Topic: Stolen bitcoins (blockchain.info) (Read 555 times)

We believe we are blockchain's.com victims - as for now we are the group who lost ~400 BTC in total and every one of us was using paper wallets paired with blockchain.com‘s app or website.
Please check out our video on youtube (English, German, Chinese) to get more information:
https://www.youtube.com/channel/UCbJi2VKiXy8VIERjea_KSEw .

At the beginning of July, we will be in Luxemburg to issue a case in Luxemburg's prosecutor. Lastly, we'd like to open class action in Luxembourg Court and sue Blockchain Luxemburg (blockchain.info) for security vulnerability of their software/API or stealing people's coins. It will only be possible with many pieces of evidence about Blockchain‘s software security issues or steals.

Could you please send us an email with answer our questions according to your case of losing your bitcoins:
- Has you your only been used with blockchain.com ?
- What kind of wallet was it?
e.g. (paper - with or without passphrase/hardware/generated by blockchain.info/etc.)
- Are you 100% sure your passphrase / private key were stored securely all the time and no one (not even closest friends&family) didn't have access to it?
- Could you provide us with a link to the transaction which is related to your case?
- Do you still have access to your wallet on blockchain.com?
- Do you still have your wallet address, private key and passphrase?
- How did your case end? Do you know any predictions of the real cause of your loss? (is it different than the actual status of your case?)

We will do everything to protect your privacy, but there is a possibility we would have to provide your contact details to Luxembourg's prosecutors. Do you agree with that?

Please contact us via email:
* English: [email protected]
* Chinese: [email protected]
* Deutsh: [email protected]
with Issue number in the subject: darpia-bitcointalk

Stolen bitcoins from blockchain.info. Account totally clean 0.00 left. Lost everything a lot of $$$$$$$$$. Guy from support team just said sorry and that all. same answer like guy above.I don't know what to do.

Yes, storing on multiple wallets is not a bad idea.

You can try but I think you will not get them here...
You can mine those btc again. nd store them on multiple wallets. I think this is the best option.

Maybe we should start asking donations?)

I am not a hacker and I don't know anything about Apple products.

But there are a few weak points on your iPhone:

-Apple has synchronization stuff.
-Your personal phone is online100% of the time and your seed was not even encrypted.
-You may have been exposed to phishing sites on WhatsApp/telegram groups, emails (I know that's unlikely,but your personal phone is more exposed to that than other devices).

Storing seed on a piece of paper is 100% anti hack, unless he has physical access to the paper.

Think like this.

Every time you write your seed (or scan photo etc) on a device with internet connection it is considered exposed and you should transfer your funds immediately. Your seed was online 100% of the time (not matter that it was locally on device, because the device was online).

It's very sad what happened to you. I would be devastated. But don't let this move you away from this technology. Use this opportunity to learn. You will make that money again.

No, no, no))
I mean, you can't trust online wallets. And certainly not to tell anyone else what allegedly is a safe way to store coins.
Confirmation? Today, right now - MyEtherWallet service reports that their DNS servers were hacked and entering the service site passed the transition to the phishing site. Already a lot of messages about the theft of funds from accounts. Then you say that online shit like blockchain.info is it reliable? Difference blockchain.info and MyEtherWallet is huge, from MyEtherWallet there is feedback, they recognize problems and respond to messages, not write - it's your problems, read the agreement...


I agree that it wasn't right to keep seed that way and now I'm using a different way, but I don't think anyone had or has access to these photos.
Tell me exactly how you can access them? Has anyone done this yet?

Now you are blaming me for your mistakes. You first started to blame blockchain.info, now that it is clearly not their fault, you are blaming me for your disregard of basic security rules.



That's the wrong way to store your seed. That's how the hacker got access to it and stole your coins.

Even if you had a hardware wallet you would have been hacked.
Even if you had a paper wallet you would have been hacked.
Even if you had a bitcoin core wallet on an airgapped pc you would have been hacked.

That was not blockchain.info fault, as it is the most popular wallet out there.When you click on the Seed on blockchain.info they tell many times to write it on paper.

Learn from the experience, store your hardware wallet seed on a piece of paper or an offline environment.

That's because of people like you, I have formed the view that online wallet blockchain.info it is safe and convenient. Therefore, a hardware wallet was purchased and lying on a shelf in the closet, and I used the service blockchain.info. You all know the result... Stolen coins.


I long time could not find the seed. I wrote about it in this tread. Now found, the seed was stored in several photos on my iPhone 7 (iOS 10.3, no JB, I not used iCloud and other cloud services, TouchID enabled, backup copy of my phone I don't do).

