Topic: Myetherwallet DNS was hacked? (2018.01.09) (Read 5237 times)

Honestly, I've been using MEW for a years now and yet I never face any of the issues were my token or account in there has been hack.
But I encountered recently that I transferred token into exchange were from MEW to centralized exchange platform, but it took 19 hours before it completely transferred in the platform. But it was already successful according to the etherscan.io, so for what I did was I followed up the support in the exchange several times, telegram, and email until they solve the issues, that's my experienced.

There are pending inputs since its Etherdeltas Address which the hacker do sent out those alts and trade it out directly.There's no way you can get it back or revert.
Sorry for the loss mate.Even you didn't store up your PK's on pc but you cant be sure if the storage of those aren't compromised or being known by somebody.
I'd stored my pk on an encrypted usb and hid it up and its much more safer than putting it on mobile.

if your privatekey/keystore is not stored on your computer then where do you put them ?  on your mobile ?   its okay but as long as you protect it with a password . you can also make a back up of them and put them on a multiple storages   . i check the address that you provide and i see that you have a lot of balance and there are recent transactions that are still pending  . too bad , maybe the hacker is still transfering those balances little by little  .

I got hacked by the same wallet too, this one: 0x8d12a197cb00d4747a1fe03395095ce2a5cc6819
I don't know what to do to keep my tokens safe, because my private key or keystore file are not on my computer.

yes there are many way to be safe from hacking / phishing attack .
always bookmark URL of important exchanges and wallet site .
never share pvt key , always login MEW with ledger or metamask .
metamask do not expose your key so it is more safe .

best thing is to buy a hardware wallet .

in january Myetherwallet denied all such claims of hack , but yes in last month ir happened with MEW , bcoz of DNS issue .
in some countries issue was there , while other place it was working fine .
MEW need to spend on safety of site , bcoz it poses risk to many users .

I saw many massages regarding hacked wallet. Is there any way to secure your wallet? can sameone help me?

Yes, it is always good to protect all other possible ways to secure wallet along with MEW, i don't know how the hackers will find the loopholes and start hacking the website. So we have to be very careful when dealing with online stuff.

how can a hack myetherwallet a very safe equation unless you login using privte key in myetherwallet
I've never been hacked in myetherwallet
my advice do not be too often login myethherwallet or you can use supporting applications such as imtoken or metamaks to make transactions

Hi there good people.

I use the MEW chrome extension.

Is it safe to use it after the recent hack?

Your responses would be greatly appreciated.

As i understood, this is not a lack in myetherwallet platform but loophole in the system and it may happen again for every domain that is not protected against Ddos attacks. I used to use MEW but i used also to recommend metamask or hardware wallet for safety and protection. Last note is using MEW offline is safe and you can always rely on this method.

yes, it was hacked. so unsecure all that things,im scared already to just login in to the wallet...it could be the last moment i see my crypto in my wallet

I'm pretty confuse because etherscan is showing my wallet as empty but there has been no transaction going out of MEW... so I'm pretty confuse in general. I'm not sure how coins could disappear from my wallet without a transaction going out. Maybe it's some graphical glitch because I logged in and see my tokens still inside. Pretty sure it's etherscan which is glitched right now.

do not be fooled maybe it's just a diversion, but if MEW is hacked MEW will definitely fix it again.

The news I know when it happens is because the Google DNS is down. and it becomes an excellent opportunity time for thieves to hack the DNs. preventing some users from accessing the exchange. Incidents such as MEW attacks today indicate that for all user precautions, the website still displays a central point of failure.

I also Lost Token but it was first time using MEW.

after this experience I still use MEW too, but IMPORT TO IMTOKEN Walet Android.

so I never log in to MEW web to make transactions and ETH balance checks. I did it all Enough of IMtoken walet android.

and If you want to Sell token, I created one more ETH address walet.

 and this second walet, I only use For Trading.

Myetherwallet DNS hacked do happen once again which means we should really always be vigilant when it comes on logging in into this wallet.You can really easily point out if the site do have problem.As i have read up recent problems there still lots of users who do experience loss of funds yet they do still able to logged in even though the site is redirected into another phishing site.

For all users used this thread to claim the risk in using myetherwallet and the weakness in myetherwallet DNS: "You had right"
Now thanks to understand that this a dangerous ecosystem for dumbs.
If brave enough then you should have to take a look at this: https://myetherwallet.github.io/knowledge-base/security/myetherwallet-protips-how-not-to-get-scammed-during-ico.html

WTF! Hidden agenda everywhere!
John McAfee pumping coins for a living, newbie accounts blaming MEW for a theft et cetera
I doubt people still fall for those scams.

The topic needs to be bumped until its sorted, and the scammed people have been refunded or at least some other action taken, like tagging the stolen tokens so that they cannot be sold on exchanges by the hackers.
There must be a precise way to report these incidents.

