Almost entire balance (2675 XMR) of Community Crowdfunding System (CCS) Monero wallet has been stolen
Almost entire balance (2675 XMR) of Community Crowdfunding System (CCS) Monero wallet has been stolen
The CCS Wallet was drained of 2,675.73 XMR (the entire balance) on September 1, 2023, just before midnight. The hot wallet, used for payments to contributors, is untouched; its balance is ~244 XMR....
In the last Monero General Fund transparency report in March 2023, the General Fund held 8452 XMR. As far as we know, this separate wallet is safe and unaffected. It would be possible to pay people with active CCS proposal from the General Fund, but nothing has been decided.
You're viewing a single thread.
FUUUUCK! will be very interested to see what is found that caused the breach.
Seconded.
With only 2 known keyholders and likely 1 single person with physical access to the Qubes laptop, and where the whole key and wallet were probably stored in a standalone offline vault-vm, what the fuck happened?
I see. They held the hot wallet on Windows fucking 10.
Unbelievable. Opsec? What's Opsec?
As pointed out in the github thread by someone, the more useful opsec flow should have gone something like this.
And make the offline computer an offline vault-vm on a non-internet Qubes laptop .
How anyone that understands crypto is using windows in the year 2023 is beyond me. You cannot fix laziness with FOSS.
It's worse than that.
Fiscal responsibility alone dictates that you have a duty to create a public Opsec Charter of sorts.
And that's nothing to say of an ideological-FOSS duty to create the same.
This reeks of more than incompetence.