Bitcoin Forum
December 16, 2017, 06:34:26 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 »  All
  Print  
Author Topic: BTC-E.COM NICE RECOVERY FROM THE HACK! =)  (Read 50585 times)
dree12
Legendary
*
Offline Offline

Activity: 1246



View Profile
July 31, 2012, 02:01:14 AM
 #81

From the BTC-E chat box:

Quote
MrWubbles: now logging in as support to troll more
MrWubbles: dev account has been deleted
MrWubbles: dev account has been deleted
MrWubbles: support is being deleted now
MrWubbles: dumping everyone's wallets
MrWubbles: bitinstant reserves have been leaked for days
MrWubbles: all your base
MrWubbles: I'm Mr Wubbles of wub fame
MrWubbles: Expect Mass Database Leak Soon
MrWubbles: wub database destroyed

That can't be good, but how do we know he wasn't just trollololing?
There is no reason not to suspect a database leak.

The hacker must have gotten the fake USD in either through remote execution or SQL injection. Both these allow access to the database.

What confuses me is why they did not simply hack the BTC in.

They wouldn't be able to withdraw fake BTC.
Why not?
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
1513406066
Hero Member
*
Offline Offline

Posts: 1513406066

View Profile Personal Message (Offline)

Ignore
1513406066
Reply with quote  #2

1513406066
Report to moderator
Bitcoin Oz
Hero Member
*****
Offline Offline

Activity: 700


Wat


View Profile WWW
July 31, 2012, 02:01:48 AM
 #82

Site is down now.

jwzguy
Hero Member
*****
Offline Offline

Activity: 868



View Profile
July 31, 2012, 02:01:53 AM
 #83

Um... no. 2.18 of it to: 12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
http://blockexplorer.com/address/12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
0BTC
Did you get any out successfully?
hazek
Legendary
*
Offline Offline

Activity: 1078


View Profile
July 31, 2012, 02:03:12 AM
 #84

Site is down now.

Not for me.

My personality type: INTJ - please forgive my weaknesses (Not naturally in tune with others feelings; may be insensitive at times, tend to respond to conflict with logic and reason, tend to believe I'm always right)

If however you enjoyed my post: 15j781DjuJeVsZgYbDVt2NZsGrWKRWFHpp
tiberiandusk
Hero Member
*****
Offline Offline

Activity: 572


The North Remembers


View Profile WWW
July 31, 2012, 02:04:35 AM
 #85

From the BTC-E chat box:

Quote
MrWubbles: now logging in as support to troll more
MrWubbles: dev account has been deleted
MrWubbles: dev account has been deleted
MrWubbles: support is being deleted now
MrWubbles: dumping everyone's wallets
MrWubbles: bitinstant reserves have been leaked for days
MrWubbles: all your base
MrWubbles: I'm Mr Wubbles of wub fame
MrWubbles: Expect Mass Database Leak Soon
MrWubbles: wub database destroyed

That can't be good, but how do we know he wasn't just trollololing?
There is no reason not to suspect a database leak.

The hacker must have gotten the fake USD in either through remote execution or SQL injection. Both these allow access to the database.

What confuses me is why they did not simply hack the BTC in.

They wouldn't be able to withdraw fake BTC.
Why not?

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

Bitcoin Auction House http://www.BitBid.net BTC - 1EwfBVC6BwA6YeqcYZmm3htwykK3MStW6N | LTC - LdBpJJHj4WSAsUqaTbwyJQFiG1tVjo4Uys Don't get Goxed.
terrytibbs
Hero Member
*****
Offline Offline

Activity: 616



View Profile
July 31, 2012, 02:05:00 AM
 #86

I think it's time for the anonymous Russians to abandon ship!
BkkCoins
Hero Member
*****
Offline Offline

Activity: 784


firstbits:1MinerQ


View Profile WWW
July 31, 2012, 02:06:44 AM
 #87

Isn't the BTC-E exchange the one I reported here and said beware some months ago? Or maybe I'm getting mixed up.

