BitCoin Exchange BitFloor Hacked, $250,000 Stolen

Owner promises to do everything to keep the website running

On by Max Smolaks 1

The largest American BitCoin currency exchange site BitFloor stopped trading on Tuesday after a hacker managed to get away with $250,000 (£157,800) in BitCoins, or almost all of the virtual currency stored on the company’s servers.

The owner of the website said that all US dollars and other real-currency accounts are secure, and no records of transactions have been lost in the attack. He has also promised to do everything to get BitFloor online.

Grab that cash with both hands

BitCoins, or BTC, make up a decentralised virtual cryptocurrency commonly used online among people interested in keeping their transactions secret. It is not tied to any real money, but traded on various electronic exchanges to establish its price.

© Franck Boston - Fotolia.comBitFloor is a BitCoin trading platform headquartered in New York, founded in 2011 by Roman Shtylman. It is the fourth largest website of its kind in the world.

According to Shtylman, on Monday night an attacker gained accesses to the unencrypted backup of the site’s BitCoin wallet keys. The hacker then used the keys to transfer 24,000 BTC, or almost all of the virtual currency stored on the servers, to an unidentified BitCoin wallet.

One of the most important characteristics of BitCoin transactions is anonymity, so once money has left the account, it is impossible to trace. The founder didn’t give details of the attack, saying that his current focus was “on the future and not the past”.

He did, however, admit that he personally made a mistake while handling the funds. Apparently, since the last server upgrade, customer wallet keys were stored in an unencrypted area of the hard drive.

Some customers have suggested that the theft was an inside job, orchestrated by website’s employees. The IP of the attacker was reportedly logged, but that does not mean they will be easily tracked.

To avoid getting into more trouble, BitFloor had to pause all transactions. “Even though only a small majority of the coins are ever in use at any time, I felt it inappropriate to continue operating not having the capability to cover all account balances for BTC at the time,” explained Shtylman.

He has also promised to do everything in his power to bring the website back online and avoid spreading panic in the BitCoin community. In the worst case scenario, Shtylman plans to initiate account repayment using current available funds.

“My goal is to find the best and most reasonable way forward for BitFloor customers and the exchange,” concludes his post on the BitCoinTalk forum.

Last month, four former customers had sued another virtual currency exchange, Bitcoinica, claiming that it owes them $460,457 (£293,080) in funds they previously deposited. Bitcoinica was hacked twice in 2012, with attackers stealing over $177,000 worth of BitCoins. The website ceased operation in May, but continues to accept claims for repayments.

And in 2011, Japanese exchange Mt.Gox had to stop running its service following a hacker attack that resulted in the loss of $1000 worth of BitCoins. The incident sent shockwaves throughout the market, causing the value of virtual currency to plunge.

Despite its bad reputation, there are companies that want to allow BitCoins to stand alongside other, national forms of currencies. BitInstant is said to be in the final stages of creating a debit card that will work worldwide with the MasterCard standard, but will be funded in BTC.

How well do you know Internet security? Try our quiz and find out!

Max Smolaks

Author: Max Smolaks

Max Smolaks Max Smolaks Max Smolaks
Techweekeurope for mobile devices
Android-App Google Currents App for iOS

Last comment

One reply to BitCoin Exchange BitFloor Hacked, $250,000 Stolen

  • On September 6, 2012 at 6:28 am by John

    There are many ways to get bitcoin.
    Get some for free by visiting a few sites, just tell them where to send it and solve the captcha.
    Use an Exchange to buy/sell bitcoin with US Dollars, or Euro or many other currencies.
    Join Affiliate networks and get paid to refer others.
    You can gamble with it too.

    When Receiving a payment you will see it in seconds, and you can spend it within minutes.

    The Payee gives out an address like this


    The payer will then copy this address and paste it in the send filed along with the amount, click the send button, and verify with password (if they set up a pw)

    You can make a new account instantly any time.

    More Convenient, Increased Privacy and Security, No Risk of ID Theft, Save Money

    Reduced Risk, Reduced Hassle, Lower Fees, Reach Globally, No Risk of Fraud

    Better than Cash
    Available Globally, Can NOT be Counterfeited, Can NOT Be Diluted, Use Online
    or In Person, No Central Bank

    Tomorrows Money
    Send Money Like an E-mail, To Anyone in the World
    No Bank Fees, Private Transactions, Irreversible Transactions, Back Up and Restore

    (or someplace similar msg me or my grouphttp://www.facebook.com/groups/BitCoinMarketing/ )
    Copy your receiving code.

    then goto http://bitcoinpyramid.com/r/708
    click register
    paste your code and solve the captcha
    copy your new deposit code
    make a note of your referral address/member number

    tell it you want to deposit cash at whatever location is most convenient.
    Fill out the forms and send anywhere from $20 to $490
    paste your deposit code. where it says Bitcoin Address.

    your code will look like this


    Let me know what your new member number is, I will deposit $10 for the first 3 people to recruit 3 paying new members.

    Share your referral number, and get others to sign up.
    help your new members complete the process.

    Cash out. There are many opportunities to cash out, or spend.
    that is one way to cash out. for others see my group

    This is how many of the marketing programs in the fb groups like this work, but this one is much simpler and quicker.

Leave a Reply

  • Required fields are marked *,
    Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>