Author

Topic: Bitcoin stolen from kraken.com despite 2FA (Read 103 times)

full member
Activity: 350
Merit: 128
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids. Is there any method to getting it traced.

Not your Key not your coin. Why don't we learn to understand the tensions of holding our funds in the exchange? Well, sorry for your lost.
Talking about having the wallet IDs, don't you've access to the wallet anymore? And yes you can keep the transaction of how the bitcoin was moved but since bitcoin transactions is processed in the blockchain on pseudonymous, you might be unlucky to reveal the identity of the person and if the bitkciniwas sent on non custodial wallet on highily maintenance of anonymity Wallet transactions it'll be impossible to catch em up.
Blockchain.com and Memepool.space is the site to get your bitcoin transactions on trace.
legendary
Activity: 2324
Merit: 1384
Fully Regulated Crypto Casino
Youre 2fa can be access if you used that particular email on your cex account. Like others mentioned, they managed to get access on your sim getting necessary OTP and your email was also compromised. Now getting the fund is quite tough to prove as it could be needed a kot of evidence. Not sure if cex could reimburse your fund stolen unless tou make them believe it was not you who transfer it.
hero member
Activity: 1190
Merit: 901
Livecasino.io
January 30, 2025, 06:56:23 PM
#11
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids. Is there any method to getting it traced. Highly unlikely given the anonymity of transactions. Anyone had a similar experience. What were your steps? What did you do? I have filed with action fraud and the FBI but local police don't want to know.
What next? Full details remain with kraken. Kraken will only contact via email
are there any specialists I can contact or is that a worthless cause?
Thanks for your help.
Sorry about this. I have not had this experience once but I read in this article that one of the first steps to take is to report the theft to the exchange. Also read the terms of service of the exchange and see if you get any pointers too on what to do in this situation and how they can be of assistance to you.

You can now see how bad the use of a centralized exchange is, the worst aspect of it is that you have no alternative means of recovering your coins by any chance, because they are custodial means and once attacked like this, you have no access to the key required to unlock them on the blockchain, not your keys not your coins is now real to you and you can believe it, others should take a step before it comes their turn.
Yes, this is one of the cons of centralized exchanges. They say not your keys, not your coins and I couldn't agree more. We should learn from this - treat centralized exchange as a marketplace. You don't stay in a marketplace, you buy your merchandise and leave. Take you coins out of them, this is for those who still trusts them.  
hero member
Activity: 2268
Merit: 669
Bitcoin Casino Est. 2013
January 30, 2025, 06:12:02 PM
#10
You must have been spied by this hacker unknowingly for quite a long time for you to get this screwed, Which type of Authentication you used?
If you used email and password authentication alone then the chances of this happening is high when compared with adding Google Authentication to your account.
Also, I kind of think this hacker may also have been close to you or someone that has come in contact or have access to your phone without you knowing, if the proper measures were put in place to get your account secured.
it's either the account of OP is accessed by a hacker, someone OP knows or sim swap. My guess could be wrong though it's possible that it is what really happened. I wonder if OP did check the account to see if there's a record that someone withdraw the btc in the account because if there isn't then it's the platform's doing but if there is then someone did have access to the account.
hero member
Activity: 1022
Merit: 600
January 30, 2025, 05:06:05 PM
#9
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids. Is there any method to getting it traced. Highly unlikely given the anonymity of transactions. Anyone had a similar experience. What were your steps? What did you do? I have filed with action fraud and the FBI but local police don't want to know.
What next? Full details remain with kraken. Kraken will only contact via email
are there any specialists I can contact or is that a worthless cause?
Thanks for your help.
You must have been spied by this hacker unknowingly for quite a long time for you to get this screwed, Which type of Authentication you used?
If you used email and password authentication alone then the chances of this happening is high when compared with adding Google Authentication to your account.
Also, I kind of think this hacker may also have been close to you or someone that has come in contact or have access to your phone without you knowing, if the proper measures were put in place to get your account secured.
sr. member
Activity: 476
Merit: 299
Learning never stops!
January 30, 2025, 03:56:00 PM
#8
Sorry for your loss but which 2FA?? really matters to securing your self aginst any future repetition.
If you seem to be using an Authenticator app (like google authenticator) then it's possible your email address already got compromised and through your email all required info can easily be gotten/ manipulated , same with accessing all your authentication codes.
If it's Phone Number/SMS  , then it's likely what have been mentioned regarding sim swaping..
Quote
Is there any method to getting it traced
You can get It traced but at some point it might become impossible to do at some point  if the scammer is really smart to masking it identity.
legendary
Activity: 2212
Merit: 7064
January 30, 2025, 03:38:02 PM
#7
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids. Is there any method to getting it traced. Highly unlikely given the anonymity of transactions. Anyone had a similar experience. What were your steps? What did you do? I have filed with action fraud and the FBI but local police don't want to know.
What next? Full details remain with kraken. Kraken will only contact via email
are there any specialists I can contact or is that a worthless cause?
Sorry about this, but I have to tell you that actually this was not your coins since the moment you sent them to centralized exchanges.
They own the keys, so they own the coins, and any 2FA protection is just a superficial protection, since hackers can always steal coins from their hot wallets.
However, I doubt this happened only to you, so it's possible you got leaked login details and authentification codes, maybe you are holding them in cloud... that is another big mistake.
sr. member
Activity: 840
Merit: 437
January 30, 2025, 02:06:38 PM
#6
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids.

You can now see how bad the use of a centralized exchange is, the worst aspect of it is that you have no alternative means of recovering your coins by any chance, because they are custodial means and once attacked like this, you have no access to the key required to unlock them on the blockchain, not your keys not your coins is now real to you and you can believe it, others should take a step before it comes their turn.

Is there any method to getting it traced.

What is the essence of tracing it when you cant recover it, why not just forget about it, of course you can trace the whole thing since the blockchain is an open distributed ledger, another thig is that maybe someone is using your devise or having access to it unaware to you.


hero member
Activity: 1442
Merit: 775
January 30, 2025, 01:18:53 PM
#5
What kind of 2FA you're talking about? If you mean SMS or phone number ones, there's possibility you're victim of SIM swap.
SIM swap attack is a very possible reason.

[Beaware] Sim Port Attack.
2FA has many types and SMS or phone number is the worst type, by risk of Sim port attack.
With 2FA through authentication, 2FA activation code must be back up safely too.

Additionally, 2FA must be installed on a different device without logins of email, exchange account.
legendary
Activity: 3220
Merit: 3509
January 30, 2025, 01:02:58 PM
#4
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin.
Sorry to hear and to read that you lost your Coins.

I have the wallet ids. Is there any method to getting it traced.
Highly unlikely given the anonymity of transactions. Anyone had a similar experience.
You can post the Coin Addresses here , and we can look into that if there is something that can be lead to some person or a other Exchange.
The Transaction XDs would be also helping.

I can offer you if you dont want to post the Addresses or Transaction XDs you can send it to me via PM and i try to find something out of it.
Have done that a lot of times for different Usere that got hacked but mostly it was German Users that was effected.

I have filed with action fraud and the FBI but local police don't want to know.
First off all from a few cases i know from my Country (Germany) and where i have done some investigations , the normal local police dont care and mostly dont know what you talking about.
Best and first step should be that you get your case to an special Cyper Crime Police Department , there you should give them all the details you have.

What next? Full details remain with kraken. Kraken will only contact via email
Try to get in contact with Kraken and binance and that they maybe look into the log files , IP Adress from where all the actions was done.

are there any specialists I can contact or is that a worthless cause?
There are some services but they cost a lot of money.
Mostly and its hard to say that , but to 90% and there is a very small chance that you get your coins back.

Also as OmegaStarScream and ABCbits have written it would be good to know what kind of 2FA you have got for your Accounts.
staff
Activity: 3500
Merit: 6152
January 30, 2025, 05:15:46 AM
#3
Are you using the same email/password combination for both Kraken and Binance by any chance? and I would also like to know which 2FA method you had enabled as asked above.

Another question is: have you linked your Kraken and Binance with any "portfolio" or "trading bot" apps? If you gave your API withdrawal keys to any kind of service, they could use it to bypass the 2FA and withdraw the funds as far as I know.
legendary
Activity: 2870
Merit: 7490
Crypto Swap Exchange
January 30, 2025, 04:37:58 AM
#2
What kind of 2FA you're talking about? If you mean SMS or phone number ones, there's possibility you're victim of SIM swap.

I have the wallet ids. Is there any method to getting it traced. Highly unlikely given the anonymity of transactions.

If you mean withdraw TXID when you say "wallet ids", then it could be used to attempt tracking. Bitcoin is pseudonymous rather than anonymous, so theoretically you can track movement of the stolen Bitcoin if the hacker isn't being careful.
?
Activity: -
Merit: -
January 30, 2025, 04:22:33 AM
#1
My bitcoin has been stolen from kraken and binance. my other crypto was transferred into bitcoin. The only crypto they could not get was bonded staking crypto. I have the wallet ids. Is there any method to getting it traced. Highly unlikely given the anonymity of transactions. Anyone had a similar experience. What were your steps? What did you do? I have filed with action fraud and the FBI but local police don't want to know.
What next? Full details remain with kraken. Kraken will only contact via email
are there any specialists I can contact or is that a worthless cause?
Thanks for your help.
Jump to: