MyBitcoin Exchange Hack/Fraud - Revision history

Azoundria at 21:32, 13 September 2024

2024-09-13T21:32:08Z

← Older revision		Revision as of 15:32, 13 September 2024
Line 1:		Line 1:
	[[File:Mybitcoin.jpg\|thumb\|MyBitcoin Logo/Homepage]]MyBitcoin was a popular wallet service for new users of bitcoin. The exact origins and founding of the service is not fully known. More than half of the funds were stolen from the service, reportedly through a shopping cart vulnerability. The service ultimately stopped operating after refunding what was left to affected users.		[[File:Mybitcoin.jpg\|thumb\|MyBitcoin Logo/Homepage]]MyBitcoin was a popular wallet service for new users of bitcoin. The exact origins and founding of the service is not fully known. More than half of the funds were stolen from the service, reportedly through a shopping cart vulnerability. The service ultimately stopped operating after refunding what was left to affected users.

			TBD:<ref>https://observer.com/2011/06/bit-omoney-whos-behind-the-bitcoin-bubble-2/ (Accessed Aug 28, 2024)</ref>

	== About MyBitcoin ==		== About MyBitcoin ==

Azoundria at 18:58, 11 December 2023

2023-12-11T18:58:40Z

← Older revision		Revision as of 12:58, 11 December 2023
Line 1:		Line 1:
	[[File:Mybitcoin.jpg\|thumb\|MyBitcoin]]MyBitcoin was a popular wallet service for new users of bitcoin. The exact origins and founding of the service is not fully known. More than half of the funds were stolen from the service, reportedly through a shopping cart vulnerability. The service ultimately stopped operating after refunding what was left to affected users.		[[File:Mybitcoin.jpg\|thumb\|MyBitcoin Logo/Homepage]]MyBitcoin was a popular wallet service for new users of bitcoin. The exact origins and founding of the service is not fully known. More than half of the funds were stolen from the service, reportedly through a shopping cart vulnerability. The service ultimately stopped operating after refunding what was left to affected users.

	== About MyBitcoin ==		== About MyBitcoin ==
	MyBitcoin was a wallet platform catering primarily to cryptocurrency newbies interested in buying bitcoin for the first time. ~~The exact founding date of~~ MyBitcoin is not fully known. One source reports that "MYBITCOIN has been in business since [the] middle of 2009"<ref name="fbireport" />, while domain name WHOIS reports that the domain first existed on April 25th, 2010<ref name="stackexchange" />. Actual content was ~~first reported on the site by Internet Archive on~~ February 11th, 2011<ref name="mybitcoinarchive~~" />, although prior versions of the site may have loaded content if the user installed "CACert's security certificate"<ref name="mybitcoincacert~~" />.		MyBitcoin was an early wallet platform catering primarily to cryptocurrency newbies interested in buying bitcoin for the first time. MyBitcoin was founded prior to February 11th, 2011<ref name="mybitcoinarchive" />.

	~~This~~ website showed the name MyBitcoin LLC<ref name="bitcoinwiki" /><ref name="mybitcoinarchive" /> while domain name WHOIS entries showed the mailing address to be a post office box in Nevis<ref name="bitcoinwiki" /><ref name="mybitcoindown" />, part of the Caribbean island nation of St. Kitts and Nevis<ref name="wikipedianevis" />. It is not known if this truly is an LLC and if so, where the organization was located<ref name="bitcoinwiki" />. Domain name WHOIS and a later announcement on the website showed that the founder was ~~someone named~~ Tom Williams<ref name="mybitcoindown" /><ref name="99bitcoins" />.		The original website showed the name MyBitcoin LLC<ref name="bitcoinwiki" /><ref name="mybitcoinarchive" />. Domain name WHOIS and a later announcement on the website showed that the founder was Tom Williams<ref name="mybitcoindown" /><ref name="99bitcoins" />.

	MyBitcoin built its reputation by providing a free, user-friendly service targeted at newbie Bitcoin buyers. An excerpt from the first version of the website mentioned it as "[a]n intuitive web-interface for Bitcoin" with "[n]o software to download, install, or configure", with easy integration for merchants to send and receive funds in bitcoin<ref name="mybitcoinarchive" />.<blockquote>MyBitcoin sports an easy to use interface with large navigation buttons. It is suitable for those who are just trying Bitcoin out, or for those who want to use Bitcoin for commerce now, and without delay.		MyBitcoin built its reputation by providing a free, user-friendly service targeted at newbie Bitcoin buyers. An excerpt from the first version of the website mentioned it as "[a]n intuitive web-interface for Bitcoin" with "[n]o software to download, install, or configure", with easy integration for merchants to send and receive funds in bitcoin<ref name="mybitcoinarchive" />.<blockquote>MyBitcoin sports an easy to use interface with large navigation buttons. It is suitable for those who are just trying Bitcoin out, or for those who want to use Bitcoin for commerce now, and without delay.
Line 17:		Line 17:

