Background:
A hacker had obtained one of our admin credential by unknown means. The credential was used to access our database through the web as we unknowingly left an unused debug webpage running on the web. Fake deposit and withdrawal requests were created through the database and approved with the stolen admin account.
Compensation Plan:
We have lost about 100 BTC from this hack which is a huge blow. We have lost most website profit and is also in debt. Despite all difficulties, we wish to continue running the site as best as we can.
I am very well aware that you would be concerned about your lost BTC. We promise we will try our best to repay everyone. However it cannot be done right away as we do not have the money to do so. Time is needed to make money back.
If you had BTC balance on the site, they will be temporarily frozen as debt until we have made the money to repay you. Debt cannot be used to purchase or be withdrawn. When you make BTC transactions, the fee that you are supposed to pay will be used to pay for our debt to you (so you pay no fee). Other user's fee will be used to pay to the user with the most debt. This settings will be used until all debt is cleared.
Improvement:
We have reset most passwords and reinstalled a lot of system components including OS, mail server, web server etc. We have changed the way admin accounts are handled. There will be different accounts for different tasks and they all have more limited privileges. We have removed access of important bot information in the database and it will be saved and accessed elsewhere. Most service are also locked from Internet access.
BTC withdrawal will be completely handled manually. The BTC will be stored in a multi-sig wallet from greenaddress.it.
Final words:
Dispenser.tf is founded with the aim to create a fast, smooth and efficient trading environment of Steam items and BTC. This aim has not been changed and will not be changed. Today we face a very largest setback but we are not discouraged. We take every chance to improve and come back stronger. We sincerely ask for your patience. Please understand that we are in a difficult situation and give us some time to sort out things.