Quote from: coinmarket.io on March 13, 2014, 07:26:26 PM

CoinMarket.io status update

1. What happened?

We got exploited. Somewhat. The majority of coins were saved by cold storage and a quick reaction.
A couple of users abused a bug in the trading engine allowing them to create coins (increase balance) out of nothing.
Do you remember the day when KARM/BTC 24h volume was 400+ out of the blue? That volume came from those malicious users trading.
When we noticed the problem, we stopped all trading to investigate the situation.
Unfortunately, we failed to find the bug fast enough to resume normal operation and cover the losses from fees.
The new trading engine (rewritten) still suffers from this unknown-to-us issue, this is why we have not resumed any trading.
Meanwhile, we allowed all withdrawals to happen - because it was the right thing to do.
Because of high withdrawal volumes, the wallets ran out of normal unspent inputs and started to combine too many small inputs for withdrawals.
There is a limit of inputs/outputs in a cryptocurrency transaction.
If the wallet software (the official stuff that everybody uses) chooses or attepts to choose too many inputs,
the transaction will fail with "Transaction too large" or "Transaction creation failed" error.
It has nothing to do with insufficent balance. This problem was caused by miners who mined directly to the deposit address, creating tens of thousands of small inputs.
The default algo for choosing transaction inputs (coin selection) is not designed for exchanges. We need to create some code that does some raw transaction magic.
Also, some coins have landed on an invalid fork - because we were too busy with other issues. We will update all coindaemons tonight.
Everything has taken too much time because multiple problems hit us at the same time and debugging the situation was not so simple.

2. What is the solution? What are you doing now?

We have manually processed some withdrawals, but that process is too slow.
An automatic script will be running tomorrow - it will hopefully process the stuck withdrawals.
If your withdrawal status changes to "manual", it means that we manually processed it.
If your withdrawal status changes to "fixed", it means that the automatic routine processed it.
We will publish statistics when avalible - after the script runs.

Please stop any accusations and threats against Kenneth Bjørke - he is just hosting the web servers.
The hosting of coinmarket.io by Kenneth will be terminated when the dust settles and all possible withdrawals are processed.

We will be posting lists of withdrawals that got fixed.
We are deeply sorry for the inconvenience this may have caused to you.
More detailed information coming after the automatic process runs.

quoting people to see

kafuzlum

Posts

Merits