Deleted

[kingcolex]

.

[RodeoX]

Ooo, nice job Sherlock!

I second your question. "Where did you get these coins bro?"

[juju]

So this thread here
https://bitcointalk.org/index.php?topic=938228.80

-snip-

I actually thought about this, what if a hacker takes addresses people post publicly and seeds them or tries to make people think they are the ones involved. I actually had this thought when I added a vanity address in my signature to hopefully collect tips, I would hate to have a loose association. Because threads like this could be created

[coinableS]

Ooo, nice job Sherlock!

I second your question. "Where did you get these coins bro?"

Hmm he had 20 stolen coins and knew nothing about BTC... my guess is they weren't a gift but he likely paid for them at a huge discount through a dark web site??

[oblivi]

Ooo, nice job Sherlock!

I second your question. "Where did you get these coins bro?"

He seems very new to bitcoin and not knowing how it works to have 20btc (he didn't know you can't reverse transaction) if anyone is able to try and find some information on this guy we definitely need to because he is definitely able to buy coins from the thief and he could lead us to the source.

How can you be very new at Bitcoin and own 20 BTC? Unless he hold them for like 3 years.

[ncsupanda]

Ooo, nice job Sherlock!

I second your question. "Where did you get these coins bro?"

He seems very new to bitcoin and not knowing how it works to have 20btc (he didn't know you can't reverse transaction) if anyone is able to try and find some information on this guy we definitely need to because he is definitely able to buy coins from the thief and he could lead us to the source.

How can you be very new at Bitcoin and own 20 BTC? Unless he hold them for like 3 years.

Still considered new at that point?

[AgentofCoin]

I bet that was one of the hackers (or the hacker), messing around to see if anyone here would notice the 20btc's origin.
Probably just testing people and rubbing it in.

Kind of farfetched that a Bitcoin noob would happen to buy 20btc cheaply on the darkweb, and then lose it immediately while drunk.
Sounds like BS.

That was the hacker trolling or testing. IMO.

[runpaint]

Unless THIS thread is the hacker trolling and testing! 

[juju]

I bet that was one of the hackers (or the hacker), messing around to see if anyone here would notice the 20btc's origin.
Probably just testing people and rubbing it in.

Kind of farfetched that a Bitcoin noob would happen to buy 20btc cheaply on the darkweb, and then lose it immediately while drunk.
Sounds like BS.

That was the hacker trolling or testing. IMO.

This is possible, he should just sit on the coins for along time and forget about them. Only move them when we have to update our cryptographic primitives for address generation.

[prestonjolly]

Unless THIS thread is the hacker trolling and testing! 

and who is Keyser Soze?

[runpaint]

Unless THIS thread is the hacker trolling and testing! 

and who is Keyser Soze?

Trollception

[chaoman]

we must go deeper

[gjgjg]

Pass the info onto bitstamp , it could be helpful (assuming they're checking into this) they might be able to get ip of btctalk account or follow the coins until he cashes out and then pounce on them.
Good work btw!

[Gleb Gamow]

Unfortunately, it is not possible to revert Bitcoin transaction. Mind to explain what "mistake" did you do last night? Missclick? The 20 BTC was sent to another address just 7 second after receiving it. https://blockchain.info/address/19wN6jYvQSkW2acaSZXBavYAfde31YJrYJ

I was a bit drunk yesterday. I was trying to purchase 20 Giga Hash (2x10Ghs) hash power. By mistake I selected 20 Tera Hash (2x10Ths) from the drop down and clicked the link and it was gone. My friends told me this is the biggest bitcoin support forum. So if I tell my problem here, they can return my transaction.

Apologize for just getting up to speed, but I think I uncovered a clever way to wash nefariously obtained coins: Purchase from a third-party, or one you own, hashing power. Genius!

A third-party entity probably won't take the time to see where the coins stemmed from because they're happy to just receive a purchase. Hell, even BitPay didn't take the time to see that the coins they sent to BFL were only a hop away from being deposited into BFL's 1QAHV BTW, then used from that address under the guise that it stemmed from HashTrade. BitPay was extremely happy for the PR.

