Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers nab $500k as Enigma is compromised weeks before its ICO

techcrunch.com

Post reply on HN
Print view View original

31–40 of 249 posts

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#31

Post by nxsynonym »

richardknop wrote: post #17

Another ICO, another scam. I am not sure I feel bad for people who are gullible enough to send their hard earned money to these "companies". They have one PDF whitepaper and a generic Wordpress template website with some buzzwords, based in Cayman islands or some other tax haven for money laundering. And expecting to get rich from that.

People are afraid of missing the next Bitcoin boom and think throwing money at every ICO will turn them into overnight millionaires.

It's unfortunate that the greed and FOMO are dragging the technology through the dirt. If you plan on investing in any ICO please do your due diligence and avoid the hype trains.

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#33

Post by mhluongo »

crypt1d wrote: post #6

This might as well be a scam created by the CEO himself. I mean, who in this 'crypto world' would be stupid enough to use the same, previously compromised, password on all his accounts? P.S. there was a story on reddit (can't find it now unfortunately) about how the attackers tried to deposit the money to Bittrex but luckily someone alerted them and the exchange froze the account. So there is still some hope that fun…

Why would he do that when he'd make more on the actual token sale?

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#34

Post by SirensOfTitan »

jstanley wrote: post #23
SirensOfTitan wrote: post #12

As with most things security, people tend to be the weakest link in the chain. This type of issue could be solved in a lot of ways. I think a solution wherein: 1. ICOs use a standard 'escrow' contract wherein ether and coin get held by the contract for 7 days or so before either party can withdraw the opposite pair (where either can back out). 2. Building some standard 'ether address' widget that verifies the type of…

That wouldn't solve this problem. Did you read the article? The ICO investors were tricked.

And how wouldn't it solve the problem? (1) would act as a more safe instrument for sending money to addresses you don't regularly interact with, (2) would attempt to make the address type much more apparent to the user so they don't send to addresses they aren't familiar with.

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#35

Post by FLUX-YOU »

richardknop wrote: post #17

Another ICO, another scam. I am not sure I feel bad for people who are gullible enough to send their hard earned money to these "companies". They have one PDF whitepaper and a generic Wordpress template website with some buzzwords, based in Cayman islands or some other tax haven for money laundering. And expecting to get rich from that.

People throwing hard-earned money at it in the first place is stupid enough. It's speculation, plain and simple. You need to be prepared to lose your investment completely.

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#39

Post by otheotheothe »

mhluongo wrote: post #33
crypt1d wrote: post #6

This might as well be a scam created by the CEO himself. I mean, who in this 'crypto world' would be stupid enough to use the same, previously compromised, password on all his accounts? P.S. there was a story on reddit (can't find it now unfortunately) about how the attackers tried to deposit the money to Bittrex but luckily someone alerted them and the exchange froze the account. So there is still some hope that fun…

Why would he do that when he'd make more on the actual token sale?

getting 500k from a stupid hack or 30mio without...ur theory doesnt make any sense.

Re: Hackers nab $500k as Enigma is compromised weeks before its ICO

#40

Post by swiley »

tdb7893 wrote: post #14

I wish that passwords like this stopped being the main form of authentication. I guess I'm not sure what's a better way (I like the physical object + pin of my credit card but that's probably not practical for all Web authentication) but it seems pretty obvious that passwords are broken in their current form unless you use a password manager, which can be a hassle

I'd just like ssh or client side certificates.

People have to deal with PKI all the time, why not just make it expected basic knowledge?

Post reply on HN