News for hackers. Stuff that matters.
Re:FBI Looking for Hashflare Victims by avsteele on Friday January 06, 2023 @08:08AM (#34274199)
That's fascinating.

It would seem to set up a situation where your incentive, if you suspect a Ponzi scheme, is to quietly withdraw your money early then keep your mouth shut. Unfortunate if true.

Re:FBI Looking for Hashflare Victims by londons_explore on Friday January 06, 2023 @08:54AM (#34274542)
I would imagine the FBI to be able to trace the holders of all the big withdrawals through the blockchain.
Re:FBI Looking for Hashflare Victims by yellow_lead on Friday January 06, 2023 @10:19AM (#34275569)
How? The blockchain doesn't store names or SSNs for every address. If the victim/user uses a mixer they can get their coins out easily and anonymously.
Re:FBI Looking for Hashflare Victims by chrisjc on Friday January 06, 2023 @11:25AM (#34276688)
I've been watching some of Coffeezilla's videos lately and he often gets into the analysis of "following the money" from one crypto wallet to another to show how lots of his subjects conducted their scams.

Were these individuals just sloppy (probably) or is there some kind of forensic analysis that can be performed blockchains to trace the path of tokens/funds/credits through a mixer?

Although I know nothing about crypto, blockchain, defi, I imagine credits/tokens/funds can be split and merged in every imaginable way by a "mixer" and transactions can probably occur across different blockchains via exchanges as well as occur outside in the real world, but I'm curious about any sort of signal that might be extracted from such analysis, other than signals arising from just pure sloppiness.

BTW, I'm not disputing your asserting about being able to track people... more about breadcrumbs in general, even if they're anonymous.

Re:FBI Looking for Hashflare Victims by yellow_lead on Friday January 06, 2023 @12:48PM (#34278186)
I watch those videos as well but many of those influencers are dumb enough to put their wallets in their twitter bios (eg their ENS names), or its because they are linked to their project from the flow of large amounts of tokens.
Re:FBI Looking for Hashflare Victims by limaoscarjuliet on Friday January 06, 2023 @04:56PM (#34281824)
You are anonymous as long as you have not used your wallet somewhere where you can be identified. Read about "welcome to video" child porn bust possible due to chainanalysis. From https://www.wired.com/story/tracers-in-the-dark-welcome-to-v...

Chainalysis had combined these techniques for de-anonymizing Bitcoin users with methods that allowed it to “cluster” addresses, showing that anywhere from dozens to millions of addresses sometimes belonged to a single person or organization. When coins from two or more addresses were spent in a single transaction, for instance, it revealed that whoever created that “multi-input” transaction must have control of both spender addresses, allowing Chainalysis to lump them into a single identity. In other cases, Chainalysis and its users could follow a “peel chain”—a process analogous to tracking a single wad of cash as a user repeatedly pulled it out, peeled off a few bills, and put it back in a different pocket. In those peel chains, bitcoins would be moved out of one address as a fraction was paid to a recipient and then the remainder returned to the spender at a “change” address. Distinguishing those change addresses could allow an investigator to follow a sum of money as it hopped from one address to the next, charting its path through the noise of Bitcoin’s blockchain.

Re:FBI Looking for Hashflare Victims by pjc50 on Friday January 06, 2023 @11:48AM (#34277111)
Note that everybody who uses a mixer is potentially participating in money laundering, sanctions evasion, etc.

The whole premise is that you put money in and are given some different money out. But where does your money that you originally put in go? If it went to North Korea, congratulations on your crime.

Re:FBI Looking for Hashflare Victims by yellow_lead on Friday January 06, 2023 @12:57PM (#34278353)
I would be interested if you've heard of any prosecutions against individuals solely for using a mixer. In itself, I don't believe that it is illegal to use a mixer, but it is likely illegal to operate a mixer in most countries.
Re:FBI Looking for Hashflare Victims by aaaaaA3 on Friday January 06, 2023 @06:22PM (#34282819)
I've been convicted of money laundering in an European country for far less than using a mixer, so probably yes.

I merely sold 5000 euros worth of bitcoin to a Chinese OTC exchanger. There wasn't any real legal theory behind the charges. The court and prosecutor just assumed without any evidence that 1) the money must have been from criminal source and 2) I was using the Chinese exchanger specifically to obscure the source of those funds and not because he was someone I'd been working with since before cryptocurrencies existed.

I received a suspended sentence, wasn't worth appealing to recover the 5000 euros. Wasn't gonna get rid of the suspended sentence, there were counts I was totally guilty of.

Re:FBI Looking for Hashflare Victims by yellow_lead on Saturday January 07, 2023 @07:04AM (#34287305)
Wow, that sounds shitty - sorry.
Re:FBI Looking for Hashflare Victims by jerf on Friday January 06, 2023 @09:16AM (#34274762)
This is an important aspect of the financial world to understand, because a lot of things work this way. It doesn't have to be a "Ponzi scheme", this happens anywhere where a lot of people pool money together, nominally have an agreement that they can withdraw whenever they like, and that money is used for something illiquid, regardless of the reason for the illiquitity, resulting in a situation where if too many people withdraw at once, the fund can't cover it.

