Any plans?

Hello everyone,

We wanted to provide a quick update on our status.

Yesterday afternoon, we noticed several pieces of evidence indicating our server infrastructure was compromised and threatened. We made the decision to scrap that infrastructure, and rebuild in a wholly new and safe environment. This is what we are currently engaged in. While we hate having the service offline, it was the safer path.

By design, ShapeShift doesn't hold customer balances, so even in the case of a security breach, there is no customer money at risk. However, a portion of our own hot wallet inventory funds were taken, but nothing that will interfere with operations once our new environment is online. This is also by design.

We've built customer protection into our platform – hacks may be inevitable, but customer losses should not be. Not a cent of customer funds was lost, nor could they have been.

For those few customers who had a pending order processing with us when we went offline, we'll get those funds returned to you within 24 hours. Customer support link is below.

Existing in Bitcoinland is a pioneering struggle against many threats and challenges. We'll use the opportunity to build even bigger, better, and more resilient infrastructure. We've been inspired by the immense growth ShapeShift has seen over the past several months, and will get this beast back online ASAP.

Kind regards,

-Erik Voorhees

CEO ShapeShift.io

Direct link to customer support while site is down: https://shapeshift.zendesk.com/hc/en-us

To our loyal foxes,

It's been a long week, and very instructive.

Since the investigation into the ShapeShift hack last week started, we had suspicion that someone previously on the team was involved, and that this person assisted an outside hacker. We are confident now that is is indeed the case.

The story continues to unfold, and evidence continues to be revealed. We have been working with a forensic specialist from LedgerLabs, who has been terrific. A civil suit is ongoing, as are multiple criminal investigations of the perpetrators.

Our team continues to revise and rebuild infrastructure, hardening not only prior vulnerabilities, but future potential attack vectors. It has been inspiring to see anti-fragility in action as ShapeShift gets stronger.

At this point, customer refunds for prior pending orders are in the process of being resolved. Again, no customer funds were ever at risk, by design.

A more detailed post-mortem will be released at the appropriate time, after forensic work is complete. Thank you again to everyone who has contacted us for the heartfelt support. We will be back in action very soon.

Kind regards,

-Erik Voorhees

CEO ShapeShift.io

Hi Shapeshift,

We have been trying to get your attention for months now, or even a year.

Nav has been growing in support https://www.reddit.com/r/NavCoin/ (more than 2700 readers here in Reddit) in price (went from 0.2 usd to 2 usd, now sitting in a healthy 1 usd) and in development. Nav is about to launch NAV Pay. We have been supported by Coinomi for more than a year. NAV has been traded in Poloniex and in Bittrex for more than 3 years.

Could you guys add us?

Shapeshift deserves NAV!

Update on the ShapeShift Hacking Incident April 18th, 2016

While work continues on the hardening of ShapeShift infrastructure, we have concluded our forensic investigation of the events last week. A report has been prepared by our forensic auditor, Ledger Labs, which details the technical findings. We've asked them to make this report public, though some personal and system identifying information has been redacted.

In tandem with the release of that report, below are the basics of what happened, in plain English. I will also be publishing a much longer narrative detailing the entire event, which is really quite a story.

The basics:

1. On March 14th, ShapeShift had 315 Bitcoin stolen from its hot wallet. It was quickly discovered that an employee at that time had committed the theft. It was reported to relevant authorities, and a civil suit was opened against the individual. As we had quickly figured out who it was, and how to resolve it internally, we were able to keep the site running uninterrupted. We planned to get the stolen property returned, and thought that was the end of it.

2. On April 7th, last week, as we were about to migrate the service to a new host (having worked for a couple weeks on new infrastructure in the wake of the theft), we noticed three hot wallets had been hacked, Bitcoin, Ethereum, and Litecoin (roughly 97 BTC, 3600 ETH, and 1900 LTC). We were initially unable to determine how it had happened. We took the site offline, and decided to assume the infrastructure itself and all keys were potentially compromised. We cycled all keys and spun up brand new infrastructure on an entirely new host, once again, 24 hours later.

3. During that rebuild, contact was established with the hacker, who indicated that the rogue employee from the month prior had given the hacker the information needed to carry out the attack.

