Bitcoin Forum

Some rumors going around that Myetherwallet got hacked.... Better to stay away and not access your wallet with private key or keystore file until they fix it or they announce an update.... Stay safe ya'll

Reference:
https://www.reddit.com/r/MyEtherWallet/comments/8ek0jj/think_i_got_scammedphishedhacked/

--------
UPDATE:

Unfortunately the rumors are true and you can track the hacker wallet here (he stoke almost 25k ETH so far):

https://etherscan.io/address/0xb3aaaae47070264f3595c5032ee94b620a583a39

Here's an official announcement from Myetherwallet:

https://twitter.com/myetherwallet/status/988787116015415296

Is this true? today I have several times access myetherwallet to transact, is my wallet safe? this worries me and scares me.

Same here - they better not be hacked as this would create some more FUD again as a lot of people are using MEW.

Nothing is safe with a computer and on the internet... Don't use a website if the certificate is not the good one or is invalid.
Every month or 2 months, there is some kind of hack with Ethereum... Bitcoin is a little more safer.

MEW itself was not hacked, but DNS somehow was replaced. Anyway you could see a warning sign in the browser before opening your wallet, but some have thought that it is still okay. You can avoid loads of problems by using hardware wallets, just check the address on the device screen when you send the tokens.

I still keep some tokens there, what should I do?
this is bad news. I heard that the ETH transaction is disturbed is this the impact of this issue?

They are not ''there'' they are in YOUR wallet. You only access your wallet through mew if you want to. You can use it locally in your computer without going to myetherwallet website. Nothing will happen to you if you don't access your wallet through the mew website. In fact you shouldn't really use the website at all, much safer to use it on your own computer.

UPDATE:

Unfortunately the rumors are true and you can track the hacker wallet here (he stoke almost 25k ETH so far):

https://etherscan.io/address/0xb3aaaae47070264f3595c5032ee94b620a583a39

Here's an official announcement from Myetherwallet:

https://twitter.com/myetherwallet/status/988787116015415296

Meanwhile, don't access your wallet no matter what, as it's a DNS hijacking (obviously not the actual data since MEW doesn't store your coins on the website)... You can check your balance on Etherscan

There was another recent post that warned about this. From what it looks like, this issue has been addressed and MEW is back to normal.. Always worth taking extra precautions though! (also it seems like this was an issue affecting only MEW generated private keys that were generated during a certain period of time).

I don't think this is fixed, The address posted above keeps receiving eth, last tx was a minute ago..

Is this rumor true?
I still do not believe this rumor, but anyway if indeed all the issues are true
I must have anticipation, to avoid the things that are not desirable,
I have to use a harder wallet,
and I have to move my coin coins that are still left in MEW with as soon as possible.

Yes this is sadly true  :-[ every person could lose his all money, it is just about timing that saved you. I always knew that is going to happen one day. I've started to use offline version of myetherwallet because of that.

This affects online web users that use google dns and logged in. How to check: Open a command window. For example, on Windows 7 systems, select Start > Run and enter cmd .
At the prompt, enter. ipconfig -all. Your system returns information like the following, including the IP address.

Hacking is a very bad practice that has come from an unexpected place, very sneakily thought. You have to be very careful about this kind of attack. It is useful to check the time when we will process the URL address in the address bar.

This rumor is pretty much true, and its not even on myetherwallet's part. Anyways this made me remember how cryptocurrencies are dangerous and risky, very easy to be stolen. I was using mew but luckily I didn't for at least 2 months (hodl) so I avoided it by chance (and I was using google dns..)

While the market is growing so well, it is too bad that such bad things happen. I hope to recover soon.

They have stolen very big number, I saw news and they are saying 24.5 eth they stole but this numbers are not certain, it can changeable. Dont enter to mew at this days.

There has been a very insidious and vile attack carried out by deceivers. We have once again seen how careful we should be as crypto money investors.

Well if you are a bounty hunter then you might as well look for another ERC20 wallet if you think you are not safe with MEW, but as for ME I will continue to use it because so far I don't experience anomaly of this wallet.

It has nothing to do with timing. People who don't understand how website security works will be affected. When you see a big red X beside myetherwallet.com then you know something is up. Yet people still sign in..  ::)

If you want to look at your holdings then you should be using etherscan.io

Yes I feel very sorry for the victims..   :-\
A few have lost a really high amount of money. I just hope it was not their life savings -.-

Thank you for the information. it seems it is already resolved per their official twitter.
But it is better to wait it out a bit more to be safe

This DNS hack of MEW keeps happenning every few months. May have to download a local copy of MEW to the computer to avoid this kind of risk permanently.

Thanks dude today i thought to transfer my tokens to exchange site but i was busy with my work, now also if i am not login means i may open my my MEW account. people are telling now the issue is fixed but why risk i will wait one more week.

Hey guys do you know could this happen to MetaMask account?

ps. I should purchase Ledger as soon as possible

There was a twitter update from MEW that everything seems to be stable now, but I think it would be best not to access the wallet for some time. The hackers used the technique which lives the name of the website as it should be, but redirects it elsewhere. It's kind of tricky and not that easy to notice.
I don't think it can. Metamask is an extension on your browser, I think it's pretty different from accessing a specific website. At least, I see no people talking about this dns thing being also the case for metamask accounts.
Theoretically, though, it could be hacked or you could be deceived, as some stories about Metamask on github show.

Useful information thank you,I will take it seriously and inform my friends too.But I will continue to use MEW because as of now I don't have experience bad thing about it.

Thanks for the info; I just decided to hold on from checking and sending funds for this time.

If I were you, I would immediately send all my saving from that address that was used today. Of course, it is not completely safe to use MEW today, but if you already opened it today, it won't make your situation worse.
It's better to create a new account and send your coins there and be calm. (But don't create it from a phishing site, I don't actually know if it is possible, but be on guard).

This is one of the reason why cryptocurrency is said to be risky,hackers and scammers are everywhere.Avoid using MEW today if you can for the safe of your coins

This might be the reason why it takes longer to process our payments via MEW and when i do look and visit the website it says "error_33 could not connect to the node". Somehow the hackers redirected the users to a phising sites i wonder why the users don't know anything about this. I hope the MEW supports and developer upgrade their security system so that none of those hackers can get in touch again to the users account.

I've also found some trick to avoid using DNS and to go to MEW and Etherdelta (which also was hacked recently) directly.

To do this, you should open C:\windows\system32\drivers\etc
then open "hosts" file an at the end of it paste the following two lines:
104.20.225.58 etherdelta.com
52.85.242.126 myetherwallet.com
then you save and close this file.
After it your browser will go to genuine sites only.

PS.: I've found this method in a Russian board, here (https://bitcointalk.org/index.php?topic=3388384.0) is the original thread, in case if someone would like to thank the author

Really nice! thanks alot for this

woah, I dont know if it is true but how is it even possible? How about other ERC20 wallet, are they also affected? If I will open IE or Google Chrome or Mozilla, which one has a higher risk being hack?

It is possible, yes. But the Haker just hijacked the DNS Server from MEW.
You should everytime be sure to check the SSL Certificate (in the upper left corner, next to the URL).
If it is green, you are good to go normally, no matter which browser you are using.

This so worried,I read some article regarding this news and i shocked that hacker steal millions of dollar worth of eth and other ERC-20 tokens.The hacker is smart that he able to hijack the DNS of MEW and create some phishing technique.I have also token and eth and i did not acces right now until the issue concern will resolve.

I still have some tokens in it. Is that all? Who can teach me how to do it, I will be very grateful.

Thanks for help, mate. My Metamask account was not affected.