Ponzi schemes are an extreme example, because the fund is illiquid because it lied about its investments and simply stole the funds, meaning there's absolutely no way to cover.

But there's a lot of ways this can occur. This basically describes a "bank run"; you nominally have an agreement you can withdraw your cash at any time, but if everybody does it at once there's a problem because the bank is using it to do things like fund mortgages, which can not simply be called back in instantly if needed. Even if the bank has the right to do that, and for various things it sometimes does (taking "financial instrument" generally and not just "US mortgage"), it would still be squeezing blood from a stone; they can demand it but it doesn't mean they'll get it.

In recent news, Blackrock suspended withdrawing from a UK real estate fund, because investors have been withdrawing at a rate that would require them to liquidate their holdings at fire sale rates, further depressing the fund's value: https://uk.finance.yahoo.com/news/blackrock-halts-withdrawal... Same sort of thing. No "Ponzi" scheme here; there's some legitimate financial stress, but that stress would only be exacerbated by letting everyone withdraw. (Whether you agree that it is justified to halt withdrawals in this case or not, I'm just using it as an example of the generality of this structure.)

I can't pull it up quickly in a news article because I'm not coming up with the right search terms to pull it out of the noise of constant financial news, but when Janet Yellen was Treasury Secretary, she had floated a trial balloon about trying to fix this incentive problem with bank runs against real banks with the same sort of clawback scheme, the idea being to disincentivize a bank run in the first place by making it so you don't get the pattern where the first few people get all their stuff and everybody else loses everything, which is a huge contributor to the run occurring in the first place. The game theory on this one gets a bit complicated if you think about it. e.g., OK, if everybody else is going to sit tight because this scheme incentivizes them to stay in the bank, then it's safe for me to withdraw everything because the bank run was prevented in the first place. If they then hold things together "long enough", then I can say I did it for my own reasons, not the bank run that was delayed for six months while everyone else sat tight, before an ultimate collapse. But if everybody thinks that way... etc. Not clear to me whether this can actually prevent bank runs, which I mean straight, not as a weak sarcastic "no this obviously wouldn't work". Not clear. Complicated analysis.

Re:FBI Looking for Hashflare Victims by mindslight on Friday January 06, 2023 @11:08AM (#34276359)
I get the general concept, but trying to apply it to bank deposits is terrible. The whole point of banking regulations and FDIC insurance are to make it so banks are an abstraction where the customers don't have to care what a bank is invested in (for better and for worse). The straightforward way to reduce the risk of bank runs is to increase the reserve requirements which I believe is the exact opposite of what the Fed has been doing.
Re:FBI Looking for Hashflare Victims by jerf on Friday January 06, 2023 @12:34PM (#34277936)
The FDIC has already come perilously close to running out of money once. It can happen again.

I believe risk can be moved around, but it can't be eliminated. This is probably fairly mainstream Wall Street analysis, too. I also believe that all attempts to move around risk must also increase it on the net, e.g., if you do the extremely popular financial move of taking a modest chance of modest loss and stuffing all the risk into a small chance of total loss and then hoping that just never happens, that the total risk has increased. This is probably less mathematically provable, and depends on a lot of assumptions about how one compares various classes of risks. (I base my thinking on a variant of what you might call the "more or less efficient market hypothesis"; if there was a way to net reduce risk overall, it would probably already have been taken.)

The bank abstraction you refer to is in my opinion in that class of "extremely popular financial moves". Yes, it removes the modest risk of partial loss, but it moves the risk entirely into a small chance of total loss when the entire system comes down instead. I worry about the net effect of millions of little financial transaction that all perform that particular risk management move. It ends up creating a lot of easily-hidden correlations in the system, and no one entity (let alone person) can have a view of the whole situation.

In the end, the risk is moved around, but the bank run is still a possibility and no amount of financial abstraction can truly remove the fact that the liquidity term mismatch is a fundamental aspect of such an operation that can't be erased, only managed.

Re:FBI Looking for Hashflare Victims by mindslight on Friday January 06, 2023 @01:10PM (#34278538)
I disagree with the applicability of your fundamental premise about risk. It seems reasonable when talking about setups to backstop risk or otherwise move it around, but the amount of risk can still be increased/decreased by adjusting the fundamentals. The straightforward way to reduce the risk of running out of slack in the system is to have more of a buffer to begin with, which is why I mentioned reserve requirements.

