The total XCP missing from the wallet--from people who bought from the dump and made hasty withdrawals--is about 7,000 XCP.
I am confused, I thought the hacker double-spent 35,000 XCP yet only 7,000 is missing?
And if he walked away with 80 BTC, but only 7,000 is missing, then he sold 80BTC for 7,000?
I don't understand what happened exactly...
The 35000 spent exploited a protocol bug and thus was reversed (it never existed in the most recent version of the database).
The 7000 constitutes withdrawals by people who sold BTC for XCP and so withdrew the "tainted" XCP. That was not reversed.
The 80 BTC constitutes funds that the hacker withdrew after selling to the above people, and has not been returned yet.
So the parties who were wronged:
- People who bought XCP with BTC, but did not withdraw prior to closing (that would be approximately 35000 - 7000 = 28000 XCP)
- People who deposited XCP who did not mean to sell at those prices (which the hacker did), that would be whatever balance poloniex has right now, minus 28000
- Poloniex, who is losing out on trading and has a loss of confidence
The parties who "benefited":
- People who withdrew XCP that they bought before closing (this is the 7000)
- The hacker, who is up +80BTC
The parties who were unaffected
- People who did not have XCP on poloniex
Ideally, people who withdrew would deposit funds back into the exchange, the BTC would be redeposited, and all trades reversed, which would result in no one gaining or losing anything. However as this is not actually practical, the exchange is currently soliciting donations to try to cover the remainder.
That's the current fund situation right now.
A clear explanation about current situation.