3 ms·
Misleading headline, as no actual bitcoins were stolen from this exploit according to the owner of MtGox.
by unreal37 15y ago
Misleading headline, as no actual bitcoins were stolen from this exploit according to the owner of MtGox.
- hugh3 15y agoHow would they know? (Serious question)
- deleted 15y ago[deleted]
- regularfry 15y agoThat only tells you that a transaction occurred. It doesn't tell you who initiated it.
- deleted 15y ago[deleted]
- ScottBurson 15y agoMy guess is they're looking at the HTTP referrer field in their server logs. Normally, a CSRF exploit shows up as an HTTP request originating from a different site (i.e., other than mtgox.com). I think the referrer can be spoofed, though, which would disguise the exploit in the logs.
- tlrobinson 15y agoThe referrer isn't spoofable in any normal browsers (and CSRF attacks occur within the user's browser).
- ScottBurson 15y agoI've seen one post on the forum from a user claiming to have had bitcoins stolen from his/her account. While there's no way to know for sure, at the moment I find the user's claim more plausible than Mt. Gox's denial.