Weird transactions on my Metamask account

dansus021

copper member

Activity: 2156

Merit: 983

Part of AOBT - English Translator to Indonesia

Quote from: Matt9301 on September 16, 2024, 12:50:49 AM

This is a "Contract call" one: https://polygonscan.com/tx/0x86b9a17b7d81551ba6a6115bb51c15d398e1340af00598bf5ad40b4607279472
And soon after, my funds moving away here:
https://polygonscan.com/tx/0xc087758b8664c6822f2157420f1c2da3000bfa735a1624cb3c6e7547b2dd1689

Same similar happened here:
https://polygonscan.com/tx/0xb49d0426dd40d92304c0d92c633b3eb684c028aed63933260e0bf708f6f2cc7e
And almost at the same time:
https://polygonscan.com/tx/0xb24e4d0bb258cde1708ca8f5207a4fd0c4818d3f091475a5d710811b351a5c0b

Hmmm that is really weird broo after I look at your transaction this address 0x577b2D7DADc84D10F3B450d802C0DB428d0d18B8 is creating a new contract address based on your tx here https://polygonscan.com/tx/0x86b9a17b7d81551ba6a6115bb51c15d398e1340af00598bf5ad40b4607279472

I tried to open the contract but I cant find the code since its pretty new and unofficial contract address usually didn't display on polygon scan

If you don't do this transaction is better to move all your money now to new generated address I mean this for your own safety

Matt9301

legendary

Activity: 1596

Merit: 1009

Quote from: dansus021 on September 15, 2024, 09:36:27 AM

Weird transactions on my Metamask account if you don't know about it than its likely that your account has been hacked when it comes to contract call there is two option left you approve some fake contract in the other day or second your private key got leak.

Can you share your tx id here because i still didn't get it just by look at your thread.

and just to make sure all its fine, If i were you I'm gonna move all my fund to other wallet

This is a "Contract call" one: https://polygonscan.com/tx/0x86b9a17b7d81551ba6a6115bb51c15d398e1340af00598bf5ad40b4607279472
And soon after, my funds moving away here:
https://polygonscan.com/tx/0xc087758b8664c6822f2157420f1c2da3000bfa735a1624cb3c6e7547b2dd1689

Same similar happened here:
https://polygonscan.com/tx/0xb49d0426dd40d92304c0d92c633b3eb684c028aed63933260e0bf708f6f2cc7e
And almost at the same time:
https://polygonscan.com/tx/0xb24e4d0bb258cde1708ca8f5207a4fd0c4818d3f091475a5d710811b351a5c0b

dansus021

copper member

Activity: 2156

Merit: 983

Part of AOBT - English Translator to Indonesia

Weird transactions on my Metamask account if you don't know about it than its likely that your account has been hacked when it comes to contract call there is two option left you approve some fake contract in the other day or second your private key got leak.

Can you share your tx id here because i still didn't get it just by look at your thread.

and just to make sure all its fine, If i were you I'm gonna move all my fund to other wallet

Matt9301

legendary

Activity: 1596

Merit: 1009

Thank you all guys.
I know that is also weirdy hearing situations like this from a Legendary member ahhahah

But I really appreciate all your suggestions and explanations.

FinneysTrueVision

sr. member

Activity: 1680

Merit: 379

Top Crypto Casino

Quote from: Matt9301 on September 13, 2024, 03:55:58 PM

Just short update, I was trying to move some funds to be able to move my tokens.
This was the result:

What I don't understand is why it shows from "you" to "you":

This seems to be a bug in Metamask Portfolio. I checked my own transaction history and every transaction I initiated says 'from you' 'to you'. There is also a bunch of transactions labeled “contract call” and most of them are random scam NFT airdrops I received. People are using contracts to batch send NFTs to hundreds of people in a single transaction. The “contract call” label on Metamask can also appear for other reasons that require interacting with contracts. These can be perfectly legitimate transactions. You can look up the transaction on a block explorer and it will give you more details. If you recognize the transaction there is nothing to worry about, but if you don’t recognize it and you have lost funds, you might have gotten phished.

libert19

hero member

Activity: 2520

Merit: 952

I suggest continue using Metamask, because from what I can gather from topic, there was no flaw from Metamask, security of wallet depends on it's user — read what you sign (if it's not readable, be cautious) — don't sign malicious stuff, don't give high value/infinite approvals unnecessarily, if approval done due to necessity, then remove the approval [1] once task is done and you'll be fine.

Quote from: EL MOHA on September 13, 2024, 04:43:54 PM

Quote from: Matt9301 on September 12, 2024, 02:38:50 PM

Not recently, maybe years ago. The weird stuff is that there is the send transaction soon after this "Call"

Your wallet is connected to a smart contract or a DApps if you’re familiar with all this retro active airdrops then you might have connected and left it connected. You can go to network on the app and disconnect them but that won’t still Eliminate everything entirely as that wallet is already compromised. Just create a new wallet and generate new keys and you will be fine.

Connecting wallet does not compromise wallet, it only means dapp will be reading your address and ask for approvals (which if malicious and you approve, can compromise your wallet). You'll see what you are connecting for when you connect wallet.

