Electron-cash: Inquiry about possible backdoor or malware infection of version 2 Electron cash for windows

[Subzerocold]

In end summer 2017 After fork of BTC we have downloaded Electoron Cash from official site; Deposited 9 BCH as imported key from BTC chain and setted up password; + 18 BCH deposited on wallet adress ; during 24 hours coins were withdrawed from local machine without our permission; Later, Malware was detected by 1 of 10+ antiviruses; exe file of electron cash was infected. We would like to know, was it backdoor by developers or hack of main site. As well, we would like to receive explanation and investigation of this case and compensation from developers as well. I wrote this message to telegram chat and that was not polite to ban me for this reasonable questions.

[cculianu]

There is no malware in Electron Cash. Tens of thousands of people use our software daily without any complaints. It's more likely your computer was infected by viruses/malware and the theft was not related to anything we did.

However, you should know that we are not responsible for any damages that may occur either accidentally or due to criminal action on the part of others by the user of our software. Our licensing agreement for this software reads as follows:

---

Electron Cash - Lightweight Bitcoin Cash Wallet
Copyright (C) 2017-2019 The Electron Cash Developers

Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation files
(the "Software"), to deal in the Software without restriction,
including without limitation the rights to use, copy, modify, merge,
publish, distribute, sublicense, and/or sell copies of the Software,
and to permit persons to whom the Software is furnished to do so,
subject to the following conditions:

The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

[Subzerocold]

Dear Calin,

that could be so,
But seems very strange, that virus, which initiated payment was detected by
our check up was found in your .exe file only; as well that was begining of
BCH road so it is hard to believe, that for fresh segment of software there
are existing viruses or malvare.
So we had logical assumption that that was way your software was monetised
and suggest you to prove innocence on your development team, if your
software had no backdoor and your server was not hacked.
Will be fair not to close this issue, but find out truth, cause not only
our wallets were emptied by these actions.

Br, Alexander

On Mon, 18 Nov 2019 at 16:19, Calin Culianu [e-mail]
wrote:

Closed #1687 https://github.com/Electron-Cash/Electron-Cash/issues/1687.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/Electron-Cash/Electron-Cash/issues/1687?email_source=notifications&email_token=AKT7ZRVAPCW5XPXB36RC6YDQUKI65A5CNFSM4JOQGB7KYY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOU5LLMDQ#event-2807477774,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AKT7ZRVGLEHJLJI2646SVF3QUKI65ANCNFSM4JOQGB7A
.

[cculianu]

I assure you our software is not at fault. I can refund your purchase price if you like. Which is $0.

Seriously: If you believe our software is at fault, kindly provide more details. Where did you download it from? Can you link us to the binary ? Etc.

[Subzerocold]

Your assure is not proof. We had backup of system and even passed that
information to inquire cyber agency. Of course we do not keep binary, But
we would like not to do that work for you for free cause we already had
losses with your company made soft, 27 BCH are maybe a joke for somebody,
you can check blockchain explorer, we can pass you that wallet number to
find out what cyber attack group it is connected trough output if it is not
your backdoor. Anyway if this group changed distributives( I do remember
there are such cases) and you hided that from community, you need to
localize them, cause Distributives were downloaded from your official
website; Electron Cash v.2; malware was detected as I already mentioned
only by one antivirus and that is not Avast Avira or Kaspersky.

Br, Alexander

On Mon, 18 Nov 2019 at 18:42, Calin Culianu [e-mail]
wrote:

I assure you our software is not at fault. I can refund your purchase
price if you like. Which is $0.

Seriously: If you believe our software is at fault, kindly provide more
details. Where did you download it from? Can you link us to the binary ?
Etc.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/Electron-Cash/Electron-Cash/issues/1687?email_source=notifications&email_token=AKT7ZRTLGAMFQ6ABPQNV3KTQUKZVVA5CNFSM4JOQGB7KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEEK3WNI#issuecomment-555072309,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AKT7ZRVNWIOS6QZHC5QCDA3QUKZVVANCNFSM4JOQGB7A
.

>

  Sincerely, Alexander