Community Node @community_node

UPDATE: @binance security team has investigated and found that the common address used is ChangeNow, a VPN IP was used to access Binance, and the funds were converted to XMR and withdrawn. I asked if they can be stopped and haven't received a reply on that. #TRX #TRON

Community Node @community_node

6 years ago

We've been hacked. 530k #TRX transferred to a @binance account. PK has never been stored on this laptop - we were logged into #TRONscan with a keystore. It's unacceptable that tronscan is not open source. This address has stolen 11 million TRX in 3 days. #TRON

22 61 111 0 1

3 1 6 0 1

View Details

Community Node @community_node

6 years ago

Is there any update @cz_binance @binance @justinsuntron @Tronfoundation ? I'm starting to think telegram is the attack vector. Someone I know just got "deltree C sub" d

Community Node @community_node

6 years ago

Take a look at this guy's transactions. That's about 25 $TRON wallets a day that are getting cleaned out. More than 15,000 transfers to/from this address. Many wallets (like ours) were emptied in multiple transfers. #TRX @Tronfoundation @justinsuntron tronscan.org/#/address/THGw…

6 1 4 0 0

3 1 2 0 0

View Details

Community Node @community_node

6 years ago

@NickiDotdk @binance The article outlining the vulnerability showed how easy it is to add an embedded circuit for full access.

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

22 61 111 0 1

View Details

Community Node @community_node

6 years ago

@indradeep_bose @Tronfoundation @justinsuntron You should also enable multi sig with a 2nd wallet

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

6 1 4 0 0

View Details

Community Node @community_node

6 years ago

@krazykewlgamez @Tronfoundation @justinsuntron The only way a database like that could exist is if there was a backdoor in java-tron, or if tronscan collected authorizations on the server side which I was assured they didn't.

0 0 0 0 0

View Details

Community Node @community_node

6 years ago

@KinToshiGG @PiterSpain @cornycoin69 @binance TRUE. I always use a bookmark. DNS spoofing is a possibility, although there's a lot of backend code which is brand new and would be difficult to replicate on such short notice.

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

It's safe to say he's hit THOUSANDS of wallets already. It's time to stop blaming the victims and figure out how it's being done. We might suggest enabling multi-signature to your accounts.

0 1 3 0 0

View Details

Community Node @community_node

6 years ago

@NickiDotdk @binance I actually bought a ledger but stupidly bought it from Amazon. Even though ledger was the seller, if it comes from Amazon stock it gets comingled with the other sellers' items so there's no guarantee it didn't actually come from a scammer.

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

@MisterOneZero @justinsuntron One wallet at a time...

0 0 0 0 0

View Details

Community Node @community_node

6 years ago

This has been going on for weeks, and continued all day and continues to happen RIGHT NOW to *hundreds* of accounts. Clearly the responsible thing would be for @justinsuntron and the other #TRONSR to HALT BLOCK PRODUCTION until the exploit is identified. #TRON #TRX

Community Node @community_node

6 years ago

22 61 111 0 1

5 3 11 0 0

View Details

Community Node @community_node

6 years ago

@PiterSpain I never said it was the vulnerability, I just said that for a site that is so important to the security of so many funds it really ought to be verified open source software. Shouldn't it?

2 0 1 0 0

View Details

Community Node @community_node

6 years ago

We've been asked for proof. tronscan.org/#/transaction/… tronscan.org/#/transaction/… In the past 3 days, the receiving address has cleaned out 60 wallets worth more than 11 million TRX. tronscan.org/#/address/THGw…

4 11 18 0 0

View Details

Community Node @community_node

6 years ago

@john_skotts @JTS_Global @binance Well that's the mystery. Perhaps my laptop has spyware and they were able to get my PK from when I logged into wallet-cli with my keystore/password. Or somehow stole my creds while I was logged into tronscan.

1 0 2 0 0

View Details

Community Node @community_node

6 years ago

@BelgiumTron @binance FUCK YOU

0 0 5 0 0

View Details

Community Node @community_node

6 years ago

@Smalls1139 @binance 2 possibilities: Either the software I use to access my accounts (tronscan, wallet-cli) has been compromised, or my laptop has. With 60 victims in a matter of days I am leaning toward the former possibility.

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

@NickiDotdk @binance This is a distinct possibility that I have a keylogger installed and it recorded my wallet-cli password, and then stole the keystore. I have heard of Mac o/s hacks.... but 60 victims in 2 days is a lot.

2 0 3 0 0

View Details

Community Node @community_node

6 years ago

@DekartX @binance No it has nothing to do with Binance other than it's a place where they can scrub the transactions by selling for BTC and transferring out.

1 0 0 0 0

View Details

Community Node @community_node

6 years ago

@WolfHodl @PiterSpain That's definitely not a possibility. I use a bookmark to access tronscan with this browser, and I have a different default browser that I use for follow links.