Need help with strange TX (thief stole btc)

ABCbits

legendary

Activity: 2870

Merit: 7490

Crypto Swap Exchange

Quote from: OddEvenBets.com on November 13, 2018, 11:32:57 PM

He had withdraw my BTC from my own full blockchain node, he don't have access to my private keys..
System have not malware and virus.
I think he used bugs in server script..

Even with script, the thief still need to access your encrypted wallet.dat or/and RPC-JSON authentication.
It's unlikely scenario, unless the script have root/admin access and Bitcoin core have security hole which put private key on RAM (which AFAIK already fixed long time ago)

Thirdspace

hero member

Activity: 1232

Merit: 738

Mixing reinvented for your privacy | chipmixer.com

Quote from: OddEvenBets.com on November 13, 2018, 11:32:57 PM

He had withdraw my BTC from my own full blockchain node, he don't have access to my private keys..
System have not malware and virus.
I think he used bugs in server script..

after reading your posts in another thread, it seems the fault is on your dice script
I think your wallet or server has not been compromised (as well as you suspected)
but your 'bad' dice script enables thief to overdrawn and emptied your wallet Lips sealed

OddEvenBets.com

full member

Activity: 1022

Merit: 100

Quote from: bob123 on November 13, 2018, 01:48:30 AM

Unfortunately there is no way for you to get the BTC back (neither by 'refunding' in terms of reverting the transaction nor by finding the thief).

It is not possible to send more than received. The last transaction contains more than 20 inputs. blockchain.com just isn't showing them without clicking on the transaction itself.

Instead of trying to find the thief (which is kind of uselesss, especially if he has used a mixer) you should rather try to find out how he got access to your private keys (which i assume he had since you are talking about a thief and not about a scammer).

If you had a desktop wallet and don't know how he got access to your private keys, make sure to check your whole system for malware. And in case of doubt rather set up a fresh OS.

Do you have any clue on how the theft happened ?

He had withdraw my BTC from my own full blockchain node, he don't have access to my private keys..
System have not malware and virus.
I think he used bugs in server script..

OddEvenBets.com

full member

Activity: 1022

Merit: 100

Quote from: Thirdspace on November 13, 2018, 12:12:30 PM

Quote from: OddEvenBets.com on November 13, 2018, 12:08:14 AM

I see strange TX. He recieved 0.008BTC to 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 but transfer from this wallet 0.018 BTC.
How is possible? He sent higher than recieved..

Quote from: OddEvenBets.com on November 13, 2018, 12:54:39 AM

But send 0.0018 BTC how?
last TX sent 0.009 and 0.009 BTC.

No. you read it wrong.
read the numbers on red buttons they're -0.007 BTC and -0.001 BTC sent out of that address
both of them seems like transactions made by exchange/service to consolidate deposit wallets

Quote from: OddEvenBets.com on November 13, 2018, 12:54:39 AM

No. My wallet had 0.008 BTC.

Please check thief wallet.
https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

I'm confused. 3H4PKtSX... is your address or thief's address?
which one is actually your address? and do you own its private key?
or the address you have is simply your deposit address on certain site?

3H4PKtSX... is thief's address. I have private keys (I don't use directly..)
No, I use own full blockchain node.

buwaytress

legendary

Activity: 2968

Merit: 3684

Join the world-leading crypto sportsbook NOW!

Nothing wrong with the transactions. Spend The address you shared received 4 initial coins, 0.001, 0.001, 0.005 then 0.001 = 0.008.

Then it sent out 2 times, you can see in explorer, first tx spent 0.007, 2nd tx spent 0.001. In those 2 txs, it was part of multiple other inputs that consolidated into 2 outputs each.

Total received: 0.008. Total spent: 0.008. Balance: 0. No mistake.

Click the individual transactions and look for the address, it'll clear things up for you.

Thirdspace

hero member

Activity: 1232

Merit: 738

Mixing reinvented for your privacy | chipmixer.com

Quote from: OddEvenBets.com on November 13, 2018, 12:08:14 AM

I see strange TX. He recieved 0.008BTC to 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 but transfer from this wallet 0.018 BTC.
How is possible? He sent higher than recieved..

Quote from: OddEvenBets.com on November 13, 2018, 12:54:39 AM

But send 0.0018 BTC how?
last TX sent 0.009 and 0.009 BTC.

No. you read it wrong.
read the numbers on red buttons they're -0.007 BTC and -0.001 BTC sent out of that address
both of them seems like transactions made by exchange/service to consolidate deposit wallets

Quote from: OddEvenBets.com on November 13, 2018, 12:54:39 AM

No. My wallet had 0.008 BTC.

Please check thief wallet.
https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

I'm confused. 3H4PKtSX... is your address or thief's address?
which one is actually your address? and do you own its private key?
or the address you have is simply your deposit address on certain site?

bob123

legendary

Activity: 1624

Merit: 2481

Unfortunately there is no way for you to get the BTC back (neither by 'refunding' in terms of reverting the transaction nor by finding the thief).

It is not possible to send more than received. The last transaction contains more than 20 inputs. blockchain.com just isn't showing them without clicking on the transaction itself.

Instead of trying to find the thief (which is kind of uselesss, especially if he has used a mixer) you should rather try to find out how he got access to your private keys (which i assume he had since you are talking about a thief and not about a scammer).

If you had a desktop wallet and don't know how he got access to your private keys, make sure to check your whole system for malware. And in case of doubt rather set up a fresh OS.

Do you have any clue on how the theft happened ?

NeuroticFish

legendary

Activity: 3668

Merit: 6382

Looking for campaign manager? Contact icopress!

Quote from: OddEvenBets.com on November 13, 2018, 12:54:39 AM

But send 0.0018 BTC how?
last TX sent 0.009 and 0.009 BTC.

Just click on the transactions:
https://www.blockchain.com/btc/tx/8c06604cdc3bdf2bdd15673e397b8f7cfa8e70f1490d6968cb55c3dd4a52f9f1
https://www.blockchain.com/btc/tx/eb41e513d1f505c54808efb33a88bb451b12edd101a29cc7f4236d386e5aa4d7

You can see that the transactions have been using inputs from a lot of addresses. So the 0.018 is not coming only from the 0.008 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 had.

OddEvenBets.com

full member

Activity: 1022

Merit: 100

Quote from: ?? on ??

Quote from: OddEvenBets.com on November 13, 2018, 12:08:14 AM

How can refund my BTC?

There's no way to refund your Bitcoin once the transaction is broadcasted. I begin to wonder why no one know this fact after use Bitcoin / join this forum for a while.

Quote from: OddEvenBets.com on November 13, 2018, 12:08:14 AM

I see strange TX. He recieved 0.008BTC to 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 but transfer from this wallet 0.018 BTC.
How is possible? He sent higher than recieved..

If you really have 0.018 BTC, then that means the thief stole your bitcoin and sent it to multiple address.

I mean "refund" how find thief. I checked and see that use bitcoin mixer.

No. My wallet had 0.008 BTC.

Please check thief wallet.
https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

No. Transactions 6
Total Received 0.008 BTC

But send 0.0018 BTC how?
last TX sent 0.009 and 0.009 BTC.

OddEvenBets.com

full member

Activity: 1022

Merit: 100

Hi,
Thief stole my 0.008 BTC .
Thief wallet 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

I see strange TX. He recieved 0.008BTC to 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 but transfer from this wallet 0.018 BTC.
How is possible? He sent higher than recieved..

https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

How can refund my BTC?

Thanks.

Topic: Need help with strange TX (thief stole btc) (Read 346 times)