Thursday, December 7th 2017
Mining "Renting" Service Nicehash Hacked; $68M Routed From User Wallets
Another high-profile hack has hit Bitcoin, as cryptocurrency mining pool Nicehash has confirmed that they've suffered a hack which has rendered users' wallets with the service to be emptied. The heist, currently valued at more than $68M, transferred 4,736.4281 BTC in total to the unknown party's (the perpetrator's, almost certainly) wallet. A single transaction of 4,655.25349748 BTC was the most high-profile one to take place, and has left Nicehash users in the cold.
In a post on Reddit, Nicehash representatives confirmed the heist, stating that "Unfortunately, there has been a security breach involving NiceHash website. We are currently investigating the nature of the incident and, as a result, we are stopping all operations for the next 24 hours. Importantly, our payment system was compromised and the contents of the NiceHash Bitcoin wallet have been stolen. We are working to verify the precise number of BTC taken.""Unfortunately" seems to be too much of a sweet, sugarcoated word for the unmitigated disaster this is. However, the outfit says they have kept their eyes in the ball, in that "Clearly, this is a matter of deep concern and we are working hard to rectify the matter in the coming days. In addition to undertaking our own investigation, the incident has been reported to the relevant authorities and law enforcement and we are co-operating with them as a matter of urgency."
Nicehash was one of the foremost ways for users to put their hardware to usage in mining coins. Slightly different from a standard pool, where users contribute their own computing resources to that of a whole in order to increase chances of mining entire blocks, Nicehash worked on a mining power "renting" philosophy, where users contributed their hardware resources and hashing power towards mining workloads that were purchased by interested parties. This let users mine without having to micromanage their mining platform, and let renters of hashing power free from having to invest in hardware that would lose out on value eventually.
Nicehash has also warned users to change their passwords, as a matter of precaution, and has vowed to review and increase their security measures... But that may come slightly with a "too little, too late" taste to it for former and prospective users of the service. It remains to be seen whether they can bounce back from this event or not.
It's interesting to note that Bitcoin's value seems impervious to the event, however; the cryptocurrency has kept on soaring in value after the hack was discovered and announced.
Sources:
Coin Telegraph, Nicehash on Reddit
In a post on Reddit, Nicehash representatives confirmed the heist, stating that "Unfortunately, there has been a security breach involving NiceHash website. We are currently investigating the nature of the incident and, as a result, we are stopping all operations for the next 24 hours. Importantly, our payment system was compromised and the contents of the NiceHash Bitcoin wallet have been stolen. We are working to verify the precise number of BTC taken.""Unfortunately" seems to be too much of a sweet, sugarcoated word for the unmitigated disaster this is. However, the outfit says they have kept their eyes in the ball, in that "Clearly, this is a matter of deep concern and we are working hard to rectify the matter in the coming days. In addition to undertaking our own investigation, the incident has been reported to the relevant authorities and law enforcement and we are co-operating with them as a matter of urgency."
Nicehash was one of the foremost ways for users to put their hardware to usage in mining coins. Slightly different from a standard pool, where users contribute their own computing resources to that of a whole in order to increase chances of mining entire blocks, Nicehash worked on a mining power "renting" philosophy, where users contributed their hardware resources and hashing power towards mining workloads that were purchased by interested parties. This let users mine without having to micromanage their mining platform, and let renters of hashing power free from having to invest in hardware that would lose out on value eventually.
Nicehash has also warned users to change their passwords, as a matter of precaution, and has vowed to review and increase their security measures... But that may come slightly with a "too little, too late" taste to it for former and prospective users of the service. It remains to be seen whether they can bounce back from this event or not.
It's interesting to note that Bitcoin's value seems impervious to the event, however; the cryptocurrency has kept on soaring in value after the hack was discovered and announced.
51 Comments on Mining "Renting" Service Nicehash Hacked; $68M Routed From User Wallets
Might even have been a inside hit n run by nicehash.. @ ~57.7M $ (at the moment of transfer) even I would have been tempted
I hope mining ****ing dies!
bitinfocharts.com/bitcoin/address/1EnJHhq8Jq8vDuZA5ahVh6H4t6jh1mB4rq
gfycat.com/UniformSandyHyena
Now tell me miners aren't (indirectly) responsible for this?
mining is just what miners do.. most people are just buying the stuff and watching its value shoot up.. mining is in fact the wrong way to make crypto money..
i am gonna call it the bitcoin black hole.. it will suck up all investment money until there is none left.. then we will have another financial big bang..
i am still pissed of at losing some though.. not just at what i have lost but also at what i aint gonna make..
trog
This thread has been pretty anti-miner so far, but if you read through some of Reddit it's hard to not feel sorry for people that lost sizable amounts of money. The whole NH system with withdrawl fees really pushed keeping money in the online wallet as long as possible (which is more support for the inside job theory). So people that had large mining setups and withdrew say monthly and were been trying to do the safe thing with periodic withdrawls still got nailed for thousands.
It's even more amazing that Bitcoin went up another couple thousand dollars in the last day since it happened. It shows how super-speculative it is and there are some big money folks (and/or governments) that are likely manipulating it for profits. There's no other reason for Bitcoin to go from $600 last year to $15,000 today. Good while it lasts but it's only a matter of time until the bubble pops and the bottom drops out.
Modern banking or the wild west. UK banks have been stress tested to see if they can survive another crash (they can) and in that respect, modern banking systems are fundamentally safer places.
Crypto investment is the modern equivalent of the old US gold rush. There is little security but the amount of continued investment (by uber rich hedge funds) just pushes BTC up. Meanwhile, lack of any oversight or regulation makes it a hackers dream.
As folk have said - you need to be very sensible with crypto sourced wealth because by it's tech nature - it's liable to tech crime.
It doesn't serve any miner 'right' that they lost through this but it should serve as a warning.
I'm still perplexed how we live in a world where wealth is created from nothing but popular interest. Convert crypto wealth to schools, hospitals and donuts and call it quits.
Personally, I ran Nicehash and my payments went directly into my Coinbase account, so there was zip in my Nicehash wallet... however I probably lost the ~$130 worth of BTC I was due to receive this Friday. Now my 1070s are doing bugger all while I wait to see what happens with Nicehash before moving on.
www.reddit.com/r/NiceHash/comments/7i24qq/nicehash_cto_is_a_well_know_criminal/