Quote from: AdolfinWolf on February 21, 2020, 09:35:46 PM

Quote from: johnitrue on February 21, 2020, 07:37:25 PM

Also today a certain https://bitcointalk.org/index.php?action=profile;u=2765212 appeared on the forum.
He claims that allegedly somewhere source codes for sale appeared.
However, without providing any evidence.

While i do think smartmixer's owners are pretty incompetent up to a certain degree, (and i've stated this numerous times in the past regarding their "fake- (one could view their given explanation as "moderately") plausible.." mixing popups, their use of anti-DDOS services such as Cloudflare, and their use of potential sockpuppets, note: that is not proven, just an allegation some people have made.), I for one still would not blindly believe they got hacked, and if their database got hacked, you'd expect the service to be offline as well etc.
Without proof it sounds dubious.

Anyway, if you have a letter of guarantee... Well, keep us updated and post that as proof if they don't do anything about your case..

Although, perhaps someone can help me here...

I just downloaded Smartmixer's letter of guarantee:

It's a JSON file that looks like this:

Code:

{
   "comment": "Never share your Letter of Guarantee with third parties. Attach this document to our Support Team only when you are facing problems with your mixing order. The Letter of Guarantee is only available during the active mixing operation. After the completion all data about your order will be deleted automatically from our database.",
   "orderHash": "509bdc054a8201782f6d86bbd065481d691869a39f54a3140dd0c09e84e12bae6c11635ec4b0ceb816eafb6e11dc50c8f0bfbeb3741e21a8a7cebef44ddb9a79",
   "orderKey" : "3eelup75ony8wgcw",
   "currency": "BTC",
   "customerCode":"f0a6oid4",
   "feePercentage": 4.9787,
   "feePerAddress": 0.00023225,
   "address": "3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr",
   "pool": "Stealth Pool",
   "createdAt": 1582320630,
   "outputs":[
   {
   "address": "3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8",
   "delay": 180,
   "percentage": 100
   } ]
}

How can i verify this? What exactly is the message body, and what is the digital signature? Can anyone verify this signature for deposit address 3Eg3K6mmHZPUWzD222hxj4mtj5b6ws4WDr using above JSON in electrum / whatever?

I mean, am i retarded, or is this letter of guarantee actually a "internal" letter of guarantee? What are they talking about expiring a signature, or it only being valid during mixing? Are they nuts?

(Haven't tried myself but this feels like i would just be guessing, and it's late already, Well actually i did try, using the order hash as signature, deposit as signing adress, and comment as message, but it's not making much sense. Oh well, i'm rambling here. Should go.)

As opposed to a traditional letter of guarantee, which just looks like this, and can easily be verified??

Quote

========== START LETTER OF GUARANTEE ==========
We hereby confirm that Blender.io has generated the deposit address 3JHWRiAdk4ykB6YsoBcKFmqR5zdurTpcdk in order to transfer incoming amount (minus fee: 1.333% in total + 0.00025 BTC for every target address) to the following addresses: 100% to 3KvLa6RQCNaWXoWziBQ4NZBchUt3MA5Rj8 after 0 hour(s). This service will be only available for all bitcoins received from Friday, 21-Feb-2020 21:31:52 UTC to Saturday, 22-Feb-2020 21:31:52 UTC with minimum amount of 0.001 BTC and maximum amount of 2918.67487656 BTC total. This letter is digitally signed by the address: 1Fd1zWsLCP8okiExCrhzvU4TD8zKYfgbZ1.
=========== END LETTER OF GUARANTEE ===========

=========== START DIGITAL SIGNATURE ===========
H9A0N0hqhxeGyYwlP0WHvBly0vtEQj1EgH033inJyslnfW2Ckvdi79ceP4YuAn4JlwyfFyBjefUoxok bjBGpZZU=
============ END DIGITAL SIGNATURE ============

I think they use extra * salt * in the hash.
Or, a certain public sequence (the order is unknown to us).

In any case, I have all their signatures issued - on hand. Moreover, I have used this mixer more than once before. And I'm a little swept away.

I'm waiting for the declared 48 ~ hours.