Skip Navigation

Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach

www.theregister.com Monero Project admits thieves stole $437k in mystery breach

It's the latest in a string of unusual wallet-draining attacks that began in April

Monero Project admits thieves stole $437k in mystery breach
71

You're viewing part of a thread.

Show Context
71 comments
  • Ah yes, Monero, from the WannaCry incident, the premier currency for criminals. Also I've made a detailed list of points and most of them (except 1, which is about stablecoins and 5, which only half-applies) apply to Monero. It's still proof of work, so it wastes energy, it still destroys consumer protections, is perfect for scams and makes it even harder for authorities to pursue criminals. And it is still a bigger fool scam, despite being useful for criminals.

    “a trading card site and two unlicensed online banks went broke so you’re stupid for buying Cisco stock” right after the dot com crash.

    Ftx was one of the largest exchanges for the whole of the crypto market. This is like Goldman Sachs, Wells Fargo and Deutsche Bank all going bankrupt and their execs sentenced to prison at the same time.

    (There are no major licensed crypto banks btw)

    Addendum: Cisco is a company that offers products and services. Crypto is used by criminals and speculators.

    • Tell me you don't understand what you're talking about without saying you don't understand what you're talking about. It really sounds like you only get your info about crypto from headlines.

      To go through each of your points:

      1. There are plenty of stable coins that are stable, such as USDC. Many of them exist for a multitude of different purposes.

      2. Non stable coins also can have different uses. Reddit, for example, had its own coin for a while, and Ethereum exists to allow for programmatic transactions (ie: you pay a program to do something, and it'll get done)

      3. While it is true that laws around crypto are nowhere near as mature, as they are very new, crypto offers its own consumer protection advantages over fiat. For example, as an attacker it's a metric fuck ton harder to get into a crypto wallet than it is to get into a bank account.

      4. What makes you think fiat currencies aren't controlled in the same way?

      5. Pick one. Both cannot be true at the same time. While it is true most crypto uses a publicly available ledger, you can only start tracing purchases when you know the identities of the ones holding the accounts. This is muuuuch easier said than done, especially given how easy it is to simply make new accounts with zero identifying info attached to them.

      6. If you're the kind to fall for Nigerian Prince scams, you're fucked regardless if you used fiat or crypto. Banks will not refund you over payments you yourself sent.

      • There are plenty of stable coins that are stable, such as USDC.

        For now. All the stable coins that failed were stable until they weren't. What incentive is there to actually providing that kinda service, if you won't make money with it?

        Ethereum exists to allow for programmatic transactions (ie: you pay a program to do something, and it'll get done)

        NFTs. SAY THEIR NAME

        And remember what a resounding success Wolf Game was? As a hobbyst programmer I can tell you there isn't an idea dumber that putting code into something immutable, that you have to destroy, create anew, rename the new thing you made to the old one, while paying for each step of the process, just so that you can fix a bug is a terrible idea.

        It's pretty natural that what ended up being contained in those smart contracts was links to jpegs - it's much harder to mess that up than an actual interactive program.

        I have too many people hammering me with comments to respond to all your points. I spend like an hour writing responses to you goobers, unless I see something really stupid I'm not responding any further.

        So a quick round: 3&6 social engineering is far more common than simply hacking your account. So no, it's the opposite. Also, 6- completely false, why do you think they avoid using bank accounts?

        5- I gave you an example where someone would know your identity - if you're using it in a non-anonymous context, like getting paid. It could also be the case when buying something, with your name/delivery address. Unless you go off chain, there is no point of setting up new accounts, as transactions can be traced and connected to the intermediate accounts.

        4- Financial policy is decided by elected representatives. Corruption is an issue, but in crypto it's built-in.

        • For now. All the stable coins that failed were stable until they weren’t. What incentive is there to actually providing that kinda service, if you won’t make money with it?

          This is the nature of all emerging technologies. The internet itself went through a similar phase in the late 80s up until the early 2000s. Remember Gopher? NetBeanz?

          NFTs. SAY THEIR NAME

          I didn't say NFTs because I wasn't talking about NFTs. I was talking about smart contracts. They are two very seperate things.

          This is why I say you don't understand what you're talking about and only get your info from headlines.

          And remember what a resounding success Wolf Game was?

          A shitty flash-style game who's only defining feature is having a blockchain. What of it?

