| ▲ | Hackers have withdrawn ~4k BTC (~$320M) from the Liquid Federation wallet(twitter.com) |
| 52 points by felipelalli 2 hours ago | 24 comments |
| |
|
| ▲ | cypherpunks01 an hour ago | parent | next [-] |
| Seems that an Elements rangeproof cache bug may've gotten exploited. Fix for suspicious issue was committed just last week and attackers could've monitored the public commits and exploited the bug before fix was ever pushed? Sort of self-fulfilling prophecy if true, that's a leading theory anyhow. fix: range proof cache bind to asset and scriptpubkey https://github.com/ElementsProject/elements/commit/c26d719c2... |
| |
|
| ▲ | etothepii 12 minutes ago | parent | prev | next [-] |
| Is there any indications that this and the ColdCard heist could in fact be escaped distilled agents from the huggingface and similar attacks? |
|
| ▲ | Daviey 2 hours ago | parent | prev | next [-] |
| https://xcancel.com/Liquid_BTC/status/2096696272447218108#m |
| |
|
| ▲ | TZubiri 10 minutes ago | parent | prev | next [-] |
| One disadvantage of decentralized money, criminals gain more power. Many such cases |
|
| ▲ | skinfaxi 2 hours ago | parent | prev | next [-] |
| Why do they say it's white hat hackers? |
| |
| ▲ | greyface- 29 minutes ago | parent | next [-] | | While moving the funds, the attackers left an OP_RETURN message with the text "we are whitehats. contact us on chain" https://mempool.space/tx/c103de95817b43f2df635ec6f35ff126ca2... | |
| ▲ | tom_ 2 hours ago | parent | prev | next [-] | | Purported white-hat hackers. The implication is that these people are presumably describing themselves as such, but it may not actually be true. | |
| ▲ | faitswulff an hour ago | parent | prev | next [-] | | The same reason scam artists describe themselves as businessmen | |
| ▲ | simonw 2 hours ago | parent | prev [-] | | Presumably to try and reduce the chance of a mass panic among their users. | | |
| ▲ | mvdtnz 2 hours ago | parent [-] | | What do they care if there's a panic? They have "paused the sidechain". No one can act on their panic. | | |
| ▲ | cool_dude85 an hour ago | parent [-] | | Wasn't this all supposed to be decentralized? How can a foundation choose to unilaterally "pause the sidechain"? | | |
| ▲ | Kranar an hour ago | parent [-] | | BTC Liquid Network is not decentralized and does not purport to be. It's a federated sidechain, that is... it's a blockchain that runs alongside the Bitcoin blockchain (using a two-way peg that lock real BTC on the Bitcoin blockchain and issues an equivalent amount of Liquid BTC on the Liquid sidechain) but blocks can only be added to the Liquid Network sidechain by some of the handpicked members of the federation. |
|
|
|
|
|
| ▲ | georgemcbay 31 minutes ago | parent | prev | next [-] |
| $320m, not a bad haul. More than enough to buy yourself a pardon if you get caught. |
|
| ▲ | xyst an hour ago | parent | prev | next [-] |
| It’s not "hackers". It’s an inside job, and a rug pull. |
| |
| ▲ | Incipient 35 minutes ago | parent | next [-] | | That's always a possibility, and I'm sure it has happened a lot. I would suspect with the size of liquid it's more likely it was an exploit, but either way I don't think we'll ever know! | |
| ▲ | fxwin an hour ago | parent | prev | next [-] | | how is it a rug pull? if it's an inside job, doesn't that just make it theft? | | |
| ▲ | knorker an hour ago | parent [-] | | What's the difference to you between a rug pull and theft? | | |
| ▲ | antonvs 18 minutes ago | parent | next [-] | | A rug pull involves convincing someone to buy something first. Theft doesn’t have to involve any convincing. This is a pretty basic distinction. Perhaps you were thinking of “fraud”? | |
| ▲ | bagels 40 minutes ago | parent | prev [-] | | A few extra steps. Usually, the rug pull doesn't involve directly taking something that belongs to other people, but instead, selling your own thing in a dishonest way. |
|
| |
| ▲ | mvdtnz 36 minutes ago | parent | prev [-] | | I mean of course it was. Everything in this whole ludicrous space is a scam of one kind or another. It's amazing to me that this is still even a point of discussion. It's obviously a rug pull. |
|
|
| ▲ | galkk an hour ago | parent | prev [-] |
| Time for bitcoin classic++? |