63.73 BTC Hacked - Blockchain.info secured by 2FA - Starting security podcast?

[owlcatz]

I wouldnt keep even 1BTC (mid-long term) in a wallet that i am not the only one controlling the private key.

You sir is retarded and you created your own misfortune. Sadly.

I still feel sorry though. I am canadian so i'll say it again. Sorry.

i totally agree.
keep it in paper wallet. this was an oversight on my part. doesnt explain what happened though

If you truly lost your Bitcoins, I am sorry to hear this, the transactions are irreversible. However, the simple fact your wallet wasn't emptied immediately, but over the course of several hours leads me to believe you are bullshitting us.

these were my wallets. all emptied at once.
13brziR3KJB9eBWUmiSVa7HCtDGsoi5uPv
1KFCQqWJMFp3jP2YXQv5ZMgmXeZfQ8Levs
1E1nAEXaffBHh3RPpB9EGexSGSLS9qVFWB
156VdKaw31FKNkDve1PLs3J4j2s1dnkfQc
1BUCKgFCb3UYcEEgEWibFSzgUnbpWRRfiC
12Un78NEExEM3SYoFYAQvKYwxtMJozb3K6

yes, we intelligent folks can see that by the tx - https://blockchain.info/tx/43d9ecf12e25a0bcc6c655660d604cdff800f726dc42f68b08cea8fc1d61a3c4

guess remember or whatever/whoever is in his cups already? lol.. sorry again statdude.

[1714009480]

1714009480

[Remember remember the 5th of November]

I wouldnt keep even 1BTC (mid-long term) in a wallet that i am not the only one controlling the private key.

You sir is retarded and you created your own misfortune. Sadly.

I still feel sorry though. I am canadian so i'll say it again. Sorry.

i totally agree.
keep it in paper wallet. this was an oversight on my part. doesnt explain what happened though

If you truly lost your Bitcoins, I am sorry to hear this, the transactions are irreversible. However, the simple fact your wallet wasn't emptied immediately, but over the course of several hours leads me to believe you are bullshitting us.

these were my wallets. all emptied at once.
13brziR3KJB9eBWUmiSVa7HCtDGsoi5uPv
1KFCQqWJMFp3jP2YXQv5ZMgmXeZfQ8Levs
1E1nAEXaffBHh3RPpB9EGexSGSLS9qVFWB
156VdKaw31FKNkDve1PLs3J4j2s1dnkfQc
1BUCKgFCb3UYcEEgEWibFSzgUnbpWRRfiC
12Un78NEExEM3SYoFYAQvKYwxtMJozb3K6

yes, we intelligent folks can see that by the tx - https://blockchain.info/tx/43d9ecf12e25a0bcc6c655660d604cdff800f726dc42f68b08cea8fc1d61a3c4

guess remember or whatever/whoever is in his cups already? lol.. sorry again statdude.

Derp, thanks. I got confused, thought that https://blockchain.info/address/1L8zn4BJs2B4a4pxN4HBaNKEgaowpa3857 was the address of OP. Sorry for that, statdude.

[Remember remember the 5th of November]

Honestly, not sure what to think. If BC.I was compromised even with 2FA, then this means that there is some exploit going on in BC.I and piuk owes statdude 63btc.

[raskul]

Honestly, not sure what to think. If BC.I was compromised even with 2FA, then this means that there is some exploit going on in BC.I and piuk owes statdude 63btc.

yup, i'd say it should be up to the online wallet host to ensure those funds are returned, however that might happen.

[pedrog]

statdude, how do you store your wallet backup or backups?

[inBitweTrust]

Here is the problem with disclosures like this:

1) Bitcointalk accounts are sold all the time
2) Some people may be faking these thefts in order to avoid taxes or other liabilities
3) This may be a way for people to lash out at BTC upon exiting the scene

My last post on bitcointalk.

I yearned for ANC since 2013, I tried to advertise it, I put in a few ideas and a little bit of work, not too much.
I told people how great it will and would be, I made them think it was on testnet on the 15th, I changed their way of thinking and some of the people bought, cuz they liked the idea.

Now I stand a fool - Just as I stood like a fool with Zetacoin.

It won't happen to me again, because this incident made me lose all trust in people on the internet. Even the people who supposedly did work on something and seemed legit even at second sight.

I won't come back to crypto anymore - I lost so much... and I gained too little, and I don't mean that moneywise.

Goodbye.

This.
I totally agree.
I've finally come to the conclusion - this whole scene - including BTC - is a scam.
play or be played.
sorry brother.

I'm not trying to insinuate that this is anything listed above but it makes our job of accurately diagnosing security breaches more difficult and when you make comments like the above a month before hand .

