madmadmax (OP)
|
|
July 29, 2012, 09:16:14 PM |
|
I have a remote server running Bitcoind along with my server programs where a fraudulent user tried to hack me and one of the accounts is stuck with 825 "fake" bitcoins.
I tried move, I tried SendFrom, I tried SendToAddress all of which fail to send ANY coins at all. I am trying to "filter" the bad ones from the good ones so I expected to send all of them and see the real balance appear but it just throws an exception and nothing happens.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
unclemantis
Member
Offline
Activity: 98
Merit: 10
(:firstbits => "1mantis")
|
|
July 29, 2012, 09:23:37 PM |
|
FAKE coins?
|
|
|
|
nimda
|
|
July 29, 2012, 09:43:25 PM |
|
Can you post the address?
|
|
|
|
madmadmax (OP)
|
|
July 29, 2012, 09:49:20 PM |
|
Can you post the address?
Due to security reasons I can't. Can you kindly point me through the steps you were about to make with the address? Thanks. EDIT: It shows 0 balance in http://blockchain.info even though I know for a fact there are at least 0.3 real coins there FAKE coins?
What I mean by "fake" is they are only verified once by the server since there is no point verifying transactions more than once if the transfer is between local accounts but the hacker managed to fake his balance in the MySQL database I patched up the problem but I am left with 800 of these "fake" coins.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
July 29, 2012, 09:51:17 PM |
|
Just run a recovery tool on wallet.dat, no differently than if you were trying to recover it from a failed hard drive. That should sort everything out. With a brand new bitcoind and copy of the block chain of course.
In other words I would be extracting the private keys and then reconstructing a brand new wallet based on them.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
tbcoin
Legendary
Offline
Activity: 1022
Merit: 1000
|
|
July 29, 2012, 09:55:03 PM |
|
I have a remote server running Bitcoind along with my server programs where a fraudulent user tried to hack me and one of the accounts is stuck with 825 "fake" bitcoins.
I tried move, I tried SendFrom, I tried SendToAddress all of which fail to send ANY coins at all. I am trying to "filter" the bad ones from the good ones so I expected to send all of them and see the real balance appear but it just throws an exception and nothing happens.
Most probably that you have stolen, and "injected the fake bitcoins", so typical for do these magical applications that offer out there I testing with the same wallet on different devices, I had balances wrong, fix it by exporting and importing my addresses to a new wallet. EDIT: blockchain 0 balance...nothing left to say
|
|
|
|
madmadmax (OP)
|
|
July 29, 2012, 10:38:14 PM |
|
I have a remote server running Bitcoind along with my server programs where a fraudulent user tried to hack me and one of the accounts is stuck with 825 "fake" bitcoins.
I tried move, I tried SendFrom, I tried SendToAddress all of which fail to send ANY coins at all. I am trying to "filter" the bad ones from the good ones so I expected to send all of them and see the real balance appear but it just throws an exception and nothing happens.
Most probably that you have stolen, and "injected the fake bitcoins", so typical for do these magical applications that offer out there I testing with the same wallet on different devices, I had balances wrong, fix it by exporting and importing my addresses to a new wallet. EDIT: blockchain 0 balance...nothing left to say Ok here is the address: 15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79 I know for a fact it contains at least SOME real coins since I checked the transactions myself.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
Raoul Duke
aka psy
Legendary
Offline
Activity: 1358
Merit: 1002
|
|
July 29, 2012, 10:48:04 PM |
|
I have a remote server running Bitcoind along with my server programs where a fraudulent user tried to hack me and one of the accounts is stuck with 825 "fake" bitcoins.
I tried move, I tried SendFrom, I tried SendToAddress all of which fail to send ANY coins at all. I am trying to "filter" the bad ones from the good ones so I expected to send all of them and see the real balance appear but it just throws an exception and nothing happens.
Most probably that you have stolen, and "injected the fake bitcoins", so typical for do these magical applications that offer out there I testing with the same wallet on different devices, I had balances wrong, fix it by exporting and importing my addresses to a new wallet. EDIT: blockchain 0 balance...nothing left to say Ok here is the address: 15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79 I know for a fact it contains at least SOME real coins since I checked the transactions myself. No it doesn't and never had. http://blockchain.info/address/15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79
|
|
|
|
madmadmax (OP)
|
|
July 29, 2012, 10:55:07 PM |
|
I have a remote server running Bitcoind along with my server programs where a fraudulent user tried to hack me and one of the accounts is stuck with 825 "fake" bitcoins.
I tried move, I tried SendFrom, I tried SendToAddress all of which fail to send ANY coins at all. I am trying to "filter" the bad ones from the good ones so I expected to send all of them and see the real balance appear but it just throws an exception and nothing happens.
Most probably that you have stolen, and "injected the fake bitcoins", so typical for do these magical applications that offer out there I testing with the same wallet on different devices, I had balances wrong, fix it by exporting and importing my addresses to a new wallet. EDIT: blockchain 0 balance...nothing left to say Ok here is the address: 15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79 I know for a fact it contains at least SOME real coins since I checked the transactions myself. No it doesn't and never had. http://blockchain.info/address/15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79Ok well I have 2 addresses, one on my remote server Bitcoind and one that's not mine, the user has claimed he has sent 1 Bitcoin from his address to his address on my server I checked the address he sent the bitcoin from and found the transaction and it seems legit, yet blockchain.info shows NO bitcoins have been EVER received at my address while the Bitcoind on the remote server shows it's all there.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
unclemantis
Member
Offline
Activity: 98
Merit: 10
(:firstbits => "1mantis")
|
|
July 29, 2012, 10:57:03 PM |
|
No transactions found for this address, it has probably not been used on the network yet.