          It's not like the regular videogame industry started with Super Mario Bros either.

          As a hobbyst programmer I can tell you there isn’t an idea dumber that putting code into something immutable, that you have to destroy, create anew, rename the new thing you made to the old one, while paying for each step of the process, just so that you can fix a bug is a terrible idea

          And yet people wrote immutable code all the time in the 80s and 90s. Many people didn't have internet back then, so the only ways to get patches out reliably would be extremely expensive.

          Also: it's not like bug fixing traditional apps is free either.

          So a quick round: 3&6 social engineering is far more common than simply hacking your account. So no, it’s the opposite.

          Again, if someone socially engineers you into sending money, you're shit out of luck when dealing with fiat currencies too.

          If you're worried about someone divulging a password and hoping 2FA could catch them, there are hosted exchanges like Coinbase for that. If your person is the kind to give 2FA codes too, again, you're just as fucked in fiat environments; banks do not cover that shit.

          Banks will only cover fraud incidences that you can't reasonably be blamed for, like your card details being exposed because a website got hacked. They leave you high and dry when it comes to social engineering.

          5- I gave you an example where someone would know your identity - if you’re using it in a non-anonymous context, like getting paid.

          If you're that worried, just make another crypto wallet, send the money to that and then make your purchase. Your employer doesn't know who owns that other account. If you're really worried about traceability, use BitTornado, and any would-be hobbyist investigator is fucked.

          4- Financial policy is decided by elected representatives. Corruption is an issue, but in crypto it’s built-in.

          Cute that you think corruption in fiat isn't part of the design. You do know how, for example, the federal reserve in US works, right?

        • As a hobbyst programmer I can tell you there isn't an idea dumber that putting code into something immutable

          Wut. Immutable OSs are super hip right now

          • You have no idea what that phrase means.

            The "immutable" I'm talking about here is not in the sense of "immutable OS", but rather immutable like punched cards. You literally needed to punch another set of cards if your program contained a bug. You need to create another smart contract to replace your buggy program. Paying gas fees for it.

    • Proof of work does not waste energy. It burns exactly how much it needs to.

    • My point on the comparison wasn't that that they're 1:1, but more so when a market does crazy stuff in a speculative frenzy there's things that potentially have legitimate value and things that don't. Comparing potentially good projects to obvious BS isn't really a a good way to debate the value or lack of.

      As for unlicensed banks, yeah probably an imperfect comparison, but not entirely irrelevant IMO. Something like Coinbase (that does have licenses BTW) is probably a lot less likely to go bust than some shady exchange based in the Bahamas. Now, as a counter point ftx probably had the appropriate licenses for their US based front, but then just funneled that elsewhere right.

      And sure, they were one of the biggest, but back to my original point: in a crazy speculative bubble the scams and legitimate projects all have to be evaluated individually.

      Speaking of banks though, its kinda hilarious you brought up Goldman Sachs, Wells Fargo and Deutsche Bank. Last I checked two of the three were kinda involved in a pretty big thing known as the 2008 financial crises and would have collapsed had they not been bailed out. Their executives aren't in prison, but many people believed they should be.

      Finally criminal useage is valid criticism, but Monero is not the first thing to be used to transfer illicit funds. Cartels, hitmen, and people who kidnap children for ransom all seem to like cash (well, that and the banks, some of which have a horrendously bad record of transferring illicit funds). If you were to convince me that Monero is making the world a way worse off place then maybe you'd change myind, but right now as it stands it appears a small percentage of criminals find Monero slightly easier than cash and are using it because it's the path of least resistance. Last I checked, the drug trade, computer hacking, and any other active criminal enterprise existed before the use of Monero.

    • it still destroys consumer protections, is perfect for scams and makes it even harder for authorities to pursue criminals.

      The very same things that allow these things can allow the people in power to spy on all your digital transactions, as well as deny service to people they don't like (which they would more eagerly do to opposition rather than real scammers)

      Oh, and not to mention that even with protections like this, most scams and crime still happen in the "traditional" payment systems anyway.

    • You don't have to repeat hundred times Monero is used by criminals, and many of us glad for Monero used by criminals.

      Before explaining to me "why criminals are bad!!!!": Criminality ≠ morality

      • Ideally you would want laws to reflect morality. If drugs became legal, monero would no longer be useful for buying them, if that's what you're talking about.

71 comments