Bitcoin Forum

Other => Beginners & Help => Topic started by: DavidAU on April 15, 2013, 10:08:09 AM



Title: Stolen bitcoins?
Post by: DavidAU on April 15, 2013, 10:08:09 AM
Can someone help me figure out how this happened?

I purchased 8 bitcoins today and had them sent to my bitcoin-qt wallet, I got an email saying they have been sent so open it up and see they have arrived but are unconfirmed, so I come back an hour or so later to find that they have already been sent from my address to another address that I do not own (afaik, unless I am missing something here) and my balance is now at 0 bitcoins.

How the hell does this happen? I expect there is no way to recover those coins now? It's at 3/6 confirmations now for this new address... Am I screwed? I'm pretty careful about downloading anything that could be malware or clicking links etc so I have no idea how this happened? Is there anything I can do now?


Title: Re: Stolen bitcoins?
Post by: Raoul Duke on April 15, 2013, 10:19:23 AM
If you are screwed or not nobody can say.
I would say you have malware on your computer, if it really happened as you described.

TX ID's, do you have them? You can double click the transactions on Bitcoin-qt and it will show you the details, including the TX ID


Title: Re: Stolen bitcoins?
Post by: digitalindustry on April 15, 2013, 10:51:09 AM
Can someone help me figure out how this happened?

I purchased 8 bitcoins today and had them sent to my bitcoin-qt wallet, I got an email saying they have been sent so open it up and see they have arrived but are unconfirmed, so I come back an hour or so later to find that they have already been sent from my address to another address that I do not own (afaik, unless I am missing something here) and my balance is now at 0 bitcoins.

How the hell does this happen? I expect there is no way to recover those coins now? It's at 3/6 confirmations now for this new address... Am I screwed? I'm pretty careful about downloading anything that could be malware or clicking links etc so I have no idea how this happened? Is there anything I can do now?

Dam what OS are you running? Vista?


Title: Re: Stolen bitcoins?
Post by: cookiemonster84 on April 15, 2013, 10:52:59 AM
run malwarebytes, what does it say?


Title: Re: Stolen bitcoins?
Post by: Raoul Duke on April 15, 2013, 11:02:14 AM
run malwarebytes, what does it say?

I would advise Hitman Pro http://www.surfright.nl/en


Title: Re: Stolen bitcoins?
Post by: etheral on April 15, 2013, 11:31:13 AM
If this is true, someone should report this to moderators and warn other people

if you really didn't send those 8 bitcoins your self, there is nothing else to say - your money is lost


Title: Re: Stolen bitcoins?
Post by: tonyGee on April 15, 2013, 11:33:55 AM
Malware bytes picked up guiminer-scrypt, which was downloaded from mirror 2 in this thread
https://bitcointalk.org/index.php?topic=150331.0

Hitman Pro has picked up cgminer-fpgaonly.exe and cgminer.exe from the same download.

Are these false positives?

I'm gutted $700 is a lot of money for me.

might be false positives,.......  if someone downloaded them from 2 + mirrors and compared exe's, and they are different, then mabye 1 is virus


Title: Re: Stolen bitcoins?
Post by: lostmyshit on April 15, 2013, 11:36:35 AM
not that this helps you, but for the future , I would never run any of this stuff on a computer that has my wallet. I bought a 2nd pc to mine on, and run these things.... the wallet stays on my 'safe' computer


Title: Re: Stolen bitcoins?
Post by: enco on April 15, 2013, 11:53:48 AM
Man, that sucks... :(
Also be aware that if someone managed to get ahold of your wallet in the past (!) or got ahold of an old backup of your wallet, he/she will also be able to access your funds added to existing addresses after that point in time. This is often overlooked. So there doesn't even need to be malware on your PC right now, instead it could already have happend weeks or months ago, depending on your wallet's age.


Title: Re: Stolen bitcoins?
Post by: Raoul Duke on April 15, 2013, 12:25:05 PM
Well the plan was to split the 8 bitcoins up and send them to a number of smaller paper wallets when I received them but they were gone before I had the chance. :(

I'm assuming for now that guiminer-scrypt is just a false positive so I still have no idea how this has actually happened.

Yes, all Bitcoin mining softwares are detected by AV's. At least they warn you about it. It's expected.

Is that wallet a new one, created by Bitcoin-qt? Have you ever added private keys to it, private keys that you took from someplace and forgot to label them as such and now you used that address to get those coins?

If this is true, someone should report this to moderators and warn other people

What can the moderators do? As for warning other people, well, you have this thread. But I'm not quite sure what you want to warn them about. He received Bitcoins at one address and they were sent out of that address 1 hour later or so, maybe when the other person who owns the same address private key noticed he had 8 BTC more than supposed.


Title: Re: Stolen bitcoins?
Post by: rausvi15 on April 15, 2013, 12:41:31 PM
Yes.

To: 1KusYRu9VZg9Eu7xKhsPdqcatp335GGqDd
Credit: 8.00 BTC
Net amount: +8.00 BTC
Transaction ID: cbfda0aa018ce2c8267c05ca8d860044cddd9e93f0bae15325a3b06223894fb1

To: 112yc6EZchSiwyeCbQ7fXjSFzbh7htxg5j
Debit: -8.00 BTC
Net amount: -8.00 BTC
Transaction ID: 218f6dad46fb224b14b002309236dcfd2409061e9c02f6ce85380a82051b1c18



check transactions...
https://blockchain.info/sl/address/1KusYRu9VZg9Eu7xKhsPdqcatp335GGqDd
whois,...


Title: Re: Stolen bitcoins?
Post by: cookiemonster84 on April 15, 2013, 11:13:10 PM
i think there is a nother thread here with thefts.... you could post on it to let ppl know


Title: Re: Stolen bitcoins?
Post by: ReCat on April 15, 2013, 11:24:32 PM
People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.


Title: Re: Stolen bitcoins?
Post by: lostmyshit on April 16, 2013, 02:00:18 AM
People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.

thanks why I think, ironically, bitcoin will take off when there are 'bitcoin banks' that insure your coins


Title: Re: Stolen bitcoins?
Post by: Gator-hex on April 16, 2013, 02:17:29 AM
Malware bytes picked up guiminer-scrypt, which was downloaded from mirror 2 in this thread
https://bitcointalk.org/index.php?topic=150331.0

Hitman Pro has picked up cgminer-fpgaonly.exe and cgminer.exe from the same download.

Are these false positives?

I'm gutted $700 is a lot of money for me.

 :o :o :o NEVER EVER STORE YOUR COIN WALLET ON THE SAME MACHINE YOU MINE ON!  :o :o :o

False positive my ass!  ;)


Title: Re: Stolen bitcoins?
Post by: georgeberz on April 16, 2013, 02:27:30 AM
To go forward what about a biometric lock... fingerprint scanners are getting really cheap, and or a credit card reader modded to use bit coins....

Just my .02

George


Title: Re: Stolen bitcoins?
Post by: Gator-hex on April 16, 2013, 03:01:37 AM
To go forward what about a biometric lock... fingerprint scanners are getting really cheap, and or a credit card reader modded to use bit coins....

Just my .02

George

Just get a big usb memory stick and boot linux (ubuntu etc.) from it, use it only for accessing your bitcoin wallet, throw it in a fire proof safe when you're done.


Title: Re: Stolen bitcoins?
Post by: Dabs on April 16, 2013, 03:04:58 AM
Those transactions happened like this:

Received Time    2013-04-15 07:31:48
Included In Blocks    231434 (2013-04-15 07:36:05 +4 minutes)

Received Time    2013-04-15 08:38:02
Included In Blocks    231447 (2013-04-15 09:32:20 +54 minutes)

The coins were sent 13 blocks later or about 2 hours (or according to the time only 1 hour later.)

Does your bitcoin-qt have a password?

Lesson of the day. For new coins, use brand new addresses from brand new wallets. Either discard old ones, or consolidate all of them into an old-wallet.dat file just for checking purposes (if someone sends you coins to those old addresses.)

You can use pywallet to merge wallets, I think, and you should have no problem with wallets that are 10,000 keys big. But you wouldn't want to use that for your personal money. You'd just want to check those once a month maybe. Or less often.


Title: Re: Stolen bitcoins?
Post by: KatiHahnA on April 16, 2013, 03:07:07 AM
call CSI


Title: Re: Stolen bitcoins?
Post by: Bailbonds on April 16, 2013, 03:17:38 AM
 ???


Title: Re: Stolen bitcoins?
Post by: pheaonix on April 16, 2013, 03:33:25 AM
People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.

thanks why I think, ironically, bitcoin will take off when there are 'bitcoin banks' that insure your coins

or it will force people to realize just how important securing their computers is.

it is extremely important to secure everything and know what your doing.

the thieves make it easier to lose your coins every day. two clicks in the wrong place on your browser and your wallet is gone.



Title: Re: Stolen bitcoins?
Post by: kmksmkn on April 16, 2013, 03:49:08 AM
how do you get a wallet thats offline if that possiable im not to computer smart btw


Title: Re: Stolen bitcoins?
Post by: smurf2094 on April 16, 2013, 04:15:06 AM
Bitcoins are gone bruh


Title: Re: Stolen bitcoins?
Post by: ReCat on April 18, 2013, 10:56:41 PM
People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.

thanks why I think, ironically, bitcoin will take off when there are 'bitcoin banks' that insure your coins

I think that the most reliable bank is yourself, if you are educated and careful.


Title: Re: Stolen bitcoins?
Post by: odolvlobo on April 18, 2013, 11:31:15 PM
I think that you (DavidAU) are confused about something.

Take a look at all the transactions at that address. Every time bitcoins are sent to it, they are soon sent somewhere else. Why is that? How is the 8 BTC transaction any different from any of the others?

I don't know why the bitcoins were transferred, but it looks like it is completely normal. Perhaps you are confused about the address? Are you sure you own it? Maybe this is an exchange's address and the coins are getting sweeped into another address.

Also, does your wallet say that the 8 bitcoins are gone? The fact that they are no longer at that address doesn't mean they are gone. Do you understand the relationship between addresses and wallets, and how "change" is handled?