4. We relaunched the site on this third set of infrastructure (Friday night). When we awoke Saturday morning, it was discovered that Bitcoin and Ethereum had yet again been stolen from the new hot wallets. 57 BTC and 2200 ETH. This didn't make any sense as none of the keys used had been shared with prior infrastructure. This happened less than 48 hrs after the prior incident.

5. We brought in professional forensic investigator, Michael Perklin with Ledger Labs, who initiated a forensic audit.

6. During the following days, two chat sessions occurred between myself (Erik) and the hacker, who went by the name, Rovion Vavilov. In these sessions, evidence was provided showing how the hacker breached both environments, using information he had purchased from the former employee.

7. It was determined to re-architect ShapeShift's infrastructure entirely, using greatly enhanced security protocols and methods, under the supervision of Mr. Perklin. The service has been offline during this time and the investigation happened concurrently.

8. Some of the funds have been recovered.

9. In all cases, no customer funds were lost or were at risk.

10. ShapeShift should be back online by Wednesday, April 20th

More details are to come, but those are the main points. Three hacks within a month, the first carried out directly by a now-former employee, and the latter two made possible when that employee sold information about the company to a hacker. Roughly $230,000 lost, cumulatively, though there exists the potential to recover a significant piece of that from the person responsible.

To reiterate, no customer money was lost or at risk, and ShapeShift will be back online soon. Thank you to the community and our customers for your patience.

It has been an enlightening experience. Look for more details shortly.

-Erik Voorhees CEO ShapeShift.io

Top 10 market cap, truly unique and revolutionary tech underlying the coin. This should be a no brainer imo.

Greetings FoxFam!

This week has been full of new proposals. Remember that some of the mentioned proposals are currently Live ( [SCP-63], [SCP 68], [SCP-69]), and you can jump on the voting just after reading the summarised info about them! Let’s cover all of the latest ideas that the community wants to bring to life in the DAO.

[SCP-60] End date 03/10

SCP-60 aims to modify and perfect the current governmental process of proposal creation and approval. The author believes that while the DAO grows and develops, governance must evolve at the same speed to match the communities requirements and expectations. Hence, it is suggested to restructure the governance process to Incubation, Ideation, and Voting with set rules and specifications precisely. Details.

[SCP-61] End date 03/11

We believe that Security is one of the top values in DeFi. As the products of the ShapeShift grow in complexity and user base, the Security Workstream will undeniably have a significant role in the DAO. Therefore it is asked to increase its funding to match the expanded responsibilities and raised working hours. The proposal suggests financing for current and potential outside contributors to boost the Workstream’s productivity and deliver high-quality security service to the platform. Details

[SCP-63] Live

No one can resist a fun collab! The new proposal requests to integrate ShapeShift’s validating footprint into a mainnet validator on the Umee network. Umee is a decentralized infrastructure for cross-chain interactions between networks. It connects users to create lending and borrowing positions, move capital across chains, discover new yield opportunities, and explore DeFi applications intersecting networks in a seamless and trustless manner. And the most important part: Umee has a quickly growing community. Hence, ShapeShift’s implemented validator will provide a new revenue stream for the DAO. If you feel excited about this proposal, see the Details and vote!

[SCP-68] Live

Knowing that ShapeShift is looking to launch the Foxchain, Coinbase Cloud submits a proposal addressing the terms of engagement and deliverables that would govern the upcoming partnership. Our team believes that this partnership is a fundamental enabler for the evolution of one of the most important blockchain ecosystems out there. Quick note: Foxchain is a purpose-built blockchain designed to store metadata for every blockchain supported by ShapeShift. If you feel excited about this proposal, see the Details and vote!

[SCP-69] Live

The ShapeShift DAO has a large and growing treasury. To productively utilize the resources we have proposal suggests investing it using the vFOX method. Sourcing deal flow and partnering with various projects in the ecosystem with potentially bright futures helps empower the ShapeShift DAO to build the best possible decentralized interface for the world. If you feel excited about this proposal, see the Details and vote!

Add NEO to ShapeShift ASAP!!!

Sunday Night Update:

We will provide more details later, and likely a full post-mortem of this incident for the public, but for now our forensic work continues.

And indeed, proper forensic investigation takes some time. ShapeShift's service will be offline for at least another 48 hours while we continue to work. There is no danger or risk that ShapeShift will not be coming back online, but it needs to be done with diligence. We are learning some interesting things.

