Silk Road Forums

All coins are safe, our deposit system was overloaded from a large influx of new users. Staff is working very hard to respond to your tickets and expand our system's ability to process more deposits per minute. Apologies for the paranoia-trigger.

Update: http://silkroad5v7dywlc.onion/index.php?topic=36874.0

Community,

Security is a top priority at Silk Road.

We rotate servers regularly, and take many extreme precautions which would seem insane to the outside world, all the way down to how our servers are physically designed.

Protecting this community is a job all of our admin and dev staff take very seriously. We hope that our repayment of hacked funds is a small testament to our heart for this movement. It's bigger than us, and we deeply want our actions to reflect that we're not in this for money.

Recently a major vulnerability was discovered in OpenSSL, one of the dependencies Tor's software relies on.

This vulnerability could potentially allow our hidden service's URL to be impersonated in a worst-case scenario of malicious guard nodes exploiting the vulnerability against us.

Due to our infrastructure's unique Tor implementation which we cannot elaborate on, we are confident that this vulnerability did not affect us.

There is currently no example of an SSL private key being leaked due to the Heartbleed vulnerability, and also no example of a Tor hidden service being impersonated due to the Heartbleed vulnerability.

We are monitoring the situation very closely, but as a staff have decided not to change our URL unless our confidence level changes.

As an alternative to changing our URL, we will be releasing Backup URLs to each user's account which you may use to access our service in the event of impersonation, and in the event of a DDoS attack similar to last December. You will see this on your marketplace home screen once this feature is released.

We are fighting for you. This is a big month for this community, get ready.

Defcon

UPDATE: SSL private keys are now proven to be compromisable. We do not use HTTPS. We are confident that tor's SSL weakness did not affect us, but cannot elaborate further on why we know this to be an architectural improbability.

We found a deposit issue affecting 17% of our users and are working hard to resolve it. If you have seen deposit delays, your user account is on a shard of our infrastructure which is out of sync. I will update here when it is completely synced.

To help our support team resolve these tickets faster, please close your open tickets when your deposit appears in your account.

If you ever see your coins moving in our internal system, that is another user making a withdrawal through our mixer. Do not reveal users' bitcoin addresses, or any addresses associated with our mixer.

Everyone above: reference your support tickets in your posts. Is the issue still affecting you now? We are continuing to watch the system very closely and need to know of ticket numbers to further investigate.

But to answer your question: we will repay scammed users with their vendors' remaining balances once all users receive complete repayment from the attack.

Deposited 11+ BTC this morning.  Still not showing (not even as pending) after 10+ confirmations.

This is the first deposit I have ever had an issue with on SR2.

To all with issues, please reference your support ticket numbers when posting in the forums. Staff cannot investigate without it.