BitGrail Vs. Nano: Who Is Responsible For the $150 Million Theft?
In order to provide insights into alleged security breach and the theft of more than $150 million USD worth of XRB, Cointelegraph conducted an exclusive interview with Francesco Firano, the founder and operator of BitGrail.
This time, Cointelegraph reached out to the Nano team and conducted an interview with the Nano core team’s Troy Retzer, who oversees community & public relations at the organization, to better understand the large-scale theft.
Firano claimed that the Nano core development team accused BitGrail of being insolvent and negligent in managing hundreds of millions of dollars worth of funds. Firano added that the issue originated from the timestamp technology of Nano and that the block explorer of the cryptocurrency is not reliable. Firano said:
“Baseless and malicious accusations are done by the Nano development team. The truth is their block explorer is dated January 19, the date of the theft. Since RaiBlocks have no timestamps on the chain, we cannot really find out when it actually happened other than rely on the block explorer, which, as already shown by the private conversation they disclosed, is totally unreliable.”
However, Troy Retzer explained that on January 19, the date noted by Firano, the Nano blockchain network conducted a re-synchronization of its nodes, providing every block or transaction missing before January 19 with a timestamp recorded at the time. This meant that all transactions or blocks were recorded accurately, with a timestamp on that date. Retzer told Cointelegraph:\
“On January 19, a node resync was conducted and in this process, it picked up on blocks not already having a timestamp record and recorded them at that time, with that timestamp. And to the reason why there were gaps, during the transition of the website there were lapses in the script running, while we handled the transition of the site from the previous admin to our current admin. We received a copy of the old database and worked for some time to get it running correctly on the new server, thus many blocks never had a timestamp recorded until the full sync on January 19.”
In regards to Firano’s comment that the Nano team has released malicious accusations against himself and the BitGrail trading platform, Retzer commented that the core team had not received any information from BitGrail and from Firano apart from the data he had released publicly.
"It is difficult for us to help solve the situation due to a lack of information on the alleged hack,” said Retzer, stating that BitGrail had failed to clarify basic details, such as how many XRB tokens were actually stolen from the exchange. Initial reports from BitGrail suggested it was 17 million, but reports released later this month claimed 15 million XRB tokens were stolen.
The Nano team also emphasized that it has reached out to the Italian police in order to cooperate in the investigation of the theft and provide any assistance it may need in analyzing the BitGrail breach.
On February 15, Firano released a Telegram conversation on his Twitter, in which he claimed that transactions before January 19 are missing on the block explorer of the Nano network. Firano also asserted that transactions were somehow removed and reinserted in a later date. But, in any public Blockchain, it is not possible to remove data stored in past blocks unless the entire Blockchain is compromised and attacked.
Even through public attacks such as a 51% attack (in which a group gains control over half of the Blockchain’s hash power), it is not realistically possible to modify data stored in historical blocks. In response to such claims, Nano developer Mica Busch wrote:
“A Blockchain, and the accounts within a block lattice, are one-way structures. Each references the cryptographic signature of its preceding block. It is impossible for new blocks to be inserted before newer block. Continuing this logic, our block explorer stores timestamps on a best effort basis. Therefore if a transaction shows a date later than another transaction that follows, we can prove that this transaction occurred before the later date, and regard the timestamp as erroneous.”
Given that Nano is a public Blockchain network and blocks within a Blockchain cannot be modified, a claim that transactions are missing from the Blockchain is likely not valid.