Raptoreum Գին

HiveOS stealing from open source developers

<!-- SC_OFF --><div class="md"><p>Several obfuscated checks were added to the Raptoreum CPU miner to signal if someone attempted to modify the donation address, to steal from the developers. At this line, it checks if the donation_userRTM was modified: <a href="https://github.com/WyvernTKC/cpuminer-gr-avx2/blob/main/util.c#L1866">https://github.com/WyvernTKC/cpuminer-gr-avx2/blob/main/util.c#L1866</a></p> <p>If it was, it fixes the donation addresses, but also adds ".1" to the address, signaling that it was modified. You can see the addresses (with the ".1" appended) here: <a href="https://github.com/WyvernTKC/cpuminer-gr-avx2/blob/main/util.c#L462">https://github.com/WyvernTKC/cpuminer-gr-avx2/blob/main/util.c#L462</a></p> <p>And if we check the dev address on Flockpool, you can see quite a bit of hash going to that worker: <a href="https://flockpool.com/miners/rtm/RQKcAZBtsSacMUiGNnbk3h3KJAN94tstvt">https://flockpool.com/miners/rtm/RQKcAZBtsSacMUiGNnbk3h3KJAN94tstvt</a></p> <p>So... where did it come from? Well, we don't have to look far... here's a normal protocol dump:</p> <p><a href="https://i.imgur.com/uHmEhGK.png">https://i.imgur.com/uHmEhGK.png</a></p> <p>Here's one from Hive:</p> <p><a href="https://i.imgur.com/8CBFl6J.png">https://i.imgur.com/8CBFl6J.png</a></p> <p>Stealing from the few developers who do open source miner work is a good way to stop people from doing open source miner work. Further, if they're doing this to developers... God knows what they will do to their users if they can get away with it.</p> </div><!-- SC_ON -->   submitted by   <a href="https://www.reddit.com/user/OsrsNeedsF2P"> /u/OsrsNeedsF2P </a> <br/> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/rqg7x3/hiveos_stealing_from_open_source_developers/">[link]</a></span>   <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/rqg7x3/hiveos_stealing_from_open_source_developers/">[comments]</a></span>