Furthermore I'd argue that insuring deposit banks through the asset-limited FDIC is yet another setup to socialize catastrophic losses. If bank deposits were guaranteed by the Fed directly, the Fed could print an unlimited number of dollars to make depositors whole, thus completely eliminating the risk that a USD-denominated deposit simply vanished. (The realized damage would instead be expressed as monetary inflation)

Re:FBI Looking for Hashflare Victims by JumpCrisscross on Friday January 06, 2023 @06:26PM (#34282853)
> FDIC has already come perilously close to running out of money once. It can happen again

The FDIC is backed by the full faith and credit of the United States. It legally cannot run out of money.

Its fees are mostly an accountability mechanism on the bureaucracy. If the FDIC burns through its reserves and has to ask the Treasury for money, it failed at risk management. Some folks may get fired. But the bills will be paid.

Re:FBI Looking for Hashflare Victims by dragonwriter on Friday January 06, 2023 @06:31PM (#34282901)
> The FDIC has already come perilously close to running out of money once.

The FDIC is legally backed by the full faith and credit of the United States, its liabilities beyond its own resources, to the extent that such may exist, are debts of the United States.

Which has a fundamental power to mint US currency, and thus cannot meaningfully “run out” of it.

Re:FBI Looking for Hashflare Victims by pjc50 on Friday January 06, 2023 @11:52AM (#34277188)
Hmm. Duration mismatching is kind of fundamental to the loan business. There used to be a lot more savings accounts that didn't offer at-sight withdrawal, partly because of this; if you make people wait 30 or 90 days you can have more time for things to settle.

On the other hand, in order to do that, you have to pay them a higher interest rate to make it worthwhile. And rates have been driven to the floor.

Re:FBI Looking for Hashflare Victims by HPsquared on Friday January 06, 2023 @04:16PM (#34281208)
Low rates have certainly broken a lot of incentive structures that used to work.
Re:FBI Looking for Hashflare Victims by itsoktocry on Friday January 06, 2023 @09:52AM (#34275219)
>It would seem to set up a situation where your incentive, if you suspect a Ponzi scheme, is to quietly withdraw your money early then keep your mouth shut.

How so? Law enforcement can claw it back, and the earlier you withdraw, the less your gains.

Re:FBI Looking for Hashflare Victims by Scoundreller on Friday January 06, 2023 @10:59AM (#34276190)
The limits depends on the jurisdiction.

And harder to claw back funds after you’re already dead and the estate has been settled. Or you’ve already spent it all.

Re:FBI Looking for Hashflare Victims by saghm on Friday January 06, 2023 @11:11AM (#34276423)
I feel like I'm missing something here. Are you saying the optimal strategy is to withdraw early, keep your mouth shut, and then...die? Are these schemes usually long-lasting enough that a non-trivial number of people who invest early would be expected to die by the time they're discovered?
Re:FBI Looking for Hashflare Victims by drunkonvinyl on Friday January 06, 2023 @11:16AM (#34276511)
As long as you don’t claw back after you die.
Re:FBI Looking for Hashflare Victims by maerF0x0 on Friday January 06, 2023 @04:45PM (#34281651)
> Or you’ve already spent it all.

This is only true if you never have income in the future. They can garnish and/or reach in and take other assets

Re:FBI Looking for Hashflare Victims by themitigating on Friday January 06, 2023 @10:25AM (#34275660)
Or move to another country without extradition, something I'm surprised more people don't do.
Re:FBI Looking for Hashflare Victims by pjc50 on Friday January 06, 2023 @11:49AM (#34277127)
There are a lot fewer of those than you expect. And of course if you need to do that, you can never come back to see your family even for a visit.
Re:FBI Looking for Hashflare Victims by fortuna86 on Friday January 06, 2023 @04:29PM (#34281430)
statute of limitations?
Re:FBI Looking for Hashflare Victims by hermitdev on Friday January 06, 2023 @05:42PM (#34282380)
I'm not a lawyer, but I think statute of limitations only protects you against charges being filed for a crime performed X years ago. It doesn't protect you if you run from charges for X years.
Re:FBI Looking for Hashflare Victims by fortuna86 on Saturday January 07, 2023 @02:49AM (#34286100)
so the timer only begins when you are in a certain jurisdiction? That seems unenforceable..
Re:FBI Looking for Hashflare Victims by themitigating on Friday January 06, 2023 @07:37PM (#34283539)
Right but to avoid jail or even the potential of jail.
Re:FBI Looking for Hashflare Victims by vkou on Friday January 06, 2023 @12:39PM (#34278030)
No, it doesn't, because all Ponzi schemes will always unravel. Keeping quiet isn't going to help you.

What this does is it creates an incentive to not invest in a ponzi, period. Without this rule, it makes sense for me to invest into something that I think is a Ponzi, as long as I believe that I'll be able to cash out before it collapses.

Re:FBI Looking for Hashflare Victims by eastbound on Friday January 06, 2023 @06:03PM (#34282637)
Aren’t Ponzi schemes based on people being gullible? To protect gullible people from falling victim, we ask them to foresee in advance that they’ll fall into a Ponzi scheme…