	MyBitcoin is completely free. We are supported by selling small text ads that are in our login area. We are also planning on selling support packages in the near future.</blockquote>Dozens of users flocked to the platform in its early days, and it reportedly had more deposits than the third largest exchange at the time, Bitomat.pl<ref name="observer2" />. One of the more prominent users was Bitcoin evangelist and host of The Bitcoin Show Bruce Wagner.<ref name="brucewagner" /><ref name="observer2" /> <blockquote>		MyBitcoin is completely free. We are supported by selling small text ads that are in our login area. We are also planning on selling support packages in the near future.</blockquote>Dozens of users flocked to the platform in its early days, and it reportedly had more deposits than the third largest exchange at the time, Bitomat.pl<ref name="observer2" />. One of the more prominent users was Bitcoin evangelist and host of The Bitcoin Show Bruce Wagner.<ref name="brucewagner" /><ref name="observer2" /> <blockquote>



Line 23:		Line 24:
	Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>		Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>
	==The Reality==		==The Reality==
			The exact founding date of MyBitcoin is not fully known. One source reports that "MYBITCOIN ha[d] been in business since [the] middle of 2009"<ref name="fbireport" />, while domain name WHOIS reports that the domain first existed on April 25th, 2010<ref name="stackexchange" />. Actual content was first reported on the site by Internet Archive on February 11th, 2011<ref name="mybitcoinarchive" />, although prior versions of the site appear to have loaded content if the user installed "CACert's security certificate"<ref name="mybitcoincacert" />.

			Domain name WHOIS entries showed the mailing address to be a post office box in Nevis<ref name="bitcoinwiki" /><ref name="mybitcoindown" />, part of the Caribbean island nation of St. Kitts and Nevis<ref name="wikipedianevis" />. It is not known if this truly was truly an LLC (Limited Liability Corporation) and if so, where the organization was located<ref name="bitcoinwiki" />.

	It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="bitcointalklistold" /><ref name="bitcointalklist" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 <shockdiode> In Charlestown in St Kitts and Nevis?		It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="bitcointalklistold" /><ref name="bitcointalklist" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 <shockdiode> In Charlestown in St Kitts and Nevis?

	05:11:10 <shockdiode> people use that country as a privacy cloak		05:11:10 <shockdiode> people use that country as a privacy cloak

	05:11:44 <shockdiode> getting incorporated there pretty much ~~gurantees~~ your anonymity</blockquote>The service was reportedly storing funds insecurely, with over half of the ~~funds~~ left in an online hot wallet<ref name="99bitcoins" />.		05:11:44 <shockdiode> getting incorporated there pretty much gu[a]rantees your anonymity</blockquote>The service was reportedly storing funds insecurely, with over half of the bitcoin left in an online hot wallet<ref name="99bitcoins" />.

	It appears that MyBitcoin was using an OpenCart software<ref>[https://bitcointalk.org/index.php?topic=5625.20;wap2 MyBitcoin Using OpenCart Software - BitcoinTalk] (Feb 2, 2023)</ref>. ~~The exact vulnerability was highlighted publicly on BitcoinTalk almost~~ a ~~month prior to the loss~~<ref name=":2">[https://bitcointalk.org/index.php?topic=22221.msg309173#msg309173 theymos - "MyBitcoin is ''still'' accepting payments with only 1 confirmation. This is insane for a bank. Any miner capable of mining two blocks in a row can steal money from MyBitcoin pretty easily. I'm surprised no one has attempted it yet. There's another attack made possible by accepting payments with less than 6 confirmations that would allow you to see exactly which coins MyBitcoin has, and possibly do other damage." - BitcoinTalk] (Feb 2, 2023)</ref>.		It appears that MyBitcoin was using an OpenCart software<ref>[https://bitcointalk.org/index.php?topic=5625.20;wap2 MyBitcoin Using OpenCart Software - BitcoinTalk] (Feb 2, 2023)</ref>. Some users had expressed concerns that the service accepted bitcoin deposits with only a single blockchain confirmation<ref name=":2">[https://bitcointalk.org/index.php?topic=22221.msg309173#msg309173 theymos - "MyBitcoin is ''still'' accepting payments with only 1 confirmation. This is insane for a bank. Any miner capable of mining two blocks in a row can steal money from MyBitcoin pretty easily. I'm surprised no one has attempted it yet. There's another attack made possible by accepting payments with less than 6 confirmations that would allow you to see exactly which coins MyBitcoin has, and possibly do other damage." - BitcoinTalk] (Feb 2, 2023)</ref>.

