News for hackers. Stuff that matters.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @01:08PM (#16241401)
Posting this as a top level comment as well (probably a better idea):

The coins stolen are XEM (https://nem.io/) not Bitcoin. They're currently tracking the stolen coins to ensure they are not sold.

Preliminary evidence suggests that it was a private key stolen and not a network problem.

Disclaimer: Am somewhat associated with the team, and I hold a small amount of XEM.

Feel free to ask questions.

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by justboxing on Friday January 26, 2018 @03:23PM (#16242567)
Over 100 Million XRP ( Ripple ) worth 130 Million USD was also allegedly stolen.

Source:

Here's the original tweet from Bloomberg Tech Reporter in Toyko, Yuji Nakamura. https://twitter.com/ynakamura56/status/956790270036619265

Tweet In English:

> Japanese crypto exchange Coincheck halts withdrawals, deposits, trading in NEM. Rumors is a big chunk was moved from their wallet. Also seems >$130m of XRP moved out too. I called Coincheck, but they wouldn't answer questions and asked me to email them

Here's the actual Ripple XRP Transaction that is moving the 101-ish Million XRP out of the Coincheck account. https://xrpcharts.ripple.com/#/transactions/FC32DBF1C0CE6780...

Here's a news page / story that is following this and updating it frequently. It mentions that XRP was also stolen in addition to NEM. https://bitpinas.com/news/coincheck-suspends-nem-trading-rum...

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by TheAdamist on Friday January 26, 2018 @09:28PM (#16244500)
The stolen 101m xrp moved into an account that already had 3billion xrp? That seems odd to begin with. Is it another exchange or coin tumbler or something?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ribosometronome on Saturday January 27, 2018 @12:05AM (#16244936)
That wallet only has 45 transactions on it -- that doesn't seem reasonable for a tumbler or an exchange, does it?

Also, 3 billion XRP means that they have 12% of all circulating XRP right now.

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @05:11PM (#16243318)
The 530M figure was in XEM (been floating around $1) - but that may be an additional amount.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by onewhonknocks on Friday January 26, 2018 @01:11PM (#16241428)
'Am somewhat associated with the team'

Can you please be more specific? It was almost not worth saying unless you'll be more specific IMHO.

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @01:18PM (#16241498)
Sorry, I'll clarify. I'm in the chat group quite a bit and have contributed to the wallet source code. I said partially as I'm not involved as an "official" capacity.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by onewhonknocks on Friday January 26, 2018 @01:36PM (#16241658)
Thank you for responding!
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by AznHisoka on Friday January 26, 2018 @04:41PM (#16243122)
So if they're tracking the coins to ensure they're not sold, and assuming it's never sold, wouldn't that mean the price of XEM should increase, as the supply has now decreased?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by twinkletwinkle on Friday January 26, 2018 @05:00PM (#16243239)
If 100 million of them were stolen you could also imagine that decreasing demand.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by VMG on Friday January 26, 2018 @01:24PM (#16241555)
any calls for a hardfork yet?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by larkeith on Friday January 26, 2018 @01:29PM (#16241589)
The president of the NEM.io Foundation is against it [1]

[1] https://twitter.com/2017Lon/status/956880456154099712?s=17

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @01:31PM (#16241609)
Nope, they're against hardforking. The current measure being taken is just tainting the hacker's accounts and blocking them at exchanges.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by michaelbuckbee on Friday January 26, 2018 @06:07PM (#16243624)
Genuinely curious: How do you know a private key is stolen with a cryptocurrency? Is there some sort of secondary proof mechanism?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by diegocerdan on Friday January 26, 2018 @06:16PM (#16243671)
If funds move out from your wallet without your intervention then somebody else has to have your key.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by michaelbuckbee on Friday January 26, 2018 @08:54PM (#16244384)
Yes, but from the exchange's perspective: How do they know?

I'm presuming that in this case (given the amount) that this was not a typical user. But is there some framework of dispute for lesser amounts?

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ripberge on Friday January 26, 2018 @09:26PM (#16244490)
If a key was indeed stolen, they must have stole the keys to the exchange's wallet, not a user's wallet. I heard in the press conference they don't have a multi-sig wallet so all it took was one key and not multiple keys.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by infinity0 on Saturday January 27, 2018 @05:58AM (#16245738)
It is not possible to move funds unless you have the private key, or if you have broken the cryptographic scheme the key uses.

Since the funds have moved (visible on the overall distributed blockchain system, where everything is public), either of the two scenarios must have happened. It really is that simple, there are no other "moving parts" or "possible human error" in other parts of the system here.

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by michaelbuckbee on Saturday January 27, 2018 @11:30AM (#16246787)
So you have a case like this: the funds were moved with the private key. 24 hours after the owner comes and says: ‘I didn’t do that! Someone else must have copied my key and made that transaction!’

How does the exchange handle that? What’s the dispute mechanism?

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by aptwebapps on Saturday January 27, 2018 @12:00PM (#16246903)
It's the exchange's own key that is thought to be compromised, not one of their customers'.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by acct1771 on Friday January 26, 2018 @09:05PM (#16244424)
Dispute?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ozmbie on Saturday January 27, 2018 @08:47AM (#16246194)
You can create addresses which require multiple valid signatures (private keys) in order to spend the contents. And other sort of smart-contracts.

But it’s still based around having the correct mathematical keys to unlock an address.

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by JumpCrisscross on Friday January 26, 2018 @01:42PM (#16241724)
Sorry, do you have a source for any of your claims?
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @06:27PM (#16243744)
The Japanese press conference - English translations are here: https://twitter.com/kanemoneyqian
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by tzahola on Friday January 26, 2018 @01:51PM (#16241811)
>and I hold a small amount of XEM.

*held

:^)

Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by CyberDildonics on Friday January 26, 2018 @02:10PM (#16241991)
I doubt someone who actually understands crypto currencies is keeping their money on an exchange, since this exact thing can happen.
Re:Tokyo-based cryptocurrency exchange hacked, losing $530M:... by ReverseCold on Friday January 26, 2018 @02:55PM (#16242359)
Yup, my coin is safe.