Quote from: Spekulatius on February 21, 2014, 03:19:44 AM

Quote from: qtgwith on February 21, 2014, 02:30:38 AM

Quote from: qtgwith on February 21, 2014, 02:17:32 AM

Quote from: busoni on February 21, 2014, 02:01:36 AM

Update.

The trades have been rolled back and all XCP orders have been cancelled.

The total XCP missing from the wallet--from people who bought from the dump and made hasty withdrawals--is about 7,000 XCP. I think it is a matter for the community how we want to deal with this. Do we all want to contribute? Should everyone's balances be taxed? Does everyone think this is all my fault and I should pay it out of pocket?

Because this XCP is missing from the wallet, I'm not sure I can turn withdrawals on yet, and until XCP is really verified secure, I can't turn the exchange on. If the exchange isn't on, then I doubt people would really care to keep their XCP in their Poloniex account, and if everyone withdraws, some people at the end are going to be stuck with that missing 7,000 XCP. So I guess we need to decide about this as soon as possible.

The BTC has not been returned yet, but I still have reason to believe that it will be. The attacker has found some other issues with XCP, including one that PhantomPhreak fixed before the attacker reported it and some others that have not been verified yet. The attacker seems intent on the success of XCP and also has opinions about the rollback, and seems to be withholding the BTC pending certain fixes. I have asked for final word on when the BTC will be returned, what he is waiting for, and he should respond by tomorrow. He has been very communicative and has been continuing to search XCP for security flaws--not really the profile of a thief.

Maximum daily withdrawal limits have now been implemented on all coins. For BTC, it is 50. Other security measures will come, and more coins will be moved to cold storage. (The majority of the BTC was in cold storage before any of this happened.)

I expect everything will return to normal in a few days, but I don't have anything definite yet. I'll keep everyone updated as I learn more. Realistically, I could just resume operations now, but I don't think that is wise or fair.

Everyone should donate some XCPs to deal with this. It should be solved easily this way.

Or everyone's XCP address is taxed in proportion to cover the lost. The proportion should be 7000/2650000=1/380

This is just another slippery slope proposition right there.

Yes.Also I think donation is the best way to solve the problem.