Sheep Marketplace customers fleeced in bitcoin heist ...

A How-to Guide To Accessing TheMarketplace

Obviously the ongoing development of what appears to be by far the most secure market around, is leaving the developers little time to actually promote their site.
Having lost a little money in the Sheep heist (though nowhere near as much as some people), I'm most interested in the market that provides the best security for vendors and customers. And from what I can see, the safest option by far is The Marketplace. (Especially given the implications that those behind Tormarket may be associated with, or the same people who ran Sheep). All payments require 2-party authorization. And PGP encryption is mandatory!
As far as I can tell, the main issue at the moment is gaining access to the site, (no point in having the safest market around if no one can get to it) so I've devised this walkthrough in order to help those new to i2p (as I was).
Disclaimer I'm new to reddit so you may have to bear with me while I get the hang of the formatting conventions etc. And visiting TheMarketplace was my first experience with i2p and eepsites (the sites hosted on the i2p network) so forgive me if I misuse any technical terms - I'll be learning along with the rest of you.
THE GUIDE
STEP 1. Download and install the TAILS operating system (If you aren't already using it). It has the i2p package you need to reach TMP pre-installed, and is probably the safest and easiest option available. It can be burned to DVD or installed on a USB stick instructions on the TAILS site. Creating a persistent volume on a USB stick will let you save your i2p configuration, bookmarks etc.
Video tutorials for Windows and Mac users are available on youtube. (Thanks to xd2-53 for submitting the links!)
STEP 2. When you first log in to TAILS it'll automatically open the iceweasel browser and begin connecting to the TOR network. You can close iceweasel as TOR isn't used for accessing sites on the i2p network. Then from the Applications menu on the top-left corner, go to Internet > and select i2p . This will start the application and bring up the i2p router console.
At this point I would advise immediately disabling javascript via the NoScript extension . JS is a possible security risk and TheMarketplace has been designed to function fully without it.
Now it'll take a little time (5-10 mins) for i2p to find peers and to become integrated with the network, so go take a dump, make a coffee or check how much much that stash of bitcoins is worth today. ;)
STEP 3 Now you have a few options. You can either:
1. Just copy and paste (or type if your fingers need a work out) the site's B32 address: http://r35rdglu7cjmsxh5qn3v6o5q7cnejanwg4h2viuvaqavpbf5uqaq.b32.i2p into the address bar which'll take you there directly. (Save it as a bookmark if you have persistence).
2. Add the newhosts.txt to your subscriptions, which will then let you access TMP by typing themarketplace.i2p in the address bar (and will do so every time thereafter if you're using TAILS with persistence/any other browser that's saving your i2p settings).
3. Or (if both of the above fail) you can use a jump service by typing themarketplace.i2p in the address bar and pressing enter. At the moment this brings up a warning page telling you the Eepsite wasn't found in the addressbook. It also gives you the option of using a jump service (again this won't be necessary once TMP's in the default address book). Click the link to the stats.i2p jump service.
The jump service'll redirect you to an information page . Click 'Save themarketplace.i2p to private address book and continue to eepsite' and this'll take you to... THE LOGIN PAGE
Of these three options, number 1 is probably the most secure as by using the jump service you are going through a third party (though it does belong to zzz - one of the project's main developers).
See, nuthin' to it. ;) It's a little extra effort for a lot more security.
For more info on i2p I recommend this sub , on Bitcoin this sub, and for info on GPG (for everyone's safety all messages must be encrypted) I recommend the main site .
I'll do my best to answer any questions (that I know the answers to) as, I'm sure, will TMPSchultz. Thanks.
submitted by WontGetFleecedAgain to themarketplace [link] [comments]

X-Post from /r/sheepmarketplace: Sheep Scam

http://www.reddit.com/SheepMarketplace/comments/1rpy1t/i_was_wrong_it_is_a_scam_proof_inside/
Looks like Sheep is going belly up. I thought this should be posted here to let everyone know the dangers of greed and the volitaile nature of Bitcoin.
If this is indeed a scam, and it certainly looks that way, then these guys have made off with the equivalent of $40 million USD. Considering they're in Europe, you can do the math on what they're about to make in Euros.
As much as I am for legalization and drug reform, this could be the heist of the century in regards to the situation. Very dangerous times to be on the deep web, and everyone needs to be aware of this.
More information is available at http://www.sheepmarketscam.com/
Tl;DR: Sheep Marketplace disabled withdrawals, but allowed deposits for the past week or so. They have now disabled the forums after deleting posts related to the inability to withdraw.
submitted by throwaway29384543839 to SilkRoad [link] [comments]

Bad news double whammy. 96,000BTC stolen (0.8% of all existing BTC) and a grassroots blacklist developing in response.

The bad news: Sheep Market, which seemed to have been settled upon as the alternative for Silk Road, closes down after someone steals almost a hundred million dollars. Countless shady motherfuckers screwed.
The worse (?) news: some of the victims are following the thief through the blockchain, noting and marking his addresses, and watching where the money flows. You can hardly blame them, but they are effectively creating a blacklist. And it will work - this is solid evidence to take to the exchanges that A) they shouldn't deal with the sullied addresses because they are handling stolen drug money (and we know how uptight the exchanges are about KYC and what have you) and B) if the thief DOES somehow manage to sell coins on a non-shady exchange, the exchange is (I expect?) opening themselves up to compensation claims for dealing in someone else's stolen property.
So, two effects:
1) Almost 1% of all existing coins have just been destroyed. The rest are now just that much more valuable (hooray?)
2) The exchanges are actually put in a situation where they can receive one of these coins, and have to weigh "coin neutrality" and unimpeded fungibility against covering their own asses from civil liability and possibly criminal money laundering charges. Which do you think they will choose? So forget CoInvalidation, as of today we have an effective blacklist.
This now means: 1BTC =/= 1BTC. Sure, most of us won't have a blacklisted coin, at least not at first - but I can't imagine the market is going to react positively to the fact that now fungibility comes with an asterix after it. Zerocoin can't get here fast enough!
submitted by njtrafficsignshopper to Bitcoin [link] [comments]

[TMP] A How-to Guide To Accessing The Marketplace

Obviously the ongoing development of what appears to be by far the most secure market around, is leaving the developers little time to actually promote their site.
Having lost a little money in the Sheep heist (though nowhere near as much as some people), I'm most interested in the market that provides the best security for vendors and customers. And from what I can see, the safest option by far is The Marketplace. (Especially given the implications that those behind Tormarket may be associated with, or the same people who ran Sheep). All payments require 2-party authorization. And PGP encryption is mandatory!
As far as I can tell, the main issue at the moment is gaining access to the site, (no point in having the safest market around if no one can get to it) so I've devised this walkthrough in order to help those new to i2p (as I was).
Disclaimer I'm new to reddit so you may have to bear with me while I get the hang of the formatting conventions etc. And visiting TheMarketplace was my first experience with i2p and eepsites (the sites hosted on the i2p network) so forgive me if I misuse any technical terms - I'll be learning along with the rest of you.
THE GUIDE
STEP 1. Download and install the TAILS operating system (If you aren't already using it). It has the i2p package you need to reach TMP pre-installed, and is probably the safest and easiest option available. It can be burned to DVD or installed on a USB stick instructions on the TAILS site. Creating a persistent volume on a USB stick will let you save your i2p configuration, bookmarks etc.
Video tutorials for Windows and Mac users are available on youtube. (Thanks to xd2-53 for submitting the links!)
STEP 2. When you first log in to TAILS it'll automatically open the iceweasel browser and begin connecting to the TOR network. You can close iceweasel as TOR isn't used for accessing sites on the i2p network. Then from the Applications menu on the top-left corner, go to Internet > and select i2p . This will start the application and bring up the i2p router console.
At this point I would advise immediately disabling javascript via the NoScript extension . JS is a possible security risk and TheMarketplace has been designed to function fully without it.
Now it'll take a little time (5-10 mins) for i2p to find peers and to become integrated with the network, so go take a dump, make a coffee or check how much much that stash of bitcoins is worth today. ;)
STEP 3 Now you have a few options. You can either:
1. Just copy and paste (or type if your fingers need a work out) the site's B32 address: http://r35rdglu7cjmsxh5qn3v6o5q7cnejanwg4h2viuvaqavpbf5uqaq.b32.i2p into the address bar which'll take you there directly. (Save it as a bookmark if you have persistence).
2. Add the newhosts.txt to your subscriptions, which will then let you access TMP by typing themarketplace.i2p in the address bar (and will do so every time thereafter if you're using TAILS with persistence/any other browser that's saving your i2p settings).
3. Or (if both of the above fail) you can use a jump service by typing themarketplace.i2p in the address bar and pressing enter. At the moment this brings up a warning page telling you the Eepsite wasn't found in the addressbook. It also gives you the option of using a jump service (again this won't be necessary once TMP's in the default address book). Click the link to the stats.i2p jump service.
The jump service'll redirect you to an information page . Click 'Save themarketplace.i2p to private address book and continue to eepsite' and this'll take you to... THE LOGIN PAGE
Of these three options, number 1 is probably the most secure as by using the jump service you are going through a third party (though it does belong to zzz - one of the project's main developers).
See, nuthin' to it. ;) It's a little extra effort for a lot more security.
For more info on i2p I recommend this sub , on Bitcoin this sub, and for info on GPG (for everyone's safety all messages must be encrypted) I recommend the main site .
I'll do my best to answer any questions (that I know the answers to) as, I'm sure, will TMPSchultz. Thanks.
submitted by WontGetFleecedAgain to SilkRoad [link] [comments]

