http://bits.media/upload/medialibrary/06a/06a70d9221d6832c713b48096597f3b4.jpg
Accounts of the Hong Kong Stock Exchange customers are protected multipodpisi technology. Provider of security services acted BitGo company. However, these measures were not enough to prevent the theft of nearly 120 thousand Bitcoins.
On the eve of Bitfinex reported a massive attack, which resulted in 119 756 were stolen BTC (more than $ 73 million at the time of the attack). Exchange announced the suspension of all operations and attracted the police investigation. BitGo, in turn, stated that their servers were not hacked.
However, as noted Reddit users, the application for protection with the help of multipodpisi if Bitfinex were more a marketing ploy - two of the three keys stored by the exchange itself (one in cold storage), and the third - BitGo. An exception was made only for US users - they got the third key in the order after a warning by the Commission and the US Commodity Futures Trading Markets addressed Exchange. To confirm the transaction required the confirmation of the three two keys. If there were only compromised keys on the side of Bitfinex, their accounts would remain intact. But at least one US user said that has also become a victim of theft.
Under the current security model, when the user initiated the transaction, Bitfinex signed it and sent BitGo for verification. As the current of history, visitors to the provider automatically, without any verification. All transactions were signed BitGo, confirmed the representative exchange Zane Tuckett.
"I said that, most likely, the vulnerability has been on our side, not on the part of Bitgo, I also said that our key cold, was not likely to be compromised," - he wrote in the discussion.
According to representatives Bitfinex, its internal rules provide for a limit on the removal of Bitcoin, but did not work the system, the cause of this failure is to establish an investigation. Cold keys stored by the exchange, were not available to the hacker. Tuckett also assures that exchange officials had nothing to cracking - a suspicion voiced by a number of Reddit users - although this version is not excluded in the investigation.
Moderator Theymos Bitcoin community tazhe spoke about the incident. According to him, Bitfinex should not have so much trust BitGo, whose security model was not on the level.
«BitGo sells a false sense of security. In Bitfinex, apparently, a great cold storage has been established, but then they somehow convinced that BitGo be safer, though in fact they are sold for cold storage of 100% hot storage. "
"On the other hand, I was informed that BitFinex was warned about the vulnerability, BitFinex had to know about it, and they have lost the keys. So I would say that 90% of the blame lies with BitFinex, although BitGo too should be condemned for the sale of services, which is very unsafe in the real world. "
Some users, such as bitbody2, condemn multipodpisi technology as extremely vulnerable:
"Why is one party holds all have two key? Why do we use multipodpis? If the key was the client, unless it might not prevent the unauthorized movement of funds? How it was decided that this scheme in general appeared most key holder? [...] Why is the majority holder of the keys - it is a good idea? Or something I do not know? "
Bitfinex promised to keep people up to date with current events as quickly as possible: for example, a company representative Zane Tuckett puts information in the thread Reddit. He also confirmed the earlier statement that had been stolen only Bitcoins, while laytkoiny, tokens ether and other assets remained inviolable.
"As long as we consider the individual loss of customers, we may need to close all open margin positions, related financial and / or indirectly affected by the burglary. Any transaction will be carried out at current market prices at 18:00 UTC (21:00 MSK - CoinFox) », - the exchange said in a statement.
Bitcoin has lost 11% of the cost in connection with the reports of hacker attack, reaching the lowest level since May of this year. Market participants fear that the attack on Bitfinex will be the first in a series of hacker attacks on other kriptovalyutnye Exchange, rushed to sell assets in Bitcoins. Daily trading volume reached 601 thousand Bitcoins ($ 331.3 million), which is almost twice higher than that for days before.
As of 9:15 MSK cryptocurrency trading at $ 539.7. In the evening on August 2nd Bitcoin prices have fallen by 11%. The local minimum in the period of decline has reached a level of $ 512. At this price Bitcoin is not traded since the end of May. Today Bitfinex is the third most popular Bitcoin market, its daily trading volume is about 16 thousand BTC (about $ 3.7 million).