	==What Happened ==		==What Happened ==
	As reported through an announcement on the MyBitcoin website:<ref name="99bitcoins" /><blockquote>"On Friday[, July 29th, 2011] we noticed that one of our pooled holding servers was missing a large amount of Bitcoins. After a prompt investigation we realized that the security of our SCI (~~Sopping~~ Cart Interface) system had been breached by an unknown attacker."</blockquote>Further details were later published:<ref name="mybitcoinincident" /><blockquote>After careful analysis of the intrusion we have concluded that the software that waited for Bitcoin confirmations was far too lenient. An unknown attacker was able to forge Bitcoin deposits via the Shopping Cart Interface (SCI) and withdraw confirmed/older Bitcoins. This led to a slow trickle of theft that went unnoticed for a few days. Luckily, we do keep a percentage of the holdings in cold storage so the attackers didn’t completely clean us out. Just to clarify, we weren’t “fully” hacked aka “rooted”. You can still trust our PGP, SSL, and Tor public keys.		As reported through an announcement on the MyBitcoin website:<ref name="99bitcoins" /><blockquote>"On Friday[, July 29th, 2011] we noticed that one of our pooled holding servers was missing a large amount of Bitcoins. After a prompt investigation we realized that the security of our SCI (S[h]opping Cart Interface) system had been breached by an unknown attacker."</blockquote>Further details were later published:<ref name="mybitcoinincident" /><blockquote>After careful analysis of the intrusion we have concluded that the software that waited for Bitcoin confirmations was far too lenient. An unknown attacker was able to forge Bitcoin deposits via the Shopping Cart Interface (SCI) and withdraw confirmed/older Bitcoins. This led to a slow trickle of theft that went unnoticed for a few days. Luckily, we do keep a percentage of the holdings in cold storage so the attackers didn’t completely clean us out. Just to clarify, we weren’t “fully” hacked aka “rooted”. You can still trust our PGP, SSL, and Tor public keys.

	It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.		It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.

Azoundria: Another 30 minutes complete. Added technical analysis and prevention sections. Expanded and revised most text in the article. Added information about key certification.

2023-12-08T18:39:32Z

Another 30 minutes complete. Added technical analysis and prevention sections. Expanded and revised most text in the article. Added information about key certification.

Show changes

Azoundria at 22:09, 16 February 2023

2023-02-16T22:09:02Z

← Older revision		Revision as of 16:09, 16 February 2023
Line 161:		Line 161:
	<ref name="mybitcoincacert">[https://web.archive.org/web/20100718090911/http://www.mybitcoin.com/cacert/index.php MyBitcoin - A simple web-based Bitcoin wallet (CaCert Notice) - Internet Archive] (Jan 30, 2023)</ref>		<ref name="mybitcoincacert">[https://web.archive.org/web/20100718090911/http://www.mybitcoin.com/cacert/index.php MyBitcoin - A simple web-based Bitcoin wallet (CaCert Notice) - Internet Archive] (Jan 30, 2023)</ref>
	<ref name="mybitcoindown">[https://bitcointalk.org/index.php?topic=32900.0 mybitcoin down or just me? - BitcoinTalk Forum] (Jan 30, 2023)</ref>		<ref name="mybitcoindown">[https://bitcointalk.org/index.php?topic=32900.0 mybitcoin down or just me? - BitcoinTalk Forum] (Jan 30, 2023)</ref>
	<ref name="observer2">[https://observer.com/2011/08/mybitcoin-disappeared-with-bitcoins/ MyBitcoin.com Is Back: A Week After Vanishing With at Least $250 K. Worth of BTC, Site Claims It Was Hacked \| Observer] (Jan 30, 2023)</ref>		<ref name="observer2">[https://observer.com/2011/08/mybitcoin-disappeared-with-bitcoins/ MyBitcoin.com Is Back: A Week After Vanishing With at Least $250 K. Worth of BTC, Site Claims It Was Hacked - Observer] (Jan 30, 2023)</ref>
	<ref name="buybitcoinsworldwide">[https://buybitcoinworldwide.com/price/ BuyBitcoinsWorldwide Historic Bitcoin Price Chart] (Jan 30, 2023)</ref>		<ref name="buybitcoinsworldwide">[https://buybitcoinworldwide.com/price/ BuyBitcoinsWorldwide Historic Bitcoin Price Chart] (Jan 30, 2023)</ref>
	<ref name="wikipedianevis">[[wikipedia:Nevis\|Nevis - Wikipedia]] (Jan 30, 2023)</ref>		<ref name="wikipedianevis">[[wikipedia:Nevis\|Nevis - Wikipedia]] (Jan 30, 2023)</ref>

Azoundria: Undo revision 1846 by Azoundria (talk) and fixed the original edit that was intended.

2023-02-13T22:30:04Z

Undo revision 1846 by Azoundria (talk) and fixed the original edit that was intended.

← Older revision		Revision as of 16:30, 13 February 2023
Line 115:		Line 115:
	Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="bitcointalklist" />.		Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="bitcointalklist" />.

	Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" />[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.		Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name="observer2" /><ref>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.

	Every system run by Dalin and his company appears to run FreeBSD, Dalin writes that he enjoys administering FreeBSD servers, "Tom Williams" the anonymous owner of MyBitcoin also claims to be running BSD and nmap operating system fingerprinting corroborates this, although results are inconclusive.		Every system run by Dalin and his company appears to run FreeBSD, Dalin writes that he enjoys administering FreeBSD servers, "Tom Williams" the anonymous owner of MyBitcoin also claims to be running BSD and nmap operating system fingerprinting corroborates this, although results are inconclusive.

Azoundria at 22:27, 13 February 2023

2023-02-13T22:27:41Z

← Older revision		Revision as of 16:27, 13 February 2023
Line 115:		Line 115:
	Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="bitcointalklist" />.		Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="bitcointalklist" />.

	Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" /~~><ref~~>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.		Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" />[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.

	Every system run by Dalin and his company appears to run FreeBSD, Dalin writes that he enjoys administering FreeBSD servers, "Tom Williams" the anonymous owner of MyBitcoin also claims to be running BSD and nmap operating system fingerprinting corroborates this, although results are inconclusive.		Every system run by Dalin and his company appears to run FreeBSD, Dalin writes that he enjoys administering FreeBSD servers, "Tom Williams" the anonymous owner of MyBitcoin also claims to be running BSD and nmap operating system fingerprinting corroborates this, although results are inconclusive.

Azoundria at 22:26, 13 February 2023

2023-02-13T22:26:45Z

← Older revision		Revision as of 16:26, 13 February 2023
Line 58:		Line 58:
	\|August 5th, 2022 7:03 AM		\|August 5th, 2022 7:03 AM
	\|Announcement Found		\|Announcement Found
	\|The first record of the announcement having been mentioned publicly<ref name="observer2"~~>[https:~~/~~/observer.com/2011/08/mybitcoin-disappeared-with-bitcoins/ MyBitcoin.com Is Back: A Week After Vanishing With at Least $250 K. Worth of BTC, Site Claims It Was Hacked - Observer] (Feb 2, 2023)</ref~~>.		\|The first record of the announcement having been mentioned publicly<ref name="observer2" />.
	\|-		\|-
	\|August 8th, 2011 6:20 PM		\|August 8th, 2011 6:20 PM

Azoundria at 17:00, 13 February 2023

2023-02-13T17:00:44Z

← Older revision		Revision as of 11:00, 13 February 2023
Line 58:		Line 58:
	\|August 5th, 2022 7:03 AM		\|August 5th, 2022 7:03 AM
	\|Announcement Found		\|Announcement Found
	\|The first record of the announcement having been mentioned publicly<ref name=":6">[https://observer.com/2011/08/mybitcoin-disappeared-with-bitcoins/ MyBitcoin.com Is Back: A Week After Vanishing With at Least $250 K. Worth of BTC, Site Claims It Was Hacked - Observer] (Feb 2, 2023)</ref>.		\|The first record of the announcement having been mentioned publicly<ref name="observer2">[https://observer.com/2011/08/mybitcoin-disappeared-with-bitcoins/ MyBitcoin.com Is Back: A Week After Vanishing With at Least $250 K. Worth of BTC, Site Claims It Was Hacked - Observer] (Feb 2, 2023)</ref>.
	\|-		\|-
	\|August 8th, 2011 6:20 PM		\|August 8th, 2011 6:20 PM

Azoundria at 21:20, 9 February 2023

2023-02-09T21:20:19Z

Azoundria at 18:53, 6 February 2023

2023-02-06T18:53:46Z

← Older revision		Revision as of 12:53, 6 February 2023
Line 20:		Line 20:
	Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>		Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>
	==The Reality==		==The Reality==
	It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="~~list-old~~" /><ref name="list" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 < shockdiode> In Charlestown in St Kitts and Nevis?		It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="bitcointalklistold" /><ref name="list" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 < shockdiode> In Charlestown in St Kitts and Nevis?

	05:11:10 < shockdiode> people use that country as a privacy cloak		05:11:10 < shockdiode> people use that country as a privacy cloak
Line 33:		Line 33:
	It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.		It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.

	In hindsight we should have credited deposits after one confirmation so they would show up in the transaction history, and held the deposit until it reached at least 3 confirmations. Keeping track of two balances and displaying them in the login area would have been trivial.</blockquote>More than half of bitcoins stored with the service were reportedly stolen in the theft.<ref name="99bitcoins" /><ref name="~~list-old~~" /><ref name="list" /><ref name="observer" />		In hindsight we should have credited deposits after one confirmation so they would show up in the transaction history, and held the deposit until it reached at least 3 confirmations. Keeping track of two balances and displaying them in the login area would have been trivial.</blockquote>More than half of bitcoins stored with the service were reportedly stolen in the theft.<ref name="99bitcoins" /><ref name="bitcointalklistold" /><ref name="list" /><ref name="observer" />
	{\| class="wikitable"		{\| class="wikitable"
	\|+Key Event Timeline - MyBitcoin Exchange Hack/Fraud		\|+Key Event Timeline - MyBitcoin Exchange Hack/Fraud
Line 76:		Line 76:
	MyBitcoin claims that there were a total of 154,406 BTC prior to the incident, worth over $2m USD.<ref name="observer" /> Multiple sources incorrectly claim that this was the amount lost<ref name="kylegibson" /><ref name="bitcoinexchangeguide" />, however only the hot portion of MyBitcoin's wallet was hacked and MyBitcoin ultimately refunded users from the 49% that remained<ref name="observer" /><ref name="bitcoinwiki" /> in their cold storage through a claims process<ref name="99bitcoins" /><ref name="mybitcoinincident" />.		MyBitcoin claims that there were a total of 154,406 BTC prior to the incident, worth over $2m USD.<ref name="observer" /> Multiple sources incorrectly claim that this was the amount lost<ref name="kylegibson" /><ref name="bitcoinexchangeguide" />, however only the hot portion of MyBitcoin's wallet was hacked and MyBitcoin ultimately refunded users from the 49% that remained<ref name="observer" /><ref name="bitcoinwiki" /> in their cold storage through a claims process<ref name="99bitcoins" /><ref name="mybitcoinincident" />.

