Author

Topic: HOW IS IT POSSIBLE ALL MY BTC DISSAPPEARED RIGHT AFTER I RECEIVED IT? (Read 203 times)

legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
Prevention is the best and no Antivirus software or Internet Security software can keep your devices clean like your good habits with Internet and your device. Your habits and your activities on devices and Internet are best prevention you can do.
~snip~


I think it's better to have a reliable security solution on every device that has access to the internet - so although many people disagree, I've always used a top rated security suite on my devices, which includes protection against viruses, malware, phishing and of course a firewall.

I would describe it this way: when you surf the internet, no matter how careful you are, you can always pick up something malicious - so the second line of defense is the security software on our device. To put it figuratively, it's like having a door on your house that is closed, but if it's not locked then there's always a risk that someone will open it without any resistance.

For people like the OP, such things are something about which there should be no doubt - because we read stories like this in every bull run.
legendary
Activity: 2044
Merit: 1018
Not your keys, not your coins!
I always say that a person is the weakest link in the chain of security, which means that anyone who doesn't understand that the internet is a very dangerous place won't be much safer if they use some alternative OS. It is true that the largest percentage of viruses/malware is designed for Windows, but that is not the main problem - the real problem is that most users do not know how to act preventively to prevent infection of their device.

Anyone who has bad internet habits and doesn't have any antivirus/firewall will sooner or later step on a mine, regardless of which OS they use.
Prevention is the best and no Antivirus software or Internet Security software can keep your devices clean like your good habits with Internet and your device. Your habits and your activities on devices and Internet are best prevention you can do.

If a person has series of bad habits, it opens holes of hackers to exploit your devices, accounts and wallets, then stealing your money.

Windows is most favorite targeting OS from hackers because they can expose biggest possible victims on Windows OS, and they will target at biggest possible victim community first. It can maximize their successful rate and help them to steal more money than spending time to code something on smaller OS.

Cryptocurrency security checklist.
Bitcoin security and resources.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
"Windows is extremely easy to break into"
This is common misconception, unfortunately. You may be thinking of Windows XP or another ancient version?
These days running an updated version of Windows (as millions of users are) is safe.
Of course you also need to use sound security practices, which is just as true with Linux.
 

I always say that a person is the weakest link in the chain of security, which means that anyone who doesn't understand that the internet is a very dangerous place won't be much safer if they use some alternative OS. It is true that the largest percentage of viruses/malware is designed for Windows, but that is not the main problem - the real problem is that most users do not know how to act preventively to prevent infection of their device.

Anyone who has bad internet habits and doesn't have any antivirus/firewall will sooner or later step on a mine, regardless of which OS they use.
full member
Activity: 209
Merit: 148
"Windows is extremely easy to break into"

This is common misconception, unfortunately. You may be thinking of Windows XP or another ancient version?
These days running an updated version of Windows (as millions of users are) is safe.
Of course you also need to use sound security practices, which is just as true with Linux. 
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
You either have malicious electrum wallet or some keylogger malware installed on your computer, or your seed words leaked somehow.
I guess you are probably using wind0ws OS and it's easy for stuff like that to be installed and run in the background.
There is no way to reverse this transaction, and I would suggest reinstalling fresh Linux operating system from scratch.

I'm almost certain the OP was using Windows. This kind of stuff can happen on other platforms too but it's very rare, because most of the malware developers only write programs for Windows. Why? Because Windows is extremely easy to break into (surprise). I make a point of never using any crypto related applications on Windows, or even going to such websites.
legendary
Activity: 2604
Merit: 2353
This is the Electrum installed app and it's fully updated..    and I havent logged on since a month ago...
When you say app, you mean you are using Electrum on your smartphone and you have no version of it on your computer?
Which type of smartphone/OS you are using precisely?
Unfortunately the url of your image hosting provider doesn't seem to be allowed and we can't see your pictures, you can upload your screenshots on this one instead https://www.talkimg.com

https://[Suspicious link removed]/4a8nb3p5
legendary
Activity: 2212
Merit: 7064
This is the Electrum installed app and it's fully updated..    and I havent logged on since a month ago...
You either have malicious electrum wallet or some keylogger malware installed on your computer, or your seed words leaked somehow.
I guess you are probably using wind0ws OS and it's easy for stuff like that to be installed and run in the background.
There is no way to reverse this transaction, and I would suggest reinstalling fresh Linux operating system from scratch.
sr. member
Activity: 476
Merit: 299
Learning never stops!
Seems the second transaction id  is different entirely from the first  I didn’t  see any connection.,
OP's address should be bc1qlwy3pjx9vk9p020yq4mac4wkgm4zk494tw6rfv.
He received 0.00166021 BTC in 90e6.......1772 and the fund was spent in 1338.......4982. Both transactions were included in the same block and that happened probably due to malware or a installing a fake version of electrum.
I didn’t check with mempool earliar…
That pattern looks more like an exchange wallet , as there were multiple transactions at a time and that looks exactly just like an exchange, I believe it’s likely to be a malware/ fake electrum as well, I once encountered the fake website before aswell,  I was surfing for some info until I checked it wasn’t the main site and there was a download button for it.
Thus for the malware , I don’t think it should survive hard reset( will it??)..
legendary
Activity: 2646
Merit: 6681
Self-proclaimed Genius
This is the Electrum installed app and it's fully updated..    and I havent logged on since a month ago...
Electrum isn't an exchange or a custodial wallet, you don't log-in to it.
By opening Electrum and typing your password, you've just decrypted the encrypted wallet file saved in your disk. (in: electrum/wallets, it's not saved anywhere)
And that kept your "seed" and "master private key" encrypted until you try to sign transaction with your private keys (wallet will ask for your password again to decrypt).

