Pages:
Author

Topic: MEW wallet [compromised/hacked] (Read 544 times)

hero member
Activity: 2464
Merit: 594
June 02, 2022, 05:37:59 PM
#33
Hey, I'm back for this after a year.

I just member this after reading about stolen tokens on another thread the other day. So I went back to the wallet and checked the transactions. After making the last post on this thread a year ago, I stopped monitoring it and move on, I never used the wallet anymore. So now, I find out that on April 30  last year, the thief sent the stolen tokens on Binance.

I want to file a report regarding this issue to the Binance support team, do you think they will respond and make help to trace the owner of the address and make a move?

I am not expecting anymore that token will be sent back to me, it's already a long time ago for me, and many things might already happen like trading/selling the asset but at least I want his address to be marked and used by a thief and get his account frozen especially on Binance which can only happen if  I submit and provide the detailed/substantial evidence.
hero member
Activity: 2464
Merit: 594
April 09, 2021, 07:35:04 AM
#32
~snip
if something means help to you, I have verified account on Kucoin and also access to my GA application  Wink I can exchange this token for you and then send you back as any other currency, probably one with a low withdrawal fee. It will cost you nothing on my side except covering the transaction fee.
Thank you so much for your willingness and effort to help me, I really appreciate it.  I have good news in my KuCoin account, the 2FA code is on the cp that being used by my sister.  I thought it was there with one of my cp that was stolen.  I already verified my account there.  The only thing I lack now is ETH, I thought the one I sent earlier from my Trust wallet would be enough.  The content only costs $8, $3 for the fee so only $5 went into my account.  More or less $ 23 is the required fee for the transaction, that's slow.
jr. member
Activity: 40
Merit: 6
April 09, 2021, 06:52:07 AM
#31
I use their android mobile app.
Well now everything is clear. Android is unreliable platform especially for storing wallets
hero member
Activity: 2786
Merit: 657
Want top-notch marketing for your project, Hire me
April 09, 2021, 06:25:28 AM
#30
Metamask is to be use online for payment security but Coinomi desktop version was once said to have vulnerability. However, Trust wallet and the mobile version of coinomi are still secure for making payment but I hope you understand Coinomi wallet is custodial multiwallet though.
I only use the mobile version in the same wallet.  I don't know that Coinomi is custodial, because as far as I know it is also non-custodial like Trust Wallet, you hold the recovery phrase of the account.

That's what they calmed but you believe in how the wallet is governed not their statement and the last time i checked Coinomi is not different from the coinbase wallet.
Can we consider a wallet that only gives you a recovery phrase for both BTC, ETH, etc without the private keys which you can use to import the wallet on another wallet provider as non-custodial?
Some project owners will always tell lies.
legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
April 09, 2021, 05:32:49 AM
#29

This is the best option for me to do, because if I send it in my wallet, I will consume a lot of gas fees in case I think of selling it in exchange if I send it in my wallet.  In case I have another problem, my 2FA is enabled in my Kucoin account, I no longer have access to it when I lose my phone.

That's bad. I hate Google authenticator 2FA.
Did you try this https://support.kucoin.plus/hc/en-us/articles/360014897913-Google-2FA there is an explanation of how to remove 2FA if you lost device?

if something means help to you, I have verified account on Kucoin and also access to my GA application  Wink I can exchange this token for you and then send you back as any other currency, probably one with a low withdrawal fee. It will cost you nothing on my side except covering the transaction fee.
hero member
Activity: 2464
Merit: 594
April 08, 2021, 06:36:51 PM
#28
Metamask is to be use online for payment security but Coinomi desktop version was once said to have vulnerability. However, Trust wallet and the mobile version of coinomi are still secure for making payment but I hope you understand Coinomi wallet is custodial multiwallet though.
I only use the mobile version in the same wallet.  I don't know that Coinomi is custodial, because as far as I know it is also non-custodial like Trust Wallet, you hold the recovery phrase of the account.

In this case, I think it's best to send it directly to exchange until you think about what you're going to do with these tokens. From there, you will most easily forward them or exchange them for another currency that interests you.
As I can see, PLAY is listed only on Kucoin and has >$150k daily volume, I don't think you'll have a problem selling or exchanging them easily.
This is the best option for me to do, because if I send it in my wallet, I will consume a lot of gas fees in case I think of selling it in exchange if I send it in my wallet.  In case I have another problem, my 2FA is enabled in my Kucoin account, I no longer have access to it when I lose my phone.
legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
April 08, 2021, 05:46:42 PM
#27
Yes, I'm thinking about whether to sell it or just transfer it to another wallet address.

In this case, I think it's best to send it directly to exchange until you think about what you're going to do with these tokens. From there, you will most easily forward them or exchange them for another currency that interests you.
As I can see, PLAY is listed only on Kucoin and has >$150k daily volume, I don't think you'll have a problem selling or exchanging them easily.
hero member
Activity: 2786
Merit: 657
Want top-notch marketing for your project, Hire me
April 08, 2021, 12:29:43 PM
#26
You had a 5600 Herocoin [PLAY] which worth ~$200, why don't you withdraw it from this address? You will spend $10-$15 on the fee, but the token value is slightly higher, I think it is worth it. Of course, if it is possible to sell that token. (I never heard about them).
Yes, I'm thinking about whether to sell it or just transfer it to another wallet address.  I also think you're right and I'll get them as soon as possible because the thief might attack again at times I don't know just like what happened which is very deep and still in bedtime.  .  We will not be able to monitor it 24/7 in case he sends ETH again and precedes him to use it to transfer tokens.  So I'm going to make a way now for me to get started.

My thought is that you have move the remaining token but you not using the wallet again is not enough and what I think it important now it you not making the same mistake again that will lead to the hacking of your wallet because the MEW wallet was detected to be vulnerable to attack which is the reason why people are advised to use Metamask.
I haven't used Metamask yet.  With Trust Wallet and Coinomi only.
Metamask is to be use online for payment security but Coinomi desktop version was once said to have vulnerability. However, Trust wallet and the mobile version of coinomi are still secure for making payment but I hope you understand Coinomi wallet is custodial multiwallet though.
hero member
Activity: 2464
Merit: 594
April 08, 2021, 06:18:38 AM
#25
You had a 5600 Herocoin [PLAY] which worth ~$200, why don't you withdraw it from this address? You will spend $10-$15 on the fee, but the token value is slightly higher, I think it is worth it. Of course, if it is possible to sell that token. (I never heard about them).
Yes, I'm thinking about whether to sell it or just transfer it to another wallet address.  I also think you're right and I'll get them as soon as possible because the thief might attack again at times I don't know just like what happened which is very deep and still in bedtime.  .  We will not be able to monitor it 24/7 in case he sends ETH again and precedes him to use it to transfer tokens.  So I'm going to make a way now for me to get started.

My thought is that you have move the remaining token but you not using the wallet again is not enough and what I think it important now it you not making the same mistake again that will lead to the hacking of your wallet because the MEW wallet was detected to be vulnerable to attack which is the reason why people are advised to use Metamask.
I haven't used Metamask yet.  With Trust Wallet and Coinomi only.
hero member
Activity: 2786
Merit: 657
Want top-notch marketing for your project, Hire me
April 07, 2021, 11:32:15 AM
#24
You know what is strange - hackers stole only part of your tokens. He still had left some tokens that has value. Usually when a hacker get an access to users wallet, he steals everything, but you still have 400+ USD worth tokens.

I think that the trick is, to wait till you deposit ethereum to withdraw these tokens, send some ethereum to outrun you and steal again. I would recommend never use this wallet again.
Yes, he will not be able to get all the tokens because of the expensive gas fee, and almost all the assets have only a small amount so far.  But maybe if there is another increase in some remaining tokens he might do the theft of my wallet address again.  I will never be able to use this hacked wallet again like sending/transferring tokens here.  But I still have a plan to transfer them to my other wallet address when I can have ETH.
My thought is that you have move the remaining token but you not using the wallet again is not enough and what I think it important now it you not making the same mistake again that will lead to the hacking of your wallet because the MEW wallet was detected to be vulnerable to attack which is the reason why people are advised to use Metamask.
legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
April 07, 2021, 08:09:15 AM
#23

Yes, he will not be able to get all the tokens because of the expensive gas fee, and almost all the assets have only a small amount so far.  But maybe if there is another increase in some remaining tokens he might do the theft of my wallet address again.  I will never be able to use this hacked wallet again like sending/transferring tokens here.  But I still have a plan to transfer them to my other wallet address when I can have ETH.

You had a 5600 Herocoin [PLAY] which worth ~$200, why don't you withdraw it from this address? You will spend $10-$15 on the fee, but the token value is slightly higher, I think it is worth it. Of course, if it is possible to sell that token. (I never heard about them).
hero member
Activity: 2464
Merit: 594
April 07, 2021, 07:22:49 AM
#22
You know what is strange - hackers stole only part of your tokens. He still had left some tokens that has value. Usually when a hacker get an access to users wallet, he steals everything, but you still have 400+ USD worth tokens.

I think that the trick is, to wait till you deposit ethereum to withdraw these tokens, send some ethereum to outrun you and steal again. I would recommend to never use this wallet again.
Yes, he will not be able to get all the tokens because of the expensive gas fee, and almost all the assets have only a small amount so far.  But maybe if there is another increase in some remaining tokens he might do the theft of my wallet address again.  I will never be able to use this hacked wallet again like sending/transferring tokens here.  But I still have a plan to transfer them to my other wallet address when I can have ETH.
legendary
Activity: 2520
Merit: 1496
April 03, 2021, 03:05:17 PM
#21
You know what is strange - hackers stole only part of your tokens. He still had left some tokens that has value. Usually when a hacker get an access to users wallet, he steals everything, but you still have 400+ USD worth tokens.

I think that the trick is, to wait till you deposit ethereum to withdraw these tokens, send some ethereum to outrun you and steal again. I would recommend to never use this wallet again.
hero member
Activity: 2464
Merit: 594
April 02, 2021, 09:18:03 PM
#20
He's talking about Ethplorer.io not etherscan

On Ethplorer, there's an option to sign Up or create a profile in the top right corner, or you can visit this link - https://ethplorer.io/wallet/#login

Once you have logged in, click on Profile the scroll to the Notifications section.
You will be able to see an option to connect your telegram account. Click on it.
I'm sorry, I thought the connection to the telegram would still be done on the etherscan itself.  I forgot that it was separate.  But thanks to your feedback, I was able to successfully connect my account and profile address just now.

Thanks also to @examplens.
copper member
Activity: 2128
Merit: 1814
฿itcoin for all, All for ฿itcoin.
April 02, 2021, 05:34:46 PM
#19
I tried to follow it but I can't see in my etherscan profile the telegram connection.
https://i.ibb.co/xMFTN8m/IMG-20210330-203356.jpg

He's talking about Ethplorer.io not etherscan

On Ethplorer, there's an option to sign Up or create a profile in the top right corner, or you can visit this link - https://ethplorer.io/wallet/#login

Once you have logged in, click on Profile the scroll to the Notifications section.
You will be able to see an option to connect your telegram account. Click on it.

hero member
Activity: 2464
Merit: 594
March 30, 2021, 07:36:35 AM
#18
You are missing one more thing. The mobile application you were using. Was it correct? ~snip
Yes, I'm sure the mobile app I'm using is correct. Downloaded it from the official site and the developer is MyEtherWallet. But my sister doesn't know anything about crypto, so she doesn't visit sites and use crypto-related apps.

~snip
bot @ethplorer_bot to watch your ETH address. Then you will be notified if there any change in your address. So, if you are on time, there is a chance to use the hacker's ETh (which he must send for tx fee's). I did it few times  Wink
I tried to follow it but I can't see in my etherscan profile the telegram connection.
legendary
Activity: 2744
Merit: 3097
Top Crypto Casino
March 28, 2021, 02:26:50 PM
#17
As long as you still don't know how exactly your mew got hacked, you should consider the possibility that all your other wallets and accounts got compromised too and act accordingly.
The first and obvious thing to do is to move all your coins to a secure wallet and reset all your accounts password from a clean device as soon as possible.

Then, you have to figure out how you got hacked (downloaded apps from untrusted sources, saved your seeds online...) in order to take the appropriate action and stop any further damage.
Really sorry for your loss!
hero member
Activity: 2856
Merit: 644
https://duelbits.com/
March 28, 2021, 02:03:34 PM
#16
There are many cases like this and I saw in several groups on Facebook and I joined them that their funds were sent by themselves without the owner doing it, I don't know if this is a virus that is busy and what Lovemyfamilis is talking about is also true but not completely correct.

But what you mentioned is the origin, it makes sense, maybe someone has known your seed phrase for a long time so they can pick it up now that the price has gone up.

It is much better to have to secure your assets because I am sure that in the future they will take your funds again.
copper member
Activity: 2142
Merit: 1305
Limited in number. Limitless in potential.
March 28, 2021, 01:51:55 PM
#15
This is so sad to hear from a user who actively posting and giving advices to newbies here.

Actually, the method use in mew is too risky that always expose your private keys from copy pasting it to the wallet web browser/app.


Against whom your scam accusation is? It seems like your accusation is against Mew which makes no sense. They always alert you to have the secure way to generate your private keys.
I think this would be best to post in Beginners board so that other people can be aware.
This is not an accusation probably as there's no indicated suspect, just a reminder and a awareness, actually scam accusation board suits the thread as well though it can be moved to B&H too.
hero member
Activity: 2926
Merit: 567
March 27, 2021, 08:48:14 PM
#14

Yes but there is no genuine crypto mixer for ETH and if you keep track of all the wallet where the hacker send the coins to, googling it or check the one that link to exchange site and report it the wallet.
You might be advantageous.

What do you mean there is no genuine Ethereum mixer here, there are some mixers that are dedicated to mixing Ethereum, have you used their services and found out that they are not really mixing the transactions, I did research using Google and I found three mixers that are dedicated to mixing Ethereum and they have good reviews, but I do hope that you can trace the hacker of your wallet.
Pages:
Jump to: