Go Back  Bike Forums > The Lounge > Foo
Reload this Page >

FBI recovers Bitcoin from Colonial Pipeline Ransomware attack

Notices
Foo Off-Topic chit chat with no general subject.

FBI recovers Bitcoin from Colonial Pipeline Ransomware attack

Old 06-08-21, 02:48 PM
  #1  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
FBI recovers Bitcoin from Colonial Pipeline Ransomware attack

This story is blowing my mind: The FBI managed to seize/recover 63BTC of the 75BTC that the ransomeware group DarkSide extorted from Colonial Pipeline.

https://www.nytimes.com/2021/06/07/u...e-attack.html?
https://www.npr.org/2021/06/07/10040...ipeline-ransom

The NYT article links to the FBI's warrant application:
https://int.nyt.com/data/documenttoo...29e1b/full.pdf

If you scroll down to #28, you can see the start of the transaction history through a couple bitcoin digital wallets/addresses. Here in the public transaction history you can see that initial May 8 payment of 75 BTC to address ...c9fr. (It's a fraction of a large transaction of 178 BTC being sent into 8 different addresses, I'd guess it's a crypto exchange like coinbase or something else that is aggregating a bunch of transactions).

Paragraphs 29-33 of the warrant application detail the money moving around a handful of other addresses, you can use them to click forward in the blockchain ledger to see (some of it) land in this wallet ...segq on May 27. Then at 2021-06-07 10:40 63.7 BTC is transferred out of the wallet, and 5.9 BTC transacted back into / left in the same wallet. 8 minutes later the remaining 5.9 BTC transferred out.

10:40 would be the FBI seizure, only 63.7 BTC because that's how much was transferred into the 'Subject wallet' and traceable back as a portion of the Colonial ransom.

10:48 is presumably DarkSide taking a few minutes to realize their wallet is compromised and transferring everything out. Presumably BTC forensics could identify a flurry of DarkSide wallets being emptied into fresh new wallets with new passwords.

The kicker is paragraph 34 of the warrant application: "The private key for the Subject Address is in the possession of the FBI in the Northern District of California". !?!?!

Here's the best link I could find about how that could be possible

The bureau was then allegedly able to identify that 63.7 BTC from the ransom payment had been transferred to a specific address, for which the FBI has the private key, and is, therefore, able to spend — or in this case seize — those funds.

The affidavit didn’t mention how the FBI could control the private keys for the address used by DarkSide, and it is unclear how that would be possible, given Bitcoin’s censorship-resistant nature. One possibility is that the address could be in a custodial wallet, thereby facilitating control. Another likely scenario would be the funds being stored in an unencrypted wallet — which is vulnerable to theft. Lastly, the FBI could have employed digital forensics on the wallet to retrieve sensitive information remotely.

According to a tweet from Blockstream CEO Adam Back, the FBI obtained a subpoena granting access to a rented cloud server used by the hackers, which allowed it to seize the bitcoin.
That tweet links to this article. So it appears the FBI used another warrant to seize their servers (first? to obtain the private key?) and then requested the warrant to seize the money.

BTC dropped 5% at the news.

Last edited by RubeRad; 06-08-21 at 03:37 PM.
RubeRad is offline  
Likes For RubeRad:
Old 06-08-21, 03:18 PM
  #2  
Hondo Gravel
Basically Psychotic
 
Hondo Gravel's Avatar
 
Join Date: Jan 2018
Location: Hondo,Texas
Posts: 2,052

Bikes: Too many Motobecanes

Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1925 Post(s)
Liked 1,987 Times in 1,271 Posts
Saw that on the news. I know it’s an alternate form of currency but I don’t really understand it fully. I know if you buy something and can sell it at 20% profit then sell lol.
Hondo Gravel is offline  
Old 06-08-21, 03:31 PM
  #3  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Like any other currency, it's worth what ever the consensus thinks it's worth. The innovation is that the transaction history is public, yet secure, because of blockchain, which you can think of as crowdsourced cryptographic verification.

'secure' means nobody can transfer BTC out of your 'wallet'/account without the private key (password) that matches the account number. Public/private key cryptography means you can easily prove to the world that you have the appropriate private key, without exposing your private key.

As the tweet says, "Bitcoin was not hacked", the ransom was transferred out with a valid transaction -- a transaction that was valid because FBI had the private key. What was hacked was however they got that private key.
RubeRad is offline  
Likes For RubeRad:
Old 06-08-21, 03:40 PM
  #4  
Hondo Gravel
Basically Psychotic
 
Hondo Gravel's Avatar
 
Join Date: Jan 2018
Location: Hondo,Texas
Posts: 2,052

Bikes: Too many Motobecanes

Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1925 Post(s)
Liked 1,987 Times in 1,271 Posts
Originally Posted by RubeRad View Post
Like any other currency, it's worth what ever the consensus thinks it's worth. The innovation is that the transaction history is public, yet secure, because of blockchain, which you can think of as crowdsourced cryptographic verification.

'secure' means nobody can transfer BTC out of your 'wallet'/account without the private key (password) that matches the account number. Public/private key cryptography means you can easily prove to the world that you have the appropriate private key, without exposing your private key.

As the tweet says, "Bitcoin was not hacked", the ransom was transferred out with a valid transaction -- a transaction that was valid because FBI had the private key. What was hacked was however they got that private key.
Thanks for the response now I understand more about Bitcoin. I have a cold beer for you
Hondo Gravel is offline  
Old 06-08-21, 03:46 PM
  #5  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
I appreciate the thought, but I'm a beer snob, and I've seen way too many pictures of the beer you drink. (That, plus how much of a cheapskate I am, protects me from alcoholism) Are there any craft breweries with decent ale near you?
RubeRad is offline  
Likes For RubeRad:
Old 06-08-21, 03:53 PM
  #6  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by RubeRad View Post
Paragraphs 29-33 of the warrant application detail the money moving around a handful of other addresses, you can use them to click forward in the blockchain ledger to see (some of it) land in this wallet ...segq on May 27. Then at 2021-06-07 10:40 63.7 BTC is transferred out of the wallet, and 5.9 BTC transacted back into / left in the same wallet. 8 minutes later the remaining 5.9 BTC transferred out.

10:40 would be the FBI seizure, only 63.7 BTC because that's how much was transferred into the 'Subject wallet' and traceable back as a portion of the Colonial ransom.

10:48 is presumably DarkSide taking a few minutes to realize their wallet is compromised and transferring everything out. Presumably BTC forensics could identify a flurry of DarkSide wallets being emptied into fresh new wallets with new passwords.
The 10:40 seizure from the wallet was this transaction, which was confirmed by inclusion in block 686683, which was mined at 10:45 -- and further confirmed by all subsequent blocks, which happens about every 10 min -- each next block acts as a cryptographic verification of the previous, which is why it's called a 'block-chain'.

While transactions are unconfirmed in the 'pool', they're kind of in limbo. I wonder if it's possible that DarkSide got an instant notification of 63.7 BTC being transferred out of their wallet, and they tried to create a competing transaction out of the same wallet. Conceivably, if a competing DarkSide transaction got confirmed in a block first (which transactions get included in mined blocks is a little bit random), they maybe could have avoided the seizure.
RubeRad is offline  
Old 06-08-21, 04:45 PM
  #7  
canklecat
Me duelen las nalgas
 
canklecat's Avatar
 
Join Date: Aug 2015
Location: Texas
Posts: 12,589

Bikes: Centurion Ironman, Trek 5900, Univega Via Carisma, Globe Carmel

Mentioned: 190 Post(s)
Tagged: 0 Thread(s)
Quoted: 4087 Post(s)
Liked 1,932 Times in 1,246 Posts
So the DOJ could pull some strings on behalf of the suthun' oil mafia, but the other 64,999 businesses and individuals who paid ransom last year are screwed?

Say it ain't so.

canklecat is online now  
Likes For canklecat:
Old 06-08-21, 05:04 PM
  #8  
SkinGriz
Do cats eat bats?
 
Join Date: Nov 2020
Location: LA
Posts: 321

Bikes: BigBox bikes.

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 153 Post(s)
Liked 97 Times in 72 Posts
Originally Posted by canklecat View Post
So the DOJ could pull some strings on behalf of the suthun' oil mafia, but the other 64,999 businesses and individuals who paid ransom last year are screwed?

Say it ain't so.

https://www.google.com/search?q=rate...ile-gws-wiz-hp


Best ROI comes from lobbying.
SkinGriz is offline  
Likes For SkinGriz:
Old 06-08-21, 06:17 PM
  #9  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by canklecat View Post
So the DOJ could pull some strings on behalf of the suthun' oil mafia, but the other 64,999 businesses and individuals who paid ransom last year are screwed?
Let's try not to get shunted over to P&R (even if it is kindler and genter now). My guess is DarkSide was just stupid in renting cloud servers rather than having control of their own, and in leaving their bitcoin private keys on those servers, rather than keeping them offline in safer devices.

USG could still probably retaliate by hacking/blocking/seizing their infrastructure, but at least they wouldn't lose their money. I'm sure all other bad guys who use crypto for financing learned a valuable lesson, and this tactic won't work again.
RubeRad is offline  
Likes For RubeRad:
Old 06-08-21, 06:44 PM
  #10  
Hondo Gravel
Basically Psychotic
 
Hondo Gravel's Avatar
 
Join Date: Jan 2018
Location: Hondo,Texas
Posts: 2,052

Bikes: Too many Motobecanes

Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1925 Post(s)
Liked 1,987 Times in 1,271 Posts
Sounds like cyber proxy war my loving family been doing that since the 1800s .
Hondo Gravel is offline  
Old 06-08-21, 10:00 PM
  #11  
canklecat
Me duelen las nalgas
 
canklecat's Avatar
 
Join Date: Aug 2015
Location: Texas
Posts: 12,589

Bikes: Centurion Ironman, Trek 5900, Univega Via Carisma, Globe Carmel

Mentioned: 190 Post(s)
Tagged: 0 Thread(s)
Quoted: 4087 Post(s)
Liked 1,932 Times in 1,246 Posts
Originally Posted by RubeRad View Post
Let's try not to get shunted over to P&R (even if it is kindler and genter now). My guess is DarkSide was just stupid in renting cloud servers rather than having control of their own, and in leaving their bitcoin private keys on those servers, rather than keeping them offline in safer devices.

USG could still probably retaliate by hacking/blocking/seizing their infrastructure, but at least they wouldn't lose their money. I'm sure all other bad guys who use crypto for financing learned a valuable lesson, and this tactic won't work again.
It's only superficially political to the rubes. Texas P&R is all performative, all melodramatic gestures, sound and fury, signifying... money. Too many people underestimate the sway Texas holds over the entire US.
canklecat is online now  
Likes For canklecat:
Old 06-08-21, 10:34 PM
  #12  
Hondo Gravel
Basically Psychotic
 
Hondo Gravel's Avatar
 
Join Date: Jan 2018
Location: Hondo,Texas
Posts: 2,052

Bikes: Too many Motobecanes

Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1925 Post(s)
Liked 1,987 Times in 1,271 Posts
Hondo Gravel is offline  
Old 06-08-21, 11:05 PM
  #13  
CliffordK
Senior Member
 
CliffordK's Avatar
 
Join Date: Nov 2014
Location: Eugene, Oregon, USA
Posts: 25,322
Mentioned: 204 Post(s)
Tagged: 0 Thread(s)
Quoted: 13677 Post(s)
Liked 1,935 Times in 1,464 Posts
Did the FBI purge the wallet?

Apparently they seized bitcoin equivalent to two ransomware attacks. But, like you said, there were likely other attacks. One could likely justify it as seizure due to illegal activities.

Then schedule a court date for the owners of the wallet to come and claim it.

There were other ransomware attacks. Some likely these hackers, some likely other hackers. But, if the seized bitcoin isn't claimed, then it could be used to pay other victims. Also to pay damages from the attacks that might go beyond the ransom.

Unless, of course, as suggested above that if the bitcoin left in the wallet somehow was like a worm and could gain access to more wallets full of ill gotten gains.
CliffordK is online now  
Old 06-08-21, 11:58 PM
  #14  
Seattle Forrest
Senior Member
 
Seattle Forrest's Avatar
 
Join Date: Mar 2010
Location: Seattle, WA
Posts: 21,848
Mentioned: 73 Post(s)
Tagged: 0 Thread(s)
Quoted: 14278 Post(s)
Liked 5,312 Times in 3,024 Posts
Originally Posted by RubeRad View Post
Let's try not to get shunted over to P&R (even if it is kindler and genter now). My guess is DarkSide was just stupid in renting cloud servers rather than having control of their own, and in leaving their bitcoin private keys on those servers, rather than keeping them offline in safer devices.

