Post by Admin on Jun 1, 2017 9:17:11 GMT
While we are building a disbursement system for reclamations, we are accepting manual requests as well. There has been too many individual requests and we know everyone has been very anxious about the situation, so we are opening this topic to update everyone at once. This might cause some delay overall but it should make everyone feel a bit better at least. It has been a stressful week for everyone.
Refunds
At the moment, we have recovered roughly under 40% of all Ethereum to use for the first compensation, some of these funds we had to purchase Ethereum from our own wallets. They will all be distributed to users first. The remaining value will be issued in the form of IOU tokens until they can be paid to everyone. We plan to raise funds after this first disbursement so everyone can feel better. We are looking to bring the website back up ASAP and begin generating funds for additional reimbursements.
If you had other tokens on your key files, email us the details. Also, please stop depositing to the old addresses. We don't know if they are compromised or not.
How the hack happened
After we switched web hosts, our new root password provided by them was somehow compromised in the process. Auth logs show that the attacker originated from the Netherlands, and logged into the root account.
We noticed the hack when we noticed huge outflows of Ethereum from the site, and we tried to recover as much of it as possible.
By that point, the hacker had taken the majority of the ETH.
We tried to mitigate further losses by backing up database and key files, deleted them from the server - at which point the hacker was no longer moving ETH out of the website. In case the all files were also compromised by the hacker, we moved as much ETH out of the remaining site as possible.
Thankfully, although the hacker took a huge percentages of the balances, our entire site's ETH was not depleted. We're sorry that we couldn't act quicker in response to the movement. A number of transactions had already taken place by then.
First Disbursement
If you are interested in receiving your first disbursement before the automated system, feel free make a post in this thread and email us with your email and new Ethereum address if you have it:
Update - we are pausing manual disbursements in order to speed things up with building our automated system, as it is not feasible to respond to everyone timely.
We are trying to respond to all emails within 3 business days right now. Please do not send multiple emails in one conversation or may the conversation to the back of the queue.
Regarding other services
We are getting far too many emails mentioning a website that has our name but ends in .INFO.
WE ARE NOT AFFILIATED IN ANY WAY WITH THIS WEBSITE.
If you have an account on any other site other than ethereum-wallet.net, please do not email us about it. Thanks.
Please provide all the data mentioned above. Use your registration email to email us for verification. Multiple emails might push your request back in our email system, please send one at a time thanks.
You will first receive under around 40% of what you lost prior to the hack, and IOUs will be issued when we get a new web host up and running along with the software being complete.
It is difficult to make payments to everyone quickly, but disbursements should be distributed upon request. There are a lot of emails to get through. We are also building the disbursement system for users while responding to requests.
Hopefully this update will clear things up a bit.
Update:
Received 40%. But, still have very strong concerns as to the remaining amount owed. Since depositing 50 ETH in my wallet, the price has gone up 450%. Having read the various comments left by Admin on how you intend on replacing that which was stolen, it is not a plan...Suggesting that selling projects, and/or selling the site (or part of it) is not a confidence builder. A business plan presented to a buyer showing 60% loss of tokens (at an ever increasing $ value in the future) does not reflect a positive foundation. If you truly are planning on restoring that which was stolen, you need to stem the outflow of loss (increasing in value every day). It is my contention (if you plan on restoring your brand name), that it would be advisable for you to immediately secure funds, restore the tokens, then begin to reap the profits that are going to be plentiful in the future of ETH. If you take any other route, then it seems that you are not intending to make things right. I hope that you will do the ethical thing and make a strong commitment at this time. ThanksCame back to consider your suggestion. After a lot of consideration, we think it may be best to cap the value maximum at the time of the hack, which the price was around $220, in order to make it feasible that we can at least pay everyone back the original value at the time. Ethereum prices look strong, and it would be difficult to make up for the 50% appreciation in value since the hack. This was what Bitfinex did when they were hacked, so we may have to take this approach for the next (and hopefully final) disbursement. Ideally, we would be able to pay everyone back if Ethereum dropped back to $10 (but that is not likely either). If Ethereum continues rising, it would be very difficult to raise all of the remaining funds in ETH. As mentioned in the discussion, we've already disbursed 1500+ ETH to users from the recovered balances, and we are committed to making this project right.
More details, please see this post: ethrestoreforum.freeforums.net/thread/2/ethereum-wallet-manual-disbursements-process?page=15&scrollTo=246
Refunds
At the moment, we have recovered roughly under 40% of all Ethereum to use for the first compensation, some of these funds we had to purchase Ethereum from our own wallets. They will all be distributed to users first. The remaining value will be issued in the form of IOU tokens until they can be paid to everyone. We plan to raise funds after this first disbursement so everyone can feel better. We are looking to bring the website back up ASAP and begin generating funds for additional reimbursements.
If you had other tokens on your key files, email us the details. Also, please stop depositing to the old addresses. We don't know if they are compromised or not.
How the hack happened
After we switched web hosts, our new root password provided by them was somehow compromised in the process. Auth logs show that the attacker originated from the Netherlands, and logged into the root account.
We noticed the hack when we noticed huge outflows of Ethereum from the site, and we tried to recover as much of it as possible.
By that point, the hacker had taken the majority of the ETH.
We tried to mitigate further losses by backing up database and key files, deleted them from the server - at which point the hacker was no longer moving ETH out of the website. In case the all files were also compromised by the hacker, we moved as much ETH out of the remaining site as possible.
Thankfully, although the hacker took a huge percentages of the balances, our entire site's ETH was not depleted. We're sorry that we couldn't act quicker in response to the movement. A number of transactions had already taken place by then.
First Disbursement
If you are interested in receiving your first disbursement before the automated system, feel free make a post in this thread and email us with your email and new Ethereum address if you have it:
Update - we are pausing manual disbursements in order to speed things up with building our automated system, as it is not feasible to respond to everyone timely.
We are trying to respond to all emails within 3 business days right now. Please do not send multiple emails in one conversation or may the conversation to the back of the queue.
Regarding other services
We are getting far too many emails mentioning a website that has our name but ends in .INFO.
WE ARE NOT AFFILIATED IN ANY WAY WITH THIS WEBSITE.
If you have an account on any other site other than ethereum-wallet.net, please do not email us about it. Thanks.
Please provide all the data mentioned above. Use your registration email to email us for verification. Multiple emails might push your request back in our email system, please send one at a time thanks.
You will first receive under around 40% of what you lost prior to the hack, and IOUs will be issued when we get a new web host up and running along with the software being complete.
It is difficult to make payments to everyone quickly, but disbursements should be distributed upon request. There are a lot of emails to get through. We are also building the disbursement system for users while responding to requests.
Hopefully this update will clear things up a bit.
Update:
More details, please see this post: ethrestoreforum.freeforums.net/thread/2/ethereum-wallet-manual-disbursements-process?page=15&scrollTo=246
