create account

Hacking Bitfinex by lenar79

View this thread on: hive.blogpeakd.comecency.com
· @lenar79 ·
Hacking Bitfinex
http://bits.media/upload/medialibrary/06a/06a70d9221d6832c713b48096597f3b4.jpg
Accounts of the Hong Kong Stock Exchange customers are protected multipodpisi technology. Provider of security services acted BitGo company. However, these measures were not enough to prevent the theft of nearly 120 thousand Bitcoins.

On the eve of Bitfinex reported a massive attack, which resulted in 119 756 were stolen BTC (more than $ 73 million at the time of the attack). Exchange announced the suspension of all operations and attracted the police investigation. BitGo, in turn, stated that their servers were not hacked.

However, as noted Reddit users, the application for protection with the help of multipodpisi if Bitfinex were more a marketing ploy - two of the three keys stored by the exchange itself (one in cold storage), and the third - BitGo. An exception was made only for US users - they got the third key in the order after a warning by the Commission and the US Commodity Futures Trading Markets addressed Exchange. To confirm the transaction required the confirmation of the three two keys. If there were only compromised keys on the side of Bitfinex, their accounts would remain intact. But at least one US user said that has also become a victim of theft.

Under the current security model, when the user initiated the transaction, Bitfinex signed it and sent BitGo for verification. As the current of history, visitors to the provider automatically, without any verification. All transactions were signed BitGo, confirmed the representative exchange Zane Tuckett.

"I said that, most likely, the vulnerability has been on our side, not on the part of Bitgo, I also said that our key cold, was not likely to be compromised," - he wrote in the discussion.

According to representatives Bitfinex, its internal rules provide for a limit on the removal of Bitcoin, but did not work the system, the cause of this failure is to establish an investigation. Cold keys stored by the exchange, were not available to the hacker. Tuckett also assures that exchange officials had nothing to cracking - a suspicion voiced by a number of Reddit users - although this version is not excluded in the investigation.

Moderator Theymos Bitcoin community tazhe spoke about the incident. According to him, Bitfinex should not have so much trust BitGo, whose security model was not on the level.

«BitGo sells a false sense of security. In Bitfinex, apparently, a great cold storage has been established, but then they somehow convinced that BitGo be safer, though in fact they are sold for cold storage of 100% hot storage. "

"On the other hand, I was informed that BitFinex was warned about the vulnerability, BitFinex had to know about it, and they have lost the keys. So I would say that 90% of the blame lies with BitFinex, although BitGo too should be condemned for the sale of services, which is very unsafe in the real world. "

Some users, such as bitbody2, condemn multipodpisi technology as extremely vulnerable:

"Why is one party holds all have two key? Why do we use multipodpis? If the key was the client, unless it might not prevent the unauthorized movement of funds? How it was decided that this scheme in general appeared most key holder? [...] Why is the majority holder of the keys - it is a good idea? Or something I do not know? "

Bitfinex promised to keep people up to date with current events as quickly as possible: for example, a company representative Zane Tuckett puts information in the thread Reddit. He also confirmed the earlier statement that had been stolen only Bitcoins, while laytkoiny, tokens ether and other assets remained inviolable.

"As long as we consider the individual loss of customers, we may need to close all open margin positions, related financial and / or indirectly affected by the burglary. Any transaction will be carried out at current market prices at 18:00 UTC (21:00 MSK - CoinFox) », - the exchange said in a statement.

Bitcoin has lost 11% of the cost in connection with the reports of hacker attack, reaching the lowest level since May of this year. Market participants fear that the attack on Bitfinex will be the first in a series of hacker attacks on other kriptovalyutnye Exchange, rushed to sell assets in Bitcoins. Daily trading volume reached 601 thousand Bitcoins ($ 331.3 million), which is almost twice higher than that for days before.

As of 9:15 MSK cryptocurrency trading at $ 539.7. In the evening on August 2nd Bitcoin prices have fallen by 11%. The local minimum in the period of decline has reached a level of $ 512. At this price Bitcoin is not traded since the end of May. Today Bitfinex is the third most popular Bitcoin market, its daily trading volume is about 16 thousand BTC (about $ 3.7 million).
👍  , , , ,
properties (23)
authorlenar79
permlinkhacking-bitfinex
categorybitcoin
json_metadata{"tags":["bitcoin","steem","steemit","blokcheyna","ru"],"image":["http://bits.media/upload/medialibrary/06a/06a70d9221d6832c713b48096597f3b4.jpg"]}
created2016-08-03 12:01:42
last_update2016-08-03 12:01:42
depth0
children2
last_payout2016-09-03 00:01:45
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length4,774
author_reputation-424,880,418,803
root_title"Hacking Bitfinex"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id579,283
net_rshares459,852,087
author_curate_reward""
vote details (5)
@backetri ·
Keep up the great work @lenar79 
 Upvoted 
👎  
properties (23)
authorbacketri
permlinkhacking-bitfinex
categorybitcoin
json_metadata""
created2016-08-03 12:02:15
last_update2016-08-03 12:02:15
depth1
children0
last_payout2016-09-03 00:01:45
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length42
author_reputation-511,794,737,588
root_title"Hacking Bitfinex"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id579,303
net_rshares-10,568,982
author_curate_reward""
vote details (1)
@itay ·
$0.03
I upvoted You
👍  
properties (23)
authoritay
permlinkre-hacking-bitfinex
categorybitcoin
json_metadata{}
created2016-08-28 11:00:42
last_update2016-08-28 11:00:42
depth1
children0
last_payout2016-09-03 00:01:45
cashout_time1969-12-31 23:59:59
total_payout_value0.022 HBD
curator_payout_value0.007 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length13
author_reputation5,102,472,394,558
root_title"Hacking Bitfinex"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id1,025,079
net_rshares76,944,094,162
author_curate_reward""
vote details (1)