Public STATEMENT Regarding Bitcoinica account hack at MtGox

[finway]

New evidence shows that zhoutong is the hacker.

After Bitcoinica MtGox account compromised ,zhoutong sell LR in China.

日期:2012-7-12

Ryan(11853074) 20:03:18
6.2出LR，财付通付款

Ryan(11853074) 20:13:06
要多少有多少

Ryan(11853074) 20:13:12
我帮一个朋友出的

Ryan(11853074) 20:14:06
1万美元之内都没什么问题

Ryan(11853074) 20:17:18

LibertyReserve

And  zhoutong's LR account is :


zhoutong said The hacker registered a Liberty Reserve account U9236056 at Jul 12, 2012 9:42 PM.

So now everyone knows zhoutong is the hacker!!!

Wow, Zhoutong, how will you respond to this ?  

[1714924081]

1714924081

[1714924081]

1714924081

[1714924081]

1714924081

[1714924081]

1714924081

[1714924081]

1714924081

[1714924081]

1714924081

[cnbtcnews]

New evidence shows that zhoutong is the hacker.

After Bitcoinica MtGox account compromised ,zhoutong sell LR in China.

I'm sorry but,

• Who are you?
• Are you claiming you have evidence that LR account U9236056 is controlled by Zhou Thong? Could you really prove that?
• What do all those Chinese symbols in your post mean?

Thanks

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

[LoupGaroux]

Let us recall that Zhou himself admitted as recently as earlier this week that he still had access to the LastPass password, and was successfully entering the site.

And as to "illegal" disclosures of personal information by the various businesses involved in this... criminal action is not a defense. If Zhou is involved in this criminal situation, whether as principal scoundrel driving, or incompetent boob reusing the one password that would allow a nefarious friend of his to defeat every security barrier in the world, he cannot use the facts of that criminal act to demand compliance with user privacy policies.

[hatshepsut]

New evidence shows that zhoutong is the hacker.

After Bitcoinica MtGox account compromised ,zhoutong sell LR in China.

I'm sorry but,

• Who are you?
• Are you claiming you have evidence that LR account U9236056 is controlled by Zhou Thong? Could you really prove that?
• What do all those Chinese symbols in your post mean?

Thanks

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

http://www.youtube.com/watch?v=PDKGDPSq03A

[Jimmy2011]

New evidence shows that zhoutong is the hacker.

After Bitcoinica MtGox account compromised ,zhoutong sell LR in China.

I'm sorry but,

• Who are you?
• Are you claiming you have evidence that LR account U9236056 is controlled by Zhou Thong? Could you really prove that?
• What do all those Chinese symbols in your post mean?

Thanks

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

Can you request the screenshot for the above message from QQ group member who has the record? Of course, policemen can get the records from Tecent.

[caveden]

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

How does this person know for sure Zhou Thong was behind U9236056?

[dancingnancy]

It would suprise me greatly if Zhou is responsible for this.

I do not have access to any first-hand evidence that would implicate Zhou.

I work on behalf of the fund that invested in Bitcoinica. I have no position of authority with Bitcoinica LP.

When it was made known to me that some suspected Zhou, my recommendation was to confront him privately for his explanation.

It is nice that you posted this.  I agree, even if ZT was the hacker, this was not the way to go after him.  Thank you for stating your small side to this story.  

[dancingnancy]

Relevant?

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #intersango
[00:49] * ChanServ sets mode: +o phantomcircuit
[01:01] * phantomcircuit sets mode: -o phantomcircuit
[01:01] * phantomcircuit is now known as steve_bobs

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #bitcoinconsultancy
[01:01] * phantomcircuit is now known as steve_bobs

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #bitcoinica
[01:01] * phantomcircuit is now known as steve_bobs

? Wtf ? 
If this log is real, this guy's got some explaining to do

I just read through all of this and missed if there was a follow-up to this post?

[cnbtcnews]

New evidence shows that zhoutong is the hacker.

After Bitcoinica MtGox account compromised ,zhoutong sell LR in China.

I'm sorry but,

• Who are you?
• Are you claiming you have evidence that LR account U9236056 is controlled by Zhou Thong? Could you really prove that?
• What do all those Chinese symbols in your post mean?