Another one of these, "oops we were hacked" scams. Someone there is selling people's BTC on them and the USD will vanish soon. Any users have BTC there that seem to be missing from their account now?

dree12
Legendary
*
Offline Offline

Activity: 1246



View Profile
July 31, 2012, 02:07:58 AM
 #88

From the BTC-E chat box:

Quote
MrWubbles: now logging in as support to troll more
MrWubbles: dev account has been deleted
MrWubbles: dev account has been deleted
MrWubbles: support is being deleted now
MrWubbles: dumping everyone's wallets
MrWubbles: bitinstant reserves have been leaked for days
MrWubbles: all your base
MrWubbles: I'm Mr Wubbles of wub fame
MrWubbles: Expect Mass Database Leak Soon
MrWubbles: wub database destroyed

That can't be good, but how do we know he wasn't just trollololing?
There is no reason not to suspect a database leak.

The hacker must have gotten the fake USD in either through remote execution or SQL injection. Both these allow access to the database.

What confuses me is why they did not simply hack the BTC in.

They wouldn't be able to withdraw fake BTC.
Why not?

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

There's no practical difference between "fake" and "real" BTC or USD on an exchange. It can be withdrawn regardless. USD usually is more easily traceable, freezable, and is more dangerous, which is why the hacker could not withdraw that way.
finkleshnorts
Sr. Member
****
Offline Offline

Activity: 336



View Profile
July 31, 2012, 02:09:55 AM
 #89

OMG... I had 180 Bitcoins there... Jesus...

My latest withdraw at btc-e webpage says "confirmed", but nothing reached my wallet yet.

40 Bitcoins was "sold" there... And 140 Bitcoins are stucked at some point there... In Russia... Damn!

Jesus no, please no...
Yankee (BitInstant)
Legendary
*
Offline Offline

Activity: 1078


Charlie 'Van Bitcoin' Shrem


View Profile WWW
July 31, 2012, 02:10:02 AM
 #90

The part of BitInstant reserves being leaked is false, our books are accurate

Bitcoin pioneer. An apostle of Satoshi Nakamoto. A crusader for a new, better, tech-driven society. A dreamer.

More about me: http://CharlieShrem.com
AndrewBUD
Hero Member
*****
Offline Offline

Activity: 560


View Profile
July 31, 2012, 02:12:11 AM
 #91

The excitement around here never ends

POPULTRADE| Create, join, or invest in any business
ICO | ANN  ❘|❘  ICO starts 11. December
DeathAndTaxes
Donator
Legendary
*
Offline Offline

Activity: 1218


Gerald Davis


View Profile
July 31, 2012, 02:12:15 AM
 #92

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

Dude.  All exchanges use a pooled wallet.  There is no such things "your" BTC or "your BTC" wallet on BTC-E, MtGox or any other exchange.  The exchange simply has one (or more) hot and/or cold wallets.  Then they maintain a database of each user's balance, and trades change those balance.     One could withdraw "fake" BTC just as easily as selling "fake" USD for BTC and withdrawing that.

The likely reason for faking USD is simply because that is the exploit the hacker founds.  Hacker found a way to add USD to his USD balance.  Once had had that why try hacking any further.  Give yourself huge amounts of USD, buy BTC and remove them from the exchange.
TTBit
Legendary
*
Offline Offline

Activity: 1136


View Profile
July 31, 2012, 02:12:22 AM
 #93

Um... no. 2.18 of it to: 12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
http://blockexplorer.com/address/12JGzgb7ezdp5UT4EoJN3Spcn3P8fyyFav
0BTC
Did you get any out successfully?

No, that is first few. Waiting for some confirms.

good judgment comes from experience, and experience comes from bad judgment
dree12
Legendary
*
Offline Offline

Activity: 1246



View Profile
July 31, 2012, 02:14:15 AM
 #94

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

Dude.  All exchanges use a pooled wallet.  There is no such things "your" BTC or "your BTC" wallet on BTC-E, MtGox or any other exchange.  The exchange simply has one (or more) hot and/or cold wallets.  Then they maintain a database of each user's balance, and trades change those balance.     One could withdraw "fake" BTC just as easily as selling "fake" USD for BTC and withdrawing that.

