Quote from: kdrop22 on February 21, 2014, 02:43:37 AM

Quote from: busoni on February 21, 2014, 02:01:36 AM

Update.

The trades have been rolled back and all XCP orders have been cancelled.

The total XCP missing from the wallet--from people who bought from the dump and made hasty withdrawals--is about 7,000 XCP. I think it is a matter for the community how we want to deal with this. Do we all want to contribute? Should everyone's balances be taxed? Does everyone think this is all my fault and I should pay it out of pocket?

Because this XCP is missing from the wallet, I'm not sure I can turn withdrawals on yet, and until XCP is really verified secure, I can't turn the exchange on. If the exchange isn't on, then I doubt people would really care to keep their XCP in their Poloniex account, and if everyone withdraws, some people at the end are going to be stuck with that missing 7,000 XCP. So I guess we need to decide about this as soon as possible.

The BTC has not been returned yet, but I still have reason to believe that it will be. The attacker has found some other issues with XCP, including one that PhantomPhreak fixed before the attacker reported it and some others that have not been verified yet. The attacker seems intent on the success of XCP and also has opinions about the rollback, and seems to be withholding the BTC pending certain fixes. I have asked for final word on when the BTC will be returned, what he is waiting for, and he should respond by tomorrow. He has been very communicative and has been continuing to search XCP for security flaws--not really the profile of a thief.

Maximum daily withdrawal limits have now been implemented on all coins. For BTC, it is 50. Other security measures will come, and more coins will be moved to cold storage. (The majority of the BTC was in cold storage before any of this happened.)

I expect everything will return to normal in a few days, but I don't have anything definite yet. I'll keep everyone updated as I learn more. Realistically, I could just resume operations now, but I don't think that is wise or fair.

The loss of 7000 XCP can be spread across all accounts with XCP balance in Poloniex. Assuming the balance in Poloniex account is 45,000. This would be 15%.
We can go the donation route, but doubt it will raise more than 1000 XCP.

It was not an exchange bug. The bug affected all of XCP. So why should poloniex users only get penalized while the HODLERS! do not? I am both btw. Though I do admit

taxing is easier/quicker and I do want this behind us already.