Author [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] Topic: Bter hacked. PTS, bitassets withdrawal successful. Share you experience.  (Read 24572 times)

0 Members and 1 Guest are viewing this topic.

Offline cube

  • Hero Member
  • *****
  • Posts: 1404
  • Bit by bit, we will get there!
    • View Profile
  • BTS: bitcube
  • Witness: bitcube

1) First started with :



2) Bter revealed:


3) Bter announcement in weibo - http://www.weibo.com/p/1001603810634063024170:

"
经初步检查确定,2015年2月14日黑客利用我们从冷钱包填充热钱包的瞬间,将比特儿交易平台冷钱包中的所有BTC盗走,总额为7170BTC,转账记录为:
https://blockchain.info/tx/f5b0363f03e1ed8bb812c135361ea93590c831ce9f13a3750be1b93575baccc6
我们已经在2015年2月15日上午到当地派出所报案并被受理。我们将积极配合警方调查处理,追讨被盗的比特币。同时,我们在此悬赏720BTC追讨被盗的7170比特币。
 为了确保其他资金安全,我们已经采取技术措施,停止交易并关闭所有虚拟币在线钱包,去做进一步检查。于此同时,我们计划尽快安排CNY以及其他虚拟币的提取工作,减少用户担心。对用户造成的损失我们深表歉意,
截止到现在比特儿已经运营了快两年了。陪大家一起走过了比特币的风风雨雨。陪大家看多种币种的衰落兴起。请大家放心,我们不会跑路,我们将承担责任,为用户追讨被盗比特币。"

In short:
"Hackers made use of the time we were restocking our hot wallet from cold wallet. They stole all the BTC from the Bter's cold wallet."

4) How can a cold wallet be compromised? A user commented on bct:
Hacking a properly created cold wallet is impossible however it may not have been a properly created cold wallet
a) the wallet may have been created using compromised software (given how long the wallet has existed this is unlikely)
b) the randomly generated keys in the wallet may have had poor entropy (also unlikely)
c) the wallet was compromised due to poor signing with repeat k values (unlikely but can be verified from transaction history)
d) despite the company calling it a 'cold wallet' is wasn't a cold wallet* at all and was compromised just as any other hot wallet would be
e) someone (most likely an employee) with physical access to the cold wallet data file stole the coins

* A 'cold wallet' would be a private key or keys created by an offline machine and the private keys are never used on a machine that is or has been connected to the internet.  Signing of transactions should be done offline as well.  If you create a 'cold wallet' and then move it to a computer which is connected to the internet then it is no longer a cold wallet. 

5) Track the fund flow here

http://247cryptonews.com/bter-got-hacked-7000-bitcoins-stolen-7-different-accounts/

http://tracker.coinalytics.co/

6) Community discussing a deal to buy Bter

7) Bter CEO Han Lin interviewed by yang yang news agency. Interview conducted in Chinese.

http://v.youku.com/v_show/id_XODk0MzcwNTEy.html?sharefrom=iphone

In the interview, Han Lin mentioned he is the only person holding the key to cold wallet.

During the latest telephone interview with Bter CEO Han Lin, he said that this 7000+ BTC is all of their BTC cold storage reserve, now they end up with 200 BTC in their other hot wallet atm. Also he commented the hacker has been very professional, so it's hard to trace him and reclaim the lost fund.

Right now they still have no idea what method the hacker used to hack, as a result they still suspend all altcoin wallets because they don't want to risk it.

8-) Bter has resumed operation on 21 Feb 2015. They are preparing to release CNY, USD and NXT withdrawal.

9)  From bter website:

http://cn.bter.com/article/4672

"在各方的帮助下,通过区块分析,我们已经查清盗取的部分资金流向,正在联系相关服务平台协助调查。后面的追查仍然会非常艰辛,但是我们会继续努力。我们正在与各方合作通过一切可行的途径补偿用户。即使资金无法追回,我们也会准备全额赔付的方案。我们将很快开通CNY提现。再次感谢各位的鼓励和支持。

We're tracking the hacker with the help of some platforms , it will be hard , but we'll try . We're working with multiple parties to compensate our users by any viable means . Even if we couldn't recover the funds , we'll be preparing a plan to pay back with the full amount . We'll be enabling CNY withdraw soon . Thanks again for your encourage and support . "

10) CNY and USD withdrawal enabled on Bter

Bter is tracking down the thief who used a mixer to hide his stolen coins.

