Dear Users of Poloniex,
As you may have heard, a hacker recently used an exploit to steal 12.3% of the Bitcoins on Poloniex. Details on how this happened can be found in this announcement post:
https://bitcointalk.org/index.php?topic=499580.0
In order to keep Poloniex solvent, all BTC balances were deducted yesterday by 12.3%. No further deductions will occur. As soon as I have time to put it up, you will be able to view exactly how much BTC you are missing on your Balances page.
I deeply regret that this happened, and am committed to repaying the debt and making Poloniex absolutely secure. Any exchange fees collected since the incident will be used to pay back the debt at regular intervals. Exchange fees will not be raised.
Additionally, shares of Poloniex may be issued, the profits from which would be used to repay the debt and hire highly qualified security experts. The timing and details of this, and indeed whether it will occur, have not been decided. I invite you all to give your input on these decisions by voting in the following poll and, if desired, leaving a comment:
https://bitcointalk.org/index.php?topic=500578.0
Since the incident occurred, the way withdrawals and order creation are handled has been redesigned so that all such requests are added to a global command queue, then processed sequentially. More automated checks for consistency of balances have been added. Larger percentages of coins have been moved into cold storage. And as of today, I am searching for additional developers to bolster the security of Poloniex as much as possible, and as soon as possible.
Here are some specific details about the hacker.
BTC addresses used to withdraw stolen funds to:
1ABnAg2nK3M6YKmaYtL5EBgdp1VQGyTbjL
18sdMt7ENfU3Weq7vy1Qdqr3skgd47WEbe
1Ktq7TE3J5vZ3c99M5weqKfFcNkHQdqPrq
1C1acLbFh3KaKgdFUBuCV8oD7ucqUaLLLY
IP addresses used to place the withdrawals:
61.161.143.175
126.11.105.45
122.143.3.144
60.10.69.65
Email addresses used to log in:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
The total BTC stolen was about 97. The addresses will add up to more than that; this is because the hacker needed to deposit BTC several times in order to use the exploit.
Finally, I would like to extend my deepest gratitude toward the many people who have shown their support, who have vouched for my character, and who have offered help. In this time of extreme and continual stress and worry, I truly appreciate it. I will do everything in my power to return your funds to you as soon as possible, and I am grateful for your patience in the meantime.
Sincerely,
Tristan
good move.
