aarons6



Offline



Activity: 1736

Merit: 1006







LegendaryActivity: 1736Merit: 1006 Purse.io HACKED.. October 10, 2015, 10:13:25 PM

Last edit: October 11, 2015, 02:34:42 AM by aarons6 #1

now, in this email it says to click the link or use the code to complete the withdraw, or email support.. which i did contact support..



a few seconds later i get an email saying thanks for withdrawing my funds.. WHAT?? i didnt click any links or typed in any codes.. i contacted SUPPORT.. which wasnt a website LINK its





now my account with PURSE has EVERY security thing turned on.. even 2fa..





so it looks like someone has figured a way to generate these links.. probably a security flaw or something..





EDIT.. it seems they are working to fix the issue.. they also say the coins were sent to a safe wallet.. and not lost.

so i had a few purchases up and i was waiting for a buyer when i just received an email saying i requested to withdraw all of my funds.now, in this email it says to click the link or use the code to complete the withdraw, or email support.. which i did contact support..a few seconds later i get an email saying thanks for withdrawing my funds.. WHAT?? i didnt click any links or typed in any codes.. i contacted SUPPORT.. which wasnt a website LINK its support@purese.io now my account with PURSE has EVERY security thing turned on.. even 2fa..so it looks like someone has figured a way to generate these links.. probably a security flaw or something..EDIT.. it seems they are working to fix the issue.. they also say the coins were sent to a safe wallet.. and not lost.

aarons6



Offline



Activity: 1736

Merit: 1006







LegendaryActivity: 1736Merit: 1006 Re: Purse.io HACKED.. I WOULD NOT USE THIS SITE October 10, 2015, 10:24:24 PM

Last edit: October 10, 2015, 10:43:29 PM by aarons6 #3 Quote from: oli123123 on October 10, 2015, 10:23:29 PM I've used Purse.io a few times and I haven't had any problems but i don't know maybe your computer has been compromised?

nope.. the site is down for maintenance now..





it uses google authy to log in.. so i cant see how my computer would generate the withdraw link and then use my phone to authenticate it..





i might add that my google authy phone is NOT my current in use phone but a backup phone that i use just for google authy. it has no sim card in it.





nope.. the site is down for maintenance now..it uses google authy to log in.. so i cant see how my computer would generate the withdraw link and then use my phone to authenticate it..i might add that my google authy phone is NOT my current in use phone but a backup phone that i use just for google authy. it has no sim card in it.

TheGr33k



Offline



Activity: 518

Merit: 500









Hero MemberActivity: 518Merit: 500 Re: Purse.io HACKED.. I WOULD NOT USE THIS SITE October 10, 2015, 11:14:23 PM #10 This sounds like a very serious security flaw and I'm willing to bet that all your bitcoins wind up in the same wallet. I would suggest we all sit back and watch cautiously at Purse, because this is no slight issue .

OP I am sorry for your loss, and everybody else who's experienced loss. thank you for informing the community!

aarons6



Offline



Activity: 1736

Merit: 1006







LegendaryActivity: 1736Merit: 1006 Re: Purse.io HACKED.. October 10, 2015, 11:21:40 PM

Last edit: October 13, 2015, 09:04:06 PM by aarons6 #12 Quote from: TheGr33k on October 10, 2015, 11:14:23 PM This sounds like a very serious security flaw and I'm willing to bet that all your bitcoins wind up in the same wallet. I would suggest we all sit back and watch cautiously at Purse, because this is no slight issue .

OP I am sorry for your loss, and everybody else who's experienced loss. thank you for informing the community!



the wallet that my coins went to has just 2 transactions.

https://www.blocktrail.com/BTC/address/1fZisbHc6rGRoWmMet7n15Sficng5YWbQ



looks like they both came from purse hot wallets.

the wallet that my coins went to has just 2 transactions.looks like they both came from purse hot wallets.