USG could still probably retaliate by hacking/blocking/seizing their infrastructure, but at least they wouldn't lose their money. I'm sure all other bad guys who use crypto for financing learned a valuable lesson, and this tactic won't work again.
​​​​​​What does it mean in this context to leave the key on a server? A file somewhere? Or do you mean they're not clearing out the ram they used after signing something? At what points in the game is a private key needed?

I'm 100% sure you're right about this being a trick that only works once. Good warning shot though. 🙂
Seattle Forrest is offline  
Old 06-09-21, 08:20 AM
  #15  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by Seattle Forrest View Post
​​​​​​What does it mean in this context to leave the key on a server? A file somewhere? Or do you mean they're not clearing out the ram they used after signing something? At what points in the game is a private key needed?

I'm 100% sure you're right about this being a trick that only works once. Good warning shot though. 🙂
I'm not sure, I'm guessing either a cleartext file containing the private key (if the FBI got ahold of my laptop, they'd easily find ~/.ssh/ with my ssh private keys), but residual ram (in a cloud VM no less) is an interesting idea!

AFAIK, the only point at which a bitcoin wallet PK is needed is to sign a transaction.
RubeRad is offline  
Old 06-09-21, 08:31 AM
  #16  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by CliffordK View Post
Did the FBI purge the wallet?

Apparently they seized bitcoin equivalent to two ransomware attacks. But, like you said, there were likely other attacks. One could likely justify it as seizure due to illegal activities.

Then schedule a court date for the owners of the wallet to come and claim it.

There were other ransomware attacks. Some likely these hackers, some likely other hackers. But, if the seized bitcoin isn't claimed, then it could be used to pay other victims. Also to pay damages from the attacks that might go beyond the ransom.

Unless, of course, as suggested above that if the bitcoin left in the wallet somehow was like a worm and could gain access to more wallets full of ill gotten gains.
No, they didn't purge the wallet, the very surgically/politely/lawfully transferred out the 63.7 specified in the warrant, which means also they transferred out the whole 69, split into 2 portions, 63.7 to an FBI-controlled wallet, and the remainder back into the same wallet. The FBI took their money and gave them their change (and the blockchain record is their receipt).

I agree though, other attacks, so it seems reasonable to me that there's probable cause that every satoshi in every DarkSide wallet is the illegal profit from extortion, and they would be justified in transferring everything out to the FBI-controlled wallet, and wait for a court to rule whether any of it needs to be returned (a DarkSide person wouldn't even need to step up to claim it, it could be simply transacted to the wallet it came from).

And 63.7, not the full 75, because, 63.7 is the amount that threaded through a few transactions into this particular wallet. The rest can be traced the same way into other wallets. It seems weird to me that if their server seizure yielded this private key, but not the PK for more/all digital wallets. Why not write the warrant application to transfer every satoshi from every DarkSide wallet out to an FBI wallet, and let the courts deliberate after that?

'worm' is an interesting thought, they can trace the movement of the remainder through other wallets. But I bet DarkSide (and other ransomware groups) will abandon BTC for a crypto that is designed to better support anonymity. (Check out this fascinating Radiolab episode about the launching of 'Zcash')
RubeRad is offline  
Likes For RubeRad:
Old 06-09-21, 09:15 AM
  #17  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
It may also be possible that the 10:47 transaction transferring out the remainder of the btc is also the FBI?
RubeRad is offline  
Old 06-09-21, 09:18 AM
  #18  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
OK another breaking FBI techno-sting, I think I may want to quit my job and apply for the FBI, it just sounds too fun!
https://www.nytimes.com/2021/06/08/w...orse-anom.html
RubeRad is offline  
Old 06-09-21, 12:26 PM
  #19  
J.Higgins 
Mentally Derailleured
 
J.Higgins's Avatar
 
Join Date: Sep 2016
Location: New Hampshire
Posts: 2,334

Bikes: Bilenky Tourlite, Surly Ogre

Mentioned: 18 Post(s)
Tagged: 0 Thread(s)
Quoted: 1184 Post(s)
Liked 476 Times in 325 Posts
Originally Posted by RubeRad View Post
I appreciate the thought, but I'm a beer snob, and I've seen way too many pictures of the beer you drink.
Hey man, you can always use Hondo's beer to wet a rag and wipe the dust off your boots.
__________________
Cargo Bike Build: https://www.bikeforums.net/utility-cycling/1228207-grocery-getter-build.html#post22024218
Trek T50 Tandem Build: https://www.bikeforums.net/tandem-cycling/1230829-trek-t50-tandem-test.html#post22066351

Remember, its just a beer commercial. That kind of happiness may not be obtainable.
J.Higgins is offline  
Old 06-09-21, 12:44 PM
  #20  
CliffordK
Senior Member
 
CliffordK's Avatar
 
Join Date: Nov 2014
Location: Eugene, Oregon, USA
Posts: 25,322
Mentioned: 204 Post(s)
Tagged: 0 Thread(s)
Quoted: 13677 Post(s)
Liked 1,935 Times in 1,464 Posts
Originally Posted by RubeRad View Post
I agree though, other attacks, so it seems reasonable to me that there's probable cause that every satoshi in every DarkSide wallet is the illegal profit from extortion, and they would be justified in transferring everything out to the FBI-controlled wallet, and wait for a court to rule whether any of it needs to be returned (a DarkSide person wouldn't even need to step up to claim it, it could be simply transacted to the wallet it came from).
The reason asset seizures/forfeiture is so powerful is that criminals can't simply walk in and claim their assets tied to crimes.

Anonymity makes it worse.
CliffordK is online now  
Old 06-09-21, 01:33 PM
  #21  
SkinGriz
Do cats eat bats?
 
Join Date: Nov 2020
Location: LA
Posts: 321

Bikes: BigBox bikes.

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 153 Post(s)
Liked 97 Times in 72 Posts
Originally Posted by CliffordK View Post
The reason asset seizures/forfeiture is so powerful is that criminals can't simply walk in and claim their assets tied to crimes.

Anonymity makes it worse.
The flip side is everyone is guilty without due process.

SkinGriz is offline  
Old 06-09-21, 04:15 PM
  #22  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by SkinGriz View Post
The flip side is everyone is guilty without due process.
I served on a jury once for a case involving a marijuana 'co-op'. Although I detested the defense lawyer and found the defendant and his parade of stoner friends unsympathetic, on the merits of the case I had no problem agreeing with the rest of the jurors on a not guilty verdict. But I read coverage afterwards that the >$100K cash that was seized by the feds in the arrest, he won't be getting back. And they had to keep their $$ in cash because, even though they were legal as far as the state is concerned, pot businesses can't use banks, because the Feds will seize that money too.

For this case, I think it's classy of the FBI to have seized a specific, warrantable amount and no more, although I would also be in favor of them using due process to seize larger amounts.
RubeRad is offline  
Old 06-09-21, 05:28 PM
  #23  
clemsongirl 
Senior Member
 
Join Date: Feb 2008
Location: california
Posts: 161
Mentioned: 31 Post(s)
Tagged: 0 Thread(s)
Quoted: 417 Post(s)
Liked 1,674 Times in 534 Posts
makes me wonder why some companies still have such a lack of cybersecurity sophistication, don’t use information security protocols that also use ransomware attack cybersecurity methods and backup/disaster recovery tools…it’s not like it’s not available, our company uses it.
__________________
"The negative feelings we all have can be addictive…just as the positive…it’s up to
us to decide which ones we want to choose and feed”… Pema Chodron
clemsongirl is offline  
Old 06-10-21, 10:18 AM
  #24  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Originally Posted by Hondo Gravel View Post
Thanks for the response now I understand more about Bitcoin. I have a cold beer for you
If you are interested in learning more about blockchain, this is the best video I know:

RubeRad is offline  
Likes For RubeRad:
Old 06-10-21, 03:54 PM
  #25  
RubeRad
Keepin it Wheel
Thread Starter
 
RubeRad's Avatar
 
Join Date: Aug 2011
Location: San Diego
Posts: 9,442

Bikes: Surly CrossCheck, Krampus

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 20 Post(s)
Liked 1,188 Times in 891 Posts
Thx for the like, blacknbluebikes, how many bikes of various colors do you have, maybe 3blue1black?
RubeRad is offline  

Thread Tools
Search this Thread

Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service - Do Not Sell My Personal Information -

Copyright © 2021 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.