fact of hacking wallet!



  • Lord there is a fact of hacking!
    It was possible to track the chain of addresses through which the stolen BURST coins are transferred. Stolen coins accumulate on one purse. Then they go to the purse of the Bittrex exchange with a message attached to the transfer.
    The message corresponds to the user account and internal BURST account
    I need to contact the representatives of the project! Admins respond in a personal report. Or by e-mail [email protected]
    All available evidence is provided!

    My hacked wallet
    rmemvm
    BURST-WYMS-EJ42-CP5G-87YZX
    https://explore.burst.cryptoguru.org/account/7998328496588749432

    My incoming transactions Poloniex exchange, coins which the hacker then stole
    2160690215891856766 27,081.09 Burst R8SQ-TUEM-DTHQ-7ATA3 2017-12-22 19:05:12
    My incoming transactions Bittrex exchange (tracking additional hacker addresses)
    12884320397360374500 13 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:08:17
    14621552150762740618 8 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:32:47
    5689422026043718062 6 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:36:53

    Hacker automatic transactions, when using the program code, within a few seconds, as soon as the transaction to replenish the purse is confirmed ...
    1886513737393212757 27,080.09 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-22 19:07:03
    17342565350432990299 12 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-23 02:13:01
    17699675847721158962 7 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-23 02:34:02
    14450149109174783689 5 Burst 5BGX-C7EA-A6ET-BAQCD 2017-12-23 02:39:10

    next step:
    https://explore.burst.cryptoguru.org/account/16427706412886792640
    BURST-WYMS-EJ42-CP5G-87YZX => BURST-E8G2-Y9HA-BVK4-GHRY9
    coins lie, without movement, storage, it is not clear what will happen to the coins ...

    https://explore.burst.cryptoguru.org/account/10784652509394871773
    BURST-WYMS-EJ42-CP5G-87YZX => BURST-5BGX-C7EA-A6ET-BAQCD
    accumulate coins from other hacked wallet
    Accumulated coins, at least ... with purses of pools, miners, and ordinary users

    next step:
    https://explore.burst.cryptoguru.org/account/10784652509394871773
    BURST-5BGX-C7EA-A6ET-BAQCD => BURST-ULSM-3ZTQ-6KXX-FJMYP
    send to another purse, an attempt to hide multiple transactions from other hacked wallets

    next step:
    https://explore.burst.cryptoguru.org/account/15779047458256800531
    BURST-ULSM-3ZTQ-6KXX-FJMYP => Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM message: bdb36669c0294c0393d8977c79107645a186349445e647df9353f4797847648e
    send coins to the Bittrex exchange

    What do I need from the representatives of the BURST project team:

    1. Get access to the wallets of hackers:
      BURST-E8G2-Y9HA-BVK4-GHRY9
      BURST-5BGX-C7EA-A6ET-BAQCD
          and return the stolen coins to their owners.

    2. Contact with those Bittrex exchange support, three sides:
      -Passenger owners, hacked, stolen coins
      -BURST project team
      -Support Bittrex exchange
          Block a hacker account:
      Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM message: bdb36669c0294c0393d8977c79107645a186349445e647df9353f4797847648e
          Return the stolen coins to their owners ...



  • I sent a my transfer from the Poloniex exchange to the Bittrex exchange using my purse BURST-WYMS-EJ42-CP5G-87YZX, since directly when sending from Poloniex, you can not attach a message indicating the ID of the BURST internal wallet on the Bittrex exchange ...
    Coins were stolen ...

    0_1514124233462_Screenshot_2017-12-24-18-47-53.png 0_1514124247510_Screenshot_2017-12-24-18-48-01.png 0_1514124260160_Screenshot_2017-12-24-18-48-17.png 0_1514124272436_Screenshot_2017-12-24-18-48-31.png

    0_1514124147093_Poloniex scrin 2.jpg 0_1514124159582_Poloniex scrin 3.jpg

    0_1514124192756_Bittrex scrin 1.jpg 0_1514125788138_Bittrex scrin 3.jpg 0_1514125671917_Bittrex scrin 4.jpg



  • A small list of wallets that were also hacked, does not include wallets with the amount of stolen fewer than 1,000 coins ...
    0_1514129175411_60d808c4-fb5d-4bd6-9df9-674214d7fa95-image.png 0_1514128651054_b103b55b-b5d9-432b-9c87-974fc0ba5e41-image.png 0_1514128691084_02bb68f7-f9e8-4841-98fa-1bc22ebe0140-image.png 0_1514128714079_be04c7e7-8f3d-4721-855f-e193f74a0854-image.png 0_1514128747714_3ceedd7b-ed95-4aac-8e57-df7c5f1adc5c-image.png 0_1514128766202_77160306-6d83-4280-b30e-40878b1887d1-image.png 0_1514128795652_230b33cf-1ce4-4b67-b870-2d5d8c98f744-image.png 0_1514128811218_bf633989-1eb5-44b2-8406-ae36327dfb99-image.png 0_1514128831567_3cfcce79-fa87-4b47-9534-82b7824a47ac-image.png 0_1514128852966_104f9ba8-b372-42f7-9e41-be13119d5514-image.png 0_1514128871486_5d24eed6-6786-400b-b40a-1a5afff221c3-image.png 0_1514128887421_d6209bd7-56b0-4952-86fd-f3b86b85a701-image.png 0_1514128903623_1d5f7e74-9a57-478d-b3bf-003233cdb667-image.png 0_1514128918014_4080f10f-3fe5-4208-b9fd-f94a4aa2a7bc-image.png 0_1514128931977_9e5217a8-4520-4b21-a76d-a0ecdd40687e-image.png 0_1514128945473_3a62423f-d01d-478d-9cde-066430f4a5d6-image.png 0_1514128958689_39636257-35f1-4eb8-ba9d-226c2a7dced4-image.png 0_1514128969124_4aeb7d31-98f4-4610-864b-9644545d4b33-image.png



  • Today, the hacker used another transit wallet to send to the Bittrex exchange, compare the attached message
    bdb36669c0294c0393d8977c79107645a186349445e647df9353f4797847648e

    https://explore.burst.cryptoguru.org/account/10784652509394871773
    https://explore.burst.cryptoguru.org/account/1708215401021157579
    Transaction to the Bittrex exchange
    https://explore.burst.cryptoguru.org/transaction/6644933222082486322

    And the previous transit wallet
    https://explore.burst.cryptoguru.org/account/15779047458256800531
    Transaction to the Bittrex exchange
    https://explore.burst.cryptoguru.org/transaction/4162223949076593981




  • admin

    @ge_kar said in fact of hacking android mobile wallet!:

    What do I need from the representatives of the BURST project team:

    Get access to the wallets of hackers:
    BURST-E8G2-Y9HA-BVK4-GHRY9
    BURST-5BGX-C7EA-A6ET-BAQCD
        and return the stolen coins to their owners.

    This is not possible. Nobody can access other accounts without the passphrase. No admin and no developer.
    Have you used your own password instead the recommended 12 Words? Is your android phone free of malware?

    You can try to contact Bittrex to freeze the hackers funds. With hard evidence and legal help they might even give you the name of the account holder.



  • The hacker https://explore.burst.cryptoguru.org/account/16427706412886792640 sent coins from the purse to the Bittrex exchange,
    BURST-R8SQ-TUEM-DTHQ-7ATA3 => Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM used the encryption message:
    encryptedMessage.data 36556cbbc14420df716292e65b2dffaaa0a307508cbc42654d902d93c87a21e40833ab8f2da0e1a73f5d62be427f07e2897e6e1e0378062586fc9677cc83217e6f8444eb738b1092f4b04a8c8cf9323a0d7548f12178c5ad4be46d9af02c9bc1
    encryptedMessage.nonce: c39166172cfa527a4140911b9d81727f7347c35cac92bba08efd94d8dd8b19ff
    Transaction: https://explore.burst.cryptoguru.org/transaction/1793377363719754714

    Complete transaction data for the hacker wallet BURST-R8SQ-TUEM-DTHQ-7ATA3
    request: getAccountTransactions accountID 16427706412886792640, DateTime: 2018.01.09,14:10(UTC+5)
    Response:
    {
    "requestProcessingTime": 2,
    "transactions": [
    {
    "senderPublicKey": "a29df339c2de3b848e97d3760301fe20c3f02e7f3870345815605986be87941e",
    "signature": "a9f10b59a6949a6b901c86740f0745460c7a4fde902f997c4c0bb60b3387410ac2ccaff6492c46082d34867e8ae50e78ee9f2bafb184ea4d37ff90b408f45283",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 299,
    "fullHash": "b8fa707757ff271cee4cb71005952241a099a0a3448866362f1fa374b8874fdd",
    "version": 1,
    "ecBlockId": "2737398438562090976",
    "signatureHash": "d9217beff4eabf723ac71741bb7186275a15fa24993e2690191830a93cda9dc9",
    "attachment": {
    "version.Message": 1,
    "messageIsText": true,
    "message": "Burst garbage colector. Thank you!"
    },
    "senderRS": "BURST-TEXC-LLLU-ZDM3-HD3XT",
    "subtype": 0,
    "amountNQT": "1100000000",
    "sender": "18227241509309952938",
    "recipientRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "recipient": "16427706412886792640",
    "ecBlockHeight": 445185,
    "block": "17553106663318309950",
    "blockTimestamp": 107693991,
    "deadline": 24,
    "transaction": "2028870908284828344",
    "timestamp": 107693942,
    "height": 445199
    },
    {
    "senderPublicKey": "d6048621c2c4f691ad2ab2dd157eff6d2ae55efdbc96b166d36456281bdcaf03",
    "signature": "e60df9094ca29b1e155260462a2387afacdf286f57b3d03dbb5770c9c6e30a055cf8c5db8bb3a178ed1892fc6200654b04a2639fe112586115a9831f86fe3dd2",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 530,
    "fullHash": "da13bee8355be318751c581ba0291a0cd13de68a008b379aa7e6a513d5173282",
    "version": 1,
    "ecBlockId": "8079339445333194534",
    "signatureHash": "1a2ca2487cd2b3a2c4db56073bbf2d600acde40ecb774ccee605c4424829caff",
    "attachment": {
    "encryptedMessage": {
    "data": "36556cbbc14420df716292e65b2dffaaa0a307508cbc42654d902d93c87a21e40833ab8f2da0e1a73f5d62be427f07e2897e6e1e0378062586fc9677cc83217e6f8444eb738b1092f4b04a8c8cf9323a0d7548f12178c5ad4be46d9af02c9bc1",
    "nonce": "c39166172cfa527a4140911b9d81727f7347c35cac92bba08efd94d8dd8b19ff",
    "isText": true
    },
    "version.EncryptedMessage": 1
    },
    "senderRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "subtype": 0,
    "amountNQT": "2709800000000",
    "sender": "16427706412886792640",
    "recipientRS": "BURST-HK9D-P74Q-XDEJ-D6PGM",
    "recipient": "13383190289605706987",
    "ecBlockHeight": 444959,
    "block": "5641679786710781814",
    "blockTimestamp": 107637884,
    "deadline": 1440,
    "transaction": "1793377363719754714",
    "timestamp": 107637574,
    "height": 444968
    },
    {
    "senderPublicKey": "e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77",
    "signature": "cf6b65b873a389b67c9470601e40e382437f6685968c4bf3b4aa7b7683aebd02c52897268f47c25cf0eece53110dac75b13901a3621a9eaa4de11261ec08aad2",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 6186,
    "fullHash": "3209fb1668e1a1f505014a4a4f64923f53d5f76350c273e82ecc086c84c6bb1e",
    "version": 1,
    "ecBlockId": "17586052456251008972",
    "signatureHash": "6b6ce1e5de85adaeafaf1c3e01ed13de4b238435723ade99cf994ce9f229e6ff",
    "attachment": {
    "version.Message": 1,
    "messageIsText": true,
    "message": "Burst garbage colector. Thank you!"
    },
    "senderRS": "BURST-WYMS-EJ42-CP5G-87YZX",
    "subtype": 0,
    "amountNQT": "700000000",
    "sender": "7998328496588749432",
    "recipientRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "recipient": "16427706412886792640",
    "ecBlockHeight": 439297,
    "block": "6263896498203183703",
    "blockTimestamp": 106270719,
    "deadline": 24,
    "transaction": "17699675847721158962",
    "timestamp": 106270442,
    "height": 439312
    },
    {
    "senderPublicKey": "e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77",
    "signature": "22e7dee24a552f3785f43e97c22d9ba0774aca4b8f40961b40b5c958a4888904b7d7950af4d2afe02c99d1c58429f62ce7f1f9684fd3560c93ace646d495f8d4",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 6194,
    "fullHash": "5b648e264d2badf0729e0e52ce40aca24a043dd274103aaa4ef98367229562c8",
    "version": 1,
    "ecBlockId": "13592879364904277585",
    "signatureHash": "82196fcd91b15164eac014cd2e56123fed6fee678d5efdd4ee8ebdf7830251ef",
    "attachment": {
    "version.Message": 1,
    "messageIsText": true,
    "message": "Burst garbage colector. Thank you!"
    },
    "senderRS": "BURST-WYMS-EJ42-CP5G-87YZX",
    "subtype": 0,
    "amountNQT": "1200000000",
    "sender": "7998328496588749432",
    "recipientRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "recipient": "16427706412886792640",
    "ecBlockHeight": 439292,
    "block": "4723828056141522326",
    "blockTimestamp": 106269206,
    "deadline": 24,
    "transaction": "17342565350432990299",
    "timestamp": 106269181,
    "height": 439304
    },
    {
    "senderPublicKey": "e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77",
    "signature": "d2dae599a8adbdade70aa9bdd55eed86e77ae87659f7ceb05505f14b23375c0851280b5ef417c6eea4f077606046554e22529ef593bc97844077e46e10d8995c",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 6305,
    "fullHash": "558d37bd3f3e2e1a162db88edd648a89b5cf6121c38469fc00b89586baf6a852",
    "version": 1,
    "ecBlockId": "269160470584012533",
    "signatureHash": "a57f36462ee3c15fbef8c8be62d4d90c7380ce45f4ece284dc9ae397680cdac6",
    "attachment": {
    "version.Message": 1,
    "messageIsText": true,
    "message": "Burst garbage colector. Thank you!"
    },
    "senderRS": "BURST-WYMS-EJ42-CP5G-87YZX",
    "subtype": 0,
    "amountNQT": "2708009464394",
    "sender": "7998328496588749432",
    "recipientRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "recipient": "16427706412886792640",
    "ecBlockHeight": 439187,
    "block": "9194698906594389627",
    "blockTimestamp": 106243852,
    "deadline": 24,
    "transaction": "1886513737393212757",
    "timestamp": 106243623,
    "height": 439193
    },
    {
    "senderPublicKey": "d6048621c2c4f691ad2ab2dd157eff6d2ae55efdbc96b166d36456281bdcaf03",
    "signature": "cd2bdb6befca5d9768c4070c073031ed7bc2ec104508f0e207ee9794a2386a0a63621c66522d7d00d39aeca181ee88a6fd51a150ac10921ed86fe8a8e506cdf7",
    "feeNQT": "100000000",
    "type": 1,
    "confirmations": 23455,
    "fullHash": "2b2565120d3534f642980b0910f36e997a24454ac71d8ba3286e30f7e5f68344",
    "version": 1,
    "ecBlockId": "8619616524310094491",
    "signatureHash": "8f119e1e92574a882017e439a3924bbab4db7d414d0be2cf3fe6e467d379bc0a",
    "attachment": {
    "name": "Burst Garbage colector",
    "description": "Burst Garbage colector",
    "version.AccountInfo": 1
    },
    "senderRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "subtype": 5,
    "amountNQT": "0",
    "sender": "16427706412886792640",
    "ecBlockHeight": 422032,
    "block": "17672494150714116459",
    "blockTimestamp": 102100757,
    "deadline": 1440,
    "transaction": "17740863162378691883",
    "timestamp": 102100755,
    "height": 422043
    },
    {
    "senderPublicKey": "0f0828c37809e66b5303c220f1fc1408ab2a3c19aadaedb93c956a828e65c96b",
    "signature": "bb48e995df155f2d7e3ef92987c04df566904f6967cb3fa30b7a44c0f9076406d5f0640490a2bb49771a2dc482c63f3eee65022b440170c228abf11624d4854e",
    "feeNQT": "100000000",
    "type": 0,
    "confirmations": 23456,
    "fullHash": "23eed7b46f993a9e95948c7bf91490f5384138be337d389abe089f4cb9ebe3ba",
    "version": 1,
    "ecBlockId": "9654019728410129026",
    "signatureHash": "a046a6dca27ad68cdf177e1ed0b1450e803146dff0010fad922b52d8880f802c",
    "attachment": {
    "version.Message": 1,
    "messageIsText": true,
    "message": "BurstCoin.RO faucet November 04, 2017 09:12 PM . Thank you!"
    },
    "senderRS": "BURST-FREE-BA6E-BYYG-DZJXN",
    "subtype": 0,
    "amountNQT": "100000000",
    "sender": "13435960941141745036",
    "recipientRS": "BURST-E8G2-Y9HA-BVK4-GHRY9",
    "recipient": "16427706412886792640",
    "ecBlockHeight": 422030,
    "block": "11844733450791202327",
    "blockTimestamp": 102100731,
    "deadline": 24,
    "transaction": "11401594111696301603",
    "timestamp": 102100110,
    "height": 422042
    }
    ]
    }