Its nice to see that there is finally some activity in this thread, but the circumstances are bad..

Blender is up again and running on my backup bitcoins, unfortunately the backup coins does not cover everyones bitcoins.

My solution is that I am not going to earn anything of the 1-3% commission so everything is going back to refund the users instead...

This is the only way i can think of to be able to return all the bitcoins to the users, if i give up now and dont try to start Blender again there is no way i can come up with these coins... Then everyone loses!

But as its now up and running, and users are actually trusting it already and using it again, if it continues like this then the fee everyone is paying is going to repay everyone eventually.

To those who have returned, thanks for your trust and support! You are awesome! And remember the fee you are paying on deposits is not going to me, its going to everyone to pay everyone back, without you this will not work.

Deposit and Withdraw transactions are going on the Blender right now, and as you can see that it works I hope to build everyones trust again.

The hack did not involve doing SQL injections or other methods/exploits where he would get actual access to the server, it was simply that he sent a lot of withdraws really really fast and unfortunately i had not implemented SQL transactions to lock the database during withdraws. All he did was send many withdraws fast, so this means that he did not find anything, he did not get any logs, he did not get any usernames, he did not get access to the db. All information is still secret. I have implemented SQL transactions now, it locks the database during withdraws to prevent this from happening again. This together with other precautions have made me confident to launch the site again. If i had not found the bug, and successfully implemented the proper fix for it, then i would never start Blender again and put the backup coins online..

I should have implemented this from the beginning, but i am taking the consequences and got the service running again to pay everyone back.


Thanks,
Bitblender

well you see, you assuming can be bit insulting, you should ask first. Not to mention you insinuated that that our Clam, or "vouch" as you put it, is some how less meaningful because our user is labeled "Newbie" on this forum. we just wanted help, not someone that jumps to conclusions and "Assumes".

My friend got his back.

for what thats worth.

As far as I am aware they are repaying people what they can. If you were laundering large amounts maybe not

People should send you more coins to replace their stolen coins lol

You should go and work with mintpal, they could use a man like you 

Surely you can see the irony yourself ...........People trusted you with their coins once and got scammed,round 2 - You suggest they send even more coins to recover a very small % of the stolen ones

its not any different from sending more coins to MT GOX if karpeles promised to start using the profits to repay everyones loses

Good luck if it works though

At least he's made good. 99% of people who get hacked just go "sorry got hacked" and don't put their hands in their own pockets to repay people.

blender, what percentage of people have been repaid?

Tried using it yesterday bitcoins not showing up even though transaction has gone through. When you ask for a new deposit address it gives you the same one so I'm assuming it's been compromised?

Someone prove me wrong please.

There is a phishing website of Bitcoin Blender and it behaves exactly like you are describing. I will not give the url here but the .onion starts with just "blender..." instead of "bitblender...".

On the correct site you can get a PGP signed message from the Bitcoin Blender PGP key stating that the deposit addresses is for your account on Bitcoin Blender, if you verify that the message is signed with my PGP key then you can be sure the deposit addresses in the signed message is correct, also look so its your username in the text.. The real site also offers two factor authentication using PGP for those who want, and the phishing site does of course not.

The support function does not work on the phishing website, so that could be good to check too.


Regards,
Bitblender

I know, but the guy paid back people already. And there are much less shady bitcoin businesses which have done the "got hacked baibai" routine, at least he's attempting to make good. Though I imagine if enough people just sit around and call scam then maybe he'll just do an exit scam

Point is some anonymous bitcoin launderer is tryin to be honest, and has provably repaid people (check reddit/darknetmarkets and you'll see many people sayin they were repaid) so we should at least give him credit for that.

Personally I would have said fuck it, and kept my stash and started a new service.

It is refreshing to see a healthy amount of skepticism in the bitcoin community. I am new to bitcointalk.org however for over a year now my primary source of income has come to me in the form of bitcoins.

I strongly believe in an individual's right to freedom from needless and in many cases dangerous government intrusion into personal finance. This is doubly important for me, because my income comes from my participation in activities that my government deems to be illegal.

It is vital that I maintain my anonymity. Bitcoin alone certainly does not provide any degree of anonymity, so to provide for this I utilize among other tools, bitcoin blender. I was a user of bitcoinfog until march or april of this year when I began to notice significant delays with the service, particularly with the processing and availability of deposits and withdrawals. Since then I have processed between 80 and 100BTC through blender. My typical experience is excellent. I deposit coins and with three network confirmations the coins are available for withdrawal and taint analysis indicates no connection between my source and destination addresses (same for bitcoin fog). I was one of the unfortunate subset of people who had coins sitting in their account when the service was hacked last month. Having been around the block of "bitcoin+hiddenservice = mysterious theft of bitcoin" scenarios I figured I was out a few thousand and time to move back to old (un)reliable, bitcoinfog. The reason I am here registering on a clearnet forum and spending my time writing a review is because I was struck by the integrity of the service operator of bitcoin blender. In this situation, they could have shut down the service and cut their losses, keeping the profit from the past many months of operation and moving on to their next venture leaving me and others at a loss and they could have done this with no fear of reprisal or repercussion. The service operators chose to do the right thing by their users and fix the vulnerability (a race condition in their withdraw functionality in this case) and inform them of said vulnerability, properly record their losses and then inject their own money to the service to keep it going and get their users repaid.

Long story short I have been repaid a goodly portion of the balance in my account prior to the theft, and thankfully for me (not for blender) I am being paid as coins are on an upward swing. Most importantly, the service has always been available and always worked as advertised. The operators have consistently added functionality and security measures to combat problems that plague the world of hidden service bitcoin commerce (password phishing, dummy sites, etc) including PGP TFA, PGP authentication of deposit addresses, etc.

I may be ridiculed for having a new account and posting a review, but let me state it to you this way simply: I created this account and paid a fee so that I could post simply because I do not feel this service gets proper reviews. Most people who use it are like me and prefer to keep their business their business, or private.

If privacy and anonymity is important to anyone reading this then  they would be remiss if they did not try this service.

Thank you for reading.

Freedomfromfiat