Someone ‘Accidentally’ Locked Away $300M Worth of Other People’s Ethereum Funds

Image: Shutterstock

On Tuesday, a single user permanently locked down dozens of digital wallets containing nearly $300 million dollars worth of ether, the unit of exchange on the Ethereum platform, allegedly by accident.

Now, some in the Ethereum community are considering the possibility of a risky network split, known as a “hard fork,” to fix it.

The affected wallets—known as “multisignature” wallets because they require multiple people to sign off before funds are moved, making them popular with companies—were all created with Parity, a popular program for digital wallets. Parity multisignature wallets experienced a bug in July that allowed a hacker to steal $32 million in funds before the Ethereum community scrambled to band together to hack back and secure the rest of the vulnerable ether.

According to a blog post released by Parity on Tuesday, the code that fixed the July bug contained another vulnerability. That vulnerability allowed a user known as “devops199” on GitHub, a site for developers to collaborate on open source code, to allegedly accidentally trigger a function that turned the contract governing Parity multisignature wallets into a regular wallet address and made him or her the owner. Devops199 then killed this wallet contract, or, as Parity put it, “suicided” it. This made all multisignature wallets tied to that contract instantly useless, their funds locked away with no way to access them.

If the story is true, it seems like Devops199 was jiggling door handles and when one door opened, they tried to close it and the whole house exploded.

Read More: How Coders Hacked Back to ‘Rescue’ $208 Million in Ethereum

“We are asking for everyone to be patient until the full extent of the issue has been identified and we will communicate any necessary instructions or advice,” a Parity spokesperson wrote me in an email. “We are advising users not to deploy any further multi-sig wallets until the issue has been resolved and to not send any Ether to wallets that have been deployed and are in use already.”

Devops199 made an appearance in the Parity chat channel after the incident. “I’m [an Ethereum] newbie… just learning,” devops199 wrote. “You’re famous now lol,” replied another user. When I reached devops199 for comment on the incident, they replied, “Sorry… I’m really afraid now… can’t talk.”

Pastebin document that was circulating in the Parity chat channel on Tuesday lists dozens of affected wallets, containing more than 900,000 ether, worth nearly $300 million. Some Initial Coin Offerings (ICOs)—controversial and lightning-fast fundraising rounds for Ethereum apps—were affected, although it’s not clear which ones or how many.

Somewhat ironically, one of the affected wallets was for Polkadot, an Ethereum app launched by Parity’s own founder Gavin Wood. Polkadot recently garnered over $100 million in investments from an ICO. “Polkadot will continue as planned,” a Parity spokesperson told me in an email.

Potential solutions at this point are murky. Already, users are speculating (or morbidly joking) about the possibility of a “hard fork” to reverse the change and bring back the locked funds. After an Ethereum app called the DAO was hacked last year and an attacker siphoned away more than $50 million, the community decided to create an entirely new version of Ethereum where the hack never happened. This was an extremely controversial and arguably risky maneuver, because if the majority of the community doesn’t move over to the new network, a fork can result in serious instability.

After the Parity bug in July saw an attacker steal $30 million worth of ether, Ethereum’s inventor Vitalik Buterin took to Twitter in an apparent disavowal of a hard fork fix. The DAO hard fork was justified because the Ethereum ecosystem was “less mature then,” Buterin wrote. Ethereum has become more valuable and popular since then, and so this logic may continue to hold.

Buterin did not respond to Motherboard’s request for comment.

Parity may see things differently. “At the moment we are looking into every scenario, a hard fork is one of the options,” a spokesperson wrote me.

Source: Someone ‘Accidentally’ Locked Away $300M Worth of Other People’s Ethereum Funds

Please follow and like us:

546 Comments

  1. Hello ,

    I saw your tweets and thought I will check your website to find more information.
    I’m also interested in this topic and have recently started my journey as young entrepreneur.
    Maybe you can adivise me.
    I’m looking for the ways on how to promote my website.
    Can you recommend something what works best for you?

    Maybe you can have a look at my website and give me an advice what I should change: http://janzac.com/

    I have subscribed to your newsletter. 🙂

    Hope to hear to you soon.

    Regards
    Jan Zac

  2. Hello ,

    I saw your tweets and thought I will check your website. Have to say it looks very good!
    I’m also interested in this topic and have recently started my journey as young entrepreneur.

    I’m also looking for the ways on how to promote my website. I have tried AdSense and Facebok Ads, however it is getting very expensive.
    Can you recommend something what works best for you?

    Would appreciate, if you can have a quick look at my website and give me an advice what I should improve: http://janzac.com/
    (Recently I have added a new page about FutureNet and the way how users can make money on this social networking portal.)

    I have subscribed to your newsletter. 🙂

    Hope to hear from you soon.

    P.S.
    Maybe I will add link to your website on my website and you will add link to my website on your website? It will improve SEO of our websites, right? What do you think?

    Regards
    Jan Zac

  3. I am sure this article has touched all the internet viewers, its really really fastidious post on building up
    new webpage.

  4. Ahaa, its fastidious conversation concerning this post here at
    this weblog, I have read all that, so at this
    time me also commenting at this place.

  5. I’ll immediately grasp your rss as I can not to find your e-mail subscription link or
    newsletter service. Do you’ve any? Kindly permit
    me recognise so that I may just subscribe. Thanks.

  6. It’s appropriate time to make a few plans for the future and it’s time to be happy.
    I’ve read this put up and if I may I want to
    recommend you some fascinating things or tips.
    Maybe you can write next articles referring to this article.

    I desire to read more things about it!

  7. Greetings from Los angeles! I’m bored to death at work so I decided
    to browse your site on my iphone during lunch break. I
    really like the information you provide here and can’t wait to take
    a look when I get home. I’m surprised at how fast your blog loaded on my phone ..

    I’m not even using WIFI, just 3G .. Anyways, fantastic site!

  8. Thanks for your tips. One thing really noticed is that often banks along with financial institutions have in mind the spending behaviors of consumers and understand that the majority of people max away their credit cards around the vacations. They sensibly take advantage of this real fact and then start flooding your inbox in addition to snail-mail box with hundreds of no-interest APR credit card offers soon after the holiday season concludes. Knowing that should you be like 98 of American open public, you’ll soar at the chance to consolidate card debt and shift balances towards 0 annual percentage rates credit cards.

  9. It’s appropriate time to make a few plans for the future and it is time to
    be happy. I have learn this submit and if I may I wish to suggest you few interesting issues or
    tips. Maybe you can write subsequent articles relating to this article.
    I desire to read more things approximately it!

  10. I’ve been browsing online more than three hours today,
    yet I never found any interesting article like yours. It’s pretty worth enough for me.

    Personally, if all web owners and bloggers made good content as you did,
    the net will be much more useful than ever before.

  11. I’ve been surfing on-line greater than three hours lately, yet I by no means discovered any attention-grabbing article
    like yours. It is lovely price enough for me. Personally, if all
    web owners and bloggers made excellent content
    material as you did, the internet will probably be a lot more helpful than ever before.

  12. Hello1Bing1Bing1BinHello
    My brother recommended I might like this web site. He used to be entirely right. This post actually made my day. You cann’t imagine just how a lot time I had spent for this info! Thank you!

  13. wh0cd50676 [url=http://prozac247.live/]generic prozac cost[/url] [url=http://clozaril2018.live/]buy clozaril[/url] [url=http://acyclovir247.world/]acyclovir[/url] [url=http://clindamycin2018.world/]clicking here[/url]

  14. I have been surfing online more than 3 hours today, yet I never found
    any interesting article like yours. It is pretty worth enough for me.
    In my opinion, if all website owners and bloggers made
    good content as you did, the internet will be
    much more useful than ever before.

  15. Hey there would you mind sharing which blog platform you’re working with?

    I’m going to start my own blog in the near future but I’m having
    a tough time selecting between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design and style seems different then most
    blogs and I’m looking for something completely unique.
    P.S My apologies for being off-topic but I had to ask!

  16. hello!,I like your writing very much! share we communicate more about your article on AOL? I need an expert on this area to solve my problem. May be that’s you! Looking forward to see you.

Leave a Reply

Your email address will not be published.