EDIT: After a few hops backwards, I find this: http://www.walletexplorer.com/address/1GNN1Lboxaak3YLafN6o5rUwByYtBBdWht

This is the second time I've come across NitrogenSports.eu. Yesterday, I saw it for the first time doing forensics on BFL's coins after they were returned to them from the FTC. What's noteworthy is that both Sonny Vleisides and Jeff Ownby are well-versed in setting up, maintaining, and scamming millions via online gambling sites, their partnership going back to Sonny's Laissez Faire City days.

[Madness]

He seems like a beginner to Bitcoin world if you ask me , but thats accident will teach him to never drink again 
He also updated his post , CloudMining.website may refund him after all :

Update: Thanks to the forum members, I found a way to contact the address owner. Now, I have asked for a refund - http://forum.cloudmining.website/viewtopic.php?f=3&t=42. Surprisingly, it took one minute for me to send the coins to them and even after 24 hour is over, they are asking 24 hours more to take the decission to return my coins !!!

[elasticband]

popcorn

[gogxmagog]

I saw that thread in the n00b section too and it made my spidey-senses tingle as well. It just seemed off. There was a similarly written one about some guy trying to get into a locked blockchain wallet that was asking for his private keys (?)

My guess is, just a wild scenario mind you, this; the hack was orchestrated by a organized crime group. They are thugs, not hackers, but they have maybe one or two hackers under their employ. They get tons of BTC, then distribute them amongst their various (not very tech savvy) minions and tell them to hodl, or maybe open exchange accounts, or maybe get cloud mining contracts (?) in order to insulate themselves (the higher up crooks) from guilt. This minion is either drunk like he says, an idiot, or a typical crook who thinks he can cheat his masters and tries to do some quick turn around deal with the btc so he can skim some off the top. He lost the coins and now his masters are going to kill him, hes desperate, he comes here for help.

I don't know for sure, but there is no honor amongst thieves and they all steal from each other. Other than that I cant figure that thread out either.

[Gleb Gamow]

cloudmining.website (http://www.cloudmining.website/) is a fairly new entity: https://bitcointalk.org/index.php?topic=843417.0

And, who the hell is C. Demiris?

[CounterEntropy]

Unless THIS thread is the hacker trolling and testing! 

LOL I wish, my theory is he had to sell them to some people and this guy was just a screw up who didn't know enough. Theymos needs to get his email and do some digging. It could be a test from the hacker though, I just don't know what to think of it yet.

Your finding is a typical BitMixer transaction. It is now evident that Bitstamp coins were mixed through BitMixer. But, the top and bottom addresses has no link after mixing is done.

Similar example, where BurtW found the same for Klee's stolen coins: https://bitcointalk.org/index.php?topic=686275.msg7804434#msg7804434

[alani123]

I had some coins stolen from me being sent to Ross' legal defense fund. true story

[CounterEntropy]

Unless THIS thread is the hacker trolling and testing!  

LOL I wish, my theory is he had to sell them to some people and this guy was just a screw up who didn't know enough. Theymos needs to get his email and do some digging. It could be a test from the hacker though, I just don't know what to think of it yet.

Your finding is a typical BitMixer transaction. It is now evident that Bitstamp coins were mixed through BitMixer. But, the top and bottom addresses has no link after mixing is done.

Similar example, where BurtW found the same for Klee's stolen coins: https://bitcointalk.org/index.php?topic=686275.msg7804434#msg7804434

I don't know exactly how mixers work but the story is sketch as well, the guys says he bought them locally from someone who sells them for lower than market and it the coins were there by the end of the day.

I dont know where did u get the info that the guy bought it locally at lower than market rate, but if he had said so (or if we believe him at all) then it makes sense. First think, why someone will give you coins at lower than the market rate ? There must be something fishy that he wants to offload fast and does not want to keep a trace. So that guy will take his money and send his coins to a mixing service. The output address of the mixing service will be the buyer's address. So, the guy in the middle gets his fund mixed and as well as get money against it. The buyer on the other hand gets new stolen fund, with which the seller has no relation. That is why 1Af9nUCxKYRuXeHRDS6v14eV1JXxvUFUqc has no relation with 1NbBW1XJ81ZtgPp8LL952vVJSf54N5SjK9 apart from they are address of the same mixer.

[Wendigo]

That is WAY too many hops to make any kind of deduction! You can link pretty much anyone to any coins using that many hops.

There used to be a website where you entered a bitcoin address and it would tell you if the address had any coins from the famous 10,000BTC pizza trade and show you the path. IIRC approximately 20% of bitcoin address on the blockchain contained some amount of BTC from that single trade back in 2010.

I wonder if that site still exists. Anyone remember it?

Speaking of senses tingling, my jedi senses are tingling right now.

Does that site follow the coins around sent from the original address? How does it know which fraction of the coins went to which address?

[CounterEntropy]

That is WAY too many hops to make any kind of deduction! You can link pretty much anyone to any coins using that many hops.

There used to be a website where you entered a bitcoin address and it would tell you if the address had any coins from the famous 10,000BTC pizza trade and show you the path. IIRC approximately 20% of bitcoin address on the blockchain contained some amount of BTC from that single trade back in 2010.

I wonder if that site still exists. Anyone remember it?

Speaking of senses tingling, my jedi senses are tingling right now.

Calm down. Use this: https://bitiodine.net

[Blazr]

Calm down. Use this: https://bitiodine.net

That is an awesome site if it does what I think it does, though it looks like it's broken right now.

I've been thinking about the pizza thing again, and I was mixing up two different things.

Dooglus did an analysis in 2012 to see how many address contained "pizza coins", there was over 1 million addresses:
https://bitcoin.stackexchange.com/questions/450/is-there-any-way-to-track-an-individual-bitcoin-or-satoshi/2900#2900

Conducting taint analysis the way the OP did it (the "follow-the-coins" method) isn't the right way to do it. It's a good way for finding potential suspects, but not for finding proof. For example, see this quote from dooglus regarding the Bitcoins that were stolen from allinvain in one of the first Bitcoin hacks:

I don't mean to imply that the allinvain coins haven't been thoroughly looted. They have touched 755,796 different addresses since being stolen and are currently sitting in 109,235 different addresses, including 8 from my own personal wallet. The exact same 8 as have pizza coins in them, it turns out.

[CounterEntropy]

Calm down. Use this: https://bitiodine.net

That is an awesome site if it does what I think it does, though it looks like it's broken right now.

Yep. It is now updating the blockchain to its DB. It works the way you are expecting... But, even this can not unwind the mixing made by bitmixer. Because BitMixer mixing takes place off the blockchain.

[RealKruncha]

I hope you're wrong, but good work on trying to find out - a bit of investigation is a good thing.

K.

[waterpile]

So, what is the point of this thread? I thought its about helping the guy getting back his lost 20btc

[AgentofCoin]

So, what is the point of this thread? I thought its about helping the guy getting back his lost 20btc

Wrong thread. Thats the other one.

In this one, we are accusing him of participating (directly or indirectly) in the bitstamp hack. 

[gogxmagog]

I get the feeling that drunken 20 btc guy is related to this--->https://bitcointalk.org/index.php?topic=938476.0 guy. It is why I think this is a criminal gang who sees bitcoin muny, but has no clue how to 'puter. Or just retards trying random doors to see if one is unlocked.

Ahhh, to be in Romania in the springtime...

[MrGreenHat]

cloudmining.website (http://www.cloudmining.website/) is a fairly new entity: https://bitcointalk.org/index.php?topic=843417.0

And, who the hell is C. Demiris?

See 'dem IRS?

[tss]

this is getting interesting.  is there an underground network of buying and selling "hacked" btc? 

where is it?  and i want some!

[AgentofCoin]

I get the feeling that drunken 20 btc guy is related to this--->https://bitcointalk.org/index.php?topic=938476.0 guy. It is why I think this is a criminal gang who sees bitcoin muny, but has no clue how to 'puter. Or just retards trying random doors to see if one is unlocked.

Ahhh, to be in Romania in the springtime...

That guy in the thread you found....   Where are they coming from?!? LOL.
I'm sure these users are all connected in some way.
Pretty bizarre that total noobs (like complete ignorant noobs) are showing up with somewhat large sums of btc. (Or at least claim to have).

[Blazr]

this is getting interesting.  is there an underground network of buying and selling "hacked" btc?  

where is it?  and i want some!

Of course not. It is too easy to mix BTC. There would be no point selling it cheap.

OP is just being dumb and does not understand how far BTC spreads. It's likely some of us in this thread have a small amount of funds in our addresses from the Bitstamp hack too. Bitcoins spread around really fast. Check out the post I linked earlier:

https://bitcoin.stackexchange.com/questions/450/is-there-any-way-to-track-an-individual-bitcoin-or-satoshi/2900#2900

[koelen3]

 This doesn't really means that he have bought from the Scammer or he himself is ! though there are chances that he might be
But bitcoin spreads pretty fast and why would someone just use bitmixer and then post here , to show us that yes i might have got them from Bitstamp hack. Might just be a purchase or Fast spreading coins

[xhomerx10]

Unfortunately, it is not possible to revert Bitcoin transaction. Mind to explain what "mistake" did you do last night? Missclick? The 20 BTC was sent to another address just 7 second after receiving it. https://blockchain.info/address/19wN6jYvQSkW2acaSZXBavYAfde31YJrYJ

I was a bit drunk yesterday. I was trying to purchase 20 Giga Hash (2x10Ghs) hash power. By mistake I selected 20 Tera Hash (2x10Ths) from the drop down and clicked the link and it was gone. My friends told me this is the biggest bitcoin support forum. So if I tell my problem here, they can return my transaction.

Apologize for just getting up to speed, but I think I uncovered a clever way to wash nefariously obtained coins: Purchase from a third-party, or one you own, hashing power. Genius!

A third-party entity probably won't take the time to see where the coins stemmed from because they're happy to just receive a purchase. Hell, even BitPay didn't take the time to see that the coins they sent to BFL were only a hop away from being deposited into BFL's 1QAHV BTW, then used from that address under the guise that it stemmed from HashTrade. BitPay was extremely happy for the PR.

EDIT: After a few hops backwards, I find this: http://www.walletexplorer.com/address/1GNN1Lboxaak3YLafN6o5rUwByYtBBdWht

This is the second time I've come across NitrogenSports.eu. Yesterday, I saw it for the first time doing forensics on BFL's coins after they were returned to them from the FTC. What's noteworthy is that both Sonny Vleisides and Jeff Ownby are well-versed in setting up, maintaining, and scamming millions via online gambling sites, their partnership going back to Sonny's Laissez Faire City days.

 It's neither clever nor genius; it's simply criminal.  Creativex did this in May of last year with the coins he stole from Basic Mining investors.  It's actually the opposite of clever because it was a sure-fire way to lose probably half of the value of the coins if not more.  He could have simply given half of the coins back to the shareholders and said the rest were closing costs.  I could say a lot of things about Creativex but the word "genius" does not come to mind.

[Lethn]

Nice detective work, I tend to agree with the others, I have a very hard time believing someone would have that much money in Bitcoin without doing prior research first, either it means he's galactically stupid or he's lying, anyone with that kind of money who had any sense would be keeping a very close eye on things.

[Q7]

But wait....if he successfully gets a refund, this will mean he'll be getting new coins which are not from the hack. Something is really fishy here.

[Madness]

But wait....if he successfully gets a refund, this will mean he'll be getting new coins which are not from the hack. Something is really fishy here.