That's not very convincing. If you said it's more convenient in certain ways, then that would be more understandable, but aside from convenience, which in today's world is very questionable with how many solid alternatives there are available in client form, there is nothing that these sites offer as additional benefit. Seriously, why should anyone here use an external site or service while we can skip them entirely, and that *almost* without missing the convenience they may offer? Back in the days there weren't all that many alternatives available, so people kept using online wallets, but in current times that's no longer needed with how many options we have right now. It's just a matter of logical thinking....

Blockchain.info has the 12 word seed. The user owns the private keys and the seed. I think it's a good wallet, considering it's a online wallet....
Probably someone got access to his seed. As he uses 2FA, it's very unlikely the site had been hacked.

I asked a few times but he didn't answer how he stored his seed...

It's blockchain.info, it's non-seeded so he doesn't have the 12 words.

If your funds actually exited your wallet there is nothing you can do, I assume that there is nothing to do with blockchain.info operators and it's probably your wallet/computer has been compromised.
It's a lesson to learn- next time if you store funds that you can't afford losing then do it on a hardware wallet offline, so you won't risk losing your funds due to lack of security.

2FA was enabled from the beginning (from registration) of my use of the service.

I've lost enough (0.25 BTC), so I'm trying to figure out how and who did it.

I believe that the problem in the mobile app, when you translate the money from it - it does not prompt for 2FA, perhaps the one who stole the money set it, but it is not possible to know this shit service blockchain.info gives no information and no logs.

How long have you been using 2FA?
Since 2FA enabled it means that your Private key were compromised, not your Blockchain Account.
If 2FA were turned on recently, that means the thief has access to your account for a long time and he has dumped your Private Key to another wallet.
If you got 2FA since you've registered on Blockchain, it means either you have clicked on Phishing link by accident or Rogue Browser Extension that steals your 2FA key.

I hope you don't lose much, just use this opportunity as a lesson and start using Desktop or Hardware Based Wallet, much secure

I see above you 2 people mentioned about the 2FA has been missed out for encrypting wallet. Instead of that you need to what is actual happened when using the blockchain wallet mate.
I faced these kind of situation once. If you want to logging into your wallet. Always you need to check that whether it is luxamburg encrypted and with the correct URL. If you do not miss both the things you will be able to secure your wallet more than expected.

2FA was used (enabled). In first post I posted a link to that transaction from my wallet.

I think you dont use 2factory with your mobile phone ?
And you can see the transaction in the blockchain just inster your adress here https://blockchain.info/
looks like you got hacked becourse blockchain never lost any coin !



regards

Respect!
That's what I'm doing!
I want to figure out who stole them and try to get them back, and it sounds unreal and completely depends on who stole them, but I hope so. The main thing is to find out who did this to him could talk to.
All coins (BTC) that were in the wallet - stolen.
It was also a very small number of coins BCH, I moved to another place.
It so happened that at 8:29 PM there was a transaction and somewhere at 8:45 PM I went into the wallet from my mobile phone (to see how much money considering the rate now I have) and saw that all the coins are transferred.


I had the idea to create a service where people would describe what happened to them the cases of theft of coins.
To collect statistics on which services, operating systems and how they were stolen.
Also, there's a feedback form so the abductor can contact the victim if he wants to.

I think that such cases more than 100,000 but hardly anyone writes or says about it...

- Please elaborate on the case.
- Who stole your coins ?
- How did the hacker get access to your mobile/desktop ?
- Did you use 2fa ?
- Have you shared your passwords with friends/strangers/ ?
- Did you use any third party services which took control of your 12 word phrase ?
- If I was in your situation first thing I'd do is move all my coins from that wallet to a new one.

I'll ask the question differently, what did each of you do in this situation? The fact that I had stolen a large amount for me, I really need these coins.

Contacting a person that is inactive for years is useless but I'm just pointing out the ANN thread for him to see on how inactive it is and as he is asking if there's a representative.

So there it goes, a representative but is inactive for years.

What I'm saying is they are active in their own platform support and I have no issues with it. And he already got a reply from the support that they can't do anything with it anymore.

Sorry for the loss cell.

its already useless to have these kind of steps or trying out to contact those persons, even if you do make emails or on support thing they wont really do anything at all yet they dont have the capability on such recovery and as already being said to their terms you would really know that they are not held responsible if theres such loss because it would be entirely on wallet holders responsibility on handling his own funds.

This is their ANN thread Blockchain.info - Bitcoin Block explorer & Currency Statistics

But the OP of it has been inactive in the forum since 2015 so the only way to keep on conversing with them is through their support / ticket.

They won't know on who's the one responsible for stealing your bitcoin and we all know the attitude of a robber, they won't return something that they've stolen.

You will find them on Twitter

https://mobile.twitter.com/blockchain

I absolutely agree with you, but the service blockchain.info so not believes, on all my letters they gave two blurred answer (in my previous messages).
This is the problem that they do not say how the translation was made - using their interface or not (private key). Logs (ip addresses) they also not give.

At this forum is a representative of this service (blockchain.info)?

1. If your funds were accessed from their interface, the could indeed give you info like the IP where this was done.
But for that to happen, the "attacker" should have been access to your e-mail and 2FA, which doesn't have too high probability.

2. The other option is that the attacker got access to your wallet's private key or seed. In this case he rebuilt your wallet anywhere in the world without using blockchain.info service and moved away the funds. And then all blockchain.info could do is to acknowledge that this has happened, since whoever has the private key is the owner of the funds, no matter where it does the transaction from.

3. They may have a vulnerability they don't know about. But since they cannot be held responsible for anything... not much to do.


Just imagine an attacker has full access to your computer and/or smartphone. You have to think what info of yours could have leaked:
1. Private key/seed?
2. E-mail and password?
3. 2FA seed?

Also booting from a "Recovery CD" made by one of the antivirus companies and full scan of your computer cold help fine tuning the possible directions where the "leak" comes from.


I hope that this helps you at all. Also, people always advise to use local wallet for good reason.

The problem is not that someone got access to my wallet and made the transaction, but services blockchain.info as not helping to understand how it happened, in what way.

I spoke about other, service (blockchain.info) does not provide any information about access to my wallet, does not give logs when was committed to the wallet and with what (web or mobile app or private key transaction).

I do not ask them to return my coins to me, I ask them to help me find the one who carried out this transfer. I want to ask him to give me back the coins and to know how it had happened. But the service does not provide any information.

Well wrong move, be sure to use it now


Bitcoin transactions are irreversible, so once confirm, it's impossible to get it back unless the person who receives them wants it to.

Most importantly, you agreed to their terms


This was 2014 and I don't believe that there is a 100% secure way of storing your funds since the user itself make his own funds secure for the most part

About 100% security service blockchain.info - https://www.coindesk.com/hacker-returns-225-btc-taken-blockchain-wallets/

1) I have a hardware wallet but I didn't carry any coins on it since I thought the service was blockchain.info safe
2) What is the problem to write on the main page blockchain.info - WE are NOT RESPONSIBLE for anything
3) I asked to help me get the coins back or to understand why they were stolen, and not to write tips on what to do with education.

What happened to you is very sad. I feel sorry for you.

I was lucky when I was in the beginning, as I used that service too.

As you invested a lot of money, as you said, you should have invested a very small amount of money ($59 usd) in a hardwallet or a small amount of time in your education, learning how to make a paper wallet or something similar like an airgapped computed.

Blockchain technology is safe, there are no banks or custodial services to call you for funds withdrawl.

You are the only one who is responsible for the security of your money. Maybe there is a demmand for such services, and in future you will be able to pay for someone to hold your private keys.

I am sure that there are thousands of cases of unauthorized transactions every day, but no one does anything with the problem, but only offers to buy hardware wallet.

I wrote about the theft, and how many people with whom it happened did not write anything?


Letter #2 from support:
Hello,

As a non-custodial wallet provider, we do not collect or hold information about users identity or have access to funds in any way. This protects peoples security and identity from malicious parties, however, it also means that we are unable to provide you with user information or control funds in any way.

Sorry that we could not be of more help.

Letter #1 from support:
Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you’d like to learn more about how our wallet works, please visit: https://blockchain.info/wallet/how-it-works.

These are really shitty answers.

All this only means that you need a service with 100% security and with voice confirmation by the operator on the phone the need for a transaction, as in the Bank, up to this point all is well until the money is stolen.

The problem is that no one is responsible for anything. And the fact that I spent a lot of money on mining equipment, a lot of time and electricity - no one cares, it's not right.

It's not a new future, it's a new way of stealing without responsibilities. I believe that the invention of bitcoin has the same meaning as the origin of the Internet, but because of such services that there is all this does not make sens.

What does this mean? You never saw your private key?


They will take months to reply any question. Don't wait for them. I don`t know how or if it`s possible to determine how the transfer was made.

The private key was not stored on the computer.
Why blockchain.info can't tell you exactly how the coins was withdrawn? Using private key or not?

