Bitcoin redirected from my address as soon as it was sent to me - page 2.

DannyHamilton

legendary

Activity: 3360

Merit: 4570

Quote from: securus on July 29, 2016, 06:07:36 AM

- snip -
to the address 12iocUthp58E72ZksRmToDFPfM1WCPKv91. This is an address in my Bitcoin Core wallet, running on my laptop, for which I control the private key.
- snip -
The instant that this amount was received into the above address (before the transaction was even confirmed) the entire amount was then sent to another address 1aa5cmqmvQq8YQTEqcTmW7dfBNuFwgdCD which I have never heard and do not have the private key for
- snip -
What the hell happened and where is my Bitcoin?

You do not have exclusive control of the private key. Someone else has that private key as well.

How did you get that address and private key? Did you generate the address with the Bitcoin Core wallet immediately before sending the transaction? Did you import the private key into Bitcoin Core? Was it generated with VanityGen? Was is generated with bitaddress.org? Was it a "brainwallet", generated from a passphrase? Did you get the private key from someone else?

If you generated the address with the Bitcoin Core wallet, have you ever had that wallet.dat file installed on any other computer in the past?

Quote from: securus on July 29, 2016, 06:39:59 AM

- snip -
The coins were transferred out the exact same second as they arrived, and before the transaction was confirmed, I did not think that was possible.

It is.

It is a good idea to wait until a transaction is confirmed before you spend the bitcoins that are received from the transactions (just in case the transaction never confirms), but it is not necessary to wait for confirmation. Unconfirmed bitcoins can be spent.

Shiroslullaby

sr. member

Activity: 434

Merit: 250

You said the Mac OS was recently installed.
Did you wipe your computer at some point? Have you ever had malware detected in the past?

Also if someone can post some technical details of how you would make a script to monitor a BTC address, that would be really interesting.
I'm going to do some research on the topic on my lunch break today.
(Is it similar to how miners get notified when they discover a block?)

NeuroticFish

legendary

Activity: 3500

Merit: 6205

Looking for campaign manager? Contact icopress!

Quote from: securus on July 29, 2016, 06:39:59 AM

Thanks for your replies.

I am running Bitcoin-Qt on a mac that I have just recently installed so the possibility of Malware is small. The coins were transferred out the exact same second as they arrived, and before the transaction was confirmed, I did not think that was possible.

The attacker has your private key. Even your wallet knows you've got money in the second they've came in.
It's not that difficult to code something similar and when the "money in" notification comes, the money is sent out by a script.
It doesn't have to be on your computer. The attacker has your private key and can do all this on his own computer.

securus

newbie

Activity: 5

Merit: 0

Thanks for your replies.

I am running Bitcoin-Qt on a mac that I have just recently installed so the possibility of Malware is small. The coins were transferred out the exact same second as they arrived, and before the transaction was confirmed, I did not think that was possible.

NeuroticFish

legendary

Activity: 3500

Merit: 6205

Looking for campaign manager? Contact icopress!

Quote from: Xanidas on July 29, 2016, 06:25:20 AM

looks like the destination address is linked to some issues in the past.

https://bitcointalksearch.org/topic/m.12715624
https://bitcointalksearch.org/topic/m.13305218

not sure what happened to you but maybe your computer is infected by some kind of malware

Whether it's infected or was in the past, clearly somebody else got OPs private key and transferred out those BTC.

Quote from: securus on July 29, 2016, 06:07:36 AM

What the hell happened and where is my Bitcoin?

It was stolen. Sorry.

Xanidas

hero member

Activity: 686

Merit: 500

looks like the destination address is linked to some issues in the past.

https://bitcointalksearch.org/topic/m.12715624
https://bitcointalksearch.org/topic/m.13305218

not sure what happened to you but maybe your computer is infected by some kind of malware

securus

newbie

Activity: 5

Merit: 0

I don’t know if the is the right list, but I hope someone can advise.

In the early hours of this morning I sent 1.01 BTC from my Xapo wallet to the address 12iocUthp58E72ZksRmToDFPfM1WCPKv91. This is an address in my Bitcoin Core wallet, running on my laptop, for which I control the private key. My client had been running all day and the blockchain was synced and up-to-date.

The instant that this amount was received into the above address (before the transaction was even confirmed) the entire amount was then sent to another address 1aa5cmqmvQq8YQTEqcTmW7dfBNuFwgdCD which I have never heard and do not have the private key for, something which I did not think was possible.

What the hell happened and where is my Bitcoin?

Topic: Bitcoin redirected from my address as soon as it was sent to me - page 2. (Read 1948 times)