Live data from Hacker News

How I snatched 153k Ether after a bad Tinder date

medium.com

31–40 of 76 posts

Re: How I snatched 153k Ether after a bad Tinder date

#31
post #16

I think the key to understanding this article is this: > But Mitch, isn’t this wrong? No. Let's suppose the hacker really did feel no remorse for stealing 153k Ether then it seems they might not feel it necessary to keep their identity hidden. They might also feel proud enough that they feel it is worth the risk to publicly disclose their actions. Given that, it seems that perhaps some of what the author wrote might…

Presumably whoever did it is a clever person. If I were in that position, I think it would be a fairly obvious step to season the article with subtle misdirections that send people on a wild goose chase. In fact it would be quite fun to do. So I wouldn't take the "information" in the article at face value at all.

I don't think being clever with code necessarily equates to having common sense. If he had common sense, he would have went on his merry way without bragging on the internet...

Re: How I snatched 153k Ether after a bad Tinder date

#32
Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

Re: How I snatched 153k Ether after a bad Tinder date

#33
post #7

Out of curiosity...is this a man or a woman? EDIT: What's with the oversensitivity here? Is there anything wrong in asking a person's sex? What if it's for studying inclination towards certain decision making criteria? Geez folks, not every question is sinister. If you don't want to answer it, just move on. No one is being attacked here.

It is an interesting question since they are obviously either making it totally up or creating a fake persona to throw people off the scent (knowing full well it's obvious).

Lets go with "throwing people off the scent"

So pop-psyc to act gay but not be gay would rule out many cultures, genders and age groups.

So I'd go with they are a hetrosexual man, late 20's to early 30's. Western upbringing in an English speaking country.

They chose Tider over Grinder, because that's part of the story, the surprise. But they could have just said date, hence I think they are reasonable mature. It's a little clever.

Given they chose a Australia actor, I'd guess they are a New Zealander.

Re: How I snatched 153k Ether after a bad Tinder date

#34

Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

And also what happen when your dollar or euro bank account takes +30 millions in few days ? Do banks have alerts when someone's account activity is unsual compare to historic usage ?

Re: How I snatched 153k Ether after a bad Tinder date

#35

Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

You're totally traceable. Always assume third party records are public.

We're working on a guide for people to invest anonymously with us. It's not so simple. Monero is great, but their current defaults are too low to guarantee the privacy they say they have, and changing the defaults makes your transactions stick out.

What you have to do is:

1. Exchange into Monero.

2. Churn with Monero. This means you'll send your XMR from your wallet to your wallet, over and over again. Probably once every 3-6 hours, randomly. The destination address is private in Monero, so sending to your own wallet is fine.

3. After some time (1-3 days) send to another exchange to get Bitcoin/Ether/etc. Need to look at trade volumes to make sure you don't stick out. And probably not send out the same amount you put in. Keep half or some chunk and slowly leak it back to Bitcoin.

4. Optionally one could stack on a couple of Bitcoin mixers, on the idea that you won't have the bad luck to hit two compromised mixers. But each one will take ~2% so it adds up.

At that point you have coins reasonably unrelated to your earlier identity. Getting them into cash is a whole other guide.

Re: How I snatched 153k Ether after a bad Tinder date

#36

Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

And also what happen when your dollar or euro bank account takes +30 millions in few days ? Do banks have alerts when someone's account activity is unsual compare to historic usage ?

Your account will almost certainly be frozen until you show up and convince the bank you're not a money launderer. Given the complexity of AML laws, you probably actually are at that point. And therefore the conversation with the bank might not go in your favor.

Re: How I snatched 153k Ether after a bad Tinder date

#37

Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

if you switch between networks you suddenly no longer have a transparent transaction. Mind you, the details of the transaction (i.e. which account BTC the ETH was converted into) can be retrieved, but not without some effort and paperwork from authorities.

If you say, split up the ETH and tumble it into a number of smaller wallets, transfer it to BTC with a bunch of seperate accounts and/or exchanges, and then tumble it again on the BTC side, then it no longer is as simple as requesting one transaction from one account.

Now you have to trace the currency through the tumbler, request information on n number of accounts while providing details indicating that all n accounts are tied to some crime, and then trace all of said currency through another tumbler.

At this point, if it all ends up into one BTC wallet, you could find them. However if it ends up in a number of smaller BTC wallets, you also have to now prove that those wallets are all owned by the same person and not just a bunch of wallets owned by seperate people who happened to have a total of x amount of BTC adding up to roughly the equivalent value in ETH minus transaction fees.

It goes from one step with some paperwork into months worth of work by a team of skilled people, a tonne of paperwork, and a high probability of ending up with a dead end after all of this.

Re: How I snatched 153k Ether after a bad Tinder date

#38
post #17

I'm curious why the attacker converted his ETH into BTC. Why not Monero first? Once the money is converted into Monero, it should be untraceable, right?

Liquidity. There's enough demand for ETH-BTC that you can convert $30m worth pretty fast; for ETH straight to Monero, you would be in for a much longer wait.

Monero is also not quite untraceable with the defaults. It requires understanding Monero a bit, and spending days churning your coins. The idea that Monero is so unlinkable is horrible marketing and is going to get someone busted.

Re: How I snatched 153k Ether after a bad Tinder date

#40

Are you really untraceable if you switch from ETH to BTC and then to dollars or euros? I don't really know how Ethereum works, but if every transaction is recorded, whichever exchange he used would have the origin ETH and destination BTC wallets and whichever bank account it's going to, wouldn't it? I would appreciate some insight on that.

The "right" way to launder cryptocurrencies is normally to use it to buy a whole bunch of Monero (or some other cryptocurrency with stronger claims of anonymity), then bounce that around a bit before using it to buy Bitcoin (which is then sold for fiat or used directly).
Post reply on HN