At what point can this attack be considered over?

stackernews-attack-over-question

Organisation: Stacker News
Evidence role: Community discussion
Published: 2026-08-02
Source changes: 0
Detected differences: 0
Unreviewed: 0
Copies held: 1

theonceler asking at what point the attack can be considered over: when remaining affected addresses have either moved or been drained. Frames the endgame question the chain monitors' numbers bear on. Captured through the site's public GraphQL API: the rendered pages crash the capture tab, and the API answers POST from this host. The query fixes the captured surface to the item's title, text and two levels of comments, each with author and absolute timestamp.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked 7 Aug 2026, 00:05 UTC.

Earliest copy held Current

seen 4 Aug 2026, 04:16 UTC · Captured here 1,370 chars

What changed from the previous capture 0 lines

Extracted text as captured

{
  "data": {
    "item": {
      "comments": {
        "comments": [
          {
            "createdAt": "2026-08-03T01:55:31.931Z",
            "text": "It will only be over once nvk has repaid all the victims.",
            "user": {
              "name": "Kruw"
            }
          },
          {
            "createdAt": "2026-08-03T01:39:52.816Z",
            "text": "you can’t and this is not important",
            "user": {
              "name": "Fenix"
            }
          },
          {
            "createdAt": "2026-08-02T20:53:12.921Z",
            "text": "Can't, its just diminishing returns for attackers... even the latter CC models had sub-optimal entropy so now there's a bounty on those mid-range bits which incentivizes deeper and deeper seed generation\n\nCost of generating those somewhat higher entropy seeds isn't much of a deterrent, will be done with bot-nets and malware just as mining has been at points",
            "user": {
              "name": "justin_shocknet"
            }
          }
        ]
      },
      "createdAt": "2026-08-02T20:45:25.227Z",
      "text": "At what point can we relatively safely assume that affected addresses either moved their coins or had their btc stolen?",
      "title": "At what point can this attack be considered over?",
      "user": {
        "name": "theonceler"
      }
    }
  }
}

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.

Held captures