[Invincible.]

Why when I try to send OMC to my other wallet I get this:
Spoiler (Click to View)

I just get a blank screen and nothing happens, sometimes I can send little amounts of 5 or 10 OMC, but I still got 2k OMC on there what I want to send to my Offline wallet...
Anyone?

[Sacred Symmetry]

Someone had this problem when they were trying to send me OMC last night. Give it a hour or so

[Invincible.]

Someone had this problem when they were trying to send me OMC last night. Give it a hour or so

It's been doing this for over 3 days man, I can't wait another hour, Luckily my good friend Ortek has helped me out and send some OMC to my offline wallet....

[Abraham Lincoln]

Not to raise false alarm, but when the other 2 online wallets got hacked they did the same thing.

It could be that the wallet daemon has just crashed though, I'll take a look.

EDIT: Nope, the daemon appears to be fine, it's showing balances / transactions. Still looking around for any possible cause other than hacking.

[Invincible.]

Not to raise false alarm, but when the other 2 online wallets got hacked they did the same thing.

It could be that the wallet daemon has just crashed though, I'll take a look.

EDIT: Nope, the daemon appears to be fine, it's showing balances / transactions. Still looking around for any possible cause other than hacking.

Alright, It's still sending small amounts of 5-10 OMC now and then....

[Ortek]

Not to raise false alarm, but when the other 2 online wallets got hacked they did the same thing.

It could be that the wallet daemon has just crashed though, I'll take a look.

EDIT: Nope, the daemon appears to be fine, it's showing balances / transactions. Still looking around for any possible cause other than hacking.

Thanks a lot for looking into this Abe.

[Abraham Lincoln]

Can anyone link me to some transactions that they sent into the wallet?

[Invincible.]

Can anyone link me to some transactions that they sent into the wallet?

This is a 5 OMC transaction that I sent from OMCWallet.com to my Offline Omniqoin-qt Wallet.
https://omnicha.in/?transaction=19e50d20...22860b5221
And when you look here: https://omnicha.in/?search=oMYtvYNA7cNBN...QC65eb5WrH
That is my OMCWallet.com address it says I've send 2300 OMC, but I've actually only send small amounts of 5-10

[Abraham Lincoln]

Just sent some funds in and tried to pull them out and got the blank screen. From what I've seen I'd say it's been hacked using the same method as the other 2 wallets. Still looking into this.

---

This is a 5 OMC transaction that I sent from OMCWallet.com to my Offline Omniqoin-qt Wallet.
https://omnicha.in/?transaction=19e50d20...22860b5221

Thanks, do you have any where you sent OMC into the online wallet from the offline wallet?

---

This is a 5 OMC transaction that I sent from OMCWallet.com to my Offline Omniqoin-qt Wallet.
https://omnicha.in/?transaction=19e50d20...22860b5221
And when you look here: https://omnicha.in/?search=oMYtvYNA7cNBN...QC65eb5WrH
That is my OMCWallet.com address it says I've send 2300 OMC, but I've actually only send small amounts of 5-10

That's normal for this type of online wallet.

[Invincible.]

---

Thanks, do you have any where you sent OMC into the online wallet from the offline wallet?

I've sent 5 OMC from my Offline wallet to the Online wallet, it's not yet showing up on the transactions.

[Abraham Lincoln]

It is definitely exploitable using the same method as the other wallets. I haven't tested it or exploited it, but from experience I'd say it is definitely possible.

I can't even withdraw 1 OMC from my account, I'd say it has all been stolen.

[Doctor Blue]

It is definitely exploitable using the same method as the other wallets. I haven't tested it or exploited it, but from experience I'd say it is definitely possible.

I can't even withdraw 1 OMC from my account, I'd say it has all been stolen.

I don't understand. Wasn't the bug in the other wallets that you could deposit 1 OMC and then withdraw more than you actually had? How can that possibly be hard to fix?
I'm confused.

[Invincible.]

I don't understand. Wasn't the bug in the other wallets that you could deposit 1 OMC and then withdraw more than you actually had? How can that possibly be hard to fix?
I'm confused.

I cant withdraw any OMC from the Online wallet....

[Abraham Lincoln]

I don't understand. Wasn't the bug in the other wallets that you could deposit 1 OMC and then withdraw more than you actually had? How can that possibly be hard to fix?
I'm confused.

The exploit is caused by the way the omnicoin wallet handles different accounts. Basically you link addresses with an account. When OMC is received from that address, it adds that to your account balance in the wallet. When sending OMC though the inputs used aren't from that address, they are from any input in the wallet. It's not the greatest way to do it, but it keeps the TX fees low.

It all works fine and dandy until a private key is leaked. Then that messes up the wallet. It assumes that only it has access to the private keys. Basically you deposit money into the online wallet, then withdraw it using the private key. The wallet doesn't count the withdrawal from the private key as a withdrawal from the account though and so your balance stays the same. Then you simply withdraw from the online wallet, rinse, and repeat. Basically doubling your OMC each time.

The other 2 wallets allowed exporting / importing of private keys, opening up a door to the exploit. OMCwallet didn't allow importing / exporting, but if you are clever there is a way to still get a private key.

[Doctor Blue]

The exploit is caused by the way the omnicoin wallet handles different accounts. Basically you link addresses with an account. When OMC is received from that address, it adds that to your account balance in the wallet. When sending OMC though the inputs used aren't from that address, they are from any input in the wallet. It's not the greatest way to do it, but it keeps the TX fees low.

It all works fine and dandy until a private key is leaked. Then that messes up the wallet. It assumes that only it has access to the private keys. Basically you deposit money into the online wallet, then withdraw it using the private key. The wallet doesn't count the withdrawal from the private key as a withdrawal from the account though and so your balance stays the same. Then you simply withdraw from the online wallet, rinse, and repeat. Basically doubling your OMC each time.

The other 2 wallets allowed exporting / importing of private keys, opening up a door to the exploit. OMCwallet didn't allow importing / exporting, but if you are clever there is a way to still get a private key.

Ah okay. Because with an online wallet planned, I'd need to be aware of this kind of things so I don't make the same mistake. I guess it can be quite tricky then, because you could tie the amount to an address, but the amounts sent to change addresses wouldn't appear in the online wallet (Major issue).