Bitcoin Forum

Guys I have been keeping a few thousands coins in Android wallet for about  two months. I loged in today and found ZERO balance.The coins has been stolen. My transaction history shows that first 10 NEM was withdrawn and two minutes after whole balance!!! Could developers explain this???

Wrong forum. Try the altcoin forum or NEM must have a subreddit or something.

Many of us have held NEM over the years without issue, and it's open source software so I wouldn't blame the devs for theft. That means you probably got hacked.

What wallet application was this? And did you ever lose physical possession of your device at any time? It sounds like someone either had possession of your priv key before you loaded the wallet, your device was remotely compromised, or someone gained possession of your device.

And how long after the deposit, was the initial withdrawal?

It is mobile app for android.I never lost it and noone ever had access to wallet except me. I have made a first withdraw  within first few days from first deposit just to test it. Private key I keep in secure off line place and use strong password to log in. How someone can get access and withdraw funds???
This info I found in security section in the wallet.
Version:
1.0.66 BETA-Mainnet
Warning - this is development version and it can send to developers some sensitive information like transactions and/or encryption keys.
No private keys or passwords are being sent.

I really don't trust other altcoins mobile wallet as I don't see it's on 100% ready to be used. I preferred their desktop client instead as it was first in their priority to be build. Will only used mobile wallet once NEM community become bigger. By just looking at their Playstore app, no response from the developers which is a must so that comments there are being entertained.

I suggest to get in touch with them at NEM forum: https://forum.nem.io/

Thanks.

Was your phone jailbroken (or whatever the correct term is) and were you running with the latest and greatest software updates?

No, it wasn't.
About updates I just installed it from play store and kept it offline(did not log in) for a couple of weeks after depositing coins.
What do you mean by latest and greatest updates?

Perhaps the phone had malicious software that allowed someone to gain control of it.

Sorry for continuing topic on this forum but I got more responses here then on  nem.io.
Does anyone of you have any experience  with malicious  software.Is it unnoticeable. I was online when coins was stolen.My device is protected. Allowing installation  from unknown  sorces was disabled  . I did not  installed any other apps  for the last couple of weeks. How  malicious  software  can  get  access  to app  protected  with very strong password and the most disturbing  why  developers of this wallet  do not respond to this issue. I posted it on many places.

Try installing a virus scanner on your phone. You couldve gotten malware on it.

Did you install the official NEM wallet? That should not be the problem.

Yes,it was downloaded from  play store.
Is this somthing common  here that developers of this app  do not care about tech issues in order to solve (improve) the security  of their product?

Yes, the devs should care.

But... if this was an exploit in the NEM wallet, I would expect more victims to cry out. So it sounds localized to your phone. Without a transaction ID or such it's hard to say anything either way.

Did you do anything around the time the NEM was stolen? Any recent transactions?
Was the wallet protected with a pin number or password?
Did you backup the password anywhere where they could have gotten to it? Read before how people wrote it to text files and stored them on the cloud, which became the attack vector.