{"id":8813,"date":"2014-03-06T22:48:12","date_gmt":"2014-03-07T03:48:12","guid":{"rendered":"http:\/\/www.opensource.im\/?p=8813"},"modified":"2014-03-06T22:48:12","modified_gmt":"2014-03-07T03:48:12","slug":"third-cryptocurrency-exchange-becomes-hacking-victim-loses-bitcoin","status":"publish","type":"post","link":"https:\/\/euvolution.com\/open-source-convergence\/cryptocurrency\/third-cryptocurrency-exchange-becomes-hacking-victim-loses-bitcoin.php","title":{"rendered":"Third cryptocurrency exchange becomes hacking victim, loses Bitcoin"},"content":{"rendered":"<p><p>  Summary: Following Mt. Gox and Flexcoin, Poloniex  has admitted to losing over 10 percent of customer funds due to  cyberattacks.<\/p>\n<p>    Yet another cryptocurrency has come forward and admitted that    security and system problems have led to customer funds being    pinched by hackers.  <\/p>\n<p>    Poloniex, a Bitcoin trading post similar to Mt. Gox, has lost    12.3 percent of the Bitcoin stored in hot wallets on the    website. However, in stark contrast to how Mt. Gox CEO Mark    Karpeles handled his company's Bitcoin losses, the owner of    Poloniex, Tristan D'Agosta -- a.k.a. Busoni -- admitted to the    loss and asked users how they would like to be compensated.  <\/p>\n<p>    In a    forum post, Busoni said that a hacker took advantage of a    processing flaw in the Bitcoin exchange post. When users submit    a withdrawal request, the input is checked against your    balance, deducted, and the new amount recorded within a    database. However, it was discovered that placing several    withdrawals all in practically the same instant meant each    request was processed at more-or-less the same time, resulting    in a negative balance but \"valid insertions into the database,    which then get picked up by the withdrawal daemon.\"  <\/p>\n<p>    According to the Poloniex chief, auditing and security features    were not explicitly looking for negative balances, and so the    transactions were allowed to proceed. Busoni admitted that    another \"design flaw\" contributed to the theft, as \"this could    not have happened if withdrawals requests were processed    sequentially instead of simultaneously.\"  <\/p>\n<p>    Trading was frozen following the discovery of unusual activity,    and Busoni says he takes \"full    responsibility\" for the missing 12.3 percent of Bitcoin --    believed to be worth roughly $50,000.  <\/p>\n<p>    \"If I had the money to cover the entire debt right now, I would    cover it in a heartbeat.\" Busoni admitted. \"I simply don't, and    I can't just pull it out of thin air.\"  <\/p>\n<p>    So, to keep everyone from withdrawing their BTC in order to not    be left with picking up the debt, everyone's wallet on the    trading post has been \"temporarily be deducted by 12.3    percent.\"  <\/p>\n<p>    \"Please understand that this is an absolute necessity -- if I    did not make this adjustment, people would most likely withdraw    all their BTC as soon as possible in order to make sure they    weren't left in that remaining 12.3 percent,\" Busoni said.    \"Aside from the obvious drawback of most of the BTC being taken    out of the exchange, this would not be fair -- some people    would get all of their money right away, and a few would get    none right away.\"  <\/p>\n<p>    The amounts deducted have been recorded, and the Poloniex chief    says that funds will be raised from exchange fees -- and his    own pocket -- to try and cover the debt and redistribute funds    to users who have had Bitcoin deducted.  <\/p>\n<p><!-- Auto Generated --><\/p>\n<p>Original post:<br \/>\n<a target=\"_blank\" href=\"http:\/\/www.zdnet.com\/third-cryptocurrency-exchange-becomes-hacking-victim-loses-bitcoin-7000027052\" title=\"Third cryptocurrency exchange becomes hacking victim, loses Bitcoin\">Third cryptocurrency exchange becomes hacking victim, loses Bitcoin<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Summary: Following Mt. Gox and Flexcoin, Poloniex has admitted to losing over 10 percent of customer funds due to cyberattacks. Yet another cryptocurrency has come forward and admitted that security and system problems have led to customer funds being pinched by hackers<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[869],"tags":[],"class_list":["post-8813","post","type-post","status-publish","format-standard","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/8813"}],"collection":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/comments?post=8813"}],"version-history":[{"count":0,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/8813\/revisions"}],"wp:attachment":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/media?parent=8813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/categories?post=8813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/tags?post=8813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}