The guy who got screwed looks a Newbie for real & seem like he don't know a lot about BTC there is no way he hacked bitsmap, I don't think he have anything to do with Bitsmap hack at all but maybe he just bought them from the Hacker or someone related to him with cheap price. .

[arvindr]

more popcorn.

[CounterEntropy]

But wait....if he successfully gets a refund, this will mean he'll be getting new coins which are not from the hack. Something is really fishy here.

The guy who got screwed looks a Newbie for real & seem like he don't know a lot about BTC there is no way he hacked bitsmap, I don't think he have anything to do with Bitsmap hack at all but maybe he just bought them from the Hacker or someone related to him with cheap price. .

This is simply mixed coins and has no connection with Bitstamp hack. Please read this post: https://bitcointalk.org/index.php?topic=939199.msg10292903#msg10292903

Following is a better explnation...

this is getting interesting.  is there an underground network of buying and selling "hacked" btc?  

where is it?  and i want some!

Of course not. It is too easy to mix BTC. There would be no point selling it cheap.

OP is just being dumb and does not understand how far BTC spreads. It's likely some of us in this thread have a small amount of funds in our addresses from the Bitstamp hack too. Bitcoins spread around really fast. Check out the post I linked earlier:

https://bitcoin.stackexchange.com/questions/450/is-there-any-way-to-track-an-individual-bitcoin-or-satoshi/2900#2900

OP needs to update the thread title, or else more people will be confused.

[pawel7777]

Looks like the unfortunate newbie finally got his 20BTC back:

20 BTC has been sent back to the given address.

https://www.blocktrail.com/BTC/tx/7ec3872c220e5a0a0c6b5af622825711744f23c1f70b40760593d54e2186d29f

http://forum.cloudmining.website/viewtopic.php?f=3&t=42#p190

[mayax]

it's normal to receive it back. Bitcoin has many, many place who can launder it... and you agreed with them. So, let's not complain about any hack

[koelen3]

I don't know if the guy was scammer but certainly it proves all the people wrong who said that site to be scam i think.

[BillyBobZorton]

Im surprised he actually managed to recover them. Lucky. There should be a tutorial in what to do in cases like this. Most people would panic. Imagine if you lose 20 BTC 5 years from now. We need a to-do tutorial to recover these bitcoins, the options you have.. to avoid people instantly jumping off tall buildings.

[pawel7777]

I don't know if the guy was scammer but certainly it proves all the people wrong who said that site to be scam i think.

Lol why is that? Because they refunded the BTC?

First of all, it could be as well a PR stunt. But even if the guy is real, CMC would simply calculate whether they're better off refunding him (building positive impression) and carry on with their ponzi, or keep the 20 BTC and scare away any potential new customers. Simple math, they chose the option they believe is more profitable.

That proves nothing.

[manselr]

Soemthing is fishy. If you lose your BTC no one is going to give them back out of charity. Like the poster above prolly PR or some shit.

[xhomerx10]

Soemthing is fishy. If you lose your BTC no one is going to give them back out of charity. Like the poster above prolly PR or some shit.

 Not true.

 Johoe returned 225 BTC

https://bitcointalk.org/index.php?topic=581411.msg9791998#msg9791998

Also Friedcat of Asicminer returned an accidental 200 BTC transaction fee found while mining bitcoin.  Don't have a link but Friedcat rocks!

Edit: Found a link http://www.reddit.com/r/Bitcoin/comments/1lb5my/asicminer_refunds_the_accidental_200_btc/

[koelen3]

I don't know if the guy was scammer but certainly it proves all the people wrong who said that site to be scam i think.

Lol why is that? Because they refunded the BTC?

First of all, it could be as well a PR stunt. But even if the guy is real, CMC would simply calculate whether they're better off refunding him (building positive impression) and carry on with their ponzi, or keep the 20 BTC and scare away any potential new customers. Simple math, they chose the option they believe is more profitable.

That proves nothing.

Yeah! that is/might be right . But atleast they went from 0 to something