Thanks

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

Can you request the screenshot for the above message from QQ group member who has the record? Of course, policemen can get the records from Tecent.

He has the record.
Because zhoutong said he will make the money back from chenjianhai , now let us see how the things will go on.

[cnbtcnews]

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

How does this person know for sure Zhou Thong was behind U9236056?

He buy LR from zhoutong ,zhoutong show the LR account and the total fund is $23439.57.

[dancingnancy]

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

How does this person know for sure Zhou Thong was behind U9236056?

He buy LR from zhoutong ,zhoutong show the LR account and the total fund is $23439.57.

How do you know he bought it from "ZT" if it was just over electronic communication?

[cnbtcnews]

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

How does this person know for sure Zhou Thong was behind U9236056?

He buy LR from zhoutong ,zhoutong show the LR account and the total fund is $23439.57.

How do you know he bought it from "ZT" if it was just over electronic communication?

Many people in China of bitcoin community knows zhoutong's qq account, so that's zhoutong.

[cryptoanarchist]

it's just comming in my mind: is there a possibility to freeze bitcoin addresses also in the future by improving the protocol if the community decided to outlaw a bitcoin address because a hacker used it??

Yay! USD v2.0 here we come!

the current situation tells me a need of this!

Dumbest fucking idea EVER...

[BitcoinBug]

I have located a suspect, his name is 陈建海(Chen Jianhai). He's NOT my friend and we have never met in person. He was one of my previous business associates because he's very familiar with credit card fraud and he advised me a lot (in terms of fraud prevention, of course) when I built my virtual goods payment processor in late 2010.

He has knowledge of my secret gmail address and I have once re-used the password in his web shop

His English is not very proficient and I'm sure that he's not reading this forum at the moment. I'm giving him a call now to persuade him to admit his wrong-doing and return the funds.

I'll post another thread soon.

Did he have an intimate knowledge of Bitcoinica business, like where the MtGox access codes were stored and what the master password of LastPass was? And another unrelated question: when was the last time you used Tor?

[guruvan]

Seriously, you 3 together have done a much better investigation than any "actual investigation" most official judges or police bureaus in the world would. The only think you lack is "authority".

Yes, such a good investigation, and yet they can't prove anything and decided to release private customer information and libel against a customer in the process.

Class act.

Zhou, get a lawyer, but get one to sue these shmucks.

It is not up to any of us to judge if funds should be unlocked, we should have an actual court with an actual judge do an actual investigation first.

Instead, it's your job to libel against customers for things you have no proof of?


I'm gonna take a break from Bitcoin for a while. When I come back, I hope to see that it's returned to being Bitcoin again and not just a microversion of the US government with a bunch of hot-head businesses eager for attention.

We can only hope the break is permanent. Maybe you'll help yourself to a dictionary while you take your break. You can learn the definition of libel, and slander, and see how they apply to your own words.

[Jimmy2011]

I am the owner of www.cnbtcnews.com. I introduce bitcoin to chinese people.
The evidence is from one person of my qq group.
zhoutong sell LR, and he buy LR from zhoutong.

How does this person know for sure Zhou Thong was behind U9236056?

He buy LR from zhoutong ,zhoutong show the LR account and the total fund is $23439.57.

How do you know he bought it from "ZT" if it was just over electronic communication?

cnbtcnews showed a screenshot for the transaction, from which it can be seen QQ member Ryan/ZT's LR account the same as ZT said today.

[hatshepsut]

Seriously, you 3 together have done a much better investigation than any "actual investigation" most official judges or police bureaus in the world would. The only think you lack is "authority".

Yes, such a good investigation, and yet they can't prove anything and decided to release private customer information and libel against a customer in the process.

Class act.

Zhou, get a lawyer, but get one to sue these shmucks.

It is not up to any of us to judge if funds should be unlocked, we should have an actual court with an actual judge do an actual investigation first.

Instead, it's your job to libel against customers for things you have no proof of?


I'm gonna take a break from Bitcoin for a while. When I come back, I hope to see that it's returned to being Bitcoin again and not just a microversion of the US government with a bunch of hot-head businesses eager for attention.

We can only hope the break is permanent. Maybe you'll help yourself to a dictionary while you take your break. You can learn the definition of libel, and slander, and see how they apply to your own words.

