How long does it take to get pay?  I got 0.9 BTC but have not been paid for two days.

Investigating issue with stats/My Eligius exploit.

Taking stats offline temporarily to investigate and compare database with the most recent backups and to parse through some logs.

I will put them back online as soon as I have pulled the majority of the data to a secondary server for verification.  Shouldn't take more than an hour.

There has been no compromise of the pool or its servers.  

Yes, most of the NMC payouts went to some rogue address today.  This, honestly, is my fault, because I generally at the very least do a cursory parse through the NMC payout list before submitting it to the network.  In my haste I did not today and seems that was a mistake on my part which will not happen again.  There is enough NMC buffer to cover the loss and I will make sure everyone gets paid properly once I correct the issues.

I will post more details as soon as I finish my audits of the stats code.

-wk

Could you inform us of the address(es) that the thief inserted for the payouts since it'll probably be fixed by the time you bring MyStats back online? I would be...interested in tracking that wallet's historic and future transactions.

edit: didn't realize I was on the wrong page and had lost a page of comments! My mistake, oops, sorry!
Apparently we're watching for this guy: http://explorer.namecoin.info/a/N4CVwS13ELKimdJNEChgMJnLZiA7L6MU5F

I was referring only to NMC. NMC coins aren't mined directly to the payment addresses I believe. For my BTC I mine to my normal Electrum wallet.

I've gone through all of the servers just as a precaution and everything is fine.  Connectivity has been solid, and all pool servers are functional.

It was an exploit of the stats code (open source), not a hack of the actual server(s).

And, no, I will fix everyone's NMC addresses using the verified data on the core server, which is not affected by this (since the new options/signatures didn't pass the re-verification).

I will also get the proper payouts out to everyone.

The IP of the attacker is 178.252.115.200, but this obviously isn't all that useful.  This IP is actually associated with some attempted low-hashrate mining with the following addresses: 141Ui93eV83HSnpyDcvdtGtR3UqwYss5q7, 17hpCt7vWLCksCpUgQpFURjWHjZDhNDYhz, 1MsMx8hfYW6tS1Y9oGZhAbSqvrD8DDgNzN.  But, no earnings to speak of on these, really.

Note: I have no issues publicly revealing private data like this on attackers.

YEAH got my 1st BTC from my new T-IV machine, only need another 8.3 to break even :-)

joolz

I would advise against assuming this, even though it is currently correct...

I will fix them.