Scribd Logo
Upload

Welcome to Scribd!

  • 218 views

    Localbitcoins Exploit Updated 08 November 2021 (Updated)

    Uploaded by

    Johnny Rockets
    This document describes an exploit on the LocalBitcoins exchange that allows doubling Bitcoin deposits. It works by depositing Bitcoin, which is immediately refunded, while also being added to the user's exchange balance. However, withdrawals require identity verification. So while the method can double a single deposit, it only works once per account and requires verification to access the fraudulent gains. The document provides step-by-step instructions to perform the exploit and screen shots as evidence.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Localbitcoins Exploit Updated 08 November 2021 (Updated)

    Uploaded by

    Johnny Rockets
    218 views5 pages
    This document describes an exploit on the LocalBitcoins exchange that allows doubling Bitcoin deposits. It works by depositing Bitcoin, which is immediately refunded, while also being added to the user's exchange balance. However, withdrawals require identity verification. So while the method can double a single deposit, it only works once per account and requires verification to access the fraudulent gains. The document provides step-by-step instructions to perform the exploit and screen shots as evidence.

    Original Description:

    Localbitcoins Exploit Updated 08 November 2021 (Updated)

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document describes an exploit on the LocalBitcoins exchange that allows doubling Bitcoin deposits. It works by depositing Bitcoin, which is immediately refunded, while also being added to the user's exchange balance. However, withdrawals require identity verification. So while the method can double a single deposit, it only works once per account and requires verification to access the fraudulent gains. The document provides step-by-step instructions to perform the exploit and screen shots as evidence.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    218 views5 pages

    Localbitcoins Exploit Updated 08 November 2021 (Updated)

    Uploaded by

    Johnny Rockets
    This document describes an exploit on the LocalBitcoins exchange that allows doubling Bitcoin deposits. It works by depositing Bitcoin, which is immediately refunded, while also being added to the user's exchange balance. However, withdrawals require identity verification. So while the method can double a single deposit, it only works once per account and requires verification to access the fraudulent gains. The document provides step-by-step instructions to perform the exploit and screen shots as evidence.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 5

    Local Bitcoins Exploit

    Last update: 08 November 2021

    This method allows you to double literally any amount of Bitcoins by using the new exploit found
    on LocalBitcoins.

    This method can be used only once, the reason of that will be explained later in the guide. (It
    actually can be used multiple times, but you will need more resources.)

    I will try to explain what this is all about. So basically, LocalBitcoins requires you to verify your
    identity to sell / buy any Bitcoins throughout their exchange.

    We have tried to create some sort of exploit that would allow us to make a deposit (despite seeing
    that message) and find out what was going to happen (basically check if we could sell the Bitcoins
    we deposited). Once we have done that successfully, the thing we discovered was just unreal. The
    money we deposited was immediately refunded to the same address we have sent the money
    from, but at the same time, the amount we deposited was added to our balance on LocalBitcoins.

    So what we got was:


    - a refunded 0.12 BTC transaction in our BTC wallet
    - 0.12 BTC in our LocalBitcoins balance
    (so basically from 0.12 BTC deposit, we’ve got 0.12 BTC back to our wallet and 0.12 BTC in
    LocalBitcoins account balance)
    Then we tried to withdraw that money, to see if they would actually send us the money, or if it was
    some visual bug or something, but we’ve got an error that the account has to be T1 verified to
    make any withdrawals. Then we have provided an ID photo to make the account verified and
    guess what… they actually allowed us to withdraw. We’ve made a 0.12 BTC deposit that was
    immediately refunded (probably because it shouldn’t be possible to make any deposits if the
    account is unverified), but at the same time, they added that 0.12 BTC to our balance on the site
    and allowed us to withdraw.)

    This is why this method can be used only once - you will have to verify your identity anyway to
    withdraw the “doubled” Bitcoins. If you want to use it again, you will have to ask your friends /
    family or use some stolen / fake ID to create another account. You will also need another phone
    number for SMS verification. We have tried to use it twice on the same account - but it didn’t
    work. It appears to work only for the first transaction, and the second one is just simply refunded
    and doesn’t appear in your LocalBitcoins balance.

    I will provide some screenshots from our LocalBitcoins account and then we will proceed to the
    Step-by-Step guide (starting at account creation).

    LocalBitcoins history:

    Our BTC wallet:

    The ID verification took about 2 hours, once it was completed, we were able to withdraw the
    “doubled” amount.
    Ok, let’s start with the guide!
    1. Let’s start by creating the account.

    Head over to this link: https://localbitcoins.com/register/ and simply register a new


    account. Make sure to provide a valid e-mail, because you will have to confirm it!

    2. Once you have confirmed your e-mail, fill out your profile information. Make sure to
    provide the same name and last name that you have on the document, because otherwise
    they will reject your T1 verification.

    3. Now confirm your phone number.

    4. Go to https://localbitcoins.com/accounts/wallet_receive/
    You should see a message, that you can’t make any deposits, because your account is
    unverified.
    5. To see the whole deposit menu, and the address where you should make a deposit, you
    will have to use our script. Click with the right button of your mouse anywhere on the site
    and choose “Inspect”. You can also use a CTRL + SHIFT + I combination.

    6. Now go to the “Console”.

    7. Copy and paste the script from this link - https://pastebin.com/raw/VQYRp5DN


    to theconsole and press Enter. (It’s a long script, make sure to copy every single
    character,otherwise it won’t work.)
    8. Now you should see this alert from Localbitcoins, simply press “OK”: (if you don’t see the
    alert, make sure you have copied the whole script and didn’t miss any character. You can
    also try using Google Chrome, if you are using something else)

    9. Now the whole Deposit section should be revealed:

    10. That’s it. Now simply make a deposit of any amount. Your transaction will be instantly
    refunded to your address, and the same amount will also be added to your balance on
    Localbitcoins. You will be able to withdraw the “Doubled” amount, once your account gets
    verified. (You can use an ID / Passport etc.).

    If you have any questions, feel free to DM me.

    You might also like