Public STATEMENT Regarding Bitcoinica account hack at MtGox

[adamstgBit]

could Z have also been behind the other bitcoina "hacks"?

[1713424625]

1713424625

[1713424625]

1713424625

[zhoutong]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

[ElectricMucus]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

oh boy here we go.

[phantomcircuit]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

https://www.youtube.com/watch?v=2g5Hz17C4is

[kiba]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

I will give you the benefit of the doubt until the very end even if nobody else will, but it is up to you to defend yourself.

[repentance]

Zhou admitted on here the other day that he sold a large amount of Liberty Reserve following the hack - people had already noticed the transactions and asked him about them.  He said he did it "for a friend".

Can you extract the log saying why he did it?

Roberto has linked the relevant posts.

I'll quote in case of edits.

Since my name has been mentioned I would just reply in this thread anyway. I'll explain this, for once and for all.

As I explained in the QQ Group where the trades happened, I was cashing out for a Singaporean friend who has $100K in total in several LR accounts. I was able to get much better USD/SGD exchange rates than any bank customers. (I was able to get "interbank" rates: https://bitcointalk.org/index.php?topic=76156.0)

I was not "in a hurry". Even on today I have done a deal with someone. (7 days is not "hurry".)

The rate was not bad. Most e-currency exchanges charge 1.5%-2% plus wire fees (about $50 per transaction including routing fees). USD/CNY exchange rate is highly stable and I can access to discounted exchange rate through my Chinese bank as well. I actually got a better deal.

And it's definitely not $40K (which is the stolen USD amount that Bitcoinica claims). I have also placed a single $40K AurumXchange order during the same period.

I still have an operating business in Singapore (http://www.sgitcoin.com/) and this service is actually quite popular (top Google result for "buy bitcoin in singapore"). Therefore I regularly deal with foreign exchange, money transfers and e-currencies.

This kind of transactions are very common to me. It happens all the time before the hack. (For example, trading over $20K with UserXXX: https://bitcointalk.org/index.php?topic=93109.msg1039996#msg1039996)

The only question I have is: Why wasn't that information made public sooner?

Be thankful it's been released at all.  This is a criminal matter and the exchanges are under no obligation whatsoever to pass on any information they have to anyone other than law enforcement.

[Bitcoin Oz]

What is the punishment for theft in Singapore ?

[kiba]

What is the punishment for theft in Singapore ?

Dunno. It's time to read up on the Singaporean legal system I guess. I am hoping when they do a trial, we will be able to see transparently every piece of evidence, opinions, etc, or something like that.

[Bitcoin Oz]

What is the punishment for theft in Singapore ?

Dunno. It's time to read up on the Singaporean legal system I guess. I am hoping when they do a trial, we will be able to see transparently every piece of evidence, opinions, etc, or something like that.

This ids a good time to use http://judge.me

[repentance]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

So are you saying that you used a different email when you sold the LR for your friend?

How would a hacker benefit from using the SJ email to have a wire sent to your bank account?

This ids a good time to use http://judge.me

Judge me is intended to operate as a mediation service in civil matters.  It's not intended to handle criminal matters such as embezzlement.

[kiba]

I am thinking this could be a setup job by Zhou's 'friend'. Based on previous history, Zhou shows lot of integrity but not much "wise judgement".

But without evidence to back it up, it is a baseless speculation and we're relying on Zhou's word that it's a "friend". I hope a proper investigation will reveal more.

[Transisto]

Zhou 5k giveaway was very very suspicious of me,  He basicaly sent BTCs to anyone, affected or not.   Oh and BTW he didn't sent me shit.

[LoupGaroux]

Stunned that anybody can suspend dis-belief in this matter to even type the words that Zhou might be innocent in this. Scammer Boy just got caught red-handed, time for some biblical justice to get served up.

[Bitcoin Oz]

I'm gathering some information and a statement will be posted soon.

stevejobs807@gmail.com was indeed my email account used for anonymous testing purpose, however I haven't been using it for a long time. I'm logging in the account to check the suspicious activity and I'll post relevant details as well.

The $40,000 I exchanged at AurumXchange was indeed from a friend. Later I can also post proof that I exchanged another $30,000 at other exchanges during the same period. The total amount far exceeds the stolen amount claimed in the OP. My own Liberty Reserve account number is U7097615.

So are you saying that you used a different email when you sold the LR for your friend?

How would a hacker benefit from using the SJ email to have a wire sent to your bank account?