	99Bitcoins lists the total loss as 79,000 BTC though this is likely an estimation<ref name="99bitcoins" />, while Wikipedia simply states "more than 78,000 bitcoins" worth "roughly US$800,000"<ref>[[wikipedia:History_of_bitcoin\|History of bitcoin - Wikipedia]] (Jan 31, 2023)</ref>. The losses from the event were more precisely reported as 78,739.58205388 BTC<ref name="~~list-old~~" /><ref name="list" /> on BitcoinTalk, and estimated to be equivalent to either $1,072,570 USD<ref name="list" /> or $1,110,544 USD<ref name="~~list-old~~" />. BuyBitcoinsWorldWide lists a price of $13.49 USD on July 29th, 2011, which would give a total loss of $1,062,196.96 USD<ref name="buybitcoinsworldwide" />. Averaging these estimates gives a loss of $1,081,770.32 USD.		99Bitcoins lists the total loss as 79,000 BTC though this is likely an estimation<ref name="99bitcoins" />, while Wikipedia simply states "more than 78,000 bitcoins" worth "roughly US$800,000"<ref>[[wikipedia:History_of_bitcoin\|History of bitcoin - Wikipedia]] (Jan 31, 2023)</ref>. The losses from the event were more precisely reported as 78,739.58205388 BTC<ref name="bitcointalklistold" /><ref name="list" /> on BitcoinTalk, and estimated to be equivalent to either $1,072,570 USD<ref name="list" /> or $1,110,544 USD<ref name="bitcointalklistold" />. BuyBitcoinsWorldWide lists a price of $13.49 USD on July 29th, 2011, which would give a total loss of $1,062,196.96 USD<ref name="buybitcoinsworldwide" />. Averaging these estimates gives a loss of $1,081,770.32 USD.

	==Immediate Reactions==		==Immediate Reactions==
Line 113:		Line 113:
	A claims process was later undertaken through the MyBitcoin website.<ref name="buybitcoinsworldwide" /> <blockquote>The claim process will consist of a online form where the claimant will be required to enter their MyBitcoin username and password. Their balance will be displayed along with the percentage of remaining Bitcoins that we still have in our holdings. That percentage will be paid to a Bitcoin address of their choosing. This percentage will be based on our current total liabilities vs. our existing assets. We will disclose these figures as soon as they have been totaled.		A claims process was later undertaken through the MyBitcoin website.<ref name="buybitcoinsworldwide" /> <blockquote>The claim process will consist of a online form where the claimant will be required to enter their MyBitcoin username and password. Their balance will be displayed along with the percentage of remaining Bitcoins that we still have in our holdings. That percentage will be paid to a Bitcoin address of their choosing. This percentage will be based on our current total liabilities vs. our existing assets. We will disclose these figures as soon as they have been totaled.

	Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="~~list-old~~" /><ref name="list" />.		Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="list" />.

	Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" /><ref>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.		Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" /><ref>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.
Line 133:		Line 133:
	“Many of us think Tom Williams is TheMadhatter who used to sell prepaid credit cards bought in Canada,” another said. Mr. Owen may well be TheMadhatter, he added.		“Many of us think Tom Williams is TheMadhatter who used to sell prepaid credit cards bought in Canada,” another said. Mr. Owen may well be TheMadhatter, he added.

	On IRC, Mr. Williams denied that he was TheMadhatter or Dalin Owen. He also denied Betabeat an interview. “I’m not interested in the press. No offense implied,” he said.</blockquote>Another potential candidate considered was Bruce Wagner.<ref name="~~list-old~~" /><ref name="list" />:<blockquote>In the months ensuing, some evidence has been uncovered supporting mortgage broker Bruce Wagner; however, any evidence is inconclusive.</blockquote>It does not appear that any prosecution by authorities was ever undertaken in this case.		On IRC, Mr. Williams denied that he was TheMadhatter or Dalin Owen. He also denied Betabeat an interview. “I’m not interested in the press. No offense implied,” he said.</blockquote>Another potential candidate considered was Bruce Wagner.<ref name="bitcointalklistold" /><ref name="list" />:<blockquote>In the months ensuing, some evidence has been uncovered supporting mortgage broker Bruce Wagner; however, any evidence is inconclusive.</blockquote>It does not appear that any prosecution by authorities was ever undertaken in this case.
	==Total Amount Recovered==		==Total Amount Recovered==
	There do not appear to have been any funds recovered from the 51% which were claimed to have been stolen from the platform. MyBitcoin allowed users to receive refunds for the 49% of funds which remained in their cold storage wallet<ref name="observer" /><ref name=":5" />, although this stopped after August 13th, 2011 and it's unclear what portion of users received their funds prior<ref name="fbireport" />.		There do not appear to have been any funds recovered from the 51% which were claimed to have been stolen from the platform. MyBitcoin allowed users to receive refunds for the 49% of funds which remained in their cold storage wallet<ref name="observer" /><ref name=":5" />, although this stopped after August 13th, 2011 and it's unclear what portion of users received their funds prior<ref name="fbireport" />.

	==Ongoing Developments ==		==Ongoing Developments ==
	The MyBitcoin platform wrapped up their operations<ref name="99bitcoins" /> and while the investigation reportedly lost steam<ref name=":5">[https://web.archive.org/web/20140404115130/http://betabeat.com/2011/08/search-for-owners-of-mybitcoin-loses-steam/ Search for Owners of MyBitcoin Loses Steam \| Betabeat] (Jan 31, 2023)</ref>, there has been speculation as recently as 2019 about the identity of Tom Williams<ref>[https://bitcointalk.org/index.php?topic=22221.msg51052990#msg51052990 Tom Williams is Paul Calder de Roux speculation - BitcoinTalk] (Feb 2, 2023)</ref>. Even though MyBitcoin promised to release their source code, this was never done<ref name="~~list-old~~" /><ref name="list" />. It does not appear that there are any recent reports or investigations into where the stolen funds have gone.		The MyBitcoin platform wrapped up their operations<ref name="99bitcoins" /> and while the investigation reportedly lost steam<ref name=":5">[https://web.archive.org/web/20140404115130/http://betabeat.com/2011/08/search-for-owners-of-mybitcoin-loses-steam/ Search for Owners of MyBitcoin Loses Steam \| Betabeat] (Jan 31, 2023)</ref>, there has been speculation as recently as 2019 about the identity of Tom Williams<ref>[https://bitcointalk.org/index.php?topic=22221.msg51052990#msg51052990 Tom Williams is Paul Calder de Roux speculation - BitcoinTalk] (Feb 2, 2023)</ref>. Even though MyBitcoin promised to release their source code, this was never done<ref name="bitcointalklistold" /><ref name="list" />. It does not appear that there are any recent reports or investigations into where the stolen funds have gone.

	==Prevention Policies==		==Prevention Policies==

← Older revision		Revision as of 15:20, 9 February 2023
Line 20:		Line 20:
	Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>		Most of my friends and family and associates.... all have all their bitcoin there too.</blockquote>
	==The Reality==		==The Reality==
	It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="bitcointalklistold" /><ref name="~~list~~" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 < shockdiode> In Charlestown in St Kitts and Nevis?		It is unclear whether Tom Williams is the real name of the individual who founded MyBitcoin<ref name="bitcointalklistold" /><ref name="bitcointalklist" /> and some have argued he ran the entire service as a fraud.<ref name="99bitcoins" /><ref name=":0">[https://bitcointalk.org/index.php?topic=32900.msg411839#msg411839 Jine's Response - BitcoinTalk Forum] (Jan 31, 2023)</ref><blockquote>05:10:57 < shockdiode> In Charlestown in St Kitts and Nevis?

	05:11:10 < shockdiode> people use that country as a privacy cloak		05:11:10 < shockdiode> people use that country as a privacy cloak
Line 33:		Line 33:
	It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.		It appears to be human error combined with a misunderstanding of how Bitcoin secures transactions into the next block. Our programmer was under the assumption that one block was good enough to secure a transaction. Two years ago when the software was written, this single confirm myth was a popular belief.

	In hindsight we should have credited deposits after one confirmation so they would show up in the transaction history, and held the deposit until it reached at least 3 confirmations. Keeping track of two balances and displaying them in the login area would have been trivial.</blockquote>More than half of bitcoins stored with the service were reportedly stolen in the theft.<ref name="99bitcoins" /><ref name="bitcointalklistold" /><ref name="~~list~~" /><ref name="observer" />		In hindsight we should have credited deposits after one confirmation so they would show up in the transaction history, and held the deposit until it reached at least 3 confirmations. Keeping track of two balances and displaying them in the login area would have been trivial.</blockquote>More than half of bitcoins stored with the service were reportedly stolen in the theft.<ref name="99bitcoins" /><ref name="bitcointalklistold" /><ref name="bitcointalklist" /><ref name="observer" />
	{\| class="wikitable"		{\| class="wikitable"
	\|+Key Event Timeline - MyBitcoin Exchange Hack/Fraud		\|+Key Event Timeline - MyBitcoin Exchange Hack/Fraud
Line 76:		Line 76:
	MyBitcoin claims that there were a total of 154,406 BTC prior to the incident, worth over $2m USD.<ref name="observer" /> Multiple sources incorrectly claim that this was the amount lost<ref name="kylegibson" /><ref name="bitcoinexchangeguide" />, however only the hot portion of MyBitcoin's wallet was hacked and MyBitcoin ultimately refunded users from the 49% that remained<ref name="observer" /><ref name="bitcoinwiki" /> in their cold storage through a claims process<ref name="99bitcoins" /><ref name="mybitcoinincident" />.		MyBitcoin claims that there were a total of 154,406 BTC prior to the incident, worth over $2m USD.<ref name="observer" /> Multiple sources incorrectly claim that this was the amount lost<ref name="kylegibson" /><ref name="bitcoinexchangeguide" />, however only the hot portion of MyBitcoin's wallet was hacked and MyBitcoin ultimately refunded users from the 49% that remained<ref name="observer" /><ref name="bitcoinwiki" /> in their cold storage through a claims process<ref name="99bitcoins" /><ref name="mybitcoinincident" />.

	99Bitcoins lists the total loss as 79,000 BTC though this is likely an estimation<ref name="99bitcoins" />, while Wikipedia simply states "more than 78,000 bitcoins" worth "roughly US$800,000"<ref>[[wikipedia:History_of_bitcoin\|History of bitcoin - Wikipedia]] (Jan 31, 2023)</ref>. The losses from the event were more precisely reported as 78,739.58205388 BTC<ref name="bitcointalklistold" /><ref name="~~list~~" /> on BitcoinTalk, and estimated to be equivalent to either $1,072,570 USD<ref name="~~list~~" /> or $1,110,544 USD<ref name="bitcointalklistold" />. BuyBitcoinsWorldWide lists a price of $13.49 USD on July 29th, 2011, which would give a total loss of $1,062,196.96 USD<ref name="buybitcoinsworldwide" />. Averaging these estimates gives a loss of $1,081,770.32 USD.		99Bitcoins lists the total loss as 79,000 BTC though this is likely an estimation<ref name="99bitcoins" />, while Wikipedia simply states "more than 78,000 bitcoins" worth "roughly US$800,000"<ref>[[wikipedia:History_of_bitcoin\|History of bitcoin - Wikipedia]] (Jan 31, 2023)</ref>. The losses from the event were more precisely reported as 78,739.58205388 BTC<ref name="bitcointalklistold" /><ref name="bitcointalklist" /> on BitcoinTalk, and estimated to be equivalent to either $1,072,570 USD<ref name="bitcointalklist" /> or $1,110,544 USD<ref name="bitcointalklistold" />. BuyBitcoinsWorldWide lists a price of $13.49 USD on July 29th, 2011, which would give a total loss of $1,062,196.96 USD<ref name="buybitcoinsworldwide" />. Averaging these estimates gives a loss of $1,081,770.32 USD.

	==Immediate Reactions==		==Immediate Reactions==
Line 113:		Line 113:
	A claims process was later undertaken through the MyBitcoin website.<ref name="buybitcoinsworldwide" /> <blockquote>The claim process will consist of a online form where the claimant will be required to enter their MyBitcoin username and password. Their balance will be displayed along with the percentage of remaining Bitcoins that we still have in our holdings. That percentage will be paid to a Bitcoin address of their choosing. This percentage will be based on our current total liabilities vs. our existing assets. We will disclose these figures as soon as they have been totaled.		A claims process was later undertaken through the MyBitcoin website.<ref name="buybitcoinsworldwide" /> <blockquote>The claim process will consist of a online form where the claimant will be required to enter their MyBitcoin username and password. Their balance will be displayed along with the percentage of remaining Bitcoins that we still have in our holdings. That percentage will be paid to a Bitcoin address of their choosing. This percentage will be based on our current total liabilities vs. our existing assets. We will disclose these figures as soon as they have been totaled.

	Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="~~list~~" />.		Each online claim will be written to a ledger and will be manually approved within 48 hours of being filed online. We have decided to have a manual claim approval process for better security. The last thing we all need right now is for someone to breach the claim form. We are confident clients will find this satisfactory.</blockquote>MyBitcoin also promised to release their source code of their site<ref name="buybitcoinsworldwide" />, however this was never released<ref name="bitcointalklistold" /><ref name="bitcointalklist" />.

	Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" /><ref>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.		Information was investigated within days on the domain name registration and leased server which was set up<ref name=":0" /><ref name=":1" /> and some users started crowdsourcing information on the freenode #bitcoin-police IRC channel<ref name=":6" /><ref>[https://pastebin.com/MfPt99eR Bitcoin Police Pastebin Article] (Feb 2, 2023)</ref>. Some users pursued a Canadian lead against someone named Dalin Owen in Edmonton, Canada<ref name="observer" /><ref name=":1">[https://web.archive.org/web/20111028015259/http://bitcoin.crimeunit.net/wiki/index.php/MyBitcoin_Summary Bitcoin CrimeUnit Report - MyBitcoin]</ref>. Dalin Owen has denied being involved, and claims he merely sold the domain name for the site. Tom Williams has also expressly denied being Dalin Owen<ref name="observer" />. <blockquote>Dalin says he runs Roothosts and PrivacyShark, the latter of the two is a registered Nevis East Indies LLC setup by a company called Morning Star Holdings. MyBitcoin is also a Nevis LLC setup by the same company. Dalin says on his personal website that he was in contact with the person who registered mybitcoin.net with PrivacyShark and he recommended Morning Star.
Line 133:		Line 133:
	“Many of us think Tom Williams is TheMadhatter who used to sell prepaid credit cards bought in Canada,” another said. Mr. Owen may well be TheMadhatter, he added.		“Many of us think Tom Williams is TheMadhatter who used to sell prepaid credit cards bought in Canada,” another said. Mr. Owen may well be TheMadhatter, he added.

	On IRC, Mr. Williams denied that he was TheMadhatter or Dalin Owen. He also denied Betabeat an interview. “I’m not interested in the press. No offense implied,” he said.</blockquote>Another potential candidate considered was Bruce Wagner.<ref name="bitcointalklistold" /><ref name="~~list~~" />:<blockquote>In the months ensuing, some evidence has been uncovered supporting mortgage broker Bruce Wagner; however, any evidence is inconclusive.</blockquote>It does not appear that any prosecution by authorities was ever undertaken in this case.		On IRC, Mr. Williams denied that he was TheMadhatter or Dalin Owen. He also denied Betabeat an interview. “I’m not interested in the press. No offense implied,” he said.</blockquote>Another potential candidate considered was Bruce Wagner.<ref name="bitcointalklistold" /><ref name="bitcointalklist" />:<blockquote>In the months ensuing, some evidence has been uncovered supporting mortgage broker Bruce Wagner; however, any evidence is inconclusive.</blockquote>It does not appear that any prosecution by authorities was ever undertaken in this case.
	==Total Amount Recovered==		==Total Amount Recovered==
	There do not appear to have been any funds recovered from the 51% which were claimed to have been stolen from the platform. MyBitcoin allowed users to receive refunds for the 49% of funds which remained in their cold storage wallet<ref name="observer" /><ref name=":5" />, although this stopped after August 13th, 2011 and it's unclear what portion of users received their funds prior<ref name="fbireport" />.		There do not appear to have been any funds recovered from the 51% which were claimed to have been stolen from the platform. MyBitcoin allowed users to receive refunds for the 49% of funds which remained in their cold storage wallet<ref name="observer" /><ref name=":5" />, although this stopped after August 13th, 2011 and it's unclear what portion of users received their funds prior<ref name="fbireport" />.

	==Ongoing Developments ==		==Ongoing Developments ==
	The MyBitcoin platform wrapped up their operations<ref name="99bitcoins" /> and while the investigation reportedly lost steam<ref name=":5">[https://web.archive.org/web/20140404115130/http://betabeat.com/2011/08/search-for-owners-of-mybitcoin-loses-steam/ Search for Owners of MyBitcoin Loses Steam \| Betabeat] (Jan 31, 2023)</ref>, there has been speculation as recently as 2019 about the identity of Tom Williams<ref>[https://bitcointalk.org/index.php?topic=22221.msg51052990#msg51052990 Tom Williams is Paul Calder de Roux speculation - BitcoinTalk] (Feb 2, 2023)</ref>. Even though MyBitcoin promised to release their source code, this was never done<ref name="bitcointalklistold" /><ref name="~~list~~" />. It does not appear that there are any recent reports or investigations into where the stolen funds have gone.		The MyBitcoin platform wrapped up their operations<ref name="99bitcoins" /> and while the investigation reportedly lost steam<ref name=":5">[https://web.archive.org/web/20140404115130/http://betabeat.com/2011/08/search-for-owners-of-mybitcoin-loses-steam/ Search for Owners of MyBitcoin Loses Steam \| Betabeat] (Jan 31, 2023)</ref>, there has been speculation as recently as 2019 about the identity of Tom Williams<ref>[https://bitcointalk.org/index.php?topic=22221.msg51052990#msg51052990 Tom Williams is Paul Calder de Roux speculation - BitcoinTalk] (Feb 2, 2023)</ref>. Even though MyBitcoin promised to release their source code, this was never done<ref name="bitcointalklistold" /><ref name="bitcointalklist" />. It does not appear that there are any recent reports or investigations into where the stolen funds have gone.

	==Prevention Policies==		==Prevention Policies==
Line 154:		Line 154:
	<ref name="bitcoinwiki">[https://en.bitcoin.it/wiki/MyBitcoin MyBitcoin - Bitcoin Wiki] (Apr 12, 2020)</ref>		<ref name="bitcoinwiki">[https://en.bitcoin.it/wiki/MyBitcoin MyBitcoin - Bitcoin Wiki] (Apr 12, 2020)</ref>
	<ref name="kylegibson">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>		<ref name="kylegibson">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>
	<ref name="~~list~~">[https://bitcointalk.org/index.php?topic=576337 List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses] (Feb 15, 2020)</ref>		<ref name="bitcointalklist">[https://bitcointalk.org/index.php?topic=576337 List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses] (Feb 15, 2020)</ref>
	<ref name="bitcoinexchangeguide">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>		<ref name="bitcoinexchangeguide">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>
	<ref name="fbireport">[https://archive.org/stream/MyBitCoin/MyBitCoin_djvu.txt Full text of "MyBitCoin" - Archived FBI Report From August 17th, 2011] (Jan 30, 2023)</ref>		<ref name="fbireport">[https://archive.org/stream/MyBitCoin/MyBitCoin_djvu.txt Full text of "MyBitCoin" - Archived FBI Report From August 17th, 2011] (Jan 30, 2023)</ref>