[1] https://polygonscan.com/tokenapprovalchecker (since in op's query, he's using Polygon chain, I'm mentioning polygonscan, there are other approval checkers and removers in market, few mentioned in above comments).

Hamza2424

legendary

Activity: 966

Merit: 1042

#SWGT CERTIK Audited

Quote from: EL MOHA on September 13, 2024, 04:43:54 PM

Trust wallet is closed source and not open source maybe you’re referring to metamask been open source. The close source nature of trustwallet is the reason why it sis not always advisable to use, because you don’t know what goes behind the scenes, it is also rumour to be owned by binance. My advice for OP is to stick to MetaMask as it is the best EVM wallet out there and also open source again

Hmm, I'm not mistaken but seems like my words were not enough to present what I meant to say, trust wallet is open source as the core code is open source the core code is in which the blockchain interaction protocols, which handles other blockchain calls, and your transactions are open source. Some of the features that are included in the app are hidden, maybe those are your bio-metrics or pin validation codes or maybe any other.

For sure meta mask is best, but for the other options Trust wallet is not bad at all.

EL MOHA

sr. member

Activity: 630

Merit: 298

Quote from: Matt9301 on September 12, 2024, 02:38:50 PM

Not recently, maybe years ago. The weird stuff is that there is the send transaction soon after this "Call"

Your wallet is connected to a smart contract or a DApps if you’re familiar with all this retro active airdrops then you might have connected and left it connected. You can go to network on the app and disconnect them but that won’t still Eliminate everything entirely as that wallet is already compromised. Just create a new wallet and generate new keys and you will be fine.

Quote from: Matt9301 on September 13, 2024, 03:55:58 PM

What I don't understand is why it shows from "you" to "you":

Probably the two wallets are on that same metamask and that’s why it is saying from you to you, the thing is make sure the receiving address is the real address you’re receiving the tokens and then nothing will happen again.

Quote from: Hamza2424 on September 13, 2024, 02:20:08 PM

There are some other wallet options as well, but as you are using Meta Mask you are asking for advice about some other hot wallets the cold wallets, considering that point Trust wallet can be a good option and it's open source too but some of the apps features as it's a smartphone wallet are hidden, on top of that, if you want to stay on meta mask that good too, just delete current one and create new wallet but make sure it should not be a child wallet, otherwise as key remains same there could be the risks of compromise in future.

Some other options are there as well and many of the top centralized exchanges lunched their Web 3 wallets, you can try them too but trust wallet and Metamask are the best options in my views as I've used them for years. Note: Cold storage is an other exception when it comes to reliability.

Trust wallet is closed source and not open source maybe you’re referring to metamask been open source. The close source nature of trustwallet is the reason why it sis not always advisable to use, because you don’t know what goes behind the scenes, it is also rumour to be owned by binance. My advice for OP is to stick to MetaMask as it is the best EVM wallet out there and also open source again

nakamura12

hero member

Activity: 2268

Merit: 669

Bitcoin Casino Est. 2013

Quote from: Matt9301 on September 13, 2024, 11:10:54 AM

Thank you guys, again!
I'll do it of course. Do you have any advice of which wallet can replace easily Metamask? Or should I just create a new wallet on Metamask itself?

You should try using myetherwallef (mee) or exodus which is a non-custodial wallets. You can use trustwallet too but you shouldn't store your funds in there for too long and as you can read from post above, trustwallet is not recommended to use. Honestly, I did use trustwallet but I didn't leave my funds there and I moved it right away because I only use it for receiving crypto but for tokens, I still use myetherwallet.

Matt9301

legendary

Activity: 1596

Merit: 1009

Just short update, I was trying to move some funds to be able to move my tokens.
This was the result:

What I don't understand is why it shows from "you" to "you":

Hamza2424

legendary

Activity: 966

Merit: 1042

#SWGT CERTIK Audited

Quote from: Matt9301 on September 13, 2024, 11:10:54 AM

Thank you guys, again!
I'll do it of course. Do you have any advice of which wallet can replace easily Metamask? Or should I just create a new wallet on Metamask itself?

There are some other wallet options as well, but as you are using Meta Mask you are asking for advice about some other hot wallets the cold wallets, considering that point Trust wallet can be a good option and it's open source too but some of the apps features as it's a smartphone wallet are hidden, on top of that, if you want to stay on meta mask that good too, just delete current one and create new wallet but make sure it should not be a child wallet, otherwise as key remains same there could be the risks of compromise in future.

Some other options are there as well and many of the top centralized exchanges lunched their Web 3 wallets, you can try them too but trust wallet and Metamask are the best options in my views as I've used them for years. Note: Cold storage is an other exception when it comes to reliability.

Matt9301

legendary

Activity: 1596

Merit: 1009

Thank you guys, again!
I'll do it of course. Do you have any advice of which wallet can replace easily Metamask? Or should I just create a new wallet on Metamask itself?

avp2306

sr. member

Activity: 1022

Merit: 363

Quote from: Matt9301 on September 12, 2024, 02:24:02 PM

Hi guys,
after a long silent period, I'm back on bitcointalk and into the crypto world.

