What's Happened vs What's Happening : Bohemia | Torhoo darknet markets
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
We kindly request that the following announcement is read with an open mind and level of understanding.
There's no secret that things have been a little bumpy recently, and it's important for us to remain transparent and honest with the community who we cherish so much, because without you - we are nothing.
In a shameful and disgruntled set of events, our lead developer quite simply decided to go "rogue" and choose their own path by slowly and passively withdrawing small amounts of BTC over a prolonged period of time from several accounts which had been pre-created and loaded with small BTC balances. This activity (to our knowledge after concluding our investigations, lasted for a little over a month).
Once the activity in question was brought to light and subsequently admitted by this particular developer, they were instantly terminated from the site and all operations thereafter. What we didn't know at this time was that several other accounts had been pre-created by this individual and again loaded with false BTC balances from within the database, of which the credentials were evidently retained as the accounts were accessed and emptied shortly after their departure, which triggered new security measures we had already implemented for accounts making withdraws without prior deposit / order history (as there's no plausible way for their balance to exist) . The amounts were not incredibly substantial but it did warrant an injection of funds into the site to help mitigate the losses at hand.
This chain of events, coupled with the recent price increase of BTC has been an extremely difficult situation to manage to say the least, which is the sole and primary reason why withdraws have been taking a little longer to process (hence why we've taken the necessary steps to stagger withdrawals and implement a daily withdraw limit to help balance things out). We have been processing withdrawals as quick as feasibly possible without unintentionally sinking the ship.
As mentioned by
https://torhoo.cc/go.php?u=TDNVdlNIVm5RblZ1ZEdWeQ==# in his concerning yet completely warranted announcement post, vendors and users alike have reported that they have received their withdraws even if they've had to wait a little. Hopefully this will provide some clarity to the situation and that we are categorically NOT going anywhere.
We have been established for some time now and this is not the end of the road (not for us anyway). And we speak directly to every individual who may read this post that if your faith and trust for us has now been tarnished then we are wholeheartedly sorry for that and you will not be forced or persuaded to stick with us.
Here is our plan moving forward, and we only deem it fair that we give you all the full transparency on our future together as a community:
First and foremost, FUNDS ARE SAFE, and everybody who is due will be made whole, bare this in mind before reading the following;
- - We have collectively decided that disabling the use of BTC for a short period of time is the best course of action. This is solely to clear the queue of outstanding withdraws and dormant balances with a view to re-enabling BTC as soon as the above has been fulfilled.
- - All current BTC balances will remain untouched and outstanding withdraws will be cancelled and returned to the users balance. Once this has happened, all users will be given two options:
Option 1) To exchange their BTC to XMR on site (like for like as per the set fiat currency on their account at the time of exchange) whilst BTC is disabled. For example; if you hold 1 BTC on the platform, you will receive the fiat equivalent in XMR, this balance will then be ready for withdraw / spending.
Option 2) Continue to wait for the re-implementation of BTC and withdraw their BTC balance when this happens.
Once BTC has been disabled on site, any and all associated BTC deposit addresses (old and new) will be obsolete. So please do not deposit as we cannot be held responsible for any missing funds once BTC has been disabled.
** THE ABOVE PLAN WILL BE IMPLEMENTED WITHIN THE NEXT 48 HOURS AND A SITE WIDE ANNOUNCEMENT AND DREAD ANNOUNCEMENT WILL BE PUBLISHED AT THIS TIME **
Please know that this has not been an easy decision to make, but more of a reasonable plan of action to rectify the mess left behind by the developer mentioned above.
At this stage we feel that this is the best option moving forward as we're unsure which way the value of BTC is going to go with the upcoming ETF decisions within the next two months, it could counteract and really put things underwater, but we thought it be most respectable to provide a temporary solution and utmost clarity.
He took from us all, but regardless of how you may feel after reading this, we love you all and we will see this through.
