VIRCUREX !!! IMPORTANT !!!

Sr. Member

Online

Posts: 274

Ignore

We sadly need to announce that our wallet has been compromised thus DO NOT send any further funds to any of the coin wallets, BTC, DVC, LTC, etc. We will setup a new wallet and reset all the addresses. This will most likely take the whole weekend.

Exchange: https://vircurex.com BTC, LTC,DVC Stockexchange: http://www.cryptostocks.com
DVC 6/49 Lottery: https://dvc-lotto.com BTC 6/49 Lottery: https://btc-lotto.com
Earn money browsing the Internet: http://www.profitclicking.com/?r=rwrehp4reyg

Hero Member

Offline

Posts: 881

Ignore

Global Janitor and
Global Moderator
Hero Member

Offline

Posts: 3173

Ignore

My BTC Tip Jar: 1NB1KFnFqnP3WSDZQrWV3pfmph5fWRyadz
My GPG key ID: B3AAEEB0 My OTC ID: johnthedong
Free escrow service available - tips appreciated! (PM Me)

Full Member

Offline

Posts: 205

Ignore

Omnicoins - Buy Bitcoins, Litecoins and Namecoins in Australia | OTC Ratings

Sr. Member

Online

Posts: 274

Ignore

Further update:  The system was not breached, no passwords were compromised (they are salted and multiple times hashed anyways). The attacker used a RubyOnRails vulnerability that was released yesterday (http://www.exploit-db.com/exploits/24019/) to withdraw the funds therefore.

Exchange: https://vircurex.com BTC, LTC,DVC Stockexchange: http://www.cryptostocks.com
DVC 6/49 Lottery: https://dvc-lotto.com BTC 6/49 Lottery: https://btc-lotto.com
Earn money browsing the Internet: http://www.profitclicking.com/?r=rwrehp4reyg

Hero Member

Offline

Posts: 1140

Ron Gross

Ignore

Sorry for your lose.

Amm ... the RoR volnurability was posted to multiple large forums, including Slashdot.

Did the attacker see the announcement before you were able to realize it affects you and shut off your systems? How come you missed it for so long that you didn't shut your stuff off / upgrade in time?

- Blog
- About
- BTCtoX.org - translate between BTC and any other currency.

Sr. Member

Offline

Posts: 460

wat

Ignore

I run http://mail-to-jail.com. I am "thebaron-btc" on Bitcoin-OTC.

Sr. Member

Online

Posts: 274

Ignore

Exchange: https://vircurex.com BTC, LTC,DVC Stockexchange: http://www.cryptostocks.com
DVC 6/49 Lottery: https://dvc-lotto.com BTC 6/49 Lottery: https://btc-lotto.com
Earn money browsing the Internet: http://www.profitclicking.com/?r=rwrehp4reyg

Staff
Hero Member

Offline

Posts: 2493

1davout

Ignore

Ouch, good luck with it. Bitcoin central's down too, looks like someone's being a pain in the ass.

That's just scheduled maintenance
We deployed the fixes within five minutes after receiving the notification from the Rails security mailing list.

Buy and sell EUR at Bitcoin-Central.net.
Also check-out Instawallet and Instawire, don't need to sign-up to anything!
-- The problem with the French, is that they don't even have a word for entrepreneur

Staff
Hero Member

Offline

Posts: 2493

1davout

Ignore

Exploit released yesterday, eh? How convenient...

It's the truth.

Buy and sell EUR at Bitcoin-Central.net.
Also check-out Instawallet and Instawire, don't need to sign-up to anything!
-- The problem with the French, is that they don't even have a word for entrepreneur

Hero Member

Online

Posts: 890

Ignore

Exploit released yesterday, eh? How convenient...

Bit slow of the attacker. I was actually half-expecting someone to start hacking Bitcoin sites before any exploit was even publicly released.

Quad XC6SLX150 Board: 860 MHash/s or so.
SIGS ABOUT BUTTERFLY LABS ARE PAID ADS

Sr. Member

Online

Posts: 274

Ignore

Service restored: deposits, trading and withdrawals are working again

For the time being, some restrictions apply until we have sorted out the account details and validated data integrity.

	Trading	Deposits	Withdrawals
BTC	Active	Active	On hold
NMC	Active	Active	On hold
LTC	Active	Active	On hold
DVC	Active	Active	Active
SC	Active	Active	On hold
IXC	Active	Active	Active
PPC	Active	Active	Active
USD	Active	Active	Active
EUR	Active	Active	Active

Exchange: https://vircurex.com BTC, LTC,DVC Stockexchange: http://www.cryptostocks.com
DVC 6/49 Lottery: https://dvc-lotto.com BTC 6/49 Lottery: https://btc-lotto.com
Earn money browsing the Internet: http://www.profitclicking.com/?r=rwrehp4reyg

Jr. Member

Online

Posts: 61

Ignore

It's good to see you are recovering so quickly, especially with the severe downtime or outright collapse most exchanges seem to go through.

Staff
Hero Member

Offline

Posts: 2493

1davout

Ignore

Service restored: deposits, trading and withdrawals are working again

Did you switch servers ?

Buy and sell EUR at Bitcoin-Central.net.
Also check-out Instawallet and Instawire, don't need to sign-up to anything!
-- The problem with the French, is that they don't even have a word for entrepreneur

Sr. Member

Online

Posts: 274

Ignore

It's been a couple of stressful hours here.

No we did not switch servers, we:
 - applied the Ruby Rails patch
 - backed up all log files for further analysis
 - log files show the XML code injection, we validated all triggered commands to ensure nothing other than withdrawing funds (e.g. backdoor) was done.
 
2AM here, will need to catch some sleep,  mistakes are easily made when being too tired.

Exchange: https://vircurex.com BTC, LTC,DVC Stockexchange: http://www.cryptostocks.com
DVC 6/49 Lottery: https://dvc-lotto.com BTC 6/49 Lottery: https://btc-lotto.com
Earn money browsing the Internet: http://www.profitclicking.com/?r=rwrehp4reyg

Hero Member

Offline

Posts: 1835

www.bitcointrading.com

Ignore

Total value lost in the heist?

Sorry for your loss indeed.  Sucks that the vulnerability was in rails and not in your app. 

Hero Member

Online

Posts: 5580

Ignore

Hero Member

Offline

Posts: 1177

Ignore

TorGuard VPN: Don't get caught using Bittorrent! Spend your bitcoins on a topnotch VPN/Proxy service! I'm renewing my subscription again later this year.