You are viewing a single comment's thread from:

RE: SmartCash Leaks - Episode 2 - TipBots Up

in #smartcash6 years ago

As of approximately 4:00PM Greenwich Mean Time (GMT) on Friday, September 7th the SmartCash tipbots, telegram bridge bot, and original RPC explorer became inaccessible.

The former SmartCash developer managing those services, Markus (msg768), deactivated the servers and demanded a ransom payment of 5,000,000 SMART ($128,505 USD equivalent) in order to return these services to an operational state and hand over the code and password to the wallet, which was not paid.

The SmartCash team is committed to returning full access to tipbots and associated balances as soon as possible. At this time we recommend you do not send any further SMART to your former tipbot addresses or use the SmartCash TipBot on Twitter and all other SmartCash tipbots until further notice.

The password to the tipbot wallet was left in the server logs allowing the community balances to be secured, however Markus had corrupted the filesystems to attempt to keep SmartCash from restoring data. An initial analysis shows that approximately 70,000 ($1,800 USD equivalent ) of the total 100,000 SMART tipbot balance has already been stolen by Markus, corresponding to a number of tips that were sent on Twitter but were left unclaimed. The remaining 30,000 SMART ($771 USD equivalent) have been moved to new addresses to prevent Markus from stealing the remaining amounts. The tipbot code has been forked on GitHub and tipbots will be online again once a full security audit has been completed.

Markus’ decision to steal community funds and demand a ransom payment was unethical, unprofessional, and deceptive. It is standard practice in the SmartCash Development Hive to share private code repositories with at least two other team members. When Markus had been asked to do this over the last several weeks he had become increasingly evasive, making excuses why he could not do so. At this time, all SmartCash Developers have confirmed to be following the code sharing and shared access requirements that were set to ensure decentralization.

SmartCash will provide updates when the updated tipbot services are online again. We are committed to improving them with better stability, enhanced security, and new integrations and features. Thank you for your patience and understanding while we work to restore services.

https://smartcash.cc/important-security-update-for-the-smartcash-tipbots/