This ids a good time to use http://judge.me

Judge me is intended to operate as a mediation service in civil matters.  It's not intended to handle criminal matters such as embezzlement.

Its hard to say which jurisdiction will handle this . Interpol?

[stochastic]

Stunned that anybody can suspend dis-belief in this matter to even type the words that Zhou might be innocent in this. Scammer Boy just got caught red-handed, time for some biblical justice to get served up.

Agree, he better stay in China if he does not want to be extradited.

[ArticMine]

What is the punishment for theft in Singapore ?

I believe it can be a fine, imprisonment or caning. http://en.wikipedia.org/wiki/Caning_in_Singapore

[kiba]

I believe it can be a fine, imprisonment or caning. http://en.wikipedia.org/wiki/Caning_in_Singapore

Wikipedia article doesn't contains the word "embezzlement".

[kiba]

Stunned that anybody can suspend dis-belief in this matter to even type the words that Zhou might be innocent in this. Scammer Boy just got caught red-handed, time for some biblical justice to get served up.

Everybody have the right to a trial and due process of law, no matter how douchebag or guilty a person is.

[zhoutong]

My email stevejobs807@gmail.com was last accessed from 62.113.219.5 on July 13. The password has not been changed by the hacker (but I have changed just now).

There was an auto-forwarding to ryan@xwaylab.com (which is another email address of mine). However it has been changed to bitcoinicasucks@hotmail.com (which is the email that was used to send the "Bitcoinica is done" email to verify@bitcoinica.com). Of course I couldn't be notified about any email since the change.

The email account had a heavily-reused password (for the sites that I don't intend to share any private data), *at least* it was used on LinkedIn and many other websites.

I have several email communications between stevejobs807@gmail and other email accounts controlled by me, including a testing ticket for Bitcoinica's ZenDesk trial. The email address has never been publicised.

Important discovery in recent emails (all times are in UTC+8):

The hacker registered a Liberty Reserve account U9236056 at Jul 12, 2012 9:42 PM.

There was several emails from Liberty Reserve mentioning "Verification PIN". It can be seen that the liberty reserve account was accessed by at least: 78.108.63.44, 212.84.206.250 and 31.172.30.1.

There were many transactions done at F1ex.com, possibly used to launder Bitcoin. (I checked just now, F1ex.com provides anonymous fixed-rate BTC exchange service.)

The hacker signed up for OKPAY, with IP 31.172.30.1.

The hacker requested a sell-order on AurumXchange, totalling $5000, using the suspicious Liberty Reserve account mentioned by OP. A Chinese bank account was used (Account name: LIU HAIPENG, Account number: 6222020903006086032, Bank: INDUSTRIAL AND COMMERCIAL BANK OF CHINA).

Order link: https://www.aurumxchange.com/order/view/34011/e5b466248e041ebdf2ae793181a840dc

The hacker has also opened a ticket under his own name: https://www.aurumxchange.com/help/ticket.php?track=NLY-9AG-E468&Refresh=24195

He mentioned that I sold him the Mt. Gox codes at half price, which is absolutely not true. It seems that the hacker was trying to relate this event to me as an individual, and this possibly explains the reason that he wanted to "hijack" the email account. All my other email accounts did not have any suspicious access records and their passwords are all secure and different.

This is my *own* genuine transaction at AurumXchange: https://www.aurumxchange.com/order/view/33100/3c05a9a572379bf91620302cc9dd7d22

And my ticket to question the funds: https://www.aurumxchange.com/help/ticket.php?track=J6W-EY3-ZY2U&Refresh=47091

It's important to note that the first time I gained any knowledge about the email being misused is through this thread. Neither AurumXchange nor Mt. Gox has provided me any specific information about the suspicion. Otherwise I could have checked that email account earlier.

I'm willing to co-operate with any ongoing investigation and obviously I'm not trying to run away from this. I have already provided Mt. Gox with my certified copy of passport in an attempt to unlock my account with some Bitcoin balance.

[zhoutong]

So are you saying that you used a different email when you sold the LR for your friend?

How would a hacker benefit from using the SJ email to have a wire sent to your bank account?

I use my own Liberty Reserve account for all my own transactions, including those on behalf of my friend.

I placed the order from my own LR to send to my own bank account, and it's a genuine transaction unrelated to the hack.

The hacker has attempted to withdraw money from the SJ email to his bank account or another bank account that he controls. I have posted the detailed information in the statement.