What @Pmalek says!
If your own transaction from Kraken was to the address 16i3CQusm4CZDtWGamM9d8Xq5XG1UgGoxC on March, 17th (could also be 1BvKHeGjrYhcEE3oUfJQiYdyKmjn6yMPGn, but I favor my first guess), then you most certainly have a problem with malware on your device or your mnemonic recovery words got in wrong hands. The thief is clearly able to use your private key(s) to sign transactions to the thief's address 1DRJ3pkdSXTgYh59Rv7yUUQBErhTJ5rskB.
Did you reuse your receiving address for your transactions from Kraken to your own wallet? When you copy/pasted the receiving address, have you carefully checked that the pasted result is still your own receiving address?
Did you store your wallet's mnemonic recovery words on some online-capable digital device? Did you make a picture with your mobile device of your written mnemonic recovery words? Does your Electrum wallet use no encryption/no password to unlock it?
Topic: Sent BTC but when I sent to my address it made two transactions then disappeared (Read 237 times)
April 02, 2023, 08:15:25 AM
March 26, 2023, 03:01:04 AM
Your wallet and system have definitely been compromised at some point in the past. The legacy address you posted in your OP has had 40 transactions, all of them using high mining fees. The earliest transaction dates back to 6 March and the latest one happened tonight. Whatever fake software or malware you used, it's still tricking other people to fall into the same trap.
March 18, 2023, 11:26:19 AM
I sent £77 worth of BTC i got from Kraken to my electrum which was already saved on kraken so I didn;t even have to copy or paste anything, my electrum address was already there so I just sent it, around 5 minutes after sending two transactions appeared on my Electrum, one for receiving and one for sending to another address...
~snip~
~snip~
@buasfe, did that wallet you sent coins to have something on the balance or was it empty? I'm just trying to determine at what point your wallet became malicious, because you've obviously done similar transactions before, given that you had your BTC address saved in the exchange.
What is indisputable is that the transaction reached your Electrum wallet, which means that the BTC address was still correct (no clipboard malware), but it is also indisputable that someone other than you had access to your seed/private key because he made outgoing transaction.
Can you remember if you ever saw this or a similar message in your Electrum and did you update in that way?
March 17, 2023, 04:01:16 PM
You probably confused private key with seed phrase. A seed phrase which is a series of words can generate numerous addresses.
You're right, I wrote private key but the right wording is seed prase.
March 17, 2023, 03:56:54 PM
A private key generates thousands of useful addresses where you can receive,
A single private key can't generate thousands of addresses. Any private key can generate a legacy address (an address starting with 1), a nested segwit address (an address starting with 3) and a native segwit address (an address starting with bc1).Any private key can generate two legacy addresses if we consider both of compressed and uncompressed keys.
You probably confused private key with seed phrase. A seed phrase which is a series of words can generate numerous addresses.
March 17, 2023, 03:45:30 PM
but I only wanted to buy btc from kraken into my electrum, how did this happen? ive had multiple addresses before on electrum so how does creating a new one delete the previous one? I had it to never expire also
A new address does not delete the previous ip. A private key generates thousands of useful addresses where you can receive, indeed it is good practice to use a new one at each reception to increase anonymity set and no it can never expire. I agree with other users that the wallet has been compromised.
March 17, 2023, 08:39:58 AM
but I only wanted to buy btc from kraken into my electrum, how did this happen? ive had multiple addresses before on electrum so how does creating a new one delete the previous one? I had it to never expire also
addresses don't expire and are never deleted. you can still receive bitcoin sent to old addresses. you were hacked and that's why you lost your coins.
March 17, 2023, 07:56:25 AM
but I only wanted to buy btc from kraken into my electrum, how did this happen? ive had multiple addresses before on electrum so how does creating a new one delete the previous one? I had it to never expire also
There's nothing we can do since the transaction is already confirmed and we already post all possible reasons why it automatically transfers to another wallet.
About the address that you generated on the receive tab, it is not gone you can find all these addresses under the addresses tab so do not worry if the addresses that you generated there are gone.
Since you said that you updated your Electrum have you verified the downloaded Electrum before you installed it? There is a guide here on how to verify Electrum.
Because I feel that you are using a fake Electrum. did you still know exactly the website where you download Electrum?
March 17, 2023, 04:05:01 AM
it's in the addresses window but it's not in my receive window, how can I return it?
The list in the 'Receive' tab is just for invoices, it's not remotely important when it comes with the balance so don't mind it that much.The reason it's removed from the "receive queue" is because the address now received bitcoins and the invoice was fulfilled.
Since it's in your addresses tab, then it's not a clipboard malware but something to do with your PC's security.
Having fake Electrum isn't deducted to the possible cause either until you verified that the signature matches.
-snip- and is there any chance I'll get my BTC back?
I'm afraid only be finding the culprit to "convince" him to return the funds.Due to Bitcoin's nature, there' no way to reverse an already confirmed transaction, by checking the address in question, all of its txns are already confirmed.
March 17, 2023, 04:04:20 AM
but I only wanted to buy btc from kraken into my electrum, how did this happen? ive had multiple addresses before on electrum so how does creating a new one delete the previous one? I had it to never expire also
March 17, 2023, 03:55:33 AM
it's in the addresses window but it's not in my receive window, how can I return it? and is there any chance I'll get my BTC back?
