Thief 188.116.54.12

CHAOSiTEC

Official Darkcoin Dev
Mar 28, 2014
86
36
58
If anyone knows who uses this ip address please let me know


188.116.54.12
 

Propulsion

The buck stops here.
Feb 26, 2014
1,008
467
183
Dash Address
XerHCGryyfZttUc6mnuRY3FNJzU1Jm9u5L
How did it happen?
 

CHAOSiTEC

Official Darkcoin Dev
Mar 28, 2014
86
36
58
How did it happen?
it was a timing attack, seems like if you ddos and repeatedly call the withdraw link you can get double and triple witdrawals through even though you do not have enough funds in your account...

the dice game was drained complely... same with wheel of fortune

i have now patched it, and each transaction has a randomized waiting period of up to 20 seconds so your now unable to use that attack vector, ive also patched up some other possible attack vectors after going thoroughly through the code so now they are both safe, and both games have been refunded...
 

Propulsion

The buck stops here.
Feb 26, 2014
1,008
467
183
Dash Address
XerHCGryyfZttUc6mnuRY3FNJzU1Jm9u5L
Sorry to hear that. Did you get issued a refund for the software?
 

thelonecrouton

Well-known Member
Foundation Member
Apr 15, 2014
1,135
813
283
Last edited by a moderator: