MySQLi - 31.10.2012 - Server attack : Help Desk

Security breach at Bitcoin exchange @Bitcoin24Com confirmed. Losses limited as most funds held in cold storage #Bitcoin

MySQLi - 31.10.2012 - Server attack Simon Hausdorf posted this on Oct 31 15:31 Dear Users, I will write this article fast, so sorry for my bad english. Some user used an SQLi to get into the System and stole the API keys from the users. I will be honest: He used the http://bitcoin-24.com/EUR/trades.json to get into the System. As some user know, you can use a "since" parameter. I have changed some month ago the whole system, but forget to change the trades.json ... damn stupid Simon (thats me) SO IF YOU have a not correct Balance on your account, please contact me! [email protected] IF YOU have to much BTC or EUR or USD, please are so honest and contact me also. I mean, I made this Bitcoin Market for free and don't charge any fee! Bitcoin-24 is a big market and is growing very fast. I will give 100% to make the market secure! I am planing to program the market completely...

Full article: http://bitcoin24.zendesk.com/entries/22278332-mysqli-31-1...