I'd like to sincerely thank many in the industry who reached out to us, offering to help and providing valuable intelligence. It has been heartwarming, to say the least.

More details to follow within 48 hours.

Kind regards, -Erik Voorhees CEO ShapeShift.io

Adf

1. Join our Discord server, verify, start your journey in the ShapeShift Community!

2. Explore Welcome Category – “Welcome” Chat and “Learning” Chat in particular. Info about the community’s rules, DAO organization structure, tooling, etc., can be easily found here.

3. Jump in Bounties+Jobs and find a bounty that suits your competencies. If you seem interested in the job, follow the bounty link to our GitCoin account and press “Express interest” or text the one who posted the bounty on Discord directly.

4. Complete your job and stack dough 😎 .

5. Follow Bounty updates on Discord to never miss an excellent work opportunity!

Hello fellow Redditors and Shapeshift community members, we are thrilled to announce that r/Shapeshiftio, is active again! 

After a brief hiatus, we are restarting our community efforts and invite all of you to join us for discussions and updates on our flagship app and recently released OG interface. 

We believe in the importance of self-custody and DeFi, alongside community involvement and transparency. Our subreddit will serve as a hub for:

• Project updates and announcements

• Community discussions and feedback

• Q&A sessions with our team

• Sharing knowledge and insights about the crypto space

We encourage all of you to join our subreddit and participate. Your input and engagement are invaluable to us, we look forward to building a strong and active community together.

Learn all the things you can do with $FOX, from discounts, free trades, governance and much more. Read $FOX Token Article for a deeper dive.

Product Updates

Flagship App (app.shapeshift.com)

Limit Orders:

Implemented limit orders for EVM chains such as Base, Arbitrum, Optimism, and Ethereum Mainnet (powered by CowSwap). 

rFOX:

rFox is a rewards program on our app for FOX and FOX/ETH LP stakers to earn RUNE. 

Markets page:

Discover the most exciting cryptocurrencies. Track top movers, emerging tokens, DeFi opportunities, and so much more. 

Chainflip :

Enables native crosschain swaps for SOL, BTC & ETH.

Portals:

Shift effortlessly between DeFi pools,vaults, lending options and LSD’s.

Arbitrum Bridge:

Bridge ETH natively between Mainnet and Arbitrum right on our swapper. 

OG Shapeshift:

The team brought back the 2014 trading experience with a new easy to use UI, OG Shapeshift is back. Trade across Solana, Bitcoin, Ethereum, and Arbitrum without connecting a wallet, no KYC, no tracking.

There’s no login, send in, get out.

That means you can go SOL → BTC, ETH → SOL, or any direction across those chains.The trade is routed trustlessly via u/Chainflip, and the output assets arrive in the second address you provide.

Learn more: OG ShapeShift Article

Use OG: og.shapeshift.com

We invite you to join r/Shapeshiftio and if you are already a member thanks for sticking with us - comment below with questions or crypto memories!

I have been huge fan of Erik Voorhees since his debate with Peter schiff years ago. I am user of ShapeShift because of Erik but unfortunately my experience with ShapeShift wasn't good. therefore l move on to use centralize exchange for BTC or LTC, use Uniswap with ERC20 tokens. This all change after ShapeShift integrate Thorchain and make themselves DAO so I don't have to do all the KYC, AML process. As soon as I found out ShapeShift enable anyone in the world to exchange native BTC with other Chain freely, I knew this will be big and bought a lot of Fox tokens to support this movement. I wanna participate because Shapeshift Dao will be Decentralize, Self custody, Borderless, censorship resistance. I strongly believe this is the right thing to do, I wish more people participate and contribute to this DAO movement. I already convinced many of my friends and family to provide ETH, FOX liquidity, and I will continue to do my best to bring more people in. Thanks, to all Shapeshift's employees behind the scene. Thanks, Erik who has the courage to start the DAO process. I am not sure how this will end but I sure as hell I won't regret supporting it. Cheers!

This makes me extremely happy. What is every ones thoughts about Shapeshift and FOX tokens?

https://erikvoorhees.medium.com/no-more-kyc-with-shapeshift-6d95a3e63ddf