Due to privacy reasons, electrum generates a new address (which is one of the addresses shown in "Addresses" tab) every time you request an address. That's why that address is no longer shown in "Receive" tab. This has nothing to do with the fund being stolen and unfortunately, there's nothing you can do. Bitcoin transactions are irreversible.
March 17, 2023, 03:50:05 AM
it's in the addresses window but it's not in my receive window, how can I return it? and is there any chance I'll get my BTC back?
March 17, 2023, 03:40:06 AM
I don't think the one I just had was that old, it was 4.3.0 something and the new one I downloaded is 4.3.4, why is my receive address gone though?
What do you mean "gone"? It's not in the 'Addresses' tab?If you don't have Addresses tab activated, click "View->Show Addresses" to toggle the tab.
Because if it's not there and there's a similar address in the list (or even not), chances that you've been a victim of "Clipboard Hijacking Malware" is high.
You can Google search the term for more info.
March 17, 2023, 03:35:07 AM
I don't think the one I just had was that old, it was 4.3.0 something and the new one I downloaded is 4.3.4, why is my receive address gone though?
March 17, 2023, 03:32:45 AM
My wallet hasn't been hacked, -snip-
Well, Kraken can't be blamed here since they don't have access to your wallet's private keys.After you've sent it to your Electrum, only the private key of the address where it was sent to can spend it, in this case, your Electrum wallet.
The possible causes are: compromised PC, leaked private key or seed phrase.
Based from available information at the moment, it seems like you're not the only one who's got robbed.
But it's not possible to tell how without knowing the PC's condition (how it's used) and how the wallet is created.
ive been using the same electrum ive had since 2018 so it's not possible that its fake
Have you updated Electrum lately? Say, a message when you tried to send a transaction?If so, what was your Electrum version prior to the update?
That's because most versions from 2018 are vulnerable to phishing malicious messages from rogue public servers.
Also, verifying its signature will clear all doubt about it being fake, guide: https://bitcoinelectrum.com/how-to-verify-your-electrum-download/
You can download the signatures for old version in "Previous Releases" link in Electrum download page.
March 17, 2023, 03:14:32 AM
My wallet hasn't been hacked, ive been using the same electrum ive had since 2018 so it's not possible that its fake as ive had hundreds and hundreds of different transactions, i don't have my seed saved physically or on my pc/phone, I used to have it on an old phone but thats broken now and in my closet so unless a ghost has snuck into my closet and revived my phone how have I lost my BTC this is making no sense to me I'm so confused.
March 17, 2023, 02:39:10 AM
All the recent transactions made to 1DRJ3pkdSXTgYh59Rv7yUUQBErhTJ5rskB have used very big fees which shows that the one who made those transactions has been in too much of a hurry to get confirmation.
And given that all those transactions have been made using the same amount of fee, it doesn't seem that they have been made by a human.
It seems that your wallet was compromised or you used a fake version of electrum.
And given that all those transactions have been made using the same amount of fee, it doesn't seem that they have been made by a human.
It seems that your wallet was compromised or you used a fake version of electrum.
March 17, 2023, 02:25:38 AM
It seems that your wallet is compromised based on your story.
Are you sure that you downloaded Electrum from electrum.org if not then you are using a fake Electrum wallet?
Another thing is how did you generate your wallet or seed phrase? If the wallet was generated outside Electrum possible someone has access to your wallet.
Or maybe you forgot that you imported a watch-only wallet or a wallet that you don't control? Or your PC is full of malware and viruses.
There are many possible reasons why it was forwarded to someone's wallet after you receive BTC from Kraken.
If you can share the Electrum BTC address maybe we can get more insight into your issue(Share it only if you don't value your privacy.).
Are you sure that you downloaded Electrum from electrum.org if not then you are using a fake Electrum wallet?
Another thing is how did you generate your wallet or seed phrase? If the wallet was generated outside Electrum possible someone has access to your wallet.
Or maybe you forgot that you imported a watch-only wallet or a wallet that you don't control? Or your PC is full of malware and viruses.
There are many possible reasons why it was forwarded to someone's wallet after you receive BTC from Kraken.
If you can share the Electrum BTC address maybe we can get more insight into your issue(Share it only if you don't value your privacy.).
March 17, 2023, 01:25:05 AM
Kraken can't control the funds sent to your Electrum; also, being hacked isn't the only way to compromise your Electrum.
For example, your seed phrase.
So, have you stored your seed phrase somewhere vulnerable?
The transaction going to 1DRJ3pkdSXTgYh59Rv7yUUQBErhTJ5rskB has a transaction fee.
Electrum just won't display it in the history tab, you'll have to open the transaction's details.
For example, your seed phrase.
So, have you stored your seed phrase somewhere vulnerable?
The transaction going to 1DRJ3pkdSXTgYh59Rv7yUUQBErhTJ5rskB has a transaction fee.
Electrum just won't display it in the history tab, you'll have to open the transaction's details.
March 17, 2023, 01:24:49 AM
What do you mean there would have been a fee?
For me it looks like your wallet got hacked. Someone probably have access to your wallet file or seed. Kraken can't have anything to do with it because like you said, you received the funds, which then got sent elsewhere.
For me it looks like your wallet got hacked. Someone probably have access to your wallet file or seed. Kraken can't have anything to do with it because like you said, you received the funds, which then got sent elsewhere.
Jump to: