elective-stereophonic
elective-stereophonic
DGEX hacked for 52 BTC 1.2M NXT
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Stable Nxt Client: Nxt 1.12.2

Pages: [1] 2 3 ... 6  All

Author Topic: DGEX hacked for 52 BTC 1.2M NXT  (Read 27679 times)

Graviton

  • Sr. Member
  • ****
  • Karma: +62/-30
  • Offline Offline
  • Posts: 297
    • View Profile
    • DGEX
DGEX hacked for 52 BTC 1.2M NXT
« on: July 16, 2014, 05:28:55 pm »

Some moments ago an attacker has gained access to DGEX active reserves and stolen 1.2 million NXT and 52 BTC.

The bitcoin transfer remains unconfirmed, if you know of a way to technically dispute that before confirmations please post here ASAP.

https://blockchain.info/tx/22284fac41ed4e78cb531f020d8f21dd0285694809f1d048a02aae4915161ccd
http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=15392455085897110023

Further info later.

UPDATE: Confirmed loss of 52 BTC and 1,206,725.06 NXT has been realized.

The attacker had triggered the DGEX server, waiting for incoming funds that arrive nightly to pay for the night's withdrawals. A few seconds after I transferred 52 BTC to the DGEX live account where withdrawals are performed from - the largest amount since March - it was gone. I did not notice this right then and was happily unaware that also the NXT account was leeched dry immediately after that through some, most likely automated, mechanism.

8 minutes later I was doing the NXT withdrawals batch script while waiting for the BTC top-up to confirm, and noticed bulk of the NXT had been gone. If the NXT community wishes to keep an eye on the thief's NXT account 15392455085897110023 for fund movements and inform us of any that would be greatly appreciated.

NAS and FIMK were not targeted and were transferred by us to secure accounts shortly.

It is unfortunate that these days DGEX was just in the process of migrating servers and deploying sizable changes and security enhancements to the web site and operations. We had some hints and suspicions of lax security in the service provider network but had taken care of securing our applications so that it was not considered feasible to warrant the large migration before software is ready.

I must admit we did not expect such sophisticated attack in that both NXT and BTC accounts would be directly targeted by automation once sufficient loot was present. Usually I transferred lower amounts to the online Bitcoin wallet and paid the withdrawals a few minutes after, expecting any attacker to be left high and dry without considerable funds. Giving way to the power of habitual conditioning of months, I slipped of this final manual security measure once and it was enough to take it the other way, winning him / them a loot worth approx. 70,000 EUR. I am especially stunned of the cunning plot to snatch the NXT account at the same time by the automated bot, as indeed the NXT would have been transferred safe right after noticing the BTC heist.

Because we don't know the exact method, timing nor point of the unautorized access, DGEX now needs a more extensive security remake than originally intended and we will take the necessary time to arrange this.

DGEX will not be trading nor performing any cash transfer operations until at least Monday the 21st of July.  I am going to cover the total loss of about 142 BTC from my own pockets initially, to be able to continue operations without loss to customers. Howewer, this loss is of DGEX and not only mine personally, and must unfortunately affect DGEX shareholders' near future profits. Exact details of how this will be done will be announced as DGEX relaunches. At this writing the preliminary estimation for payback time from profits of the new DGEX site is 2 to 4 months.

Naturally, I was struck down by the quick dawning of such sizable loss, but am already gaining confidence that after touching this ground zero the new DGEX will now be even better equipped to rise to its former glory with a suite of new services that have been long in the making and will be plenty. I am convinced everything has a meaning - it's not about how badly you fall but how spectacular your rising up will be. Thank you all for your patience and continuing support.
« Last Edit: July 16, 2014, 08:59:50 pm by Graviton »
Logged
* dgex.com operator * nextcoin.org founder * mofowallet.com multiwallet founding member

Nxter

  • Hero Member
  • *****
  • Karma: +61/-7
  • Offline Offline
  • Posts: 597
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #1 on: July 16, 2014, 05:30:48 pm »

s**t
Logged

v39453

  • Full Member
  • ***
  • Karma: +12/-2
  • Offline Offline
  • Posts: 155
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #2 on: July 16, 2014, 05:35:42 pm »

Logged

Graviton

  • Sr. Member
  • ****
  • Karma: +62/-30
  • Offline Offline
  • Posts: 297
    • View Profile
    • DGEX
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #3 on: July 16, 2014, 05:37:11 pm »

Logged
* dgex.com operator * nextcoin.org founder * mofowallet.com multiwallet founding member

Uniqueorn

  • Sr. Member
  • ****
  • Karma: +155/-168
  • Offline Offline
  • Posts: 483
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #4 on: July 16, 2014, 05:37:18 pm »

POST THIS IN GENERAL SECTION
Logged
NXT Organization: Networking

Nxter

  • Hero Member
  • *****
  • Karma: +61/-7
  • Offline Offline
  • Posts: 597
    • View Profile
Logged

wesley

  • Hero Member
  • *****
  • Karma: +204/-3
  • Offline Offline
  • Posts: 1159
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #6 on: July 16, 2014, 05:38:37 pm »

How?
Logged

v39453

  • Full Member
  • ***
  • Karma: +12/-2
  • Offline Offline
  • Posts: 155
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #7 on: July 16, 2014, 05:38:58 pm »

Logged

kodtycoon

  • Hero Member
  • *****
  • Karma: +43/-18
  • Offline Offline
  • Posts: 916
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #8 on: July 16, 2014, 05:40:51 pm »

Ok there is definitely some kind of organised attack against nxt. I've never seen so many attacks against 1 coin in such a short space and all for such large sums. Sorry to hear about this graviton.

Sent from my C1905 using Tapatalk

Logged

kodtycoon

  • Hero Member
  • *****
  • Karma: +43/-18
  • Offline Offline
  • Posts: 916
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #9 on: July 16, 2014, 05:42:46 pm »

Send tx ids to exchanges and notify them that they are stolen funds maybe they will freeze the acc they are sent to before they can be sold

Sent from my C1905 using Tapatalk

Logged

Come-from-Beyond

  • Hero Member
  • *****
  • Karma: +794/-671
  • Offline Offline
  • Posts: 4013
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #10 on: July 16, 2014, 05:50:29 pm »

Ok there is definitely some kind of organised attack against nxt.

Aye, paranoia is what we desperately need right now... I can make an appearance that someone kidnapped me, if u want.
Logged

kodtycoon

  • Hero Member
  • *****
  • Karma: +43/-18
  • Offline Offline
  • Posts: 916
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #11 on: July 16, 2014, 05:53:37 pm »



Ok there is definitely some kind of organised attack against nxt.

Aye, paranoia is what we desperately need right now... I can make an appearance that someone kidnapped me, if u want.

haha you have to admit that it's freaky there being so many hacks for such large amounts in such short a time.

Sent from my C1905 using Tapatalk

Logged

Come-from-Beyond

  • Hero Member
  • *****
  • Karma: +794/-671
  • Offline Offline
  • Posts: 4013
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #12 on: July 16, 2014, 05:54:47 pm »

I think the community should be consistent and start guessing that it was BM who hacked DGEX...
Logged

Jack Needles

  • Full Member
  • ***
  • Karma: +25/-2
  • Offline Offline
  • Posts: 149
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #13 on: July 16, 2014, 05:54:57 pm »

BTC transaction orphaned at block height 311023.
https://blockchain.info/block-index/450611

Is this good news?  Did bitundo actually do the trick?
Logged

Fatih87SK

  • Hero Member
  • *****
  • Karma: +127/-36
  • Offline Offline
  • Posts: 2206
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #14 on: July 16, 2014, 05:55:45 pm »

Account Control, Phasing etc.
Logged

Jack Needles

  • Full Member
  • ***
  • Karma: +25/-2
  • Offline Offline
  • Posts: 149
    • View Profile
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #15 on: July 16, 2014, 05:56:50 pm »

I think the community should be consistent and start guessing that it was BM who hacked DGEX...

(unnecessary comment removed)
Logged

Graviton

  • Sr. Member
  • ****
  • Karma: +62/-30
  • Offline Offline
  • Posts: 297
    • View Profile
    • DGEX
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #16 on: July 16, 2014, 06:05:42 pm »

BTC transaction orphaned at block height 311023.
https://blockchain.info/block-index/450611

Is this good news?  Did bitundo actually do the trick?
Did not complete the undo but interested also. This from elsewhere:
Quote
Quote from: DannyHamilton on Today at 05:56:10 PM
Edit: Nevermind, I see that blockchain.info has an out of date database.  Looking at blockr.io I see that the transaction actually already has 12 confirmations. It is too late to do anything about it.
Logged
* dgex.com operator * nextcoin.org founder * mofowallet.com multiwallet founding member

Graviton

  • Sr. Member
  • ****
  • Karma: +62/-30
  • Offline Offline
  • Posts: 297
    • View Profile
    • DGEX
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #17 on: July 16, 2014, 06:15:20 pm »

The orphan may be affecting the case but our bitcoind is outdated. Is there trustable person running Bitcoind 0.7+ who could sign the transaction with our near empty wallet.dat and use bitundo to retrieve the funds? 1 BTC reward if funds are retrieved.
Logged
* dgex.com operator * nextcoin.org founder * mofowallet.com multiwallet founding member

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #18 on: July 16, 2014, 06:53:35 pm »

Anyone knows if that 1.2 Nxt and 52 BTC were all there was on DGex or if there was more that was not hacked ?
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

Graviton

  • Sr. Member
  • ****
  • Karma: +62/-30
  • Offline Offline
  • Posts: 297
    • View Profile
    • DGEX
Re: DGEX hacked for 52 BTC 1.2M NXT
« Reply #19 on: July 16, 2014, 06:56:33 pm »

The 52 BTC got away and is confirmed dozens of times. Blockchain.info has outdated database.

Anyone knows if that 1.2 Nxt and 52 BTC were all there was on DGex or if there was more that was not hacked ?
DGEX has untouched reserves of 30 Million NXT and 668 BTC. Customer funds are not affected by this incident.
Logged
* dgex.com operator * nextcoin.org founder * mofowallet.com multiwallet founding member
Pages: [1] 2 3 ... 6  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly