Post
Topic
Board Beginners & Help
MtGox possibly stolen account with bitcoins on it
by
mahun
on 19/06/2011, 01:55:22 UTC
Unable to post in to this topic http://forum.bitcoin.org/index.php?topic=18858.0;all so will post here.

I exchanged some my WMZ to BTC on #bitcoin-otc with decent exchange rate. I tried to cash out it to dwolla, created account on mtgox.com and sent coins to it. I had to go to work so I closed browser and came back to mtgox.com after 3-4 hours and found I am unable to loggin - it says that login/password invalid.

I know about recent CSRF attacks - I was offline, so I could not visit site with exploit. My account was brand new, so no hackers could get to it so quick. I did not use email in mtgox.com but I wrote down login/password so I am sure I am using correct one.

I sent 50.56 to http://blockexplorer.com/address/18Pu9zLDzviyzjMFvH4NMZjpHiq5JrgiYU address. Looks like they are gone, so somehow hacker was able to get into this account and looks like mtgox.com db was really hacked! Probably hacker tries to slowly withdraw all money, but $1000 daily limit do not allow it to do quickly so he targets smaller accounts.

mtgox login: steve3
btc address used to fund mtgox.com account 18Pu9zLDzviyzjMFvH4NMZjpHiq5JrgiYU
amount - 50.56

I wrote several times to mtgox.com support via info@ email and via support widget on their site - nothing =(

So bewared. I think it's time for tradehill.com and better and more secure websites.