News for hackers. Stuff that matters.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by capableweb on Thursday February 03, 2022 @06:44AM (#30191255)
> Where do you find employees, even $500K/year ones, you would trust not to pick up $300m just sitting there in the open for the taking?

As with any crime, you rely on the risk (and potential punishment) being higher than the reward. In this case, because it's based on blockchains that are public, immutable and very easy to trace, it'll be hard to impossible for the one doing the drain to actually get away with it. They can try to go to a exchange to get actual money out of it, but the exchange will most likely have blacklisted the addresses involved. They can try to tumble it, but the exchanges will mostly likely blacklist your account if they see any tumbling involved as they can't fulfill the KYC/AML laws then. They can try to sit on it for the future, but eventually they are gonna want to cash out somehow, and then the two previous issues get in the way again.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by gzer0 on Thursday February 03, 2022 @06:59AM (#30191359)
How are "Coinjoined" transactions [1] able to be definitively traced to any one individual?

Every coin-mixing event can be interpreted 1,496 different ways. With each cycle increasing interpretations exponentially. "Every Whirlpool is structurally sound with 100% maximum entropy; Never cycling with yourself; Never cycling previously seen coins together; Never any deterministic links between inputs and outputs; And never any address reuse."

The authors of this coinjoin protocol use Boltzmann analysis to determine 1,496 possible linkages.

[1] https://kycp.org/#/323df21f0b0756f98336437aa3d2fb87e02b59f19...

[2] https://samouraiwallet.com/whirlpool

If everyone starts doing this, will all coins eventually become tainted? I don't see a way out of this problem.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by capableweb on Thursday February 03, 2022 @07:02AM (#30191386)
> If everyone starts doing this, will all coins eventually become tainted? I don't see a way out of this problem.

Indeed, if everyone started doing this (or everyone started using Zcash with z-addrs), then you might be able to get away with it. But that's not where we're at today.

Try signing up to Coinbase and funnel $320M worth of ETH via that account. They will 100% lock your account and ask for proof of where it comes from. If it comes from after doing a bunch of tumbling, they will go harder against you to prove where it comes from. Any big exchange will do the same diligence as otherwise they themselves will get into trouble with the law.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by logifail on Thursday February 03, 2022 @07:53AM (#30191807)
> Try signing up to Coinbase and funnel $320M worth of ETH via that account. They will 100% lock your account and ask for proof of where it comes from. If it comes from after doing a bunch of tumbling, they will go harder against you to prove where it comes from. Any big exchange will do the same diligence as otherwise they themselves will get into trouble with the law.

So cryptocurrencies are decentralized and free of regulation ... right until they aren't?

To be fair, if I walked into my local bank with $320M in cash I'd face the same problem.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by mlac on Thursday February 03, 2022 @08:18AM (#30192014)
Yeah but you could take cash to the grocery store, gas station, mall, and restaurant.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by solveit on Thursday February 03, 2022 @11:50AM (#30194849)
Cryptocurrencies[1] are trying to be decentralized and free of regulation. But it turns out the world is run by people who like regulation.

[1]: There are so many people in crypto with such diverse views that it doesn't really make sense to say cryptocurrencies are X for any non-tautological value of X. Some people are 'code-is-law' crypto-anarchists, and some people are actually sane and can't wait for the law to get its shit together so they can build their cool decentralised prediction market without accidentally losing the ability to take international flights or something.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by logifail on Thursday February 03, 2022 @12:26PM (#30195454)
> Cryptocurrencies[1] are trying to be decentralized and free of regulation

Without wishing to be seen as unnecessarily snarky, so was Napster.

> it turns out the world is run by people who like regulation

Indeed ... and Napster found that out fairly quickly, too. Although: it was good while it lasted (speaking as an ex-Napster user...)

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by gzer0 on Thursday February 03, 2022 @07:09AM (#30191426)
Since 1 wallet != 1 unique individual; it could be done. The points you bring up are fair, yes. But I'd also imagine if you were able to pull off a $350 million heist, you'd have some sense about obfuscating your withdrawls.

Not to mention, converting your initial crypto tokens into another currency, and then another currency, and eventually making it to Fiat. For example, converting to Monero and back to BTC would be near impossible to trace.

On top of this, there is Paxful which you can utilize for cash payments.

There are many, many ways if you are determined. I don't think anyone would be silly enough to attempt a $350 million withdrawal from Coinbase.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vageli on Thursday February 03, 2022 @10:13AM (#30193422)
Where can you swap BTC for monero while avoiding KYC? Via wrapped versions of both coins on the eth blockcain or something?
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by gzer0 on Friday February 04, 2022 @03:17AM (#30204152)
I have heard of people doing very unorthodox things, such as, buying virtual currency via BTC in an online MMORPG and then selling that virtual "gold" for a slight loss to a different vendor who pays out in Monero.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by 323 on Thursday February 03, 2022 @09:50AM (#30193118)
> For example, converting to Monero and back to BTC would be near impossible to trace.

You still have the problem of justifying where you got the initial crypto if anyone audits you. "I just remembered about some crypto I mined in 2010" will not cut it.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vageli on Thursday February 03, 2022 @10:14AM (#30193448)
With that much at stake, it seems easier to try a public spectacle like the guy who is digging up a landfill to find an old hard drive with a btc wallet.

https://www.cbsnews.com/news/hard-drive-lost-bitcoin-landfil...

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by paulpauper on Thursday February 03, 2022 @11:07AM (#30194183)
create a phony company, hire yourself , and then pay yourself for consulting work. there are tons of ways of doing it
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by sillysaurusx on Thursday February 03, 2022 @07:13AM (#30191460)
Localbitcoins won’t.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by paulpauper on Thursday February 03, 2022 @11:06AM (#30194159)
then break it up into $300k chunks. anyone smart enough to steal so much in such a sophisticated manner is smart enough to launder it
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by mrep on Thursday February 03, 2022 @09:38AM (#30192943)
Actually, I think it is easier than ever. You can move your stolen crypto to tornado.cash which pools your crypto together with everyone else's and then allows you to anonymously pull it out from the pool in .1/1/10... increments allowing you to effectively wash it. From there, you just need to launder it to legitimize it which you could do by creating some BS coin or NFTs with your real name attached to it which just so happens to get a bunch of "investors" (really just you investing the coins you stole).
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by PinguTS on Thursday February 03, 2022 @07:08AM (#30191422)
I thought it is all decentralized. I thought that it the whole point of Web3. Dou you want to tell me it is not. That there are central instances, which I can control? Wow.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by capableweb on Thursday February 03, 2022 @07:09AM (#30191427)
https://news.ycombinator.com/item?id=30191268

I made no arguments for/against decentralization, I didn't mention web3 nor that there is no central instances or that no one controls nothing in the cryptocurrency world. What are you even doing here on HN if you can't actually reply with a good faith argument? Please save that for Reddit or wherever that happens normally.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by moron4hire on Thursday February 03, 2022 @08:38AM (#30192202)
As a user, you don't get equal access to the Blockchain. You can't make any transactions unless someone wins the mining/staking lottery and then writes a block for you, an operation that is incredibly expensive to achieve. While the Blockchain itself is a distributed ledger, your access to it is not decentralized.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by JaimeThompson on Thursday February 03, 2022 @08:15AM (#30191999)
Modern crypto is all about being the new middle men while claiming to be decentralized.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by unreal37 on Thursday February 03, 2022 @07:17AM (#30191491)
Transferring tokens to dollars is not decentralized. International (fiat) banking is tightly controlled.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by PinguTS on Thursday February 03, 2022 @07:23AM (#30191548)
What if I don't need fiat, because many things can be payed in some form of crypto like in Metaverse?

What if round-trip those through many different cryptos?

What if round-trip those through funny NFTs and with that even inflate NFTs?

What if a combine many of those steps?