I think all will soon be resolved and everyone will be safe. All hackers are getting smarter as they continually attack the market and we should have more layers of security. I am confident MEW is working to fix this and will give investors more options to secure their accounts. The best advice is not to log in at this point as it is very dangerous

They had a perfect timing to stop the bull. These are the crypto markets that can not stop.

Don't worry If you are using Metamask to store your ETH and your token
I using MEW and Worry to open MEW now. better to wait until any announcement by MEW.

It is scary how often do these scamming/phising attempts happen. Every investor and trader should take precautionary measures and make a habit of them (always checking SSL certificate, never accessing MEW from borrowed, public or suspicious computers etc.). We are never safe in this..

That's why i did not use MEW for a while,I dont want to risk my privatekeys over them, I know that fact that they are working on there DNS issue but still i dont get confident, who know's what the hacker thinks that they can repeat what is already they done.

Just use Ledger Nano/Trezor wallet or local version of MyEtherWallet at least (In this variant all you need to fear are viruses/phishing extensions).

once again when hackers make substitution of CSN and depositors lose their coins. Unfortunately, the MEV team still does nothing to make the wallet safe

Agree with you. A lot of fear on market. MEW and article about " OKEx Suspends ERC20 Deposits on Discovery of Critical Ethereum Smart Contract Bug" after that . Looks like someone tried to stop bull market. Anyway I'm not using MEW uti situation will clear. Usually I use metamask so generally I'm not worried about . But in general I worried that crypto has so security problems and I hope MEW will do good job for security our funds. Cause it's really sad wehn people lose their maney that way. It's worst than even scam ICO. When wallet was hacked you didn't know about and don't even know to do.

some exchange markets have begun to withhold all transaction activity for tokens erc-20. The MEW effect is immense and damaging to the ecosystem if it does not immediately get a practical solution. I do not understand what the relationship between giveaway eth is being intensively done with the practice of piracy dns this time.

Obviously this is very detrimental to many things and the sustainability of the platform itself. I feel this as a hackaton that will make things worse.

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

it was not scamming nor phising but instead it was DNS itself.
when you are loging in into your account,you will be redirected to 'someplace' and then your account automatically do the transaction.
no matter what,as long as you try to log in or get access to your account,
you will do that directly.
so it's not phising or scamming,it's much more worst compared to those things.

Yes, now it is better to refrain from using MEW to sleep peacefully and not think about what coins can steal. I hope soon everything will be fine and we'll get to use MEW.

Yes this is true and it is more than dangerous, that is why starting from today, i am only going to use mycrypto for sending eth payments, including tokens


I am not going to risk my money in this page anymore, we all know how all those people are

everyone has their own choice. if you want to be more secure you can use  hardware wallet. IMHO, easy tips to avoid DNS hijacked by looking at the DNS website, always make sure the DNS have a green color

Just download the wallet and use it on your own computer, it's that simple. Besides DNS hijacking like this could happen to literally any other website, crypto or not. Any kind of security breach can happen to anyone anywhere, you can only use so many measures to prevent it, even top security websites can get hacked. Best thing to do is to split your coins into different options, exchanges, wallet, ledger, paper wallet and so on. It's virtually impossible to lose all your coins this way.

I see, good to know some very informative knowledge from you. I also believe hackers are getting smarter day by day. So it is good to know what actions we will take as soon it will happen to everyone.

This is the proof that any system can not stay safe. DNS hijacked possibly that one of their dns server is being hacked. It is the same hack method as etherdelta when ED being hijacked and thanks god only 230 ethereum. ED hijacked more scary than this hijacked.

I think now MEW security is not guaranteed anymore, I myself become a victim of hacked wallet hack, somehow they can find private key access and it makes a headache for token holder

Indeed. That's why i seen many topic in this forum that discussing about securing asset into hardware wallet or cold wallet save on computer outside of network, etc. Because this is big issue that still happens many times.

I don't think they are has been dump MEW database, so the possibility that happened could be you entering those phishing site and input your privates key into it or those hackers has been compromised your computer before.