The likely reason for faking USD is simply because that is the exploit the hacker founds.  Hacker found a way to add USD to his USD balance.  Once had had that why try hacking any further.  Give yourself huge amounts of USD, buy BTC and remove them from the exchange.
If it was a SQL injection (extremely likely), it should have been just as easy to add BTC. I suspect the hacker may be intentionally messing with the exchange.
tiberiandusk
Hero Member
*****
Offline Offline

Activity: 572


The North Remembers


View Profile WWW
July 31, 2012, 02:14:31 AM
 #95

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

Dude.  All exchanges use a pooled wallet.  There is no such things "your" BTC or "your BTC" wallet on BTC-E, MtGox or any other exchange.  The exchange simply has one (or more) hot and/or cold wallets.  Then they maintain a database of each user's balance, and trades change those balance.     One could withdraw "fake" BTC just as easily as selling "fake" USD for BTC and withdrawing that.

The likely reason for faking USD is simply because that is the exploit the hacker founds.  Hacker found a way to add USD to his USD balance.  Once had had that why try hacking any further.  Give yourself huge amounts of USD, buy BTC and remove them from the exchange.

I understand all that. What I was saying is that simply putting 50000 in the BTC balance box doesn't mean there is actually 500000 BTC there.

Bitcoin Auction House http://www.BitBid.net BTC - 1EwfBVC6BwA6YeqcYZmm3htwykK3MStW6N | LTC - LdBpJJHj4WSAsUqaTbwyJQFiG1tVjo4Uys Don't get Goxed.
bg002h
Donator
Legendary
*
Offline Offline

Activity: 1358


I outlived my lifetime membership:)


View Profile WWW
July 31, 2012, 02:15:54 AM
 #96

Perhaps someone at BTC-E got hacked, and bought all the BTC they could.

If so, they may not be able to withdraw.
I vote hack vs. scam vs. clever stunt by the exchange to get more deposits.

Hardfork aren't that hard.
1GCDzqmX2Cf513E8NeThNHxiYEivU1Chhe
adamstgBit
Legendary
*
Offline Offline

Activity: 1904


Trusted Bitcoiner


View Profile WWW
July 31, 2012, 02:17:00 AM
 #97

They wouldn't be able to withdraw any USD since it's fake. Saying you have 500000 fake BTC on BTC-e doesn't mean anything if you don't actually have the keys to those coins in an actual wallet. They used fake USD to buy real BTC then ride off into the sunset laughing.

Dude.  All exchanges use a pooled wallet.  There is no such things "your" BTC or "your BTC" wallet on BTC-E, MtGox or any other exchange.  The exchange simply has one (or more) hot and/or cold wallets.  Then they maintain a database of each user's balance, and trades change those balance.     One could withdraw "fake" BTC just as easily as selling "fake" USD for BTC and withdrawing that.

The likely reason for faking USD is simply because that is the exploit the hacker founds.  Hacker found a way to add USD to his USD balance.  Once had had that why try hacking any further.  Give yourself huge amounts of USD, buy BTC and remove them from the exchange.
If it was a SQL injection (extremely likely), it should have been just as easy to add BTC. I suspect the hacker may be intentionally messing with the exchange.

if BTC-e wasn't protected against  SQL injection.... that's just sad...

adamstgBit
Legendary
*
Offline Offline

Activity: 1904


Trusted Bitcoiner


View Profile WWW
July 31, 2012, 02:17:38 AM
 #98

Perhaps someone at BTC-E got hacked, and bought all the BTC they could.

If so, they may not be able to withdraw.
I vote hack vs. scam vs. clever stunt by the exchange to get more deposits.

i lol'd  Cheesy

Darktongue
Sr. Member
****
Offline Offline

Activity: 350



View Profile
July 31, 2012, 02:19:07 AM
 #99



30BTC
40LTC
22NMC



Flush.......



Thank you come again~!
Chalkbot
Legendary
*
Offline Offline

Activity: 891



View Profile
July 31, 2012, 02:19:18 AM
 #100

Is there a reliable way of knowing how many of these fraudulently purchased BTC made it out of the exchange?
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!