While checking my Metamask account transactions I just saw some weird things, I found some "Contract Call" and after that a sending transaction to an account that I don't know. In one I can see:

from (You)
0xF688...89965E
(0xf68...965e)

To (You)
0x0c5b...388f19
(0x0c5...8f19)

But I don't know that address.

Do you have any idea why I have those "Contract Call" transactions?

Thanks in advance

Its weird to encounter this cases and maybe your wallet is compromised. So much better not to used it since you know how smart those scammers, if they can access to your wallet then maybe they are waiting for a balance to come then stole it.

So to avoid getting compromise then get a fresh wallet to start with especially that you just newly came back and unsure of everything what's happening in your wallet. Lots of scams happen from the past especially if you connect your wallet to a lot of platforms.

Since you find it early there's lot of time to correct everything and make yourself safe from scams.

Z390

sr. member

Activity: 812

Merit: 315

Vave.com - Crypto Casino

Quote from: Matt9301 on September 13, 2024, 12:05:09 AM

Quote from: MusaMohamed on September 12, 2024, 08:23:06 PM

How to revoke token approvals

You already tried with https://revoke.cash/ but let's try two others.
https://etherscan.io/tokenapprovalchecker
https://app.unrekt.net/

Tried and No Token Approvals found for the address. Sad

Quote from: CryptSafe on September 12, 2024, 09:04:45 PM

Possibly you might have given approval to connect your wallet to a smart contract in the cause of claiming or purchasing a token then and to the best of my knowledge, there would be interaction only on the approval and that makes me to conclude that there must have been a compromise somewhere which you would have to be careful of that wallet as not to use it anymore. If you have any valuable asset still there, you should transfer them to a new wallet for your safety as these days you really can not tell what would happen next.

Yeah, now I'm a bit scared to use it, I have still some assets that I would like to move, but I don't to add other funds on it at the moment. What I saw is that are all on the Polygon chain

I wouldn't trust the wallet either.

Here is what you should do, find small transaction fee and send into the wallet address and move out all your tokens.

Precaution is always better than cure, it is true that you might have signed few past contract calls but still if you are feeling unease then do what I asked of you.

The funny thing is this wallet address might be compromised already and you don't know it, do you want to find out the hard way? Once I noticed anything strange in my hot wwallets I immediately make some moves fast.

You still have time now.

Matt9301

legendary

Activity: 1596

Merit: 1009

Thank you guys, really appreciated! I'll move all muy funds somewhere else to stay safe.

ImThour

copper member

Activity: 1498

Merit: 1619

Bitcoin Bottom was at $15.4k

As a Developer, I can tell you one of these thing might have caused that contract call:

- You signing in with your MetaMask account to a web3 project. (Which requires contract call for IDK what reason)
- Or one of the websites that you were using, got hacked and you were not aware of.

I would recommend to move your funds from the wallet as quickly as possible.

cryptoaddictchie

legendary

Activity: 2268

Merit: 1379

Fully Regulated Crypto Casino

Theres plenty of weird transactions happening on metamask and sometimes it does show you like you did something in transactions while actually you havent.

Dont use that wallet OP if you have funds there try to take it out and use a new one. Since you used it long time ago, you dont know what interactions you made on smart contract in the past that might be harmful on your wallet.

Matt9301

legendary

Activity: 1596

Merit: 1009

Quote from: MusaMohamed on September 12, 2024, 08:23:06 PM

How to revoke token approvals

You already tried with https://revoke.cash/ but let's try two others.
https://etherscan.io/tokenapprovalchecker
https://app.unrekt.net/

Tried and No Token Approvals found for the address. Sad

Quote from: CryptSafe on September 12, 2024, 09:04:45 PM

Possibly you might have given approval to connect your wallet to a smart contract in the cause of claiming or purchasing a token then and to the best of my knowledge, there would be interaction only on the approval and that makes me to conclude that there must have been a compromise somewhere which you would have to be careful of that wallet as not to use it anymore. If you have any valuable asset still there, you should transfer them to a new wallet for your safety as these days you really can not tell what would happen next.

Yeah, now I'm a bit scared to use it, I have still some assets that I would like to move, but I don't to add other funds on it at the moment. What I saw is that are all on the Polygon chain

Aanuoluwatofunmi

sr. member

Activity: 812

Merit: 436

This is only a reflection of what you have done in the past, you may not be aware of it as a matter of fact even by then, because all they may request from people is to connect their wallet address and once you do so, you will eventually discover the appearance of a pop up box requesting for your permission to be granted to send a transaction and ones there is fund on that wallet and you approve it, then they make their required deduction from your wallet account.

CryptSafe

sr. member

Activity: 728

Merit: 421

Possibly you might have given approval to connect your wallet to a smart contract in the cause of claiming or purchasing a token then and to the best of my knowledge, there would be interaction only on the approval and that makes me to conclude that there must have been a compromise somewhere which you would have to be careful of that wallet as not to use it anymore. If you have any valuable asset still there, you should transfer them to a new wallet for your safety as these days you really can not tell what would happen next.

Topic: Weird transactions on my Metamask account (Read 314 times)