BitFloor Hack

Bitfloor stated that it had been hacked and that the service had suffered a loss of 24,000 BTC, which was worth around $250,000 at the time of the heist. As Bitfloor's creator, Roman Shtylman, put it, "last night, a handful of our systems were hijacked." As a result, the attacker was able to obtain an unencrypted backup of the wallet keys (the actual keys live in an encrypted area). They were able to transfer the coins by using these keys. The vast bulk of the coins BitFloor had on hand was taken in this incident." As a result, BitFloor has temporarily halted all exchange activities.

The unencrypted backup that enabled the thief to carry out the attack was created when Shtylman performed a manual upgrade earlier in the day and saved the data to an unencrypted partition on his disk; Shtylman has so far declined to comment further on the details of the attack, saying that "my current focus is on the future and not the past." Bitfloor made not one, but two errors that were both necessary to result in such a severe loss; the first, leaving data stored unencrypted, was an honest and perhaps unavoidable mistake, but it would not have had nearly the same impact if the second error of leaving so much money in an online-accessible "hot wallet" had not also occurred.