From Bter -

"Please help us to get touch with the BitcoinFog (http://www.bitcoinfog.com ,http://foggeddriztrcar2.onion ) operator. Email us at: [email protected]"
Modify message

11) Bter says:

"“bter已经卖域名,售价1万美金”为谣言。稍微思考一下就不难识别愚蠢的谣言,我们最近几天已经积极处理数百万的CNY和USD提现,提现额度降低到1元,保证所有正确填写提现信息的不超过24小时到帐,我们怎会为了1万美金(合6万CNY)出售域名,跑路?CNY提现进展顺利,我们将很快处理虚拟币提现。"

"There is a rumour saying 'bter has sold its domain name for USD10,000'. If you think about it, it is a stupid rumour. We have recently actively handled millions of CNY and USD withdrawals, with a minimum withdrawal lowered to 1 yuan. We ensure withdrawal clearance for all properly-completed forms within 24 hours. How could we sell our name for just USD10 grand and run away? CNY withdrawal has been smooth. We will handled virtual currencies soon."

Bter's announcement in English :

"We have handled a large volume of CNY and USD withdrawals and we are going to handle the altcoins in the next step."

12) NXT assets (SuperNET, etc.) withdrawal enabled

13) Bter: "我们决定与合作伙伴一起重构比特儿后台,彻底解决虚拟币钱包安全问题,重启比特儿运营,提供更多功能更好的服务,偿还用户损失。更多细节很快发布,真心感谢您的支持。"

We decided to work with our partners to rebuild the backend platform, completely resolve the wallet issue, reactivate bter operation. We would provide more features with better services, repair users' losses. More details to come. Sincerely, thank you for your support.

Bter: "We have decided to rebuild BTER's backend, completely solve the wallets security issue and re-enable all the tradings."

14) Bter: "Sorry for the long wait. We will solve the security issue completely and get all altcoins online and enable the withdrawals in a week."

15) Bter: We are deploying our new trading system with the safest ever cold wallet solution. we will finish it in 24-48 hours.

16) Bter: "患难见真情,感谢宝二爷在BTER最需要支持的时刻无畏非议来访BTER,也感谢所有通过各种方式一直支持我们的朋友,我们将重新站起来并走的更远"

"A friend in need is a friend indeed. Thanks to Bao who braved against all negative publicity to visit us and in a time when Bter needs support most. Thanks to friends of Bter who support us through various channels/methods.  We will stand again and we will travel far."

Bter's friend: "比特儿创始人韩林 创办比特儿两年来 经历过各种风风雨雨 7000币被盗事件属实 平台是目前还是世界最大的二代币平台 拥有海外注册用户9万人 国内注册用户13万人 其中大量用户希望其继续努力 不要倒下! "

"Bter's founder Han Lin developed Bter these two years when through a lot of obstacles and difficulties. The case of 7000 coins stolen is real. Bter is still the world Number Two virtual currency exchange. It has 90,000 foreign registered users and 130000 local users. Most users hope Bter can continue to work hard. Do not fall!"


17) JUA: "JUA聚啊可以为比特儿提供企业级的理财方案,希望比特儿早日重新站起来!"

"JUA can help Bter with enterprise level financial management. Hope Bter make a come back soon!"

18 ) Bter: "我们正在部署全新的交易系统,100%冷钱包资金托管,彻底解决资金安全问题。更快的交易引擎,更友好的界面,更多的功能,预计24-48小时完成,敬请期待,感谢您的支持!"

We are implementing an all-new exchange system. 100% cold wallet trust held. Completely take care of fund safety. Faster exchange engine. More user-friendly interface. More features. Estimate 24-48 hours complete. We seek your patience. Thank you for your support!

19) Bter: "The trading will be enabled soon. Please do double check your balances and the price in your existing orders."

20) Bter: "The previous BTC balance has been moved to BTC-B which will be used as the reference for 100% compensating our user's BTC loss."

21) Bter: "我们将在24小时内开放交易系统,请务必检查您的帐号资金和您的订单。市场已经发生变化,请务必检查您之前所下有效订单的价格,如与您当前期望不符,可立即取消订单。用户之前BTC余额已经转移到 BTC_B(BTC Pending)存储,我们将此作为归还用户之前BTC的依据,归还方案很快发布。"

We will be opening the exchange within 24 hours. Please check your balance and orders. There are changes in the market, please check your order prices. If the prices do not seems right, you may cancel order. Users' BTC balance has been moved to "BTC_B(BTC Pending)". We will use it as a basis for returning BTC. Detailing on the BTC returning will be announced soon.

22) Bter : "Darkcoin's CNY market has been opened at https://bter.com/trade/drk_cny , deposit at https://bter.com/myaccount/deposit/DRK … , withdraw at https://bter.com/myaccount/withdraw/DRK …"

23) Bter: "No trading FEE in all BTER's markets for one month to thank all of you for your support !"

