Metamask Scam? I think I f@cked up HELP NEEDED

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: pealr12 on September 03, 2021, 09:46:06 AM

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

Quote from: Bitcoin_Arena on August 30, 2021, 05:40:31 PM

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

Under the same mnemonic am sure whoever got hold of the keys can still access it because in metamask you can create more than one account with same keys, why not just quickly create a fresh account with new keys and push the coins while you still can, probably the person don't understand how mm works very well reason why your coins still intact.

It was never mentioned that the mnemonic phrase was the one that got compromised, they only got the private key, which is assigned to only one wallet/account. I've created a new account within the same wallet, which has an entirely different private key and address. There's no way he can find the 12 word seed phrase through it.

pealr12

hero member

Activity: 1946

Merit: 502

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

Quote from: Bitcoin_Arena on August 30, 2021, 05:40:31 PM

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

Under the same mnemonic am sure whoever got hold of the keys can still access it because in metamask you can create more than one account with same keys, why not just quickly create a fresh account with new keys and push the coins while you still can, probably the person don't understand how mm works very well reason why your coins still intact.

livingfree

hero member

Activity: 2884

Merit: 579

Hire Bitcointalk Camp. Manager @ r7promotions.com

Quote from: Ultegra134 on September 02, 2021, 12:02:45 PM

Quote from: livingfree on September 02, 2021, 07:48:37 AM

Quote from: Ultegra134 on August 31, 2021, 09:50:14 PM

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

It did look fishy, I'm still trying to figure out why I fell into such a scam. The funny thing is that after reaching the official WalletConnect group, I was messaged by another scammer who was trying to give me directions into "encrypting" my new wallet. What a petty scam attempt.

Never trust anyone on there.

They'll give you a sort of link where there's a form and asking for your keys.

Maybe you're stress and lack of sleep when you fell for that but anyway, good thing that everything's fine now.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: stomachgrowls on September 01, 2021, 06:16:57 PM

Quote from: Ultegra134 on August 31, 2021, 09:50:14 PM

Quote from: carlfebz2 on August 31, 2021, 06:51:00 PM

Quote from: Ultegra134 on August 30, 2021, 04:34:49 PM

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

Just like on what carlfebz2 was indeed on point and true on where as long you dont give out your phrase then other addresses would be safe.Good for you that you didnt give out the phrase or else all of those assets
will really be wiped out instantly.This do actually proves out that no matter how experienced you are there are still situations on where we do really get confused or there are situations where we know but still
got slipped and skipped which cause for some exposure of our precious keys.Be careful on next time because you wouldnt know on what comes next but at least this is really a lesson learn.

Fortunately, I didn't have the mnemonic seed in hand, I'm not sure if I'd given it if I had immediate access to it. In the future, I'll definitely create a completely fresh wallet, I don't want to get any balance on the compromised wallet by mistake.

I'm not experienced by any means, definitely not a newbie, I've received quite a few messages on Discord but always ignored them, I don't know why and how I fell for that.

Quote from: livingfree on September 02, 2021, 07:48:37 AM

Quote from: Ultegra134 on August 31, 2021, 09:50:14 PM

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

It did look fishy, I'm still trying to figure out why I fell into such a scam. The funny thing is that after reaching the official WalletConnect group, I was messaged by another scammer who was trying to give me directions into "encrypting" my new wallet. What a petty scam attempt.

Never trust anyone on there.

livingfree

hero member

Activity: 2884

Merit: 579

Hire Bitcointalk Camp. Manager @ r7promotions.com

Quote from: Ultegra134 on August 31, 2021, 09:50:14 PM

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

bayudndy

full member

Activity: 824

Merit: 104

PredX - AI-Powered Prediction Market

Title and content???
Whether you made the mistake of providing your personal wallet access. I noticed that a lot of people have been like this lately, however with srmember, this is hard to accept.
If you still have time, immediately transfer all assets to another wallet that you feel safe. And you can check if you allow access for your own sake.

stomachgrowls

hero member

Activity: 3010

Merit: 794

Quote from: Ultegra134 on August 31, 2021, 09:50:14 PM

Quote from: carlfebz2 on August 31, 2021, 06:51:00 PM

Quote from: Ultegra134 on August 30, 2021, 04:34:49 PM

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

Just like on what carlfebz2 was indeed on point and true on where as long you dont give out your phrase then other addresses would be safe.Good for you that you didnt give out the phrase or else all of those assets
will really be wiped out instantly.This do actually proves out that no matter how experienced you are there are still situations on where we do really get confused or there are situations where we know but still
got slipped and skipped which cause for some exposure of our precious keys.Be careful on next time because you wouldnt know on what comes next but at least this is really a lesson learn.

mexite

jr. member

Activity: 706

Merit: 4

Thank goodness that your mnemonics are safe and you were able to get out your tokens in time but you should still beware of using that same wallet address as it has been exposed already.

It is advisable that you just stop using that exposed account for transactions. Be more careful next time. There are so many scammers on Telegram and Discord group waiting to pounce on unsuspecting users.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: carlfebz2 on August 31, 2021, 06:51:00 PM

Quote from: Ultegra134 on August 30, 2021, 04:34:49 PM

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

carlfebz2

hero member

Activity: 2926

Merit: 722

DGbet.fun - Crypto Sportsbook

Quote from: Ultegra134 on August 30, 2021, 04:34:49 PM

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: Yogee on August 31, 2021, 11:42:44 AM

Did you create a fresh wallet with a different seed just like what Bitcoin_Arena said? Your funds may not have been stolen but I would also suggest to dump that wallet with a compromised private key.

Quote from: Ultegra134 on August 31, 2021, 01:50:30 AM

...
I don't understand how I fell for such a scam, I feel like an idiot.

