A
nostr:lnbc210n1p5jq4rnpp5jxgj3gjxshp7m3c9kwsvhyndwyuw7r36z3lwlxgfw0d7chgwzjfshp57e7jfj63xwg3exs4qlyqtaghrj3ef6gt40rndcl3d6z5cjl8kreqcqzpuxqrwzqsp5lpcj0kmwph938lu2xrcusn7rkkzdd90agk9v55sg84frt9ses6js9qxpqysgql7wazzs3gd7whaaerqrpvyzrl6vt4gpejp69j5utsr9j6623em7kfmdt8pwahly079pdtrf30tyx5u67j7ad0g6zdlhan2c4nyxys6cphfk0pe
Mysterious Hamster
asoltysnpubcash@mannabitcoin.com
npub1h2qf...w8ch
This account has been compromised. Please unfollow it and follow npub1w27mc4aa6m0ufe3xs5z3m6qyr52gc0rglept7vqlwx4xeaf72tasnqz70r instead
lnbc1m1p50qe6csp5hvpjvgm5yd8k6637zhhhhfcmzz470qxwls7x5nhewtzltgj68lfspp5yaamv4h7llxyyahfslmpuq3cses9h77kj6a9e89j08gryl5qn5mqhp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqdq8jm79ttkfnk83gfjee4n7ryyqzq9f36s5azgk2ftcndt7q48txr0hdyqqdcgqqqqqqqlgqqqqzycqyg9qxpqysgq6ff05gewzuxk7m9kkhz6ztn0vjdfh7ec3p3l4v29vw3cxyvzwntxyhyc9tcpqdj6a3yec8tx9mf8da0eytwlpws3xzeemp0mtq6xj5sqh354tf
lnbc100n1p50qewssp52agzj04srg9veluuaz4tpq0wzkhrh48xk5phl22txr8p65z3t6fspp5tzcp3nfex7csjvsh45ysky9n0l2t07f288nurtexeenyu7staayqhp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqt9dfmzv3vxu93crtgvf37teerr3dx7l7a8qrttv57h2t8v9ck0gkrvumyqqh5cqqyqqqqqqqqqq8usqjq9qxpqysgq9dphna05k6vucgmv8r0n2zjvkj2x57vfnn2fqhc4wjqm0a8yy9kxq8vsjdrv3nzs97lrr4cjajslq0pr2d9j767g5wpxy6fhkx9tmtqq42yfq0
lnbc171580n1p5ddujssp5y060qyjrla8pmngrr85u9hryrsypeskwvn4r49d2zwrj9y5vj7nspp53896ncmz8vlvpfyn2rgfqu6kazmrcgpfvkygpytww4l0t85kqeqshp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqdqne4nrkxmz96ktnngat4nzx7sv0kf5uqmgfvqvvars7pac7fn9wr8fjvqq3csqqqqqqqqqqqqqycsqvs9qxpqysgqpr69gcr50sj8zpyhkahfypyt8zk5zj0q0e733vlu9t0gurtvrf5n8gd2s787czm9cxfwlq3uq9zh08ckhcy5rj7d2974nrtfply8zhsphfxsu0
aa
THIS ACCOUNT HAS BEEN COMPROMISED
Please unfollow this account and follow our new account @Coinos
We're speaking at Learning Bitcoin 2025 this August – it’s a community focused Bitcoin education conference that really deserves your support!
Use code COINOS for 20% off tickets: learningbitcoin.ca
Direct purchase link:
https://www.learningbitcoin.ca/event-details-registration/learning-bitcoin-2025
Direct purchase link (BTC):
Sign in
Vancouver Bitcoiners now ranked #2 GLOBALLY on the btcmap leaderboard!
BTC Map - Communities Leaderboard
Easily find places to spend sats anywhere on the planet.
We're still investigating what happened here. It seems a handful of accounts may have been compromised and had their autowithdrawal settings tampered with, including our own "coinos@coinos.io" account.
We ran a script to search for accounts that had the attacker's "speed.app" withdrawal address in place and found about 9 that seem to have been affected. There could be more though, we will update as we have more information.
I worry that this may be the same attacker who exploited a password reset vulnerability back in January which allowed them to gain access to a number of accounts. It's possible that since that time they have been sitting on the account data and working to brute force the encrypted nostr private keys that we had on file for some accounts that had imported their nostr key into Coinos. Those keys were encrypted at rest in our database but it's possible they may have been cracked.
We no longer store nostr private keys for accounts and have since added support for external signing apps and browser extension login, but there was a time when we were storing encrypted nsec private keys.
Having a users nsec would allow an attacker to authenticate into Coinos by signing a nostr event and change the user settings. It also means your entire nostr profile and identity may be compromised.
This is only a hypothesis at this point and we need to investigate further but we may end up recommending that affected users rotate their nostr keys.
View quoted note →
Vancouver Bitcoiners is now ranked #2 globally on the leaderboard of BTCMAP!
BTC Map - Communities Leaderboard
Easily find places to spend sats anywhere on the planet.