NiceHash Hacked, $62 Million of Bitcoin May Be Stolen (reddit.com)
New submitter Chir breaks the news to us that the NiceHash crypto-mining marketplace has been hacked. The crypto mining pool broke the news on Reddit, where users suggest that as many as 4,736.42 BTC -- an amount worth more than $62 million at current prices -- has been stolen. The NiceHash team is urging users to change their online passwords as a result of the breach and theft.
HaHA!
Did you learn anything? Nope? Still didn't? Don't you think you should by now?
Hacked by its employees more like
1) setup trading site
2) wait until the pot is full
3) announce hacked
4) keep the loot
NiceHash you got here. Be shame if anything happened to it. /got nuthin'
"The NiceHash team is urging users to change their online passwords as a result of the breach and theft." ... quick! Close the barn door.
Sheesh.
I set up mining on two of my computers for a week and earned $10. I guess the hacking of miners will only get more commonplace as people try to get their hands on "money printing" services.
Seems like the bitcoin value is unfazed despite this hack. Trending at near $14000 now.
What's the easiest way to make money off a bunch of people who are trusting you with their valuables? The only thing missing here is the insurance claim after the "theft"...
The first rule of Bitcoin is: never trust anyone anywhere ever
The second rule of Bitcoin is: keep telling yourself you're not the mark
Obliteracy: Words with explosions
What's truly bizarre to me, after looking at the Reddit thread, is all the people who are impatient that the app is shut down for 24 hours because they want to keep using it. This company just lost more than $60 million of its users' money, and the users are upset that there is a delay in them sending the company more of their money.
What? You lost our $60 million?! Well, gosh, we'll give you more, but be more careful this time...
In an age of digital currency, the digital vaults are pilfered by digital thieves. Anonymous entities stealing anonymous currency. Now we need digital dye packs and a means of chasing the digital Bonnies and Clydes down the dusty digital backroads. The problem for the courts: If the currency is really recognized and it can't be traced, was anything really stolen? The defense raises only a slim shadow of doubt by reminding each and every juror about the pictures they lost when they last upgraded their phones. Maybe the coin is just mislaid?
Sits back and laughs at the comedy show.
YOINK.
Back when bitcoin went over a dollar for the first time, I noticed that people were unusually willing to steal it. For your own personal safety, you should absolutely not draw attention to your possession of bitcoin. If you do, you will be targeted. Not just drivebys and portscans, but actual they-are-after-me targeted.
If you are unable to create distance between your identity and your identity as a bitcoin holder, like if you are doing a public project involving bitcoin, you absolutely positively must not let your security be amateur shit.
The first thing you must do is establish ironclad multilayer operational security. If you don't know what that is, or don't know what it means in a bitcoin project, stop - you are not tall enough for this ride. That is actually intended to be a bit less offensive than it sounds at first. It just means that you are too young (inexperienced) to have good odds.
There is no reason to have 10 bitcoins in an online wallet, much less 4600. Those keys should be printed on paper in a N-of-M scheme and distributed to the people who will be authorizing transactions.
Yes, people should be processing transactions of that size, not computers. Ideally, the never-online signing computer software would print out the candidate transaction in a format that puts the recipient addresses and amounts in the exact same location as the request sheet so that you can visually diff the two (hold them up to a strong light to make sure they are the same) before unlocking the key and passing it on to the next signing agent.
Never-online? Yup, there should be no electronic communication between the computer that occasionally has the signing keys decrypted in memory and the rest of the world. There are Free (and free) options for generating barcodes and QR codes and hardware scanners that can read them as keyboard input or virtual character device input. Generate the payment online, print it as a QR code. Scan it on the signing computer. Verify the transaction (human job!) Scan the key, type the passphrase to decrypt it. The signing computer can then print the signed or partially signed transaction as another QR code that you can take back to the online computer for sending (or sending to the next signer).
If your security plan is not at least this good, you should under no circumstances be handing bitcoin that doesn't wholly belong to you and that you aren't willing to lose.
On the other hand, it seems like millions of dollars of bitcoins get stolen from fools every few months and no one seems to care, so maybe I'm wrong and the level of "security" seen in the field is exactly right.
See that "Preview" button?
Digital Currency that can't be traced & is stored with no security - do you think a bank leaves $60 million in a teller's drawer ?
Their announcement confirms the client contained the hack & every PC it was installed on was also hacked.
Why else would they insist everyone change ALL their passwords ?
On the other hand, it seems like millions of dollars of bitcoins get stolen from fools every few months and no one seems to care, so maybe I'm wrong and the level of "security" seen in the field is exactly right.
The theft of bitcoin from the fools, even if it's eventually spent (no earlier than the owner would have spent it), doesn't negatively affect the other owners of bitcoin. They still have theirs. They might take notice of the thefts and try to keep their bitcoin in a more secure storage, but unless and until THEY're robbed, they still have their currency.
If the stolen bitcoin is lost, the rest of the bitcoin just deflated. So its value went UP. The same is true, to a lesser extent, if the thieves hold onto it for a while while it "cools off" (longer than the owner would have held it) before they spend it.
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
wjat good is a currency that is so easy to steal ?
BitCoin is trash, you :-)
should invest in ENRON !
Where can I "invest" all my monies in this amazing bitcoin revolution? Surely some kindly moderator with no financial interests in the matter could direct me..
Does anyone know if laws about dealing with stolen property have ever been applied to bitcoin? Since the stolen coins are now in a single, known wallet wouldn't anyone that is ever paid using those coins be guilty of knowingly receiving stolen property?
In many countries is not considered a monetary asset and they do not have laws in place for stolen BTC. The most you can prosecute thiefs is for data breach and even then you'll have trouble activating the authorities.
Also since BTC is unregulated it's not the govt's job to stabilize it's price and afaict it'll remain extremely volatile for the time being.
I'd say 4 years after snowden that acoustic and em isolation would also be advisable for larger value$.
Time for another fork! I could use some more free coins...
Seriously, aside from the idiotic runup in the price of bitcoin, the best way to make money is to just accumulate and wait for the inevitable "take my ball and go home" fork.
Inside job perhaps?
Odds are they saw the great rise in the market so they decided to steal it themselves. Even if they pay full current prices to the BitCoin owners, at the rate it increases, the thieves will make a giant profit.
So all the money is reportedly transferred into this account :
https://bitinfocharts.com/bitcoin/address/1EnJHhq8Jq8vDuZA5ahVh6H4t6jh1mB4rq
And is STILL just sitting there.
Can Law Enforcement Transfer it Back ?
If the entire blockchain knows exactly where stolen funds are, it seems to me that stealing BitCoin should be near impossible.