cmbartley Posted December 7, 2016 Share Posted December 7, 2016 They said 2FA was on during the other hacks? I'm wondering if there's a difference between funds held in the Ripple wallet vs hosted wallet. My guess is that funds are backed in the hosted but not the Ripple wallet. faz 1 Link to comment Share on other sites More sharing options...
T8493 Posted December 7, 2016 Share Posted December 7, 2016 6 hours ago, tomb said: Just get 2 factor. 2FA is not a panacea. Sophisticated phishing attack could - at least in theory - bypass 2FA security by asking the victim to enter the 2FA password on the phishing site (and then send this password to the GateHub site). Link to comment Share on other sites More sharing options...
rst Posted December 7, 2016 Author Share Posted December 7, 2016 Also there was some money still in the SnapSwap account ( I had even forgot about) the thief took the money out of my SnapSwap account and bought XRP with it , then transferred all the XRP out. I never received any emails during any of this. Usually an email is sent anytime there is any activity on the account. ?? Link to comment Share on other sites More sharing options...
T8493 Posted December 7, 2016 Share Posted December 7, 2016 5 minutes ago, rst said: I never received any emails during any of this. Usually an email is sent anytime there is any activity on the account. ?? 1 It looks like they send an email when someone signs in into GateHub wallet from an IP address that doesn't belong to the GateHub user (according to their heuristics). Link to comment Share on other sites More sharing options...
segra Posted December 7, 2016 Share Posted December 7, 2016 1 hour ago, T8493 said: It looks like they send an email when someone signs in into GateHub wallet from an IP address that doesn't belong to the GateHub user (according to their heuristics). They do, and its loads of fun when travelling using your phone as a hotspot Link to comment Share on other sites More sharing options...
cupertinosucks Posted May 18, 2017 Share Posted May 18, 2017 Sorry to revive an old thread. Did anyone get anything back of their stolen XRP from GateHub? FBI help at all? Does anyone have any positive news from GateHub? They seem hella shady. I got hacked 106,189 XRP out of my account on 09/18/2016. I had 2FA enabled. I still have my 2FA token to prove it, but it was somehow disabled when I logged on. Yeah sure someone can make a fake site and potentially steal my 2FA code. I haven't logged into GateHub since 04/2016, after I migrated my account from Ripple. No notification, no email, no nothing, not even in the access log history. I log in for the first time again in 10/2016, and I see my balance as ZERO. Last logon is 10/2016 and 04/2016. XRP transferred out on 9/18/2016. Below was logged for the transfer. ** Type:client (decoded hex) ** Data:rt1.1.32-bugfix-2-ge152297-dirty (decoded hex) * tfFullyCanonicalSig Link to comment Share on other sites More sharing options...
nkarthi Posted May 21, 2017 Share Posted May 21, 2017 On 12/3/2016 at 7:16 PM, rst said: My account was hacked at GateHub all the XRP was transferred out. Gatehub did an investigation and can see where it went. Also they see it happened several times from the same thief. Gatehub said it is irreversible and did not give me my money back. Gatehub said that I should go after the thief. Conclusion money not safe at GateHub. I have contacted the FBI. If your money was stolen too, then you should contact the FBI. I am in the same situation. Can you please provide more details? Link to comment Share on other sites More sharing options...
nkarthi Posted May 21, 2017 Share Posted May 21, 2017 On 5/18/2017 at 1:42 AM, cupertinosucks said: Sorry to revive an old thread. Did anyone get anything back of their stolen XRP from GateHub? FBI help at all? Does anyone have any positive news from GateHub? They seem hella shady. I got hacked 106,189 XRP out of my account on 09/18/2016. I had 2FA enabled. I still have my 2FA token to prove it, but it was somehow disabled when I logged on. Yeah sure someone can make a fake site and potentially steal my 2FA code. I haven't logged into GateHub since 04/2016, after I migrated my account from Ripple. No notification, no email, no nothing, not even in the access log history. I log in for the first time again in 10/2016, and I see my balance as ZERO. Last logon is 10/2016 and 04/2016. XRP transferred out on 9/18/2016. Below was logged for the transfer. ** Type:client (decoded hex) ** Data:rt1.1.32-bugfix-2-ge152297-dirty (decoded hex) * tfFullyCanonicalSig I am in the same situation and I am the original post guy also. I came to know that this is not POLENIEX account ( Poloniex account no. 1652538865 (ripple address: rPVMhWBsfF9iMXYj3aAzJVkPDTFNSyWdKy). rPVMhWBsfF9iMXYj3aAzJVkPDTFNSyWdKy = is the BITTREX OMNIBUS Settlement Wallet. I talked to Bill Shihara <bill@bittrex.com>. Bill the owner of BITTREX. Contact him about your situation to him. In my case Bill told me that Theif took the XRP and converted to BTC and transferred to another account which he won't tell. I am in the process of lawsuit. Please contact BITTREX (bill@bittrex.com) and let me know. when you contact Bill copy Johanna@ripple.com and support@ripple.com as well. If possible copy GateHub also. Please give me your personnel contact details. I am looking for all the victims come together and get our XRP back. Link to comment Share on other sites More sharing options...
stormking2 Posted May 25, 2017 Share Posted May 25, 2017 I have also been hit by this attack on Sept 29th 2016. What info do you need from me to join your investigation? Link to comment Share on other sites More sharing options...
Rchopra Posted September 19, 2017 Share Posted September 19, 2017 On 07/12/2016 at 8:19 PM, T8493 said: 2FA is not a panacea. Sophisticated phishing attack could - at least in theory - bypass 2FA security by asking the victim to enter the 2FA password on the phishing site (and then send this password to the GateHub site). What do u think about using authy token in last 5 seconds out of 30, thus making difficult to be used elsewhere because of restricted timeframe Link to comment Share on other sites More sharing options...
kanaas Posted September 19, 2017 Share Posted September 19, 2017 36 minutes ago, Rchopra said: What do u think about using authy token in last 5 seconds out of 30, thus making difficult to be used elsewhere because of restricted timeframe Isn't it more easy to check (before typing ANY of your credentials and/or 2FA codes!!!) the url that is been showed in your browser? should always start with https://gatehub.net/.... Link to comment Share on other sites More sharing options...
jargoman Posted September 19, 2017 Share Posted September 19, 2017 1 hour ago, kanaas said: Isn't it more easy to check (before typing ANY of your credentials and/or 2FA codes!!!) the url that is been showed in your browser? should always start with https://gatehub.net/.... Doesn't stop a man in the middle attack that somehow thwarted ssl Link to comment Share on other sites More sharing options...
T8493 Posted September 19, 2017 Share Posted September 19, 2017 38 minutes ago, jargoman said: Doesn't stop a man in the middle attack that somehow thwarted ssl If you don't trust certificates, then you can never be sure that you're really connected to GateHub..... Link to comment Share on other sites More sharing options...
Rchopra Posted September 19, 2017 Share Posted September 19, 2017 7 hours ago, kanaas said: Isn't it more easy to check (before typing ANY of your credentials and/or 2FA codes!!!) the url that is been showed in your browser? should always start with https://gatehub.net/.... Ofcourse one has to check it but is it bad to have an additional protection by using above..? Link to comment Share on other sites More sharing options...
Karan Posted September 19, 2017 Share Posted September 19, 2017 On 12/4/2016 at 11:24 PM, gatehub said: Hi @rst, we are sorry for your loss. While we can't discuss any details of this incident publicly we want to be clear that GateHub has NOT been compromised. All information will be available to law enforcement. Access log has been sent to the victim. P.s.: Please use strong unique passwords and enable 2-Step verification to keep your account secure. Hello Gatehub... I just recently transferred 200 XRP into my Gatehub wallet and I cannot transfer the XRPs out of my wallet. It keeps giving me the insufficient XRP error message.. Need help and need it quick before I go berserk all over social media.. I mean it... Your support has not responded for over a few days now.. what is the problem?? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now