24) Bter: "Continue to operate and pay back to users.Check the details and the payback plan at "

https://bter.com/article/4760

ie Bter's compensation plan to lost btc users.

25) Bter: "500 BTC  has been distributed to support the existing orders and another 500 BTC has been distributed to all users' balances based BTC_B."

26) Bter: "首批1000BTC已经下发到用户帐号,其中500BTC用于支持已有订单,500BTC按照用户BTC_B比例已经分发给受影响的用户。以后我们将持续为受影响用户分发BTC,尽最大努力和最快速度完成100%用户损失补偿。完成补偿后受影响用户还将额外分享BTER半年手续费收入。"

First 1000BTC given to users, of which 500BTC is used to support placed orders, 500BTC to match against BTC_B records of affected users. We will continue to work very hard to pay BTC users in the earliest possible time and with 100% compensation. Affected users will get a bonus of half year BTER fee after being made whole.

27) JUA officially announces its support for Bter's rebuild. 

"
关于JUA支持bter重建的公告

众所周知,bter经历了重大安全事故,面对众多bter的用户资产损失,我们经过了与bter的沟通和审查后,综合评估认定bter具备较大的市场价值,所以jua决定支持bter重建,并进行一系列技术等资源支持。
      1、bter目前状况如下:
      a、总注册用户量228312,英文用户90209位 占比39.4%,中文用户138103位占比60.6%
      b、中国最早的虚拟币多币种交易平台,支持80多种虚拟货币。从2013年至今一直是中国流量最大的虚拟币服务平台
      c、Alexa全球排名17504,中国排名9773
      d、完成交易12926316笔,完成用户充值3014575次(209427次人民币充值,2805148次虚拟币充值),完成用户提现679678次。
      2、jua第一期援助bter 1000btc长期无息贷款,用于bter当前的恢复工作,不排除后期援助,bter质押55%股份给jua,用于安全保障;
      3、Jua托管bter的冷钱包管理服务,Jua立即着手建立企业级虚拟币存储和充值体现体系,以达到完全托管bter的虚拟币在线业务;
      4、后续chbtc与bter之间建立更多的合作联系,帮助bter拓展更多业务,一起把业务做大做强。
      5、Jua团队协助bter完成当前安全检测与服务部署相关工作,让本次事件成为bter最后一次安全事件!
      希望bter的重建真正减少用户损失,对所有人都有益处,也希望藉此JUA能与bter建立良好的合作关系,快速走向世界;另外,jua重资收购了国际域名 bitbank.com,请大家一起期待更美好的未来银行!"

28) Bter: "Most markets are re-enabled now and we are making withdrawals work for more and more coins."

29) PTS withdrawal reported successful.

30) BitUSD, BitGold withdrawal reported successful.

31) BTS Wallet issue fixed. https://bitsharestalk.org/index.php?topic=14910.msg193783#msg193783

BTS withdrawal reported successful

32) Bter: "We have upgraded the Crypti (XCR) 's APIs and the wallet is working now. Thank the dev for the help. Waiting for an official new release."
"The Tilecoin (XTC) withdrawal will be re-enabled when the wallet finishes the slow blockchain parsing in 1-2 days."

33) Bter: "BTS,XTC,XM wallets fixed and synced."
« Last Edit: March 18, 2015, 06:06:43 AM by cube »
ID: bitcube
bitcube is a dedicated witness and committe member. Please vote for bitcube.

Offline graffenwalder

Re: Bter suspended
« Reply #1 on: February 15, 2015, 10:42:10 AM »
I don't hope what i think it is.

But earlier about on hour before this, i got an DNS resolution error, when visiting bter. Anyone knows what that means?

Offline hadrian

Re: Bter suspended
« Reply #2 on: February 15, 2015, 10:54:31 AM »
I hope that a large percentage of a cryptocurrency hasn't ended up in the hands of thieves. It's no good for the ecosystem (at least in the short term). If a distribution is too heavily in the hands of thieves, people are less inclined to grow the system. Then the arguments pop up about whether or not to revert the blockchain.

I suppose there is the SLIGHT chance that people will veer away from centralised exchanges if problems keep occurring!  :P

Hopefully bter will have this sorted soon without any major problems...
https://metaexchange.info | Bitcoin<->Altcoin exchange | Instant | Safe | Low spreads

Offline liondani

Re: Bter suspended
« Reply #3 on: February 15, 2015, 11:14:52 AM »
I hope that was not the reason behind BTS decline the last week ...
  https://bitshares.OPENLEDGER.info/?r=GREECE  | You are in Control | BUY | SELL | SHORT | SWAP | LOAN | TRADE |  

Offline yankey

  • Jr. Member
  • **
  • Posts: 30
    • View Profile
Re: Bter suspended
« Reply #4 on: February 15, 2015, 11:39:04 AM »
oh dear.