What it means is, let's consider that you're using a legit Electrum wallet:
Your keys are safe as long as no one has remote/physical access to your computer to steal your wallet and password (e.g.: via Malware/Virus)
It's also safe as long as no one knows your seed phrase (12 words), this shouldn't be saved online as noted in Electrum when you created the wallet.
Same as the private keys that can exported from the wallet, no one should know even one of your keys.

Since someone spent it without your intervention, you failed to do one or more of those.
Otherwise, verify the Electrum binary that you've downloaded if it's legit: https://bitcoinelectrum.com/how-to-verify-your-electrum-download/


And here is Electrum's open-source code: https://github.com/spesmilo/electrum
You can (ask someone to) audit it to check for malicious codes and if it does what I've described above, then reproduce the binary that you've installed to clarify that it's not caused by Electrum.
sr. member
Activity: 1491
Merit: 320
🐪
Seems the second transaction id  is different entirely from the first  I didn’t  see any connection.,
OP's address should be bc1qlwy3pjx9vk9p020yq4mac4wkgm4zk494tw6rfv.
He received 0.00166021 BTC in 90e6.......1772 and the fund was spent in 1338.......4982. Both transactions were included in the same block and that happened probably due to malware or a installing a fake version of electrum.

In any case BTC is gone and OP can not do anything about it.

Op I hope you didn't depend on these funds and that it was money you can afford to lose. My advice to you now is to check Beginners & help section and check out guides there and educate yourself so this mistake doesn't happen again in the future. And also format your hard drive to remove malware and never use your compromised wallet.
legendary
Activity: 2380
Merit: 5213
Seems the second transaction id  is different entirely from the first  I didn’t  see any connection.,
OP's address should be bc1qlwy3pjx9vk9p020yq4mac4wkgm4zk494tw6rfv.
He received 0.00166021 BTC in 90e6.......1772 and the fund was spent in 1338.......4982. Both transactions were included in the same block and that happened probably due to malware or a installing a fake version of electrum.
sr. member
Activity: 476
Merit: 299
Learning never stops!
Seems the second transaction id  is different entirely from the first  I didn’t  see any connection.,

The first transaction showed that you sent an  amount to "bc1qh8eyyn88lwrl025zl499gdm38dfpdm6k2g84kp" which you claimed to be yours but after like 30 mins, part of it got transferred to another address "1Jsnn6ynmYURVKHDnRQtsLsi3y8RndkG1Z".
I don't know where you got the second  transaction id  from but it  looks like an exchange wallet.
If you didn't  make any transaction that second time then your wallet has been compromised you should stop using that wallet to avoid future loss, it could aswell be that your machine is compromised as well so you should try getting rid of everything probably by hard reset before generating another wallet.
?
Activity: -
Merit: -
Yes it's up to date

BUT

AM I READING THIS WRONG?  THESE SCREEN SHOTS SHOW THAT TRANSACTION AS RECEIVING ?

https://[Suspicious link removed]/4a8nb3p5
sr. member
Activity: 1491
Merit: 320
🐪
Op do you have updated antivirus running? Are you 100% sure that funds arrived on second address? When you sent funds did you double check the address if it pasted correctly? You may have clipper malware on your computer that switched addresses.
?
Activity: -
Merit: -
This is the Electrum installed app and it's fully updated..    and I havent logged on since a month ago...
legendary
Activity: 1512
Merit: 4795
Leading Crypto Sports Betting & Casino Platform
updated
It is not double spending. You actual received the money and the bad actor stole the coin using your private key.

It can be as a result of malware. You can download malware while making use of the Internet and not conscious about malware and download it. Probably hackers can compromise your wallet through the malware.

Or it can be as a result of someone know your seed phrase and use it to compromise your wallet.

Or someone have access to your device and use it to spend your coins.

Or you are using a fake wallet. What is the website that you downloaded the wallet?
?
Activity: -
Merit: -
legendary
Activity: 1512
Merit: 4795
Leading Crypto Sports Betting & Casino Platform
Can you let us know the txid?

Either someone knows your seed phrase (or someone have access to your wallet) or the person that sent you the coin double spent the coin using replace-by-fee.
?
Activity: -
Merit: -
I JUST SENT MYSELF SOME BTC FROM ANOTHER ACCOUNT, AND UPON RECEIVING THAT BTC, IT WAS SENT SOMEWHERE ELSE WITHOUT ANY INTERACTION ON MY PART?

IDs
13380b7cf55a01640489ac7d6c62235e9b3404f66e5f09ab0c073533c87a4982

90e682a124df40ad29b5b3066b0b62afa228990bbeea0d9fd745589928681772
Jump to: