Welcome to the Dash Forum!

Please sign up to discuss the most innovative cryptocurrency!

Thief 188.116.54.12

Discussion in 'Off Topic' started by CHAOSiTEC, Apr 2, 2014.

  1. CHAOSiTEC

    CHAOSiTEC Official Darkcoin Dev

    Joined:
    Mar 28, 2014
    Messages:
    86
    Likes Received:
    36
    Trophy Points:
    58
    If anyone knows who uses this ip address please let me know


    188.116.54.12
     
  2. DieCommieScum

    DieCommieScum Member

    Joined:
    Mar 9, 2014
    Messages:
    48
    Likes Received:
    6
    Trophy Points:
    48
  3. Propulsion

    Propulsion The buck stops here.

    Joined:
    Feb 26, 2014
    Messages:
    1,008
    Likes Received:
    467
    Trophy Points:
    183
    Dash Address:
    XerHCGryyfZttUc6mnuRY3FNJzU1Jm9u5L
    How did it happen?
     
  4. CHAOSiTEC

    CHAOSiTEC Official Darkcoin Dev

    Joined:
    Mar 28, 2014
    Messages:
    86
    Likes Received:
    36
    Trophy Points:
    58
    it was a timing attack, seems like if you ddos and repeatedly call the withdraw link you can get double and triple witdrawals through even though you do not have enough funds in your account...

    the dice game was drained complely... same with wheel of fortune

    i have now patched it, and each transaction has a randomized waiting period of up to 20 seconds so your now unable to use that attack vector, ive also patched up some other possible attack vectors after going thoroughly through the code so now they are both safe, and both games have been refunded...
     
  5. Propulsion

    Propulsion The buck stops here.

    Joined:
    Feb 26, 2014
    Messages:
    1,008
    Likes Received:
    467
    Trophy Points:
    183
    Dash Address:
    XerHCGryyfZttUc6mnuRY3FNJzU1Jm9u5L
    Sorry to hear that. Did you get issued a refund for the software?
     
  6. CHAOSiTEC

    CHAOSiTEC Official Darkcoin Dev

    Joined:
    Mar 28, 2014
    Messages:
    86
    Likes Received:
    36
    Trophy Points:
    58
    no, but i did patch the games, they are now safe to use :) and ive put new funds into them... go play lol :)
     
  7. thelonecrouton

    thelonecrouton Well-known Member
    Foundation Member

    Joined:
    Apr 15, 2014
    Messages:
    1,135
    Likes Received:
    813
    Trophy Points:
    283
    #7 thelonecrouton, Apr 15, 2014
    Last edited by a moderator: Apr 15, 2014