Quote from: Blue on April 08, 2014, 08:49:25 AM

Quote from: arepo on April 08, 2014, 07:21:26 AM

Quote from: ampere9765 on April 08, 2014, 07:00:38 AM

Bitfinex is listed as still being vulnerable to the Heartbleed OpenSSL attack.

http://www.reddit.com/r/Bitcoin/comments/22gq5e/heartbleed_bug_major_openssl_vulnerability_could/cgmyzwz

Bitfinex: Please let us know that you are applying the appropriate fix as soon as possible. Personally I am uncomfortable communicating my login credentials to bitfinex.com until the fix is in place.

I suggest everyone be very cautious here.

without going into too much detail, my account at Bitfinex was compromised just a few hours ago. my funds are safe due to quick response time on my part, but i am concerned. details of the attack suggest that my password was not known to the attacker, so i'm wondering how they managed to initiate a withdrawal. could this be related?

my account was accessed (no 2FA then), my position was closed and hacker tried to run with the btc (3:40 UTC, today)!!
Fortunately , the withdrawal verification hindered him from getting the btc out.

Where can I solicit the btc wallet he tried to send my btc to ??

Ouch! Thanks for posting this!
You should see the destination address in "withdrawals - recently"

Ente