3 ms·
Interesting... on 2022-12-13 the bounty has been claimed! Just a few hours after mprime1 shared the project in a comment on HackerNews, someone managed to drain
by preillyme 4y ago
Interesting... on 2022-12-13 the bounty has been claimed! Just a few hours after mprime1 shared the project in a comment on HackerNews, someone managed to drain the BTC.
https://github.com/mprimi/portable-secret/commit/3b22d2b42baf8d253beca0783291a8b111ab85a1 https://github.com/mprimi/portable-secret/commit/3b22d2b42ba...
I'd love to hear more about this.
- matthewfcarlson 4y agoRight I'd love a post-mortem on it!
- mprime1 4y agoPostmortem: - Bitcoin is hard - Wallets come with sophisticated anonymization built-in - Don't create the bounty wallet 20 minutes before posting on HN (if that snafu had happened today while this post was on the front page, I would have looked pretty stupid)
- sfusato 4y agoSee https://news.ycombinator.com/item?id=33980379 https://news.ycombinator.com/item?id=33980379
- preillyme 4y agoAh, that makes so much more sense. I had thought after looking at the wallet: https://www.blockchain.com/btc/address/bc1qd2jkf8lxp5d3y50gfkjl78hg6y9wsz7a97ewaz https://www.blockchain.com/btc/address/bc1qd2jkf8lxp5d3y50gf... that it was "scrambled/tumbled/anonymized" by the attacker.
- wnevets 4y agoI don't see any code changes in the commit history after that. edit: oh, it looks like it wasn't actually drained.
- jtsiskin 4y agoNo, they just changed it themselves? They sent from that old wallet (https://www.blockchain.com/explorer/addresses/btc/bc1qd2jkf8lxp5d3y50gfkjl78hg6y9wsz7a97ewaz https://www.blockchain.com/explorer/addresses/btc/bc1qd2jkf8...) to the current wallet (https://www.blockchain.com/explorer/addresses/btc/bc1qpwq8lxj4kxtmchxyjrlvvvpstfm9jr88dx9dgp https://www.blockchain.com/explorer/addresses/btc/bc1qpwq8lx...) ?