I apologize for being an asshole for even posting this, but....heavy gambler, really into alts, and pissed off at Bitcoin all raise questions as well.

[statdude]

not a fake acct, anyone who knows me can verify this.

There was a backup on my computer of the wallet. So if they breached my PC somehow, they would have just needed the 10 digit password.

[statdude]

The hacker's addresses are as follows-

Hacker if you're watching, please contact me and we can work something out, don't draw this out!

1PKKHesnMstSDkqbXQzs1kep4qms2eRJFj
16uAPb6i3AJFebLyGzQAcxcrH9YQPaT1fa
15x41gpZkT1WtRZp5va9H3y2BNGkUgPPbH
1HYeQCcAjoHqFwwofBxiurjTqCkMn7a4N6

[pedrog]

Blockchain.info wallet backups are encrypted?

[Remember remember the 5th of November]

Could it be that your email was compromised, and you had an auto-backup option of the wallet, where it gets emailed to you, unencrypted perhaps?

[statdude]

Could it be that your email was compromised, and you had an auto-backup option of the wallet, where it gets emailed to you, unencrypted perhaps?

There are actually no copies of my wallet in my email at the time. I had deleted them all.

However, there was an encrypted copy on my desktop.

[inBitweTrust]

Did you empty your trash after deleting your email backups?
If you use gmail did you check your filters?
Have you scanned your computer for rootkits, trojans, and viruses with multiple programs?

[funtotry]

Could it be that your email was compromised, and you had an auto-backup option of the wallet, where it gets emailed to you, unencrypted perhaps?

Blockchain.info wallets are always encrypted when they are emailed to a user.

The fact that I find most strange is that 1E1nAEXaffBHh3RPpB9EGexSGSLS9qVFWB received the change of the initial 63 BTC transaction and it also was one of the sending addresses of the transaction that "emptied" the wallet. This is not the expected behavior of an attacker. This address also had ~5 BTC left in it for ~14 hours after the attacker had emptied your wallet.

[statdude]

Did you empty your trash after deleting your email backups?
If you use gmail did you check your filters?
Have you scanned your computer for rootkits, trojans, and viruses with multiple programs?

Checking for viruses now. I did actually miss a couple wallet backups in my email. However, they were all encrypted.

I was trying to send a message to the scammers addresses with a "blcokchain" note saying they were stolen coins.
But it seems they locked my account as i just submitted a support ticket?
I can't do anything in there (i just sent a little dust to send the public notes)

[statdude]

Could it be that your email was compromised, and you had an auto-backup option of the wallet, where it gets emailed to you, unencrypted perhaps?

Blockchain.info wallets are always encrypted when they are emailed to a user.

The fact that I find most strange is that 1E1nAEXaffBHh3RPpB9EGexSGSLS9qVFWB received the change of the initial 63 BTC transaction and it also was one of the sending addresses of the transaction that "emptied" the wallet. This is not the expected behavior of an attacker. This address also had ~5 BTC left in it for ~14 hours after the attacker had emptied your wallet.

strange indeed, but i didnt notice as I was asleep.

[teukon]

not a fake acct, anyone who knows me can verify this.

There was a backup on my computer of the wallet. So if they breached my PC somehow, they would have just needed the 10 digit password.

How much entropy was in your 10-digit password?

[kokojie]

uh your 2FA is your email, which means anyone that hacks your email can defeat your 2FA, and also they could probably figure out your password since they already hacked your email.

[Remember remember the 5th of November]

uh your 2FA is your email, which means anyone that hacks your email can defeat your 2FA, and also they could probably figure out your password since they already hacked your email.

I thought 2FA was supposed to be an SMS to your phone. I admit I have not used Blockchain.info other than to store less than 0.001btc.

[inBitweTrust]

uh your 2FA is your email, which means anyone that hacks your email can defeat your 2FA, and also they could probably figure out your password since they already hacked your email.

I thought 2FA was supposed to be an SMS to your phone. I admit I have not used Blockchain.info other than to store less than 0.001btc.

they offer both but...

no tor, no mobile,

no record of 2FA being sent to my email

someone must have gotten a wallet backup and my password.

Which means statdude was using the email 2fa which mostly defeats the whole purpose of 2fa altogether as any compromised account or computer can easily defeat and cover up this 2fa. With sms 2FA the hacker would have had to compromise his cell phone as well which is more difficult to coordinate if the user doesn't plug his cellphone into his computer.

[HYPERfuture]

Really sorry to hear about your loss.

What was your method of 2FA? Was it just your email account? Or SMS or Yubikey?