Bitcoin as the ONLY payment option, lol what?

[Sherlock]

I think it was a breach of domepizzle computer (sorry if it **** you off). Were the passwords unique? Also there is IP log. Can you share IP from which you were hacked?

Recent hack just shows how important is to use desktop wallet and exchanges only to send btc in and fiat immediatelly out.

[Former Member 10]

No worries Sherlock that doesn't make me upset. I am not a security expert but I thought that i had everything relatively secure. Yes, all of my passwords are unique. I used LastPass to login everywhere and use the passwords generated from that program. I also use 2FA when possible and that is what really baffles me. I was sent an email saying that my 2FA had been updated which meant it had been disabled. Not sure how this is possible and I am not the only person this happened to. Some people did not have 2FA but others did and all got robbed. Kraken was suspecting that another exchange got hacked and someone used the login credentials. Several people that got robbed had unique passwords so not sure if that was the culprit or not. I want to be as secure as possible so please let me know if you have any recommendations for the most secure setup possible to receive BTC and then turn it into USD asap.

The IP address used in the hack was 217.128.118.111

[Sherlock]

This is just crazy. I am trying to have Bitcoins always in my electrum, but I had significant amount of fiat and/or bitcoins at Kraken during last year and nothing happened. You had money there only for few hours or days I guess and boom.

There must be some least common multiple between the hacked accounts. It is weird that nothing is known. It is just the thread posted here about this hack?

[Former Member 10]

Kraken keeps asking questions to try and find out how it happened. I have contacted others that were robbed and we can't figure out what we all have in common either. Yes, the money was on there for less then 24 hours.

Sent from my SM-G920T using Tapatalk

[Sherlock]

If the money were there only 24 hours then the hack will somehow be correlated with that. Not that it helps you. I feel really sorry, because I was the one who recommended Kraken.

But it is much worse, today 120K btc was lost at Bitfinex. It was the biggest non-Chinese exchange. It is hard to recommend anyone now. Another exchange Btc-e stole ETC(different cryptocurrency) from people.

[slotplayer]

No worries Sherlock that doesn't make me upset. I am not a security expert but I thought that i had everything relatively secure. Yes, all of my passwords are unique. I used LastPass to login everywhere and use the passwords generated from that program. I also use 2FA when possible and that is what really baffles me. I was sent an email saying that my 2FA had been updated which meant it had been disabled. Not sure how this is possible and I am not the only person this happened to. Some people did not have 2FA but others did and all got robbed. Kraken was suspecting that another exchange got hacked and someone used the login credentials. Several people that got robbed had unique passwords so not sure if that was the culprit or not. I want to be as secure as possible so please let me know if you have any recommendations for the most secure setup possible to receive BTC and then turn it into USD asap.

The IP address used in the hack was 217.128.118.111

Maybe log in to your affiliate programs and see if your payment methods have not been changed.

[TheGooner]

Indeed - it IS very concerning ...
http://www.stuff.co.nz/business/worl...-kong-exchange

I still have not activated BTC payments here and now have a sizable balance outstanding at BP.
This situation of BTC being the ONLY payment method is not acceptable for large transaction amounts - it's not business ready.

[justbookies]

Kraken keeps asking questions to try and find out how it happened. I have contacted others that were robbed and we can't figure out what we all have in common either. Yes, the money was on there for less then 24 hours.

I can't pretend to know anything about security of these websites, but if your password for 2-factor was different from the login password and both were unique and not used elsewhere and it happened to a few people, maybe it could be an inside job.

I have found Kraken's support to be absolutely **** - brief, casual and takes days to respond.

I am not sure there is such a thing as a safe or good Bitcoin exchange now, even the one in London that looks wholly legit and has largest BTC/GBP exchange is not governed by FCA (FCA wont get involved) and is just classed the same as a bureau de change. In other words there is no proper regulation and so no safety net, even in an apparently regulated environment.

[Sherlock]

I have found Kraken's support to be absolutely **** - brief, casual and takes days to respond.

I swear I had exactly the opposite experience. Things probably change even faster in cryptocurrency world than in affiliate world.

[Sherlock]

here is an article about the kraken breach: https://cointelegraph.com/news/enabl...d-funds-stolen

[Sherlock]

I also use 2FA when possible and that is what really baffles me.

Not that it changes the disaster, but were you using 2FA for login? They claim that no account with 2FA for login was hacked. They have also some feature 2FA for payouts, and those accounts were hacked.

[Former Member 10]

Not that it changes the disaster, but were you using 2FA for login? They claim that no account with 2FA for login was hacked. They have also some feature 2FA for payouts, and those accounts were hacked.

Unfortunately I only had 2FA for the withdrawals and not login. Essentially you can change the 2FA without verifying through the original 2FA. Here is an article about it.

https://steemit.com/kraken/@bitjedi/...an-be-bypassed

The part that sucks is that I didn't even have Bitcoins there it was a pending wire transfer request all USD then cancelled and traded for Bitcoin

[casinobonusguy]

I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.

[justbookies]

I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.

Did you get email notification that the transfer had been initiated? ie: If your account had been hacked and you failed to log in for that 24 hours delay period, would you know the requested payout existed?

[casinobonusguy]

Yes I got the email as soon as I requested the cash out but still on hold even now

[Former Member 10]

Yes I got the email as soon as I requested the cash out but still on hold even now

I do like features like this. I talked to someone that needed to get coins off yesterday and had this hold. He was told that this is a new feature they are adding as they enhance their account security. This would have really helped me but was not in place at that time.

[hublot]

I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.

After inquiring with Kraken, they did confirm this new policy, however its only if you are sending to a brand new BTC address, if you decide to send to an old address you have already had a successful transfer to, the payment should go thru as usual and in the normal time frame.

[casinobonusguy]

Hi,

A withdrawal request has been made for the withdrawal address named (removed). If you requested this action, great, it was successful.


Thanks for choosing Kraken Bitcoin Exchange The Kraken Team

Note: if you didn't request this action, your account may be compromised and you should do the following:

1) log into https://www.kraken.com immediately and go to Account > Funding > Withdraw - you may be able to cancel the withdraw if you catch it soon enough.
2) change your password;
3) create a new set of two-factor authentications;
4) create a support ticket letting our support staff know about the incident: https://support.kraken.com.

The IP recorded for this action was (removed)


This is the standard email they send when you withdraw ,it was a new address I sent to .

[Sherlock]

It seems they are taking this breach seriously, but they do not want to talk about it, because of negative publicity. I can not say for sure, but it seems that sweeping account hacks under the carpet is not so unusual in Bitcoin world.

I PMed the elsewhere Kraken rep (maybe it was even owner, not sure), invited him here. He was quite open to me, but refused to comment on GPWA with (at least for me) lame excuse that he has not enough reputation here to be trusted.

[TheGooner]

It's interesting ...

The policy of 24 hour delay for new bitcoin addresses is clearly a knee-jerk reaction to the hackings and the loss of BTC.

It's a policy that will work to prevent BTC hijacking (as long as people are not travelling, or on holiday, or ... ) but it also speaks volumes for the complete lack of confidence in the current security set-up, the holes in 2FA, and also indicates that they just don't know WTF went on - and how to stop it.

Overall - I think that this is a prudent measure to take ... but this combined the the increasing delays in actually getting BTC confirmations mean that transfering BTC out of an exchange is hardly a "real-time" event now.