Jump to content


New Member
  • Content Count

  • Joined

  • Last visited

About mrak

  • Rank

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Well, that is an odd design choice.... In any case, the numbers still don't add up: If I sum the number of payments made between 2019-6-4 and 2019-6-10 I get 319,500. However, if you look at the weekly transactions by type chart, there are 517,266 payments for the week ending on 2019-6-10. Also, if you were to sum all the transactions for a week long period 2019-6-4 to 2019-6-10 you get 6,291,836 transactions, but the weekly chart by type lists 1,911,670, which is off by a factor of 3. Still confused.
  2. I think that a lot of you have probably seen the recent spikes in XRP payments on the xrpcharts: https://xrpcharts.ripple.com/#/metrics I've been trying to figure out what is going on, but it became clear that I actually don't understand what data are being plotted here. If you look at the first chart on the page for the number of transactions on 2019-6-10, you see that the number is about 770,000. If you look at the number of payments on this day the number is about 64,000. If you scroll down to transactions by type, the number of payments is about an order of magnitude greater: 517,000. If you sum all the transaction types you get about 1,843,000 transactions, which is inconsistent with the first number by more than a factor of 2. Does anyone understand what is really being plotted here? I initially assumed that payments were the transfer of XRP from one account to another. However, I now suspect that payments also include transfers of IOUs as well. Given that the number of payments are listed twice and are inconsistent, I am curious if this is because people are doing tests on the mainnet with worthless IOUs. Thanks!
  3. Is your Ripple wallet passphrase the same as your Gatehub login password? I am pretty confident that the two are different. When I imported my Ripple Trade wallet that was already encrypted, I do not recall them asking me to decrypt it, and then re-encrypt it with my Gatehub password (perhaps I am wrong).
  4. For those of you who were hacked: Could you let us know the characteristics of your Ripple wallet passphrase? (Like length and whether it might be in a password dictionary?). As far as I understand, the wallet passphrase is not the same thing as your Gatehub login (I am not about to log in to their site now to check this....)
  5. It seems pretty obvious to me that this is all a problem related to weak passwords. When I created my first wallet with Ripple trade, the application generated a secret key, and then encrypted this with a password that I provided. Given that no one had access to my wallet file, this was very secure. Given that it was encrypted, if someone got ahold of my computer and found the wallet file, I would still be protected, given that my password was 30 characters long and impossible to brute force. Then, Ripple asked us to move our wallets to Gatehub since they were no longer going to support Ripple Trade. Since my wallet was encrypted with a strong password, I didn't have a problem doing this. On top of that I placed some trust in Gatehub that their servers would be just as secure as my computer (this is obviously not true, it was the early days of crypto....) So, what appears to have happened are two things: Some early users encrypted their wallet with a bad password: Either less than ~8 characters long, or a passphrase that can be found in a password dictionary. Gatehub had a security breach and some encrypted wallet files were accessed. The perpetrator used a brute force password attack on these files offline, and once the wallet was decrypted, they accessed the secret key and drained the balance using a service that is not associated with gatehub. It is irrelevant if 2FA was enabled, because the hackers didn't need to log into your gatehub account: They already had the encrypted wallet file. If this is all true, it is difficult to say how responsible Gatehub is for storing your wallet that was encrypted with a weak password.
  • Create New...