pull down to refresh
They took responsibility for 4k BTC. If they release it back while there is still a vuln, all is for nothing, then someone else will take it. I am mostly not sure about having a public non-encrypted part in this. I'd personally just encrypt it all. Can always be disclosed later.
The coin doesn't belong to Blockstream! It belongs to the LBTC holders and it is custodied by the federation. Under no circumstance should anyone but the federation that custodies it touch the coin.
Please realize how much value 4k BTC is. If NgU stays true, it is more concentrated value that for most of us, our entire lineage back to the stone age have ever touched. Massive responsibility. Also massive liability if you have access to it.
I think that this is proper. Just the public comms aren't per se.
Under no circumstance should anyone but the federation that custodies it touch the coin.
If there is an exception made for the whitehat (ie they were worried that someone else might steal the coins, so they didn't follow normal responsible disclosure, nor even seemingly reach out to blockstream other than in the moment they took the funds), then why not send it to Blockstream? If the choice is between an anon and a company with a decade-long reputation, it doesn't seem clear-cut to me that the anon is better. I like anons but I also see the value of Blockstream not wanting to torch their entire business.
If the person/group who did this really does return the funds, they will rank high in my book for integrity.
The alleged (because we don't know yet) "whitehat" is still a hacker and what they did is illegal in most jurisdictions. So they're taking a huge risk. They should not take a bounty from anything but Adam's personal dark pool of undoxxed BTC because if they take anything from a federation member they'll be doxxed and traceable. And if they used any Chinese AI tech at all, there will be an entire US justice dept full of hardons to prosecute and make an example out of them. So they better be in China or Russia too.
Nah this is super dangerous and even a 100% honest hacker can get completely destroyed over this. Hopefully you'll never have anyone to assign that rank to.
Please realize how much value 4k BTC is. If NgU stays true, it is more concentrated value that for most of us, our entire lineage back to the stone age have ever touched. Massive responsibility. Also massive liability if you have access to it.
:O
I don't understand why they would drag it out like this.
Why not ask Blockstream to provide an address and send the btc to that address.
It feels to me like they are drawing it out.
For instance, why did they initially say they were sending funds back to the original address and then after Block stream confirmed, say well, you need to fix first. Why not lead with fix the bug? There are extra rounds of communication here.
Does it read differently to you?