Bitcoin7 Exchange Hack/Fraud: Difference between revisions

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search
No edit summary
(COMPLETE 30 minutes. Updated the main template for this case. Information from the about section spread around to various other sections as appropriate. Filling in details as available from the Flippa auction listing for the Bitcoin7.com website. Date modified to October 5th, 2011.)
Line 1: Line 1:
{{Imported Case Study 2|source=https://www.quadrigainitiative.com/casestudy/bitcoin7exchangehackfraud.php}}
{{Case Study Under Construction}}{{Unattributed Sources}}
{{Unattributed Sources}}


Once again, this is a case where the official story is unverifiable and the identities of the operators are unknown. Sources claim that Bitcoin7 had quite high withdrawal fees, which support the narrative.
Once again, this is a case where the official story is unverifiable and the identities of the operators are unknown. Sources claim that Bitcoin7 had quite high withdrawal fees, which support the narrative.<ref name="bitcointalklistold-19" /><ref name="99bitcoins-83" /><ref name="kylegibson-86" /><ref name="bitcointalklist-87" /><ref name="bitcoinexchangeguide-218" /><ref name=":0">[https://web.archive.org/web/20131127043653/https://flippa.com/2999232-bitcoin-exchange-ready-to-launch-immediately-multi-currency-14-languages Bitcoin Exchange - Ready to launch immediately! Multi-currency, 14 languages - Flippa] (Accessed Nov 15, 2024)</ref>
 
The country for this case study is not yet known.<ref name="newsdotbitcoin-7" /><ref name="bitcointalklistold-19" /><ref name="99bitcoins-83" /><ref name="kylegibson-86" /><ref name="bitcointalklist-87" /><ref name="bitcoinexchangeguide-218" />


== About Bitcoin7 ==
== About Bitcoin7 ==
“Bitcoin7 was a business operating in 2011 that was once the third-largest BTC/USD exchange behind Tradehill and Mt Gox. On October 5, 2011, the company reported a theft of 5,000 BTC allegedly stemming from a group of Russian hackers. However, many believe the breach was an inside job and employees ran off with the funds. The Bitcoin7 domain was later sold for $10,000 USD in 2013, but has been offline ever since this incident.”
“Bitcoin7 was a business operating in 2011 that was once the third-largest BTC/USD exchange behind Tradehill and Mt Gox.”<ref name="newsdotbitcoin-7" />
 
The country for this case study is not yet known.
 
The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.
 
Include:
 
* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.
 
Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.


== The Reality ==
== The Reality ==
Line 37: Line 15:


== What Happened ==
== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
“On October 5, 2011, the company reported a theft of 5,000 BTC allegedly stemming from a group of Russian hackers.”<ref name="newsdotbitcoin-7" />
{| class="wikitable"
{| class="wikitable"
|+Key Event Timeline - Bitcoin7 Exchange Hack/Fraud
|+Key Event Timeline - Bitcoin7 Exchange Hack/Fraud
Line 44: Line 22:
!Description
!Description
|-
|-
|October 1st, 2011 12:00:05 AM MDT
|September 5th, 2011
|Main Event
|Reported Dwolla Account Seizure
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|According to information later revealed when the Bitcoin7 site was placed for auction, their issues started with their Dwolla account containing $100,000 being seized<ref name=":0" />. Those funds were reportedly lost at this point.
|-
|-
|
|October 5th, 2011
|
|Hacking Event Reported
|
|The Bitcoin7 company reports that they have experienced a theft of 5,000 BTC which they allege stems from a group of Russian hackers<ref name="newsdotbitcoin-7" />. The hacker was "officially from Eastern Europe or Russia"<ref name="bitcointalklistold-19" />. In actuality, the hack had been carried out by one of their employees<ref name=":0" />.
|-
|May 26th, 2012 2:39:04 PM MDT
|BitcoinTalk Article Lists This Event
|The event is listed in a thread put together by dree12 on BitcoinTalk, which is a list of different exchange hacking events<ref name="bitcointalklistold-19" />.
|-
|November 26th, 2013 9:36:53 PM MST
|Flippa Auction For Bitcoin7 Website
|An auction is run online for the Bitcoin7 website, with a minimum bid of $1,500 USD<ref name=":0" />. This provides considerable insight into the claimed sequence of events behind the exchange's collapse<ref name=":0" />.
|-
|February 3rd, 2017 10:00:04 AM MST
|Bitcoin News List Featured Hack
|The event is featured in a list put together by the popular Bitcoin.com website<ref name="newsdotbitcoin-7" />.
|}
|}
== Technical Details ==
There have been multiple events attributed to the downfall of the exchange:
=== Dwolla Account Seizure ===
According to information provided when the bitcoin exchange was placed for auction, "Dwolla.com seized about 100 000$ and our account. This seizure was completely illegal as they claimed they do not allow chargebacks. However someone has tricked their system and they seized our account as well as confiscated the money."<ref name=":0" />
=== Internal Bitcoin Theft Incident ===
While the hacking event was originally attributed to an individual "from Eastern Europe or Russia"<ref name="bitcointalklistold-19" />, many suspected that this was an inside job, which was later found to be the case. As they would later claim when listing their site for sale, "we got 5000 BTC stolen. The platform's security was NOT compromised as we later found that the theft was an inside job"<ref name=":0" />


== Total Amount Lost ==
== Total Amount Lost ==
The total amount lost has been estimated at $50,000 USD.
There was an estimate on BitcoinTalk based on the order book size that 11,000 bitcoin were taken<ref name="bitcointalklistold-19" />. This was based on the order book size of 15,000 bitcoin, and that 3 of 4 wallets were breached<ref name="bitcointalklistold-19" />. A note there lists the total loss at up to 15,000 bitcoin<ref name="bitcointalklistold-19" />. The value of the 11,000 bitcoin has been estimated at $50,000 USD<ref name="bitcointalklistold-19" />. Later version of the thread would expand the lower bound to 5,000 bitcoin<ref name="bitcointalklist-87" />.


How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Line 60: Line 59:
== Immediate Reactions ==
== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
“On October 5, 2011, the company reported a theft of 5,000 BTC allegedly stemming from a group of Russian hackers. However, many believe the breach was an inside job and employees ran off with the funds.”<ref name="newsdotbitcoin-7" />


== Ultimate Outcome ==
== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
The Bitcoin7 platform ultimately shut down<ref name="bitcointalklistold-19" />.
 
“The Bitcoin7 domain was later sold for $10,000 USD in 2013, but has been offline ever since this incident.”
 
The incident was later featured in a Bitcoin News article on Bitcoin.com<ref name="newsdotbitcoin-7" />.


== Total Amount Recovered ==
== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?


== Ongoing Developments ==
== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
What parts of this case are still remaining to be concluded?
== General Prevention Policies ==
== Individual Prevention Policies ==
This is a another case where simply knowing who's holding the funds and storing them properly offline with multiple signatures would have avoided the issues.
This is a another case where simply knowing who's holding the funds and storing them properly offline with multiple signatures would have avoided the issues.
== Individual Prevention Policies ==
 
{{Prevention:Individuals:Placeholder}}
{{Prevention:Individuals:Placeholder}}


Line 79: Line 82:


== Platform Prevention Policies ==
== Platform Prevention Policies ==
This is a another case where simply knowing who's holding the funds and storing them properly offline with multiple signatures would have avoided the issues.
{{Prevention:Platforms:Placeholder}}
{{Prevention:Platforms:Placeholder}}


Line 89: Line 94:


== References ==
== References ==
<references><ref name="newsdotbitcoin-7">[https://news.bitcoin.com/bitcoin-exchange-thefts-forgotten/ The Bitcoin Exchange Thefts You May Have Forgotten | Featured Bitcoin News] (Jan 29, 2020)</ref>
<references>
 
<ref name="newsdotbitcoin-7">[https://news.bitcoin.com/bitcoin-exchange-thefts-forgotten/ The Bitcoin Exchange Thefts You May Have Forgotten - Bitcoin News] (Accessed Jan 29, 2020)</ref>
<ref name="bitcointalklistold-19">[https://bitcointalk.org/index.php?topic=83794.msg923918#msg923918 <nowiki>List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses [Old]</nowiki>] (Jan 28, 2020)</ref>
<ref name="bitcointalklistold-19">[https://bitcointalk.org/index.php?topic=83794.msg923918#msg923918 <nowiki>List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses [Old] - BitcoinTalk</nowiki>] (Accessed Jan 28, 2020)</ref>
 
<ref name="99bitcoins-83">[https://99bitcoins.com/the-biggest-scams-in-bitcoin-history/?mod=article_inline The biggest scams in Bitcoin history] (Feb 15, 2020)</ref>
<ref name="99bitcoins-83">[https://99bitcoins.com/the-biggest-scams-in-bitcoin-history/?mod=article_inline The biggest scams in Bitcoin history] (Feb 15, 2020)</ref>
<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>
<ref name="kylegibson-86">[https://medium.com/@kylegibson/100-crypto-thefts-a-timeline-of-hacks-glitches-exit-scams-and-other-lost-cryptocurrency-873c87fd5522 100 Crypto Thefts: A Timeline of Hacks, Glitches, Exit Scams, and other Lost Cryptocurrency Incidents] (Jan 25, 2020)</ref>
 
<ref name="bitcointalklist-87">[https://bitcointalk.org/index.php?topic=576337 List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses - BitcoinTalk] (Accessed Feb 15, 2020)</ref>
<ref name="bitcointalklist-87">[https://bitcointalk.org/index.php?topic=576337 List of Major Bitcoin Heists, Thefts, Hacks, Scams, and Losses] (Feb 15, 2020)</ref>
<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref>
 
</references>
<ref name="bitcoinexchangeguide-218">[https://bitcoinexchangeguide.com/bitcoin/scams-hacks/ Bitcoin Scams and Cryptocurrency Hacks List - BitcoinExchangeGuide.com] (Mar 5, 2020)</ref></references>

Revision as of 16:58, 15 November 2024

Notice: This page is a new case study and some aspects have not been fully researched. Some sections may be incomplete or reflect inaccuracies present in initial sources. Please check the References at the bottom for further information and perform your own additional assessment. Please feel free to contribute by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Once again, this is a case where the official story is unverifiable and the identities of the operators are unknown. Sources claim that Bitcoin7 had quite high withdrawal fees, which support the narrative.[1][2][3][4][5][6]

About Bitcoin7

“Bitcoin7 was a business operating in 2011 that was once the third-largest BTC/USD exchange behind Tradehill and Mt Gox.”[7]

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

“On October 5, 2011, the company reported a theft of 5,000 BTC allegedly stemming from a group of Russian hackers.”[7]

Key Event Timeline - Bitcoin7 Exchange Hack/Fraud
Date Event Description
September 5th, 2011 Reported Dwolla Account Seizure According to information later revealed when the Bitcoin7 site was placed for auction, their issues started with their Dwolla account containing $100,000 being seized[6]. Those funds were reportedly lost at this point.
October 5th, 2011 Hacking Event Reported The Bitcoin7 company reports that they have experienced a theft of 5,000 BTC which they allege stems from a group of Russian hackers[7]. The hacker was "officially from Eastern Europe or Russia"[1]. In actuality, the hack had been carried out by one of their employees[6].
May 26th, 2012 2:39:04 PM MDT BitcoinTalk Article Lists This Event The event is listed in a thread put together by dree12 on BitcoinTalk, which is a list of different exchange hacking events[1].
November 26th, 2013 9:36:53 PM MST Flippa Auction For Bitcoin7 Website An auction is run online for the Bitcoin7 website, with a minimum bid of $1,500 USD[6]. This provides considerable insight into the claimed sequence of events behind the exchange's collapse[6].
February 3rd, 2017 10:00:04 AM MST Bitcoin News List Featured Hack The event is featured in a list put together by the popular Bitcoin.com website[7].

Technical Details

There have been multiple events attributed to the downfall of the exchange:

Dwolla Account Seizure

According to information provided when the bitcoin exchange was placed for auction, "Dwolla.com seized about 100 000$ and our account. This seizure was completely illegal as they claimed they do not allow chargebacks. However someone has tricked their system and they seized our account as well as confiscated the money."[6]

Internal Bitcoin Theft Incident

While the hacking event was originally attributed to an individual "from Eastern Europe or Russia"[1], many suspected that this was an inside job, which was later found to be the case. As they would later claim when listing their site for sale, "we got 5000 BTC stolen. The platform's security was NOT compromised as we later found that the theft was an inside job"[6]

Total Amount Lost

There was an estimate on BitcoinTalk based on the order book size that 11,000 bitcoin were taken[1]. This was based on the order book size of 15,000 bitcoin, and that 3 of 4 wallets were breached[1]. A note there lists the total loss at up to 15,000 bitcoin[1]. The value of the 11,000 bitcoin has been estimated at $50,000 USD[1]. Later version of the thread would expand the lower bound to 5,000 bitcoin[4].

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

Immediate Reactions

How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

“On October 5, 2011, the company reported a theft of 5,000 BTC allegedly stemming from a group of Russian hackers. However, many believe the breach was an inside job and employees ran off with the funds.”[7]

Ultimate Outcome

The Bitcoin7 platform ultimately shut down[1].

“The Bitcoin7 domain was later sold for $10,000 USD in 2013, but has been offline ever since this incident.”

The incident was later featured in a Bitcoin News article on Bitcoin.com[7].

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

This is a another case where simply knowing who's holding the funds and storing them properly offline with multiple signatures would have avoided the issues.

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

This is a another case where simply knowing who's holding the funds and storing them properly offline with multiple signatures would have avoided the issues.

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References