You don't mention what OS you are using on your computer.  Windows I presume since you mention BitLocker. 

As far as 2FA, if someone has the private key, 2FA and an encrypted drive (BitLocker) doesn't matter, you probably have an infected machine.

I, too, had different opinion about this occupations until yesterday days.
I don't use dropbox, icloud, etc. I didn't send seed by email and did not store in any form on the computer, all that was used is the wallet on the iphone and on a computer with two-factoring authorization. I didn't give anyone access to my computer or my phone. The same drive on my laptop encrypted with BitLocker, I don't understand how was obtained the access to the wallet.

As far as I know, Blockchain.info is one of the oldest wallets around, and they are respected in the community and have a good reputation. So probably it was your fault, not theirs... The hacker maybe got access to your seed long ago and was waiting while you were funding the wallet.

You probably scanned your seed? Where did you store it? Did you keep it online?? In a Gmail draft? As a photo in Dropbox?
Did you store it on a computer with internet access? Like a .txt or a picture file?

Did you follow ALL of the security precautions suggested in blockchain.info wallet? They are about 8 steps which include email, sms, writing down the seed in a paper (physically).

You should not even use an insecure e-mail like Gmail, but something like Protonmail or tutanota.

All of these things are wrong, and if you did something like that, that was how the hacker got access to your funds.

Who can confirm that blockchain.info safe? I found a lot of messages about how the money from this wallet was stolen. In 2014, one person stole coins from many wallets and then returned them, there was a problem in the blockchain.info. I followed all the recommendations described on the website, but the result - the money was stolen and I can not understand how.

I asked for support logs - they missed this question, as if they hadn't read it, but answered only about what they strongly regretted.
This is bad service...

It can not be recovered in any way. Hackers steal your private key or wallet seed. It's gone without you knowingly or unknowingly. It can be caused by virus attacks. Blockquane is security but your account is not. Stay away from virus and hackers attacks. The private key always keeps the private.

Perhaps the person who did this (transferred coins from my wallet) reads and visits this forum, I want to know how he (they) did it and the ability to get a refund for these funds, as they are important to me (unfortunately).

Make sure that your blockchain is secure ? Blockchain is fully secured, When you login your Blockchain account that gives you an option to authorize your account through your e-mail account, So that's why may be you had done a little mistake with your account or keep it insecure, otherwise it's totally secured. And there is no option for recover your BTC. Don't worry it could be an experience so learn to mistake and be a perfect men.. 

I suggest you wipe whole pc :/ If you do not know how they got access to your wallet, possibly virus or keylogger?

Maybe time to set up a cold wallet?

Is there any database of addresses that belong to hackers/exchangers/etc?
How to determine whose address is this? As a result, my coins went to the address where 1400 BTC passed, this is not a "normal" address.

https://blockchain.info/ru/address/1NS4fp3T6Vq4D7v9BpdwBZ4fws8pzcC266

I can not find the saved private key and seed.

And I don't understand why service support blockchain.info so long replies and until there is no answer.

No, as I recall, I passed not what links. This wallet is open to me for a long time and there came a reward for mining, yesterday it formed 2000$ at the rate and they were transferred to another address. I've raised this amount(

In this case I think that you have stored the private key or the seed of your wallet in a way somebody got access to it.
Because with this info anybody can re-create a copy of your wallet, with the password of his choice, without 2FA and can send your money away.

Yes, I understand, but unlike other coins, all bitcoin transactions are visible and it is not so anonymous, perhaps it was a mass hacking of wallets.
I came in from my phone (iOS) and from my computer, and I had two factor authentication.
I did not receive any notification in the mail about the entrance, as I did not confirm the withdrawal.

Phishing is missing from this list so I'll also ask: did you click onto a link (maybe from an e-mail) to log in to your blockchain account?

Bitcoin transactions are irreversible, so you can't get them back


But if you know HOW it happened you can prevent a future occurrence.

How do you usually access your wallet? Do you use the website on a PC? Or a mobile app?
Were you given a seed phrase (a set of 12 or so words)? How did you store the seed?
If you're using a PC then you should do a full scan of it for malware.

Hello!

Yesterday I stole bitcoins from my wallet blockchain.info how it happened I still did not understand. The answer from the service support I have not yet received.
How to get them back? Are there any ways? Who to ask for help?

I really important is the amount that was stolen(

That's the transaction that was: https://blockchain.info/tx/5d2ed2b2a5f909f84895eb1c93a71eb097f1a02443befa9b19f4d6b87ff014e5