Topic: My bitcoins were stolen from blockchain.com (Read 392 times)

Skycity Aug 27, 2019 22:50 EDT

This morning I found my BTC balance 0. But it must be 0.035 BTC on it (about 350 USD).
What happened? I did not send anything or even accessed my BTC wallet.
Please HELP.


   
Greg (Blockchain)

Aug 28, 10:13 EDT

Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you?d like to learn more about how our wallet works, please visit: https://www.blockchain.com/learning-portal/wallet-faq.


Skycity

Aug 28, 23:54 EDT

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.

Sent: Wednesday, August 28, 2019 at 5:13 PM

I agree it's not him it's the guy that has his seed and private key, anyone who holds these two has access to coins associated to that account, and I don't think support can help him, all transactions once confirmed cannot be reversed, even tracking the hacker is almost impossible.

@bL4nkcode
Sorry, I understood it wrong and also haven't realized this way.

@Lucius
Yes, it is possible.

That's partially correct, in case user is import private keys in blockchain.com he / she will have option to have control on such address / private key. In case I import private keys from any other wallet to blockchain wallet, and my original wallet is hacked, then coins will disappear from every wallet which is store that private keys. Copy / pasting private keys online is never smart move, you never know who is watching (RAT, malware).


If hacker get OP seed then he can use some other methods to steal his coins, and most simple method to do that is to import seed in another compatible wallet and transfer coins to new address.

I'm not aware of this, I only get a notification when I'm going to log in with new IP, after I successfully logged in, received or send funds, but not for accessing the account using the 24 seed with new IP.

OP sorry for your loss.


Blockchain.com doesn't provide any private key for users wallet. They provide backup seed phrase to recover the wallet.
If a hacker got his seed and accessed OP's wallet then op would have received an email notification for IP change.

It's also not likely a case of a phishing site, because if OP typed his wallet ID and password in a phishing site and a hacker got his info, then when the hacker tried to login OP should have received an email notification. OP also said his MFA was enabled.

The way the hack took place could be by the same device OP use to login and also the email ID also got compromised.
Or a hacker has his wallet ID, password and email ID, password. If this is the case then his device is vulnerable most probably.

If above 2 are not the cases then some sort of technical issue caused the loss of OP imo. In this case, the support is the only hope.

That's a lot of OP, sorry for your loss. Bitcoin still on this address '36kbuq5rDG6rUpk6QQuXXBbEfuGxpLq6eL' and isn't moved.
While the ethereum was sent to '0x903f14e6693685c147ab658fe4239038f88c4624'

OP respond to the people here on what you actually did before the hack happened.

yeah nowadays i prefer to use a hardware wallet and its very secure because we need to confirm the transaction by clicking yes in the hardware wallet
so there is now way for scammer to send you a phising website

OP never respond to any questions which is reasonable for such incident and I feel sorry for him, thats nearly US$ 20k funds lost. I have stored not that huge but I already use a hardware wallet.

So for you to learn, please use a hardware wallet to store your funds instead and store your 24 seed on a safe place, but please not on the cloud.

Using these info:

• -No 2FA message(s) for a possible log-in attempts.
• -Wallet with Large balance for a total newbie.

It's possible that:
[1] The SEED got compromised if it is a latest wallet version (newer ones uses BIP39 SEED).
-Have you shared, uploaded or posted the SEED (set of random words) anywhere online where it can be opened by the public or cloud storage?

[2] The wallet isn't yours at all (the account was sold by someone), there's a famous scam where the scammer offers "watch-only" blockchain.info account(s) with huge/low balance for a fraction of the price or even free.
-If it was sold or given to you, that's a red flag. Log it in and check for "watch-only" or "read-only" text on the page.

I think a better term is 'to access' his bitcoins. He doesn't 'store' his bitcoin in a wallet. Even if he uses Core but his seed was compromised then it's game over too.


IIRC Blockchain support private key exporting right? So he should be able to export his PK and use another wallet to access his bitcoin. And technically he still owns his BTC even if he uses Blockchain.com.

This is true but i highly doubt that those incidents wont really happen next time on electrum.

You can possibly do such act but you should always keep an eye on where those btc's would be transferred because even if its sent to an exchange and sell off faster then theres nothing we can do.

Who created your wallet?
If you use a wallet which is created from other users (Like the scammer who selling blockchain account with balance) and then deposit there's no way to recover them.

Do you give your seed phrase to other people or paste it to the online website? If yes someone has full control of your wallet.

Next time don't use a web wallet like blockchain.com if you don't know how to use it and be careful next time and I suggest you switch to Electrum wallet and keep your seed phrase safe you should be the only one who knows it.

Unfortunately there is nothing much you can do. Once a transaction has been confirmed there is no "reversing" the transaction. Probably your account or your private keys were compromised. Anyways, why were you using an online wallet to store this amount of bitcoins? Online wallets are never safe for long term storage. Hope you are going to be careful next time you are about to store a coins in your wallet.

I also followed the transaction of bitcoin and this is the last drop address, @OP, prepare your wallet blockchain as a proof that the amount of bitcoin stole has come from you and you are the official owner of this. Watch out on that address if where hacker probably sends next your bitcoin. I have a curiosity here, why you have stored your bitcoin in an online wallet that you don't have your own private key and next is when the hackers log in your account in blockchain.com you should receive an email notification.

kickico87, what you will learn from this tragedy that 3 bitcoin is not something that you should keep in online wallet. As others say probably you are victim of phishing (do you click in any link from your e-mail maybe?), or you store your backup seed on your PC or anywhere online?

By date in transaction you are hacked 10 days ago, and coins are moved few times and now they are in this address : https://www.blockchain.com/btc/address/36kbuq5rDG6rUpk6QQuXXBbEfuGxpLq6eL

In some cases if hacker is not too smart and send coins to exchange, victim can report such address and they can freeze funds. There is a slim chance that this hacker is not so smart, but somehow I doubt it.

Nowadays, since the's still an attack ongoning against Electrum servers, newbies can get into trouble with Electrum too.
Luckily the newest official version doesn't allow anymore the malicious popup, but quite some users got fooled into downloading and using the fake version.

Theres nothing we can do on these kind of scenarios and i do really feel upset imagine that 3btc lost and 16ETH which is really an expensive
thing for you to learn and realize that keeping your keys safe away from anybody is the most primary concern.I would rather choose up Electrum rather
than on blockchain wallet.

You have to understand that the coins don't stay in the wallet. The easiest to understand is that the coins are on the network, on bitcoin blockchain.
Whoever has the private key for the wallet with Bitcoin will be able to spend them.

Now, somebody, in a way or another, got access to either your blockchain.com wallet, either your private key (or seed). If you had 2FA enabled, I'd guess that your seed or private key got compromised.

What you can do to get your funds back? Unfortunately nothing. Cryptocurrency transactions are not reversible.
What you can do? Sit down, cry for a while, then learn. Learn to keep your keys safe. Learn to keep especially the funds you don't use often onto paper wallets, cold storage or even hardware wallet. Learn to use your own local wallet. Protecting the daily spend funds by hardware wallet can also be a good option.

Really sorry...

Possible that Blockchain.com give the logs, but I doubt that you can get back your funds.

Some possible scenarios:
1. You log in on a Phishing website
2. Your private key/seed was exposed to someone else
3. Your device has some sort of malware
4. Both your Blockchain.com and email account were compromised