We just cant let this continue, and continue and continue on - as if its all okay and blame the users. We are talking millions of $ here, its not just a few people....its a massive number of people who had this problem.

The ETH blockchain will never reach mass adoption, until there is working a solution available if something like this happens. My 2 cents.


The malware has probably been installed by surfing on some other site, or by clicking in links of crypto-forums. Not neccessarily a site that "looks" like myetherwallet as a copy and then you entered your keys, how so if you access it with your bookmarked link. Its impossible, or do you want to tell me that its possible to hack the bookmarks on a PC inside the browser for this to happen ? That would be crazy.

I think MEW should change their site, that you cant access the wallet by just entering the private key...there must be a 2nd barrier of protection. MEW is not a wallet, but simply an interface to the blockchain. It has nothing to do with them, but they open a gate for hackers with their site. Sometimes people have to be proteced from themselves, in my case at least I wished there was a 2nd layer of access. Simply another password and the key, that would already be more difficult.

hacked myetherwlallet topic has been repeatedly discussed in this forum, but I also do not think myetherwallet is hacked unless you declare your meyetherwallet account is hacked, as many users of this wallet up to now use it safely unless you touch phishing site then it's your fault. ...

Why are you bumping this topic?
Op obviously used phishing site and lost all his funds as some people here too.
I made many transactions in last week and everything is fine with wallet.
All you need to do is to use correct link and you will be fine.

that's a big lot of money , sorry for your lost . i think you cannot recover your tokens back because Myetherwallet will not take responsibility for your lost .

it happened to me as well, but on 18th of January

first it was moved to here
https://ethplorer.io/address/0x99a2499435ff63a8cb385f99e1faed0b88291176

and then later also to the etherdelta thing. You can see at the very bottom of the page, all these comments from some very pissed people. Even as recent as a day ago, so its still happening.
https://ethplorer.io/address/0x8d12a197cb00d4747a1fe03395095ce2a5cc6819


FBI file claimed, but is there really nothing which can be done about this ? It must have affected so many people.
If I entered the private key into a fishing site (even though its very unlikely and I really cant remember anything looking different), then fine - but when I am now reading, that the whole DNS was hacked and therefore maybe all entered keys somehow filtered out? Come on...none of us, could have prevented this with the usual due dilligence.

Myetherwallet do already have those kind of caution message pop-up which would really a good thing to read up specially on newbie users that will really give those precious informations about securing their own wallet and avoid possible hacking incidents later on. We must handle our keys with full care and due diligence because if we are careless then there would be high probability on getting hacked. Recent hacking incident was actually a etherdelta dns hacking thing.

MyEtherWallet was NOT hacked but myeherwallet.com is for sure used to steal your ETH.

I did NOT pay attention and connect my browser to myeherwallet.com (there is a missing letter t in ...eher...). I unlocked my wallet and tried to move some ETH from my wallet address. I was warned there are not enough funds! When I checked my balance on etherscan.io I saw my balance gone in a recent transaction (couple of minutes before).

Be warned!!! This site is a fake one. Check the certificate. It is Verified by "Let's Encrypt" and does not supply ownership information.

The legitimate site is Verified by "DigiCert Inc" and the Owner is  "MYETHERWALLET LLC". If this is NOT the case disconnect and warn others to not do the same mistake as me.

I hope this will be usefull.

OMG! I lost ally my tokens from myetherwallet 2 days ago and that is the thieves wallet!!!

I always been cautious of phishing scheme and never shared my private keys to anyone. i have traced where my stolen tokens ended with:

My stolen tokens went to this wallet: 0xF30431d4e31e6E54d9338Eb8f54DA5eceaDc4cB4

and that wallet transferred it to: 0x8d12a197cb00d4747a1fe03395095ce2a5cc6819

How can we stop these thieves to victimized more people? This should be stopped!

There is a very good tutorial about how to use MEW offline, you can even create a new ETH wallet offline. Here it is:
https://myetherwallet.github.io/knowledge-base/offline/running-myetherwallet-locally.html

Hope this was helpful!

To protect myself, every time I download a new version of the purse of the ether from github. Source files are always kept in the archive. For translation, I unzip and transfer Ether or Tokens from the local MEW

Yes me to my ether wallet was hack

Is not a fud, not a lie really myetherwallet is hacked all my token disappeared last night   

I have no doubt about myetherwallet !!! Thank you very much !!!  

Just relax mate MEW will never stole out your balances not unless you logged on fake ones, so always look for the url since MEW dev's always reminds their user about those fake one's and the danger beneath our negligence. They are just spreading some fuds and don't put that sad face but instead just trust the system since I think they will not take you down if your not careless for your own keys.