There are other people with years of experience in crypto who became victim of the same modus. Be extra careful and don't open crypto when you're drunk or tired.

Quote

I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

I'm not stopping you but I think I've seen a lot of threads sharing the same kind of scam.

Thanks. Found the WalletConnect main thread and posted there, no need to make several threads for the same topic.

Quote from: hosseinimr93 on August 31, 2021, 03:19:20 PM

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

Can that be extracted somehow? Am I currently safe?

All your private keys can be derived from your seed phrase, but it's not possible to derive the seed phrase from the private key.
If one of your private keys has been compromised, other private keys are safe.

I read your previous posts in this thread, but I didn't get whether you have generated a new wallet or not.

As already suggested by others, create a new wallet with a new seed phrase, move all your fund to that and don't use the old wallet anymore.
In this way, you will be sure that you will never use the address corresponding to the compromised private key.

I've generated a new account/wallet on Metamask, it has the same seed phrase as the compromised one. However, it has a new address and private key of course. Since he doesn't have the seed phrase, there's nothing they can do to compromise my new wallet.

hosseinimr93

legendary

Activity: 2380

Merit: 5213

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

Can that be extracted somehow? Am I currently safe?

All your private keys can be derived from your seed phrase, but it's not possible to derive the seed phrase from the private key.
If one of your private keys has been compromised, other private keys are safe.

I read your previous posts in this thread, but I didn't get whether you have generated a new wallet or not.

As already suggested by others, create a new wallet with a new seed phrase, move all your fund to that and don't use the old wallet anymore.
In this way, you will be sure that you will never use the address corresponding to the compromised private key.

Yogee

sr. member

Activity: 1554

Merit: 413

Did you create a fresh wallet with a different seed just like what Bitcoin_Arena said? Your funds may not have been stolen but I would also suggest to dump that wallet with a compromised private key.

Quote from: Ultegra134 on August 31, 2021, 01:50:30 AM

...
I don't understand how I fell for such a scam, I feel like an idiot.

There are other people with years of experience in crypto who became victim of the same modus. Be extra careful and don't open crypto when you're drunk or tired.

Quote

I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

I'm not stopping you but I think I've seen a lot of threads sharing the same kind of scam.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: vv181 on August 31, 2021, 01:24:49 AM

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

You are safe according to:

Quote from: https://ethereum.stackexchange.com/questions/99358/can-you-get-the-seed-phrase-of-a-hd-wallet-from-the-private-key-of-one-of-the-wa

~
There is no way to use any of the private keys to generate the master key or mnemonic. But the mnemonic can be used to regenerate the master key, chain code and any of the private or public keys.
~

My concern is how should you be aware of and remembers that particular address and privkey is already exposed(and shouldn't be used again) in cases you restoring the mnemonic phrase in the future.

Because of that, I think it's either you move all your fund to a brand new mnemonic or try just to make a note or something to notify the particular privkey is exposed.

Thank you, I was in such a panic that I didn't even look in which subforum I created this thread. I just woke up, my funds are still here, so I also guess that my second account is safe enough. For the time being, I will at least be cautious not to confuse the two wallets, it would suck to mistakenly receive money on my compromised account.

I don't understand how I fell for such a scam, I feel like an idiot. I was lucky enough that even when it was a little late, I trusted my gut feeling. I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

vv181

legendary

Activity: 1932

Merit: 1273

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

You are safe according to:

Quote from: https://ethereum.stackexchange.com/questions/99358/can-you-get-the-seed-phrase-of-a-hd-wallet-from-the-private-key-of-one-of-the-wa

~
There is no way to use any of the private keys to generate the master key or mnemonic. But the mnemonic can be used to regenerate the master key, chain code and any of the private or public keys.
~

My concern is how should you be aware of and remembers that particular address and privkey is already exposed(and shouldn't be used again) in cases you restoring the mnemonic phrase in the future.

Because of that, I think it's either you move all your fund to a brand new mnemonic or try just to make a note or something to notify the particular privkey is exposed.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: Bitcoin_Arena on August 30, 2021, 06:25:56 PM

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

I'm sorry, I was in such panic that I didn't even bother to explain what happened, I will briefly explain.

I was on WaultFinance's discord server, when some guy posing as an administrator contacted me, after I made a specific question. At first, I thought he was a real one. Long story short, I'm on a copy cat website trying to "connect" my wallet. He convinced me and I inserted my private key, because automatic authorization wasn't working. What a dumb@ss I am.

The next second I did that, my heart sunk, realizing what I've just done. I promptly created a new Metamask account, unstaked and moved all my coins and balances there.

That's why I mentioned that they only have my private key, the mnemonic phrase is safe. Fortunately, I wasn't that dumb to give that out too.

cabron

hero member

Activity: 2800

Merit: 595

https://www.betcoin.ag

If you have suspicions and still can login to that ETH, move your coins to a new one. This will help you ease your mind.

Quote from: Bitcoin_Arena on August 30, 2021, 06:25:56 PM

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

Metamask sometimes can be confusing. I once have a wallet where I was prompt with a mnemonic phrase which is a problem in metamask because you can't import it to metamask using the phase. I have to login to myetherwallet using my mnemonic phase just to find my private key. it gives medoubt whether to use that Ether wallet anymore.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: Ultegra134 on August 30, 2021, 05:44:42 PM

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

Ultegra134

hero member

Activity: 1680

Merit: 845

Quote from: Bitcoin_Arena on August 30, 2021, 05:40:31 PM

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

Ultegra134

hero member

Activity: 1680

Merit: 845

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

Topic: Metamask Scam? I think I f@cked up HELP NEEDED (Read 217 times)