the creation of php-proxy-stratum was what make me think of having my own bitcoind/ckpool (a year ago)
i wanted to create a proxy for merge many miner connections into a signle conn to a pool but meanwhile i discovered how easily pools steal the hash of the miners with the agreement of authors of mining software.
you (mining software authors), simply need to allow miners to have 2 new config options:
- expected coinbase
- expected btc address
why this config options do now exists? and why mining software is not interested into validate this?
btw, im not able to explain wtf happened here. since effectively solo.mining-pool.io was compromised, i took a snapshot of the disk and killed with fire the running instance.
Those options do actually exist but are essentially unused.
Patches for checking generation address exist for cgminer:
https://github.com/ckolivas/cgminer/pull/638BFGMiner mainline supports it since 2014:
https://github.com/luke-jr/bfgminer/pull/551I don't believe you about it being compromised but send me the snapshot and I'll do a forensic analysis.