Firo 51% attack post mortem and vote on attackers' funds

reuben · January 31, 2021, 9:07am

This has been implemented in Firo v0.14.5.0 which is undergoing testing and if all is okay will be released and deployed next week.

Muggles · February 2, 2021, 8:47am

Hello everyone!

Firo v14.5.2 has been released. Following the consensus reached in this thread, this release will reimburse the exchanges with the attackers funds.

reuben · February 8, 2021, 8:33am

As agreed the funds amounting to 697850.29102309 FIRO have been returned to Binance with this txid. This also takes into account the previous funds of 168101.68037691 FIRO that Binance assisted us to recover from the Bitcoin CVE incident.

The 168101.68037691 FIRO has been burnt.

ng.kelvin · February 16, 2021, 3:33pm

Hi Reuben,
What is the arrangement with Indodax?

reuben · February 17, 2021, 8:47am

We are still in discussions with Indodax but they’re trying to recover from users who were credited back in Binance to deposit back the Firo. However they have already opened up trading/withdrawal.

ng.kelvin · February 17, 2021, 11:20am

Thanks Reuben. Are they not compensated using the locked FIRO mined by your team - similar to the funds sent to Binance?

reuben · February 17, 2021, 3:41pm

We only managed to lock the attackers’ funds. Not lock every single person who had deposited and withdrawn in that day.

The loss in this case was caused by innocent users who had withdrawn from Binance into Indodax.

Note Binance also had to foot some losses given they were only reimbursed for the attackers’ funds and not for other accounts which may have gotten back the Firo they deposited. It is probably an exchange decision whether to pursue this with rh individual users affected and not something we should interfere in given that we are not privy to internal exchange trades or KYC.