Bitcoin Forum

So, yesterday my company's wallet was either bruteforced or somehow hacked....We lost 15BTC which was most of our coding fees down the drain.

We are not left with an abandoned project, unhappy coders and bankruptcy.

Does anyone know any ideas or have any suggestions on what to do now? Any ways of trying at least to earn the money back?

15BTC is a lot of money (in my eyes anyway) and I don't believe that it is fair for it to be taken from under my feet.

I had 2 factor auth on and my email linked...still didn't manage to protect my wallet.
I have no rat/keylogger on my PC (Mac OS X) and I have scanned multiple times.

reported to blockchain and they can't do anything about it.

If anyone can help, ANYONE, I will be GREATLY appreciative, even of your suggestions.

Thank you.

- Alison

Im sorry, You will most probably never get back those coins.
The only really secure solution is to have cold storage for the wallets.

http://bitcoinarmory.com/
"Armory provide a first-of-its-kind interface for easily managing offline wallets. You can create your wallet on a computer that never touches the internet, yet still manage the wallet from an online computer with minimal risk of an attacker stealing your funds. By keeping all the private-key data on the offline computer, only someone with physical access to the offline computer can steal your Bitcoin. And even if someone physically stole your offline system, it might take centuries for them to get through the advanced wallet encryption!"

Something does not add up.

2FA enabled? This sounds like someone with physical access did it. As in, you were logged in and they snuck on and took them while you walked away or whatnot.

But I want to talk about 'fair'. This is the epitome of fair. You're responsible for your security. Just like everyone else. If your wallet was stolen then this is a repercussion of your actions, no one else.

If that is somehow unfair then you're asking for special treatment.

So you used blockchain online wallet? I don't trust online wallet, just in case they closed down then you no longer have your wallet.

What address were they stolen from?

If your blockchain wallet with 2FA was hacked, you probably do have malware on your computer.

How are you sure that your computer doesn't have a rat? For one, there's a $30 Java RAT that is undetected.

That is why you always make a backup.


AlisonZ, like people have said before me, the only 100% (not really but close enough) sure way of not having your funds stolen is to have your wallet completely detached from the internet. That can be done with either armory or electrum wallets.

Saw this a coming mile away.....hopefully noone lent you that

laff

Haha not cool man people like you need to shut up this guy just lost all of his funds for his coding and you are laughing? Fuckin people..

Sorry to hear that, I don't think there's anything much you can do to get it back.  If you're in Hong Kong I heard someone say something about reporting bitcoin thefts to cybercrime but other than that it's gone.

Check my sig for offline wallet instructions.

You should probably read more. For instance the threads where this guy is outed a scammer, you easy target.

Also, again: "all of this funds for his coding" ... "15 BTC" .... laff

How could you doubt this poor victim after reading their lengthy and creditable post history?

OP has a scam account

beware!

no one notice that (s)he will b "GREATLY Appreciative",  wink wink nudge nudge :D

This is hysterically funny. This same lady posted recently that:

"I may be new here, but my intentions are quite clear and I plan on being here to make successful business with future business partners.
A highly experience team of professional programmers and marketers, along with myself, are in the process of developing a NEW Online wallet solution that is quick, easy and extremely profitable for future users."

Now she manages to lose her BTC from her online wallet and has never heard of cold storage. Doesn't exactly inspire trust in her "New online wallet solution"

You are using Blockchain.info's My Wallet then?  If so, know that the wallet isn't encrypted with two factor, and instead that 2FA is only used to restrict access to your account from the website.   So if you had any wallet backups (wallet.aes.json file) anywhere (e.g., in an e-mail inbox) they could be decrypted simply with the password by anyone with access to that backup.

Online wallets, such as Blockchain.info (a hybrid online E-Wallet), Inputs.io (a hosted / shared E-Wallet), and exchange accounts (e.g., the E-Wallet at BITSTAMP) are great for their convenience but that convenience comes with a trade-off for security.  As such, the amount of funds stored with them should be limited to whatever amount is needed for spending, trading, etc., and the funds held for longer term investment / storage should be stored locally on a secure system or in cold storage / offline preferably.

No, we don't help scammers.  Sorry.

Yes, the thief has nothing to do with his stolen bitcoin.

/sarcasm What a joke

I wouldn't trust any online wallet with that amount of money.

Wow, this is happening way to much sorry to hear this  >:(

The OP's story is bullshit. He's a known scammer from Hackforums.

To clear things up, I am not a scammer. They are all just 'warnings' from members who are probably scammers themselves.
the last 15BTC was to pay the final work for our coders, which was now unable to be completed.

I suggest accusations are something you should all hold back on and instead worry about yourselves.

If you can post the TxID of your 21 BTC going to my wallet, I'll send you 1000 BTC. Your move :D

Wanna try again? https://bitcointalk.org/index.php?topic=295982.0

Seems like a lot of people are losing BTC lately due to theft and carelessness!
Watch out guys, BTC might become very searched for in the theft world!

 We need to find a better way to keep our coins safe , recently a lot of people kept saying they have been scammed or robbed.

 Or maybe we need to find how to rob or scam people and scam the scammers and rob from robbers. Punishment fit to crime type of deal.

Maybe people should just bother to read a *tiny* bit about Bitcoin. You can't honestly do any investigation of bitcoin for more then five minutes and not learn about cold wallets. I am full of sympathy, but for god sake read the freaking manual.

Why would you have any sympathy for a known scammer?

'we' as in the community already know many ways to keep coins safe. the non-secret is to not rely on third parties such as armory, blockchain.info, or any other online wallet/exchange.

if its not a paper wallet or a full client that requires the blockchain, then all of your coins technically belong to the server that holds the blockchain, and they use their own login methods to give you access.

EG blockchain.info use usernames and passwords in a database on their systems.
armory private keys are not standard bitcoin private keys. they are ARMORY private keys tweaked in their favour. remember if you can restore your keys using a password.. its hackable

so no matter how trustworthy the 'companies' are they may have less trustworthy employee's or host their data on servers, with untrustworthy employee's maintaining the servers.

learn to use paper wallets for long term storage and only use clients for small amounts.

basically move the funds into a client wallet address, spend the coins. move the remainder (change) back into a paper wallet.

and when doing the paper wallet make sure you dont use words.. think random generation of atleast 20 characters

I am just curious. When seonline now sends you 21 BTC, and hence can post a valid txid, will you really send him 1000 BTC?

Try it then report what happens.  ;D

Where did I say I'd send him 1000 BTC after he sends me 21 BTC and posts the TxID? I said for him to post the TxID where he claims 21 BTC left his wallet last night.

Still waiting on that TxID :D

Steps to take to make sure you don't lose your money:

1.  Don't use bitcoin.

b8/10

Hey AlisonZ, what was the TxID of the 15 BTC leaving your wallet?