTC loan back.


I know there is no way to fucking trace this.

But just FYI.   BTC-E.com appears to be compromised.

[1714933345]

1714933345

[1714933345]

1714933345

[1714933345]

1714933345

[slu2]

Also, I know this can probably be subverted.  But typically I have to authorize the withdrawls via email.
I looked and I have nothing regarding this in my email.

[slu2]

This is the IP:   http://www.dnsstuff.com/tools#ipInformation|type=ipv4&&value=37.59.164.106

Says from France, but probably just TOR or a VPN.

[KingOfSports]

2 BTC on black or red, make your choice. Lose and you go running off into darkness for awhile, win and well, problem solved for the most part.

[slu2]

This is mostly just a public service announcement.  Letting people know that there is something fishy going on at BTC-E

[xetsr]

This is mostly just a public service announcement.  Letting people know that there is something fishy going on at BTC-E

You sure it wasn't you that has been compromised?

2-factor enabled? If not, you should probably enable it now at any site you visit that has this option.

[slu2]

Ya, I had just bought 2 BTC from Coinbase, and I had the rest that I needed to pay my loan back in BTC-e.

Ive had my BTC-e account for years, first time this has happened.   

Am I sure it wasn't me that compromised it?     Ya.  LOL I am definitely sure about that.

2 factor authentication was not enabled, as I had my phone destroyed recently and I had to disable 2FA and wait like 14 days to be able to use my account after disabling 2FA.   After the 14 days and all of that, I did not enable it. 

But I definitely changed up security today.

[Fikhram]

Ya, I had just bought 2 BTC from Coinbase, and I had the rest that I needed to pay my loan back in BTC-e.

Ive had my BTC-e account for years, first time this has happened.   

Am I sure it wasn't me that compromised it?     Ya.  LOL I am definitely sure about that.

2 factor authentication was not enabled, as I had my phone destroyed recently and I had to disable 2FA and wait like 14 days to be able to use my account after disabling 2FA.   After the 14 days and all of that, I did not enable it. 

But I definitely changed up security today.

you cant do anyhing bro, let it go as a learning, next dont forget to enable 2 Factor auth

[btc-e.com]

We responded to your ticket, we will send you a emails sent to dumps to confirm the withdrawal. Once again we remind that without confirming the withdrawal of funds by email withdraw funds impossible.

[Fortify]

Every few months a thread like this seems to pop up, it is very suspicious. Either BTC-E security is too weak or the people behind it are taking advantage of the odd depositor and hoping it will slip under the radar.

[slu2]

BTC-E, I got your email.  I responded.

This is my response;


When I clicked on "Cancel the transaction" in the link that you sent, it says:

"Error: Withdraw was confirmed or cancelled before"

I looked in my email, and there is not even a reference to this transaction for confirmation.  I never got anything to confirm or cancel this transaction.

I also see that this cleared through the blockchain on November 21st.

I will be cancelling my account with BTC-E.com

This transaction is not mine, but all of my coin is gone.

I have had my account with BTC-E.com for years.  I have put many thousands of dollars through your site.   This has never happened ANYWHERE, on ANY site to me before.

This is something specifically wrong with BTC-E.com.

[Sona]

so where do I go buy my cheap btc if you think btc-e`s security is weak?

[Atdhe]

This is scary? What happened? I am thinking to send money there, but this does not look very well.

[kassadin]

damn, i swear its like a week ago someone had a similar issue.

esp with their security, and they also had a 2fa as well.

This is scary? What happened? I am thinking to send money there, but this does not look very well.

theres that saying, you get what you pay for. my advice is go buy it locally on localbitcoins or coinbase if you are located in the usa.

the next exchange would be bitstamp.

[wadili89]

Every few months a thread like this seems to pop up, it is very suspicious. Either BTC-E security is too weak or the people behind it are taking advantage of the odd depositor and hoping it will slip under the radar.

Btc-e handles thousands of customers. Now and then there are bound to be issues, its not surprising.

Not having 2FA was a major oversight in security.

[ninjaboon]

BTC-E, I got your email.  I responded.

This is my response;


When I clicked on "Cancel the transaction" in the link that you sent, it says:

"Error: Withdraw was confirmed or cancelled before"

I looked in my email, and there is not even a reference to this transaction for confirmation.  I never got anything to confirm or cancel this transaction.

I also see that this cleared through the blockchain on November 21st.

I will be cancelling my account with BTC-E.com

This transaction is not mine, but all of my coin is gone.

I have had my account with BTC-E.com for years.  I have put many thousands of dollars through your site.   This has never happened ANYWHERE, on ANY site to me before.

This is something specifically wrong with BTC-E.com.

1. Personally never had a problem with btc-e
2. Did you check your spam folder?
3. You should always enable 2FA, it's my first priority for anything online.

[Atdhe]

damn, i swear its like a week ago someone had a similar issue.

esp with their security, and they also had a 2fa as well.

This is scary? What happened? I am thinking to send money there, but this does not look very well.

theres that saying, you get what you pay for. my advice is go buy it locally on localbitcoins or coinbase if you are located in the usa.

the next exchange would be bitstamp.

No, I am not in the USA. I just like their better exchange rate. I am using Kraken for my EUR->BTC, but I have USD and btc-e has simply far best exchange rate. Even if I exchange the USD to EUR and go to kraken I get far better rate than local Bitcoins. Also I am buying up to high 3figs of BTC and those money is not wise to handle locally. Besides that my money is not at any local bank.

[R2Pleasent]

Just because you can't find an email in your inbox, does not mean they didn't send you an email.  If your email was hijacked (which 99.9% it was), then the hijacker can also delete the email that BTC-e sent to you.  This is common practice, since it erases their tracks and does not allow you to catch on. 

[Atdhe]

If this happens there should be still track/log on the mailserver.

[slu2]

So apparently not only did my BTC-e get hacked but my email did too.   This is me to blame.  I have been on prescription medication, and I have let a few things slide.  Including, apparently using the same password on multiple different websites.

But now, BTC-E has locked my account down.  I have my deposits from my mining going to BTC-E, and I am about to pay my debt at BTCJAM, but I have to get their approval to release the funds.   This is getting complicated, and terribly annoying.   

On another note, I got an email a week ago, from someone selling a SQL dump of user information from BitcoinTalk..    So if you are vulnerable here, I would recommend changing your password, and hardening your security.