Offline mf-tzo

  • Hero Member
  • *****
  • Posts: 1709
    • View Profile
Re: Bter suspended
« Reply #5 on: February 15, 2015, 11:40:15 AM »
and this is why we should all trade in our platform even if it is slower...

Offline graffenwalder

Re: Bter suspended
« Reply #6 on: February 15, 2015, 11:43:19 AM »
Poloniex just froze BTS trades. Not sure if this is because they haven't upgraded to the hardfork. Or it's because they've got some rather large deposits.

Offline mf-tzo

  • Hero Member
  • *****
  • Posts: 1709
    • View Profile
Re: Bter suspended
« Reply #7 on: February 15, 2015, 11:49:22 AM »

In the meantime...
shapeshift is also not exchanging btc to bts and bitusd (presumable it uses bter)
bitsharesblock doesn't work
metaexchange for btc bitbtc is in maintenance...

It will be an exciting day today...

I would recommend that all of you withdraw your BTS from other exchanges to our internal exchange and continue your trading there.. Even if it is slower it is more secure from hackers...Now is the time to advertise our exchange and show to the rest of communities what decentralised trading means..

Offline graffenwalder

Re: Bter suspended
« Reply #8 on: February 15, 2015, 11:54:58 AM »

In the meantime...
shapeshift is also not exchanging btc to bts and bitusd (presumable it uses bter)
bitsharesblock doesn't work
metaexchange for btc bitbtc is in maintenance...

It will be an exciting day today...

I would recommend that all of you withdraw your BTS from other exchanges to our internal exchange and continue your trading there.. Even if it is slower it is more secure from hackers...Now is the time to advertise our exchange and show to the rest of communities what decentralised trading means..
Oei, that's a big problem. Shapeshift uses bter for us and Nubits. This could be a devastating blow for them.
Not to mention some other projects we have running on bter.

Offline cube

  • Hero Member
  • *****
  • Posts: 1404
  • Bit by bit, we will get there!
    • View Profile
  • BTS: bitcube
  • Witness: bitcube
Re: Bter suspended
« Reply #9 on: February 15, 2015, 12:10:53 PM »
Oei, that's a big problem. Shapeshift uses bter for us and Nubits. This could be a devastating blow for them.
Not to mention some other projects we have running on bter.

I hope our bts dev fund is not trapped in bter.
ID: bitcube
bitcube is a dedicated witness and committe member. Please vote for bitcube.

Offline cass

  • Hero Member
  • *****
  • Posts: 4328
  • /(┬.┬)\
    • View Profile
Re: Bter suspended
« Reply #10 on: February 15, 2015, 12:12:14 PM »
Oei, that's a big problem. Shapeshift uses bter for us and Nubits. This could be a devastating blow for them.
Not to mention some other projects we have running on bter.

I hope our bts dev fund is not trapped in bter.

i would not think so!
█║▌║║█  - - -  The quieter you become, the more you are able to hear  - - -  █║▌║║█

Offline mf-tzo

  • Hero Member
  • *****
  • Posts: 1709
    • View Profile
Re: Bter suspended
« Reply #11 on: February 15, 2015, 12:22:47 PM »
Has anyone checked if BTS withdrawals works from BTC38?

Offline cube

  • Hero Member
  • *****
  • Posts: 1404
  • Bit by bit, we will get there!
    • View Profile
  • BTS: bitcube
  • Witness: bitcube
Re: Bter suspended
« Reply #12 on: February 15, 2015, 12:25:43 PM »
Poloniex just froze BTS trades. Not sure if this is because they haven't upgraded to the hardfork. Or it's because they've got some rather large deposits.

Does anyone know the reason behind poloniex's freezing of bts?


..
It will be an exciting day today...
..

It is going to be a long and dreadful day for those with fund trapped.
« Last Edit: February 15, 2015, 12:27:39 PM by cube »
ID: bitcube
bitcube is a dedicated witness and committe member. Please vote for bitcube.

Offline joele

  • Sr. Member
  • ****
  • Posts: 465
    • View Profile
Re: Bter suspended
« Reply #13 on: February 15, 2015, 12:34:39 PM »
In case bts in bter hacked, can we vote to fork and reverse the transaction?

sumantso

  • Guest
Re: Bter suspended
« Reply #14 on: February 15, 2015, 12:38:25 PM »
In case bts in bter hacked, can we vote to fork and reverse the transaction?

Can the block explorer show if there were large movements?

I hope its possible to hardfork and remove them. My laptop can't run the client so I was waiting for the light client to withdraw my balance; and if indeed BTS has been lost that would, well, don't want to think about it now.

 

Google+