+1

[Herodes]

Relevant?

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #intersango
[00:49] * ChanServ sets mode: +o phantomcircuit
[01:01] * phantomcircuit sets mode: -o phantomcircuit
[01:01] * phantomcircuit is now known as steve_bobs

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #bitcoinconsultancy
[01:01] * phantomcircuit is now known as steve_bobs

Session Time: Fri Jul 13 00:00:00 2012
[00:49] * phantomcircuit (~phantomci@c-67-188-9-35.hsd1.ca.comcast.net) has joined #bitcoinica
[01:01] * phantomcircuit is now known as steve_bobs

? Wtf ? 
If this log is real, this guy's got some explaining to do

I just read through all of this and missed if there was a follow-up to this post?

The IP in question is an american one, which doesn't necessarily mean anything. But it seems from that log (if legit), that phantomcircuit is given op privilegies, which means he should be identified with NickServ? AFAIK, you can authenticate from any ip, so if phantomcircuit's e-mail was compromized earlier on (as was stated on this forum), then his IRC personality could be compromized as well, for all we know, his computer(s) may be backdoored.

Googling ~phantomci@c-67-188-9-35.hsd1.ca.comcast.net gives some results, but I'm not going to do anymore research, if anyone feels up to it, go ahead.

I don't know Zou Thong, but personally I would've never have sold my operations to any 'security expert' that's previously been inolved in cracking said operations and boasting on it in a public forum...

http://bitcoinstats.com/irc/bitcoin-dev/logs/2011/09/12/4
http://bitcoinstats.com/irc/bitcoin-dev/logs/2011/09/12/5

Did some research anyway:
41 days ago, the same identity was used by a user called phantomcircuit:
http://pastie.org/4096261

Aparently he's discussing the pay back process rather grumpily on that occasion.

However, "phantomcircuit is now known as steve_bobs" yielded no hits while searching on google, so perhaps it's just trolling ?

On one side I agree that the bitcoin companies breached their privacy statements, however, I for one, thought the information was interesting to get, however it also means that anyone in a similar position in the future can not trust that their account will not be frozen for similar reasons and their information being put public.

But it's funny that, now suddenly Zou Thong was able to find a 'suspect', actually a 'friend' of him to boot. I find it hard that he was not able to think of this earlier.


I see a lot of people are calling for police investigation in these matters. In the end, Bitcoinica customers are interested in clawing back their money, so what would be better than appointing reputable members of the forum, that would have access to a certain amount of the total funds each, and then have BC  hand over all the funds and then the claims process could continue ?

There are probably numerous criminal acts that's been comitted throughout this debacle, and the involved actors know this. Therefore they do not go to the police. Also, an investigation would probably take a lot of time, and it's questionable if it would lead to anything at all, but those who'd be richer by such a process would be the lawyers.

If Zou Thong is guilty, it would be better to step up, admit to it, and try to rectify the situation. If he's not guilty he sure as hell have made a lot of bad calls and have involved himself with 'criminal friends'.

(Somebody with a lot of time on their hands should create a site wiki-style and gather all the evidence with citations!)

The saga is not over yet. Look forward to the movie!

[guruvan]

I'm gonna take a break from Bitcoin for a while.

What does this mean for Bitcoin Magazine/Ellet/UndisclosedSecretBitcoinProjectNumber12?

In the meantime you should have noticed that Matthews rarely keeps promises exactly as stated.

And it is very interesting that one of the most vocal public disclosure persons wants to suppress an investigation in this case.
He also tries to steer the discussion away from the actual theft case to something else.
We should start asking what Matthew has to loose in this case.

That is a serious question I've had in this case. I was highly suspect of PM I received from him some time ago.

[Raoul Duke]

I don't know Zou Thong, but personally I would've never have sold my operations to any 'security expert' that's previously been inolved in cracking said operations and boasting on it in a public forum...

http://bitcoinstats.com/irc/bitcoin-dev/logs/2011/09/12/4
http://bitcoinstats.com/irc/bitcoin-dev/logs/2011/09/12/5

Every crime has a motive. And what you have there was most likely the motive for what happened after Bitcoin Consultancy took over Bitcoinica