- - The Bohemia Team
-----BEGIN PGP SIGNATURE-----
iQGzBAEBCAAdFiEEhHrnfyw8hXMi6MRjBVuxMW6+61gFAmVa27EACgkQBVuxMW6+
61hlmgv/d+upBdq5KOGe9VuW9Oxnh3mCnF4JD9eB/UoYphSFv1SQ4U7x4HsuA1FV
gDcCaBNYUVrtRlEuTVop6kGRnSBZ03NsPdMD6yFxgb8c0uomv+TtZWpPzrKpwy3m
6rplWICl0kAUMT3gWpwxENTo7izBZxscaqfqyczckOLz3X9rFWAHaILJPTHiMpvt
9gpV82bEDgG/kmtTC0FBG/rvG7naryWleBMOo9eUtwdklaZSb8JomZmYT//HiwdX
nVlCMpdaH7lzPRi1IwUuKNB6dXZ4mtuypWZMO/N5TB8YFHJtaLWwkPkxBshmhMPJ
17pOKZP5U0Ny8kgStuLEGyJTvEpnt1/4L/EzKiHeD3YsPVJAqxLKDF0I+4C6yAzx
Tj3UZvTpt+v8y9sCJRsCqY9aOQJzHXRyZldNKWurrxOpwUDdmlSJlI8dCmefBJJL
pqrhtiVGG8zlYYpoHiHa7oktdZBIahElYn6PXOeb19GUIFwDWiECZf1Om+jP9Ymx
4mq11SkW
=/fBv
-----END PGP SIGNATURE-----
** UPDATE - 21/11/2023 **
Direct communication has been made with
https://torhoo.cc/go.php?u=TDNVdlNIVm5RblZ1ZEdWeQ==# and information relating to the missing funds and associated transaction details for what happened have been forwarded for his validation that our claims are in fact true.
More news, we've been working around the clock and the system for which we're implementing is complete in itself. A further 24 hours are required for extensive testing of the updates to be absolutely sure that everything is watertight moving forward and so we can finalize the last stages of the update for the disputes section with regards to how balances will be handled when orders are finalized in the buyer / vendors favor (as if the dispute itself is for and order for which was paid via BTC we must be sure that the users balance does not depreciate into negative). We highly appreciate your patience.
Also just to touch on the deposit front, we have processed 300+ deposits on the platform today alone and are continuing to do so whilst we finalize the updates to come.
See Bohemia's responses to my comment which covers my questions.
I spoke to them regarding Cannabia, they are going to handle missing funds from it during this same process over the next few weeks, not sure how specifically. They asked that I not disclose the full details of what will happen with Cannabia, to give them an opportunity to make an announcement on it, so I will respect that because it deserves its own post. I told them I'd share that things are planned to be solved for it for people's missing funds however.
-------------------
Some things that I think need public clarification here, even things I have previously discussed with you, I think it would be better for you to outline it here.
- Deposit issues resolution
- How/why XMR withdrawals were affected, the only explanation I can think of would be if you were covering the missing BTC by dipping into the XMR balance, even so, with it not being such a significant amount that was stolen, how did it come to the point of such a huge stand still in the processing of everything?
- How long is the process of converting a balance to XMR and subsequently withdrawing that balance? I think it states this will be immediate, but just want to be clear on it.
- What time frame are we looking at for when all withdrawals will be able to be processed, once this is all implemented, is there funds to cover all balances at this time?
- Correct, initially it was the usage of XMR in conversion to BTC in attempt to balance everything out. Unfortunately the recent sharp increase in BTC price was quicker in contrast to the amount of deposits and withdraw requests being made and pushed current user balances above what we had anticipated.
- Converting the balance of XMR to BTC will be instantaneous, and we are expecting a large influx of exchanges followed by withdraws, so they will be processed as fast as possible.
- Time frame for everything to be cleared and smooth sailing is within the next month, that doesn't mean to say it will be exactly a month, but rather within.
A month for withdraws to clear out? A withdraw made on Nov 22 / 23 whenever the update has been implemented can take until Christmas before reaching our offline wallet? Is this a joke? Did you misspell? I don't get it. When people find out about this it will only make sure of a decrease in deposits, until there's no deposits at all and you go bankrupt, taking us all with ya into the abyss.
How about giving people a choice of withdrawing with a set fee of let's say 10% and the withdraw will be instant. I'm pretty sure most people including me are willing to pay 10% to get the funds out.
https://torhoo.cc/go.php?u=TDNVdlNIVm5RblZ1ZEdWeQ==#
/u/Bohemia
If a 10% cut on a withdrawal at the user's choice clears the queue faster as there will be more to go around, that could be something for them to consider, however the logistics of it and the FUD that will come from it as if they are profiting from it would be crazy, so I don't think this is a likely scenario.
They have the money stop giving it to people to withdraw and actually credit those who haven't been made whole once instead of those who are just having withdrawals returned to them to re withdraw
These people where given it multiple times now
https://torhoo.cc/go.php?u=TDNVdlNIVm5RblZ1ZEdWeQ==# - Your Top G, Thank You!
I have my secret phrase but this doesnt let me change my pgp. I was only able to change my passwort.
Please have a look into it asap. Here the support ticket ID (bug report) I have open with you =39307
I have reported this to bohemianorth, Ikdev, Aphrodite.
