Open Monero drained again, this time for 399 XMR

@xenu, to be fair. These things seem like a pattern, so I wouldn't think that they are actually attacks. I may be wrong, but I know what purging involves because I have a P2P non-KYC platform and some knowledge.

But why didn't they include a straightforward system that would stop or halt all withdrawals if the network or server received or detected an exceptionally unusual access?

An even better solution I came up with is that any admin or user can still use the password or even the TOTP after the withdrawal is stopped.
However, the platform automatically withdraws to all users' "recovery" deposit addresses (which could be an off-wallet subaddress).

It doesn't matter as soon as the withdrawal process starts, and it makes a backup of users without wallets for the subsequent migration or purge or anything. Thinking from every perspective requires some accountability, particularly if this is not the first time. I also think that people are not stupid; they are merely "draining" and using bots to increase traffic. We apologize. (Pardon me?)

Fuck the liquidity and return it quickly to protect the users.
People depend on money, so if you're drowning, don't drown those who are paying for your services. The fact that they trust you is even worse.

Overall, I am not promoting through this post, but rather comparing what I have done to what they have done. If the daemon should only be limited to a whitelisted local/physical machine in the network, how could someone have compromised the platform/server and "drained it"?

I believe that people will lose even more because they have become avaricious.
I was aware from the start that there would be no competition in the P2P exchange.

You cannot simply restart or shut down the server whenever you want. Instead, do it gradually and notify people that trades and wallet actions are paused, giving unfinished trades, deposits, and withdrawals time to clear. The timing must be right and fairly managed, and people must be updated. Some are skeptical, some are simply asking, some are checking to see if you have given any signs of life, and so on.

Some people use the exchanges to support their families without worrying about whether they will see their money. If you take on the responsibility of a "PLATFORM," it will be worthwhile to lose sleep, people, and interests, but make sure that it is a potential source of income for the rest of your life.

In other words, even if you lose all of the trust that people have placed in you, never losing it is what will actually feed you on your bad days. Allow trades to spend time with their loved ones without losing their money for trusting you, and you will never be hungry, but OpenMonero is a fraudulent copy of LocalMonero.

Whatever happened between the admins and the LocalMonero platform itself, they did not lose dignity and shut it down but instead gave people 6 months to withdraw their funds before closing forever, and this is where I got the idea for XMRMatters.

I sincerely hope that people will leave OpenMonero, and that if OpenMonero dares to "stand for their policy," they will fully refund the people. I now understand how these scammers get so much traffic and how these bastards exploit my XMRMatters, which is actually designed for people and their true privacy and security. I hope God "exploits" them for equal damage in some other way if this was done on purpose.

Sincerely,
Delta_489

^
literal quote from "XMRMatters":

Second, your claim that users have to "learn how to use PGP/GPG" proves exactly why you need to read the documentation before attacking a project. Users do not touch PGP. The platform automatically encrypts trade chats at rest using a server-side public key.

meanwhile it has been proven in the past that for similar services, users should NEVER trust the "automatic encryption" as seen from example icognito market that did an extortion thing:

and since this thread is about openmonero, they had those literal home addresses leaked:

"XMRMatters" is a similar honeypot type of design and can fuck off, while also being clueless about his own platform

openmonero, xmrmatters and xmrpool.cc are all the same shit:
https://monero.forum/thread/psa-xmrmatters-discussion-thread-wouldnt-trust-literal-compulsive-liar

dont fall into the honeypot designs
instead of like, running an Haveno network with fees to make money for themselves and contributing on vulnerability disclosures or whatever (since Haveno is opensource), they rather build their own centralized closed source website that anyone can ask the LLM to build something like that
their motives for their platform only make sense if they want to be malicious

and while monerica said regretting suggesting haveno in the past (after an exploit thing)
this shouldnt mean going backward and trusting centralized closed source garbage instead
DEXs should still be the focus, if there's a vulnerability with them or even monero itself, then tough luck, no tech is secure ever, not even monero itself
but the fact it's decentralized and opensource allows to keep improving on those tech

there is no point in contributing to bullshit designs like xmrmatters, xmrpool or openmonero that are centralized and can serve any code they want on their own server anyways

Fool me once ..

Honestly, this seems nearly monthly by my skewed sense of time. If people keep using the site, and the site keeps getting bent over/ bending over its users, then uhhhh, maybe the users enjoy the thrill of risking their monero...

Wouldn't it be interesting if the thing was some kinda ponzi scheme, and they get 'hacked' every time they run outta funds to pay people?

Though that might not make sense if this is an exchange. On a bright note, they're clear about the remaining xmr due to be refunded, whether all parties are ever made whole, idk.

The message from the dev has way to many 'I assumed...'s for my taste...

@GamingResearchLab, also the @admin

I publicly demand that the GamingResearchLab stop harassing XMRMatters and me.
I firmly believe that this is not the appropriate setting for such an encounter, and I feel haunted.

Alternatively, since this guy is acting like an IDF soldier, I won't put up with him calling me a honeypot.
The best preview of the victim card.

I do request that the administrator sanction this type of behavior and make the forum feel more welcoming.
Imagine that every single post or comment has a specific target.

I apologize to @xenu and @averice as well, but I just can't stand this guy's behavior, man.

@xmrmatters
snitches dont get no bitches

on behalf of the gaming research lab, as gamers would be saying:
get cancer, KYS
🖕😈🖕

your platform has no reason to be in the year 2026 as it as been explained over and over again, your platform needs to die, and i guess so do you, so get cancer retard