Author

Topic: My Account got hacked on LocalBitCoins (Read 892 times)

full member
Activity: 211
Merit: 100
Official Augmentors Developer
January 05, 2017, 08:46:33 AM
#6
My first suspicion would be that your browser was somehow tricked into sending the HTTP requests needed to withdraw the coins to that address while you were already logged in. Either by some clever hack or because you clicked a link you shouldn't have.
a web browser getting tricked this is interesting.... so is there a way of avoiding this happening to someone else, because peoples funds have been hacked not only on localbitcoins but paxful as well Sad and so called hack happens during a trade.
legendary
Activity: 1284
Merit: 1001
January 05, 2017, 07:34:38 AM
#5
My first suspicion would be that your browser was somehow tricked into sending the HTTP requests needed to withdraw the coins to that address while you were already logged in. Either by some clever hack or because you clicked a link you shouldn't have.
legendary
Activity: 1736
Merit: 1006
January 05, 2017, 07:23:20 AM
#4
even if your email got hacked how would they guess the authy 2fa code?
legendary
Activity: 4270
Merit: 4534
January 05, 2017, 07:13:54 AM
#3
in localbitcoins funds are locked into escrow.
only you and the other trader can unlock it. i presume the other party simply ignored your request to cancel and instead accepted the trade.

meaning they have your bitcoin.
sr. member
Activity: 714
Merit: 250
January 05, 2017, 06:41:53 AM
#2
it is not possible, and making me instantly believe you, because it might not be if there is no authority delivery of email, if you execute the delivery without via email is impossible
newbie
Activity: 1
Merit: 0
January 05, 2017, 04:51:24 AM
#1
Hello Guys,

I recently lost over 6BTC on Localbitcoins. The support team claimed my email address was hacked into which I doubt cos while the bitcoin was sent out of my account, I was in the middle of a trade which I asked the buyer to cancel because I wanted to change my trade price. After asking the buyer to cancel, next thing I saw was the bitcoin transaction  over 6.3btc leaving my wallet pending confirmation.

At that point, I couldn't login to my account anymore. I immediately raised a support ticket which wasn't attended to until the transaction got completed and the bitcoin was successfully sent out of my wallet to an unknown bitcoin address.

Usually when a new browser is used to attempt login into an account, a login guard email is sent to the registered email address but in this case no email was received to show a new browser is attempting login. This is the only way I know that my account could have been hacked into and a successful transaction completed even in my absence. But in this case, the transfer was done while I was logged in.

Please I'll appreciate contributions on ways you think the bitcoin was stolen as I am not convinced that my email was hacked into. And even if it was, I dont have my password saved in my email.

I'll be available to answer further questions
Jump to: