42% of [email protected]'s final balance is 44.8945637 PTS.

In fact I have not reimbursed myself for /any/ of the funds (PTS and BTC) that I had in the exchange when it got stolen from.

marketp2p - there was a notice to cancel your orders before withdrawing, but I see that your order is still there, so I'll send you a PM about you getting that back.

re: pts holders:

I felt like any theft from the site was a theft from all the users, not just the ones that happened to have their balance in BTC at the time, which was my reasoning in reimbursing everyone equally. I think that is more fair than the alternative.

vegas, looks like you traded and then withdrew your BTC to this address a while back: https://blockchain.info/address/185njiam6kgDncDbmK2BS8t4xBgb5DvTYA

I looked through your logs and everything looks correct.

Sorry for not keeping this thread in the loop, I've been posting elsewhere.

x-post:

QuoteAt the going rate of about 0.012 (on cryptsy), with all of the funds that the exchange still has, we can afford to let everyone withdraw 58% of their total balances and orders.

I'll put up the site soon (in around an hour), and give everyone around 36 hours to withdraw all of their funds, and then I will close the site again indefinitely, unless new information from DO comes to light.

In case anyone wasn't clear, you will still have BTC in your balance, but when you withdraw, it will ask you to enter a PTS address instead, and it will send you 0.012 * your BTC * 58%.

If at the end of the 36 hours the site still has some funds, I will pass that out manually to users most affected.

So the site is up for another 20 hours or so, please withdraw as soon as possible. (www.bit-u.com)

TwoKoolFourSkewl, I know you're angry/concerned, maybe more. However I humbly suggest that raging on the chat only makes matters worse.

Obviously I already feel bad about this, and I'm doing all I can. With the state of the company's funds, there's simply not enough to give everyone back 100%, because we got stolen from!

If there's extra at the end (i.e. some people don't withdraw in the next 30 hours or however many are left), then I will try to reimburse you more fully, amongst others.

Okay, the site is up for withdraws, and will be up until Wednesday 6am EST, 11am GMT.

Update - so Digitalocean is being rather unresponsive unfortunately, and I'm doubtful about the prospect of tracing this, to my great dismay.

In terms of giving out all that we have left, I have been getting a bunch of PMs, so I'll just clarify here.

--

At the going rate of about 0.012 (on cryptsy), with all of the funds that the exchange still has, we can afford to let everyone withdraw 58% of their total balances and orders.

I'll put up the site soon (in around an hour), and give everyone around 36 hours to withdraw all of their funds, and then I will close the site again indefinitely, unless new information from DO comes to light.

In case anyone wasn't clear, you will still have BTC in your balance, but when you withdraw, it will ask you to enter a PTS address instead, and it will send you 0.012 * your BTC * 58%.

If at the end of the 36 hours the site still has some funds, I will pass that out manually to users most affected.

Do you think emailing [email protected] could help?

Have yet to decide - presumably something based on the going exchange rate?

Reply + more details at that link above ^

Reply + more details at that link above ^

Okay, so I still don't have all the details, but I can still provide a bit more info.

Our digital ocean VPS that was hosting the wallets got deleted randomly, and the billing information was removed, etc.

Also, the BTC wallet transferred its contents out, but not from the application, seems that someone got access to the VM itself.

Access logs on the digitalocean account show that someone logged in from a Norway IP (that's not a TOR node), and a similar IP on the same subnet logged into the VM itself.

No idea who this was.

My 'partner' was the only person with the password to this DO account, so either it was him, or his personal computer had a targeted key logger of some sort?

It's all so odd - I've asked digital ocean for more info/logs, but they haven't gotten back yet.

Maybe it was a disgruntled DO employee that saw bitcoin related traffic coming from the VM?

The PTS wasn't touched, so I still have access to that, and will return it to its owners; I'm thinking most likely to make it most fair that I  convert everyone's balances to PTS, and then reimburse everyone as best I can with what's left.

38 BTC were taken, I traced the payments, and they are now here: https://blockchain.info/address/1AKvP3NUmJQsfWXkTg6ZczURatKgAb2Cua
and here:
https://blockchain.info/address/16Z6e2qaxg84Kunk1wdT3pr94YJa2pSafR

The address that they went through is this one: https://blockchain.info/address/14wQsMaKWAmTHrEMKamnzCJxaewnFWP7Tg

which also made a small payment (.01) the same day to this address: https://blockchain.info/address/15MJUSKnkbX3cprXfjNwAWsssTG59SXnvd
which looks like someone's personal address, as it's been receiving and sending payments since February. If anyone can shed any light on that, please be my guest.

The IPs that logged into the server were: 109.201.154.210, and .205, maybe a VPN, maybe someone's actual IP? I looked at the computer there, and apparently there is a Bitcoin node. If anyone feels like playing detective/hacker, please be my guest.

I'm of course incredibly sorry that this happened, and not that it does much good at this point, but it was clearly signposted that this was a beta.

If I learn more from DigitalOcean (which I should, because they are at the center of this problem) then I'll post back here.

That withdraw was sent with this TX ID: afaca30dc1efce7f603b0917eeefb46cfe3e76c5720ab1ab2cb49e38a7e6ec9e

if it doesn't show up, try restarting your wallet.

Okay everyone, thanks for bearing with us.

We have resolved our internal issue, and the exchange will be moving back to Coingrounds in the very near future.

Thanks for your support of the exchange and of me, we've got a great community here!

more details: https://www.bit-u.com/news

Please note: when moving back to coingrounds, I will be joining with two other people in management of the site, so if you wish to withdraw your balance under the current scenario, please do so before 12pm (noon) EST tomorrow, the 21st.