This guy is funny.
|
|
|
|
Raoul Duke
aka psy
Legendary
Offline
Activity: 1358
Merit: 1002
|
|
July 29, 2012, 11:06:10 PM |
|
No transactions found for this address, it has probably not been used on the network yet.
This guy is funny.
Even if it was an unconfirmed or double-spend transaction it would be known. I think he is confusing the MySQL database saying the address has coins with bitcoind saying it.
|
|
|
|
madmadmax (OP)
|
|
July 29, 2012, 11:14:45 PM |
|
No transactions found for this address, it has probably not been used on the network yet.
This guy is funny.
Even if it was an unconfirmed or double-spend transaction it would be known. I think he is confusing the MySQL database saying the address has coins with bitcoind saying it. I am using a JSON call and yes it shows that it has it. Not the MySQL database
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
Raoul Duke
aka psy
Legendary
Offline
Activity: 1358
Merit: 1002
|
|
July 29, 2012, 11:19:50 PM |
|
No transactions found for this address, it has probably not been used on the network yet.
This guy is funny.
Even if it was an unconfirmed or double-spend transaction it would be known. I think he is confusing the MySQL database saying the address has coins with bitcoind saying it. I am using a JSON call and yes it shows that it has it. Not the MySQL database Then you're not using the same blockchain as the rest of us. http://blockexplorer.com/address/15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79http://blockchain.info/address/15hjpvA5PGb4RuJKMspwqwdhaLaP6JLT79Checked also with my bitcoindlocal blockchain using znort's parser and with btcbalance.net and they tell me that address never had any balance.
|
|
|
|
unclemantis
Member
Offline
Activity: 98
Merit: 10
(:firstbits => "1mantis")
|
|
July 29, 2012, 11:23:58 PM |
|
Sounds to me like you are connected to a the hacker's blockchain honeypot and he is just WAITING for you to send a payment of some sort :-D
|
|
|
|
RandomQ
|
|
July 30, 2012, 02:23:20 AM |
|
Sounds to me like you are connected to a the hacker's blockchain honeypot and he is just WAITING for you to send a payment of some sort :-D
Sounds like someone used a bitcoin doubling software(Trojan) from that was hawked on youtube or someone really forked there own blockchain/client with fake coins and got this guys bitcoind to connect to it
|
|
|
|
nimda
|
|
July 30, 2012, 02:38:47 AM |
|
Did you use IRC bootstrapping alone? There is a known attack which involves filling an irc channel with malicious nodes, then feeding bad blocks to anyone who joins. One problem with this attack is that the blocks need to be real, but a few hundred BTC (6 blocks) is less than 825...
|
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
July 30, 2012, 03:20:16 AM |
|
You ought to save your bitcoin directory into a zip file and send it to a trusted member for analysis. It would be interesting to find out if there is a fake bitcoind going around.
Imagine a fake bitcoin client that ensures your money goes to a thief but pretends you have the money, up until the moment you try to spend it (because of course you can't). You get some meaningless system error when you go to spend, so you think it is your system instead of being tipped off to an attack. This has happened in the regular banking world, no reason why it couldn't be happening to bitcoin now.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
madmadmax (OP)
|
|
July 30, 2012, 09:07:20 AM |
|
I didn't use any trojans or third party applications that I didn't write along with bitcoind.
I am thinking maybe the problem is with another address associated with the account since I'm using GetBalance on the username.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
drakahn
|
|
July 30, 2012, 09:36:25 AM |
|
your change is probably in another address from a transaction you sent try getbalance("*", 0)
|
14ga8dJ6NGpiwQkNTXg7KzwozasfaXNfEU
|
|
|
madmadmax (OP)
|
|
July 30, 2012, 10:38:00 AM |
|
your change is probably in another address from a transaction you sent try getbalance("*", 0)
I have got all the addresses associated with that account and there are 120 of them all of which show a 0 balance both on the server and on blockchain. It seems to work with other accounts that have less addresses associated with them.
|
▄▄▄▄▄ ▄▄▄▄▄ ▄▄█▀▀▀▀▀▀██▄ ▄▄█▀▀▀▀▀▀▀█▄ ▄██▀ ▀██▄ ▄██▀ ▀█▄ ██▀ ▀██▄ ▀▀ ██ ██ ▀██ ▄▄▄▄▄▄▄▄██ ██ ▀██▄ ▀▀▀▀▀▀▀▀▀▀ ██▄ ▄██ ▀██▄ ▄▄▄ ▀██▄ ▄██▀ ▀██▄▄ ▄██▀ ▀▀██████▀▀ ▀▀██████▀▀
| | █ ║ █ | ✔ Unchained Smart Contracts ✔ Decentralized Oracle ✔ Infinitly Scalable
| ✔ Blockchain Technology ✔ Turing-Complete ✔ State-Channels
| █ ║ █ | ▄████▄▄ ▄ ██ ████████████▀ ████▄ █████████████▀ ▀████████▄▄ █████████████ ▄▄█████████████████████████ ██████████████████████████ ▀██████████████████████ █████████████████████ ▀█████████████████▀ ▄█████████████▀ ▄▄███████████████▀ ▀▀▀▀▀▀▀▀▀▀▀
| | ▄██▄ ▄ ▐████ ▄▄ █████ ██████████ █████████████████▀ ▄████████████▀████▌ ██████████ ▀████ ▀▀ █████ ██████████ ▀████▌▄████████████▀ ▄▄▄███████████████▌ ██████████▀ ▐████ ▀▀▀ ████▌ ▀▀▀ ▀███▀
| | f | | █ ║ █ | |
|
|
|
|