The New And Improved Silk Road Was Hacked And Someone Made Off With All Its Bitcoins

Advertisement

There's not much to see on Silk Road right now:

Advertisement

Screen Shot 2014 02 13 at 4.32.43 PM

Screenshot

The anonymous marketplace for illegal drugs has been hacked. Defcon, a pseudonymous administrator for the site, shares the following details:

Complimentary Tech Event
Transform talent with learning that works
Capability development is critical for businesses who want to push the envelope of innovation.Discover how business leaders are strategizing around building talent capabilities and empowering employee transformation.Know More

Nobody is in danger, no information has been leaked, and server access was never obtained by the attacker.

Our initial investigations indicate that a vendor exploited a recently discovered vulnerability in the Bitcoin protocol known as "transaction malleability" to repeatedly withdraw coins from our system until it was completely empty.

Advertisement

Despite our hardening and pen-testing procedures, this attack vector was outside of penetration testing scope due to being rooted in the Bitcoin protocol itself.

You probably recall a major attack that went out against several major Bitcoin exchanges earlier this week, which was also made possible by transaction malleability. No money was lost then, but all bitcoins associated with Silk Road have been stolen, according to DeepDotWeb.

Defcon ends his missive with a notice on what to expect for the future. In short, they plan to rebuild and change the way money moves from buyer to seller using a technical "multi-signature" system possible through Bitcoin instead of a standard escrow.

Those missing their Bitcoins are simply out of luck for now.