Mining Service Nicehash Hacked, $60 Million in User Funds Stolen

Megalith

24-bit/48kHz
Staff member
Joined
Aug 20, 2006
Messages
13,000
The mining service Nicehash was reportedly hacked, with over $60 million in funds stolen. Users report that funds have been moved from their own internal Nicehash Bitcoin addresses to a single Bitcoin address controlled by an unknown party.

Nicehash isn’t a mining pool, per se. Rather, it’s a site that allows owners of mining equipment to rent out their hashpower to buyers. Sellers of hashpower find it convenient because they don’t have to spend as much time finding the most profitable coins to mine. Buyers are happy that they don’t have to buy expensive mining equipment for what may merely be a short but intense bout of mining.
 
Someone is going to have to work very hard to get at the $60 million stored in a pickle jar buried in my back yard.
 
never use an online wallet learned that lessen years ago when i lost like 50 of them to some kinda hack. cold storage and only transfer to exchanges and what not to sell
 
I am confused.... if someone stole ALL of those coins, how can they still have any value?

As in, who puts that much value into a fatally broken system AFTER it is proven to be broken?
 
I am confused.... if someone stole ALL of those coins, how can they still have any value?

As in, who puts that much value into a fatally broken system AFTER it is proven to be broken?

The account will be heavily monitored and all transactions will have a record, so getting the money is going to be pretty hard without getting busted or an exchange allowing them to transfer funds in etc etc.

very curious how they get their money from this as every single transaction will have a record.

Not like holding physical money where you could gamble some in a casino, and slowly trickle it out without drawing much attention
 
The account will be heavily monitored and all transactions will have a record, so getting the money is going to be pretty hard without getting busted or an exchange allowing them to transfer funds in etc etc.

very curious how they get their money from this as every single transaction will have a record.

Not like holding physical money where you could gamble some in a casino, and slowly trickle it out without drawing much attention

That's exactly what I don't understand. If all transactions are traceable, it seems people can get their currency back. However, if it is untraceable, then who would continue to buy a flawed currency, hence driving the value of said currency to zero.

Either way, I don't see how the thieves can profit from this. And if they can profit, then maybe whomever they profit from going forward deserves to get burned.

caveat emptor
 
Had just started using their service, got me for .006 BTC, or almost 100 bucks with the huge upswing in the last couple days. Lesson learned.
 
I cashed out friday, but still lost $150.. even worse i have not found a replacement pool / coin to mine that is nearly as simple, stable, profitable. I was making $35 a day when this happened. Now im making maybe $5-7 a day
 
Being $16.5K a coin, you don't have to leave a large trail. Also, there are online mixers to utilize - this all must be done in slowly over time in small increments. Impatient thieves get caught. A BTC miner source to trade BTC with would be ideal. Coins could be laundered with newly minted BTC in an exchange of the dirty BTC. Rinse and repeat.
 
I have no fantasy of getting my, relatively, small amount of money/BTC back, but hopefully they can catch whoever did it. Probably an inside job given the criminal record of the CTO. Hopefully the FBI/Interpol can track the BTC and catch these folks. Apparently during the first silk road sting they followed the BTC to get the guy. I doubt law enforcement will care nearly as much just about money/BTC though as a black market exchange.

I cashed out friday, but still lost $150.. even worse i have not found a replacement pool / coin to mine that is nearly as simple, stable, profitable. I was making $35 a day when this happened. Now im making maybe $5-7 a day

I agree, the GUI of nicehash was way better to use than anything I've found. I'm using winminer now, but it doesn't support partial GPU mining, which is a killer for me since I was normally just mining on my 2nd 980 TI while using my computer. It's all or nothing for me now.
 
I stand to lose zero dollars / bitcoins / meth-cash / hookerfunds
 
Sorry, don't trust my hard earned property to "the cloud". Never let earning accumulate, remediate earnings to a local source frequently and archive.
 
Update, the livestream was only like 6 minutes and didn't answer anything.
 
Remember how Cryptsy profited? Owner scammed everyone and flew the coop.
 
Sorry, don't trust my hard earned property to "the cloud". Never let earning accumulate, remediate earnings to a local source frequently and archive.

Does running a math program that generates digits and watching the digits' worth go up 1,000,000% count as hard work?
 
I am confused.... if someone stole ALL of those coins, how can they still have any value?

As in, who puts that much value into a fatally broken system AFTER it is proven to be broken?

You are a little confused. This wasn't a blockchain failure. The US dollar likewise doesn't lose value just because a bank gets robbed.

Perhaps you don't follow cryptocurrency or care to learn how it works at a basic level, but to anyone actually involved in crypto and mining, this was an inside job where the greasy slovenian owners of Nicehash cashed out the system's float of $60M - and by cashed out I mean this was too strategically timed to be coincidence -- BTC at ATH and right before the anticipated CME pump&dump next week.

And they pretended to be "hacked", gave it a day, then went and cried on cam with looks of deep concern while trying to suppress laughter as they invited kiddie miners back to repeat the cycle all over again.

It's brilliant actually.
 
Last edited:
does anyone ever get their money back when digital currency is stolen?

This is why I don't use bitcoin. There's no accountability.
Also, selling coins is an excessive burden, and you are at the mercy of the huge volatility.
I read that it takes up to a week to sell your shit, and your sell price is based on the bitcoin value the minute your transaction clears.
In the meantime, your bitcoin could take a huge dump in value, and perhaps have no way to cancel the transaction in time.

The other part of me is saying why the fuck didn't I buy $10000 in January. I'd have $160000 right now, driving a nice car.
 
Last edited:
Does running a math program that generates digits and watching the digits' worth go up 1,000,000% count as hard work?

Running coin miners is a managerial position. You don't have to work at all, until something dun fuck up and you have to go fix it.



So there has been a lot of bitcoin thefts recently.
Pointing fingers, at this point in time, would be pure speculation, but the scale of all this feels like it is a state level hacking group.
And I can think of only one nation that is strapped for cash, but with the resources to run such a (sophisticated) hacking group.
 
The dude on the right looked coked up.

That dude is Matjaz Skorjanc, a dude who did 5 years for creating the Mariposa botnet, and got a bunch of other people arrested too back in 2010 while running a dark web forum. I really wish I had known this going in with nicehash, Linus on LinusTechTips recommended the service so I figured it was legit. That's what I get for not doing my own due diligence.
 
Does running a math program that generates digits and watching the digits' worth go up 1,000,000% count as hard work?

Does investing in equipment and hours of personal time count as hard work when you get a 30 fold increase in value and had fun doing it? Probably not.
 
Last edited:
I don't know if this is related, but my Origin account details were apparently sold on a hacked gaming account site shortly after the Nicehash hack. I use many different passwords for various different sites, which aren't simple and guessable, and I haven't written down or shared them anywhere, but not all of them are different from each other. It's possible that I had a Nicehash account (I have various crypto-coin accounts that I used to use, not sure whether I had one at Nicehash), and that my account details were acquired from that hack.

I was able to get my account back from Origin easily, and I also got all the personal details of the person who bought the hacked details for my Origin account. I posted their personal details on LTT, though the thread was deleted. Guess I won't bother posting them here.
 
Back
Top