<html> <p> https://www.steemimg.com/images/2016/08/16/Untitled165a45.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled02f1d63.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled2c1463.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled3ce4a0.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled4b220d.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled5926f3.jpg</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled6d67e4.png</p> <p>https://www.steemimg.com/images/2016/08/16/Untitled7c4275.jpg</p> <p> 1. See <a href="https://www.bitfinex.com/terms">BitFinex Terms of Service</a> (accessed 09-Aug-2016) </p> <p> 2. See the <a href="https://www.bitgo.com/p2sh_safe_address">BitGo White Paper</a> (accessed 09-Aug-2016) </p> <p> 3. See the BitGo’s <a href="https://blog.bitgo.com/bitfinex-breach-update/">BitFinex Breach Update</a> (accessed 09-Aug-2016) </p> </html>
| author | sotnd1996 |
|---|---|
| permlink | overview-of-bitfinex-hack-the-problem-with-redundant-controls |
| category | bitcoin |
| json_metadata | {"tags":["bitcoin","blockchain","hack","money","bfx"],"image":["https://www.steemimg.com/images/2016/08/16/Untitled165a45.jpg","https://www.steemimg.com/images/2016/08/16/Untitled02f1d63.jpg","https://www.steemimg.com/images/2016/08/16/Untitled2c1463.jpg","https://www.steemimg.com/images/2016/08/16/Untitled3ce4a0.jpg","https://www.steemimg.com/images/2016/08/16/Untitled4b220d.jpg","https://www.steemimg.com/images/2016/08/16/Untitled5926f3.jpg","https://www.steemimg.com/images/2016/08/16/Untitled6d67e4.png","https://www.steemimg.com/images/2016/08/16/Untitled7c4275.jpg"],"links":["https://www.bitfinex.com/terms","https://www.bitgo.com/p2sh_safe_address","https://blog.bitgo.com/bitfinex-breach-update/"]} |
| created | 2016-08-16 13:13:30 |
| last_update | 2016-08-16 13:13:30 |
| depth | 0 |
| children | 1 |
| last_payout | 2016-09-16 13:26:15 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.020 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 963 |
| author_reputation | 147,650,885,487 |
| root_title | "Overview of BitFinex Hack - The problem with redundant controls" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 833,832 |
| net_rshares | 202,693,597,058 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| johnerfx | 0 | 10,574,373,054 | 100% | ||
| altoz | 0 | 32,030,780,393 | 100% | ||
| killerstorm | 0 | 151,618,531,853 | 100% | ||
| johnerminer | 0 | 692,586,897 | 100% | ||
| sotnd1996 | 0 | 5,175,094,924 | 100% | ||
| gary-smith | 0 | 1,973,413,343 | 100% | ||
| qsnd1996 | 0 | 239,384,607 | 100% | ||
| sivirpaxx | 0 | 112,630,764 | 100% | ||
| builder | 0 | 217,483,476 | 100% | ||
| shienleen | 0 | 59,317,747 | 100% |
The main problem seems to be that BitGo and Bitfinex agreed on a scheme where BitGo would sign transactions without any responsibility to ensure that they aren't obvious theft transactions. There is no point in BitGo's signature being required if BitGo does whatever Bitfinex tells them to and has no responsibility whatsoever. Whatever Bitfinex did to tell BitGo to sign a transaction they could just as well have done to sign it themselves. The reason for a second party is to require two completely independent points of failure. If one completely controls the other, they are effectively one party.
| author | joelkatz |
|---|---|
| permlink | re-sotnd1996-overview-of-bitfinex-hack-the-problem-with-redundant-controls-20160817t112354544z |
| category | bitcoin |
| json_metadata | {"tags":["bitcoin"]} |
| created | 2016-08-17 11:23:54 |
| last_update | 2016-08-17 11:23:54 |
| depth | 1 |
| children | 0 |
| last_payout | 2016-09-16 13:26:15 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 602 |
| author_reputation | 8,350,422,184,586 |
| root_title | "Overview of BitFinex Hack - The problem with redundant controls" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 850,863 |
| net_rshares | 0 |
hiveblocks