[TMP] A How-to Guide To Accessing The Marketplace

Obviously the ongoing development of what appears to be by far the most secure market around, is leaving TMPSchultz and co. little time to actually promote the site.
Having lost a little money in the Sheep heist (though nowhere near as much as some others), I'm most interested in the site that provides the most safety to vendors and customers. And from what I can see by far the best option is The Marketplace. (Especially given the implications that those behind Tormarket may be associated with, or the same people who ran Sheep).
As far as I can tell, the main issue at the moment is gaining access to the site, (no point in having the safest market around if no one can get to it) so I've devised this walkthrough in order to help those new to i2p (as I was).
Disclaimer I'm new to reddit so you may have to bear with me while I get the hang of the formatting system etc. And visiting TheMarketplace was my first experience with i2p and eepsites (the sites hosted on the i2p network) so forgive me if I misuse any technical terms - I'll be learning along with the rest of you.
THE GUIDE
STEP 1. Download and install the TAILS operating system (If you aren't already using it). It has the i2p package you need to reach TMP pre-installed, and is probably the safest and easiest option available. It can be burned to DVD or installed on a USB stick (instructions on the TAILS site).
STEP 2. When you first log in to TAILS it'll automatically open the iceweasel browser and begin connecting to the TOR network. You can close iceweasel as TOR isn't used for accessing sites on the i2p network. Then from the Applications menu on the top-left corner, go to Internet > and select i2p . This will start the application and bring up the i2p router console.
At this point I would advise immediately disabling javascript via the NoScript extension . JS is a possible security risk and TheMarketplace has been designed to function fully without it.
Now it'll take a little time (5-10 mins) for i2p to find peers and to become integrated with the network, so go take a dump, make a coffee or check how much much that stash of bitcoins is worth today. ;)
STEP 3 Now i2p has a default addressbook of sites that can be immediately accessed by opening a new tab and entering the address. TMP is currently being added to it so soon all you'll need to do is type themarketplace.i2p in the address bar and press enter.
For now I've been using the following workaround: Type themarketplace.i2p in the address bar and press enter. At the moment this brings up a warning page telling you the Eepsite wasn't found in the addressbook. It also gives you the option of using a jump service (again this won't be necessary once TMP's in the default address book). Click the link to the stats.i2p jump service.
** STEP 4b ** The jump service'll redirect you to an information page . Click 'Save themarketplace.i2p to private address book and continue to eepsite' and this'll take you to... THE LOGIN PAGE
See, nuthin' to it. ;) It's a little extra effort for a lot more security.
For more info on i2p I recommend this sub , and for info on GPG (for everyone's safety all messages must be encrypted) I recommend the main site .
I'll do my best to answer any questions (that I know the answers to) as I'm sure will TMPSchultz. Thanks.
submitted by WontGetFleecedAgain to SheepMarketplace [link] [comments]

/r/bitcoinsec - Wiki: Timeline of Heists

Hey all!
This stickied thread is temporary: Data will be moved to wiki so users can update.
therealbobsaget proposed the idea of keeping a relatively accurate record of Bitcoin heists. I believe the idea is great, and we can utilize the Wiki to store this information down for historical reasons.
From History_of_Bitcoin#Theft_and_exchange_shutdowns:

Mt. Gox:

On 19 June 2011, a security breach of the Mt. Gox Bitcoin exchange caused the nominal price of a bitcoin to fraudulently drop to one cent on the Mt. Gox exchange, after a hacker allegedly used credentials from a Mt. Gox auditor's compromised computer illegally to transfer a large number of bitcoins to himself. They used the exchange's software to sell them all nominally, creating a massive "ask" order at any price. Within minutes the price reverted to its correct user-traded value. Accounts with the equivalent of more than US$8,750,000 were affected. Source Source Source Source

Bitomat:

On July 2011, the operator of Bitomat, the third largest Bitcoin exchange, announced that he lost access to his wallet.dat file with about 17,000 bitcoins (roughly equivalent to US$220,000 at that time). He announced that he would sell the service for the missing amount, aiming to use funds from the sale to refund his customers. Source

MyBitcoin:

In August 2011, MyBitcoin, a now defunct Bitcoin transaction processor, declared that it was hacked, which caused it to be shut down, paying 49% on customer deposits, leaving more than 78,000 bitcoins (equivalent to roughly US$800,000 at that time) unaccounted for. Source Source

Bitcoinica:

In early August 2012, a lawsuit was filed in San Francisco court against Bitcoinica — a Bitcoin trading venue — claiming about US$460,000 from the company. Bitcoinica was hacked twice in 2012, which led to allegations that the venue neglected the safety of customers' money and cheated them out of withdrawal requests. Source Source

Bitcoin Savings and Trust:

In late August 2012, an operation titled Bitcoin Savings and Trust was shut down by the owner, allegedly leaving around US$5.6 million in Bitcoin-based debts; this led to allegations that the operation was a Ponzi scheme. Source Source Source Source. In September 2012, the U.S. Securities and Exchange Commission had reportedly started an investigation on the case. Source

Bitfloor:

In September 2012, Bitfloor, a Bitcoin exchange, also reported being hacked, with 24,000 bitcoins (worth about US$250,000) stolen. As a result, Bitfloor suspended operations.[116][117] The same month, Bitfloor resumed operations; its founder said that he reported the theft to FBI, and that he plans to repay the victims, though the time frame for repayment is unclear. Source

Instawallet:

On 3 April 2013, Instawallet, a web-based wallet provider, was hacked,[119] resulting in the theft of over 35,000 bitcoins[120] which were valued at US$129.90 per bitcoin at the time, or nearly $4.6 million in total. As a result Instawallet suspended operations. Source

Bitcoin+Android PRNG:

On 11 August 2013, the Bitcoin Foundation announced that a bug in a pseudorandom number generator within the Android operating system had been exploited to steal from wallets generated by Android apps; fixes were provided 13 August 2013. Source

Inputs.io:

A Bitcoin bank, operated from Australia but stored on servers in the USA, was hacked on 23 and 26 October 2013, causing a loss of 4100 bitcoins, worth over A$1 million. Source

Global Bond Limited (GBL):

In Hong Kong a Bitcoin trading platform owned by Global Bond Limited (GBL) vanished with 30 million yuan (US$5 million) from 500 investors on 26 October 2013. Source

SilkRoad:

After the arrest of SilkRoad's owner, the FBI claims it has confiscated over 144,000BTC. Source

Sheep Market (post-silkroad):

The debate concerning the Sheep Market heist of 96,000+ BTC is still ongoing, there has been talks of the owners simply taking the money and running, while the owners claim that their operations were "hacked". Source

Users:

301BTC were taken from SatoshiChrist's blockchain.info wallet. Attack method unknown, what is known is lack of 2FA may have lead to attacks capturing his wallet information from either phone or system.
Found a great thread over at Bitcointalk.org containing even more heists:

Linode hacks:

Besides the aforementioned Bitoinica, Bitcoin.cx and Bitcoin faucet among others were affected by this attack. Response by Linode

Allinvain Theft:

In 2011 a miner and Bitcointalk.org user "Allinvain" awoke to find 25,000BTC were transferred out of his wallet. He believes his system may have been infected by the attackers. Source
Will be updating periodically. Leave heist information and sources in comments, thanks!
submitted by bitcomsec to bitcoinsec [link] [comments]

[TMP] A How-to Guide To Accessing The Marketplace

Cross-post from TheMarketplace sub .
Obviously the ongoing development of what appears to be by far the most secure market around, is leaving TMPSchultz and co. little time to actually promote the site.
Having lost a little money in the Sheep heist (though nowhere near as much as some others), I'm most interested in the site that provides the most safety to vendors and customers. And from what I can see by far the best option is The Marketplace. (Especially given the implications that those behind Tormarket may be associated with, or the same people who ran Sheep).
As far as I can tell, the main issue at the moment is gaining access to the site, (no point in having the safest market around if no one can get to it) so I've devised this walkthrough in order to help those new to i2p (as I was).
Disclaimer I'm new to reddit so you may have to bear with me while I get the hang of the formatting system etc. And visiting TheMarketplace was my first experience with i2p and eepsites (the sites hosted on the i2p network) so forgive me if I misuse any technical terms - I'll be learning along with the rest of you.
THE GUIDE
STEP 1. Download and install the TAILS operating system (If you aren't already using it). It has the i2p package you need to reach TMP pre-installed, and is probably the safest and easiest option available. It can be burned to DVD or installed on a USB stick (instructions on the TAILS site).
STEP 2. When you first log in to TAILS it'll automatically open the iceweasel browser and begin connecting to the TOR network. You can close iceweasel as TOR isn't used for accessing sites on the i2p network. Then from the Applications menu on the top-left corner, go to Internet > and select i2p . This will start the application and bring up the i2p router console.
At this point I would advise immediately disabling javascript via the NoScript extension . JS is a possible security risk and TheMarketplace has been designed to function fully without it.
Now it'll take a little time (5-10 mins) for i2p to find peers and to become integrated with the network, so go take a dump, make a coffee or check how much much that stash of bitcoins is worth today. ;)
STEP 3 Now i2p has a default addressbook of sites that can be immediately accessed by opening a new tab and entering the address. TMP is currently being added to it so soon all you'll need to do is type themarketplace.i2p in the address bar and press enter.
For now I've been using the following workaround: Type themarketplace.i2p in the address bar and press enter. At the moment this brings up a warning page telling you the Eepsite wasn't found in the addressbook. It also gives you the option of using a jump service (again this won't be necessary once TMP's in the default address book). Click the link to the stats.i2p jump service.
** STEP 4b ** The jump service'll redirect you to an information page . Click 'Save themarketplace.i2p to private address book and continue to eepsite' and this'll take you to... THE LOGIN PAGE
See, nuthin' to it. ;) It's a little extra effort for a lot more security.
For more info on i2p I recommend this sub , and for info on GPG (for everyone's safety all messages must be encrypted) I recommend the main site .
I'll do my best to answer any questions (that I know the answers to) as I'm sure will TMPSchultz. Thanks.
submitted by WontGetFleecedAgain to i2p [link] [comments]

The Ultimate Bitcoin Heist by NexPloit BITCOIN CRASH - IST ER IN SICHT? Real-Time Heist + Minimum IQ to Understand Bitcoin + Justcoin  Morning Bit Ep 18 100 Trillion Dollar Bitcoin Catalyst - YouTube Bitcoin: Beyond The Bubble - Full Documentary - YouTube

Sheep Marketplace customers fleeced in bitcoin heist Back to video The popular one-stop bazaar was operating in the murky reaches of the Internet — known as the Deep Web and beyond the reach of ... Computerworld covers a range of technology topics, with a focus on these core areas of IT: Windows, Mobile, Apple/enterprise, Office and productivity suites, collaboration, web browsers and ... Just like any other kind of cash, the online currency Bitcoin can be stolen. And over the past week, as many as 96,000 Bitcoins - equivalent to more than £60m - have been purloined from the users ... In early December, Sheep Marketplace, a site which used bitcoin and the anonymising browser Tor to enable online sales of illicit goods, shut down. The site's administrator reported that a dealer ... 3. Sheep Marketplace: $56.4 Million. Like Silk Road 2, Sheep Marketplace opened up in October 2013 after the original black market shut down, and like Silk Road 2, it was an obvious target for ...

[index] [51207] [2754] [35508] [22305] [37662] [18181] [41699] [25387] [23827] [47607]

The Ultimate Bitcoin Heist by NexPloit

Kịch tích, hấp dẫn và đậm chất hành động - bộ phim Siêu Trộm - Bitcoin Heist với sự tham gia của Suboi, Thanh Mỹ, HuyMe, Petey Majik Nguyễn, Nhung Kate, Mai ... Your morning cup of Bitcoin news Morning Bit Ep 1. Real-Time Sheep Marketplace Heist -- Article: http://www.newstatesman.com/future-proof/2013/12/theres-%C... Bitcoin so sicher wie nie verwahren - https://amzn.to/2JVWhkD Das Must-have für alle Bitcoin Fans - https://amzn.to/2ZfQRbp -----Mehr interessa... He risks getting into an exchange like the one that replaced it, Sheep Marketplace, which was hit by a $100 million heist, and which shut down, leaving its users with a 100% loss. There is no way ... Bitcoin - 100 Trillion Dollar Catalyst. I talk about how Bitcoin will eventually reach a market cap of 100 trillion dollars and the unexpected catalyst which...

#