From /u/bohemienorth i got back following answer:
"You got phished, we are only active on the emergency link there is NO other links no SELLER links are active."
Well, yes. I got phished. I know that already and that's basically what I reported to him. the answer didnt attend my ask for help but only repeated what I told him in different words. That doesnt help or address the issue at all. What about the help I asked for? I responded him again, elaborated once again and asked for help. No answer since 4 weeks. this was here on dread DM.
I got one answer through a support ticket from /u/ikdev or /u/ikdevbohemia 3 weeks ago through a support ticket I opened on bohemia with an backup account. He asked me for details to verify me so he can set back my pgp. I've sent the information but that was it. No further response on that support from ikdev.
Instead Aphrodite answered on the 23rd saying now only Admin can change pgp (after executive decision) and asking me for my secret phrase and that it may take a while to answer but he will try to push it to the admin. I have sent the informations needed in an encrypted message but encrypted with /u/bohemia 's pgp so only he has access to it after hearing that someone from the team already been doing shit.
I didnt get any further answer on that support ticket, neither from ikdev nor from Aphrodite.
But someone calling himself /u/ikdev reached out to me here on dread:
"Due to huge backlog of tickets on site you can provide me the details here."
how do I know if that the real ikdev? no pgp to verify and username here as a mod is /u/bohemiaikdev , I still answered him but kept sensitive information encrypted with /u/bohemia 's pgp.
And here is what i got as an answer:
"Your PGP key changed on November 13th and currently there is a total sum of 0,0327 BTC needed to compensate with open disputes."
Well, yes. again, how does this information address my problem or help me at all? I am aware that my pgp got changed. But that did not happen on the 13th November. The 13th november was the date I logged in last with my new password but since my the pgp was changed already on the 9th, I was not able to actually access the account. It still updates the "last time online" -Date.
And yes obviously I can't answer my disputes. The answer once again did not address my ask for help. It is very simple. Put back my former public pgp that you can find literally everywhere but I've also shared it. u can also use it to verify me and
So please anybody from the team. I'm desperate. My customers are waiting for me, so are the disputes and my money. I have been very patient but this is taking way too long.
/u/hugbunter please if you can help and are in a better contact with /u/bohemia please reach out to him. He didn't respond to the message I have sent him 2 weeks ago.
tid=40762
/post/4a5349dd0cdf68fed27d/#c-eabb0ea54fc1c1082e
I'll believe it when I actually see it--right now it's just deja vu all over again.
And of course, a statement is not a resolution.
(Thanks for your efforts, though).
This is FUD of the highest degree coming from the highest degree of a sinking ship. Goodbye Bohemia. I watched one of my deposits double in front of my eyes (not precisely, because your system had some rounding error likely due to price shifts in conversion rates or some such thing and then re-processed the same transaction). Or I guess I'm just the rogue admin who made all this fuss over $60 and not to call out your lying bullshit. Also, let's name this "admin" who stole funds. Who did it? Better make sure other markets don't hire him.
Can we also please have a list of these "pre-loaded" accounts? Surely we can log in and see them for ourself? Or was he pre-loading the duplicate funds into my wallet so I could conveniently use them as I see fit, and then uhh? funnel them to him via carrier pigeon?
Good try, but this is complete and utter bullshit. I urge the dread admins to consider all of this in the same light and demand more precise explanations to specific bugs such as vendor profiles being made inable to be updated - vendors being locked out and their PGP keys being swapped, etc.
So much left unaddressed, just sounds like a pile of more excuses to me. I was already so far done with this market, and this "official statement" has literally given me less faith than I already had.
After the chain of events occurred, this would have given more people than most the opportunity and reasoning to just leave and take all of the remaining balances with them. Did we do that? No. How's that for "utter bullshit".
I just want to be able to get the stuff my people need. Can you forward it or as an admin resolve this issue? 680$ might no be much to y’all but for me that’s a whole 2 weeks hard work… thank you
/u/Bohemia
https://torhoo.cc/go.php?u=TDNVdlNIVm5RblZ1ZEdWeQ==#
How about answer some of my and everyone elses questions?????? Woah, what a concept.
"I watched one of my deposits double in front of my eyes"
"Also, let's name this "admin" who stole funds. Who did it? Better make sure other markets don't hire him."
"vendor profiles being made inable to be updated - vendors being locked out and their PGP keys being swapped, etc."
I don't see any improvement really from few months ago tbh bit less ddos but all the issues seem still be there
EDIT - I'm a dumbass, I said withdrawal in my original post, meant deposits, apologies.