search

coinables / Bitcoin-NoAPI-Shopping-Cart

Bitcoin Permission-less API Shopping Cart
13 stars 12 forks source link

Uses insecure library for generating Bitcoin addresses #2

Closed qirtaiba closed 7 years ago

qirtaiba commented 7 years ago

A couple of people have experienced their Bitcoins vanishing when using addresses generated by the PHPCoinAddress.php library. See https://github.com/zamgo/PHPCoinAddress/issues/3. This doesn't inspire confidence. Possible that someone is generating the same private keys and sweeping up the coins?

coinables commented 7 years ago

ACK - Need to find a stand alone CPRNG PHP lib that can generate key pairs.

Beetario commented 7 years ago

Deberías borrar este proyecto de Github, todo el dinero se va a esta dirección https://blockchain.info/es/address/1JCuJXsP6PaVrGBk3uv7DecRC27GGkwFwE

qirtaiba commented 7 years ago

I'm going to post a pull request for the patch that fixed it for me.

coinables commented 7 years ago

@qirtaiba did you find a decent php library? I'm not working on this project anymore, but if someone is stealing funds based on PHPCoinAddress library then I'm going to delete the repo like @nelsonmurciia suggests.

qirtaiba commented 7 years ago

See #4.

coinables commented 7 years ago

This repo is now retired. Thank you for your contributions @qirtaiba @nelsonmurciia

samirdjelal commented 6 years ago

what do you mean by saying that somebody is stealing bitcoin using PHPCoinAddress?, if I used the official one can that happen too?