Correct and MEW is the best site for now.

Orginal Myetherwallet cant stole your funds.

Yeah it's etherdelta smart contract address and noobs are still trying to spread FUD. It has actually reverse effect, nobody is going to trust etherblue now.

Yeah, today I was hacked too, my SALs (ICO tokens) were stolen, same address 0x8d12...
Lets do smth about that, my friends...
We already know, that this address belongs to hacker, how we can make him return our tokens?

It's true myetherwallet has been hacked! Becareful using the MEW! My tokens were stolen. I am so depress right now I don't know what to do. I put all my life savings into crypto hoping to make a good return to support my family. I really hate this hacker. I have reported it to the FBI and filed a complaint but I know I wont get these token back. Right now I am trying to get a few tokens that haven't been stolen from the wallet out from the compromised wallet. But it is hard for some reason. Its like the transaction is stuck and taking forever to confirm. I do not know why. The ethereum blockchain doesn't look clogged.

I keep my private key VERY SAFE. I only use it when I need to sent funds out from MEW and I ALWAYS check the website to make sure that its safe and not a phishing site before putting in my private key. I logged into MEW on 1/08/2018 to send ETH out to participate in ICO. On 1/09/2018 someone hacked into my wallet and send my tokens out to his wallet. I have lost about $30,000. I logged into MEW to check on 1/10/2018 and realized my funds was low and check to see that my most of my tokens were gone. It was transferred out to another wallet.
I keep on thinking how is this possible. I haven't leaked my private key besides MEW on Monday 1/08/2018. The last time I logged into MEW was 2-3 weeks ago and it was fine. Something went wrong with MEW.

I started doing research and came across the same issue with a couple of other people. I also notice something about Ethereum Blue posting about MEW being compromised. In my honest opinion, how did they even know. Who are these Ethereum Blue anyway? I did some research and it looks like its another company doing something with its wallet thingy similar to MEW. I was reading through Ethereum Blue post on twitter and everything that they have posted... what are the chances of this happening. I mean the timing. Ethereum Blue KNEW MEW was hacked.

I personally feel Ethereum Blue are the ones responsible for this hack. They are probably the one who stole everyone's token including mine. Ethereum Blue wrote, "Three days ago we found an error in MEW and how it could be abused using a Spectre attack..." "please standy for more on the MyEtherWallet hack. We are trying to contact their team, so far we are being ignored." This was posted on 1/09/2018. The day my tokens were stolen out of my wallet. 

Your statement is absolutely correct !!! I also believe so! thank you !!! Have a good day!

I am also confused about this, but after looking for info and curious to try to directly transact using myetherwallet. It turns out myetherwallet is normal and no problems whatsoever I experienced. Maybe this bad news is made deliberately to correct the price of ethereum that is currently being pump.

Relax it's a lie. MEW commented: "Trust is the most important thing in this community. Any team who spreads fear, creates chaos, and lies to people for their own selfish benefit can kiss my ass."

Guys I don't understand lol, even if their servers were compromised don't forget that EVERYTHING is done on your computer like signin key etc. it just takes your unspent outputs from 3rd party server by sending your public key. It is important to say that your private keys never leave your device (if it's computer a phone or anything else). So it's not possible that your coins end up by somebody simply send your coins to him. Please inform yourselfs how this al lactually work, if you send coins to different address it is possible that this is due to your computer being affected or something, always check when you do copy/paste as there are some viruses that tend to swithc and if you don't pay attention you could enter wrong wallet address.

It looks like address from exchange.
OP those are fake news. I see someone is asking ethereum so he could reverse transaction, which is of course not possible. Scams and FUD is everywhere, unfortunately.

MyEtherWallet posted on Twitter disproving the news as being a lie: https://twitter.com/myetherwallet/status/950741976676290563

well the best thing to do is
don't use MEW . until they give us a news
that it is fake news or they are fixed

This is pure FUD by etherblue. They even link to a fake MEW twitter account complete with phishing. Those are the guys who forked MEW's code, claimed they improved it then started aggressively attacking MEW. FYI you can always run MyEtherWallet offline (check MEW's github).

This is etherdelta, jesus.

Hope it does not happen! All I have is myetherwallet !!!

The official MyEtherWallet website is compromised on a DNS level in some regions. Be safe folks. Just don't log onto the website for now.

OMG..How is this even possible?

Did you do any transaction 3-4 hours ago?

i think yes....tomorrow i go too see my ether wallet and i see two pending transaction...from my wallet to this address:

https://etherscan.io/address/0x8d12a197cb00d4747a1fe03395095ce2a5cc6819

look how many eth and token have this hacker!!! and now i cant wd my eth and my tokens...i never share my privatekey...never!!! how it is possible?

Some peoples say,myetherwallet dns was hacked! Thats true?