Live data from Hacker News

Zcoin implementation bug enabled attacker to create over 500K Zcoins

makebitcoingreatagain.wordpress.com

31–40 of 223 posts

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#31
post #7

Earlier quoted context omitted.

Indeed. Everything that crypto-currency touches gets an automatic bug bounty. With rewards that are much nicer than limited editions t-shirts.

Depends what side of the reward you are on.

the savant programmer obviously

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#32
post #17

Earlier quoted context omitted.

Except that, for the moment, paper note forgery is illegal but creating "extra" crypto coins doesn't seem to be.

You're never beyond the reach of a civil suit. If you identify yourself with the scheme and you're in the same country where there's adoption, you could be easily targeted. Plus, the language in 18 U.S.C. § 1030(e)(2) (courtesy of CFAA) refers specifically to "any computer, when [it affects] use by or for [a] financial institution." And later it mentions "...affecting interstate or foreign commerce or communication..…

TOR + Shapeshift

or in the case of Zcoin just come back into the clear chain.

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#34
post #2

> If the attacker managed to liquidate their Zcoins at an average price of $1.25, they may have netted themselves upto USD 750,000. If you are a skilled programmer / security expert / mathematician, crypto currency exploit creation seems to be an extremely lucrative hobby.

Do you think this is immoral?

I am genuinely curious as to what the arguments would be one way or another. People are taking a risk with these things and they know they're risky. So it's not really stealing.

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#35
post #24
post #4

Im curious. Is this actually illegal? Is there any requirement on how valid crypto currency is created? I understand the network could implement a fix and prevent future transactions or even roll back old ones if there's enough desire, that's what democracies are about right? But was there anything illegal about creating and then trading them? A rollback would hurt the exchanges, but if they didn't already have somet…

I think if you explained this in layman's terms to "a bloke down the pub", he'd consider it theft. The law generally feels the same way. (IANAL.) Not the same, but it reminded me of years ago, I had £50 deposited in to my account, by mistake, a couple of months running. I asked my girlfriend's dad - who actually was AL (WAL?) - if I could keep it. He said it would be like someone parking their car on my driveway and…

Depends on a country. In Poland, if a company sends you money, once you spend it, they have no right to get it back. The reasoning being that you have a right to assume companies know what they are doing.

If a private person sends you money, you have to give it back.

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#36
post #34
post #2

> If the attacker managed to liquidate their Zcoins at an average price of $1.25, they may have netted themselves upto USD 750,000. If you are a skilled programmer / security expert / mathematician, crypto currency exploit creation seems to be an extremely lucrative hobby.

Do you think this is immoral? I am genuinely curious as to what the arguments would be one way or another. People are taking a risk with these things and they know they're risky. So it's not really stealing.

I believe it is a crime, both in spirit and on paper. In spirit, you took something that was not yours and not meant for you, and by selling the coins you decreased the value of everyone else's. On paper, let's say that the developers behind whatever coin you hack decide that they are going to take no action. You still run afoul of countless computer security laws designed, however poorly, to protect people from hacking, so at least in the first world you could find yourself in a legal bind if your identity is ever discovered. Even if the devs don't go after you, the rest of the community may, or the government may of its own accord. Now, in keeping your identity private, you have to launder the money, putting you in violation of even more laws and ones that the government will most definitely care about. The biggest player left is probably the IRS, who will take all kinds of interest in either your newfound, undisclosed wealth, or your half million dollars in untraceable gambling wins. It's an extremely reckless move unless you are effectively a pirate living in some lawless part of the world with good connections to foreign banks.

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#37
post #23
post #2

> If the attacker managed to liquidate their Zcoins at an average price of $1.25, they may have netted themselves upto USD 750,000. If you are a skilled programmer / security expert / mathematician, crypto currency exploit creation seems to be an extremely lucrative hobby.

There's even room for marginally technically skilled to rake it in. I think Karpeles is still out on bail. And there's a few that did well with just marketing skill and vaporware mining gear.

Don't "mine" gold, sell shovles.

Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins

#39
post #16
post #4

Im curious. Is this actually illegal? Is there any requirement on how valid crypto currency is created? I understand the network could implement a fix and prevent future transactions or even roll back old ones if there's enough desire, that's what democracies are about right? But was there anything illegal about creating and then trading them? A rollback would hurt the exchanges, but if they didn't already have somet…

I recently spoke at an event where we talked about the crossover of cryptocurrency and the law with a bunch of attorneys present. Many attorneys spoke up during the Q and A to remind everyone that at the end of the day the legality of anything will be decided by either a jury or a judge. It's going to come down to the arguments both sides make, and I think any defense would have a hard time explaining how what they d…

Is there a recording of this discussion available online?
Post reply on HN