Bitcoin Forum

So i have a blockchain wallet iphone App. Today i woke up to see a bunch of trNsactions listed on my app. I have never put bitcoin into or out of this wallet yet. I even scanned my wAllet addy on the blockchain and it correctly shows 0 / never been used. But in my app i clearly see transactions of someone...wtf can someone explain this? I can post screen caps when i get on pc later.

Five transactions listed lol
One transaction was sent to https://blockchain.info/address/1mineraceNChe36ftTXU5Y8EvypyM3iu8

The i see recieved from
https://blockchain.info/address/1FDakzHueDwyWk6375JQWvKXzohGT6qaVE
https://blockchain.info/address/15fW4VrNzMLFooUC3ebFMDUrkAd6rWZWYn

So why are other peoples transactioms showing up in my app?

http://i41.tinypic.com/28rfyis.jpg

Screencap of my app

Is it an official app?
If not maybe the app is to blame, or it is simply buggy. Hope it is other, since someone having access to your account without your permission is little scary.

Yep official app. And unsure that someone has access to my wallet because im not sure these transactions are even associated with my wallet which is the weirder part. Its like its loading someone elses transactions. Im on the web version now the transactions show up there too. They are all out dated from dec and earlier.

I don't see how ANY of these five transactions are associcated with my own wallet addresses or address.

It's super strange. They wernt there last night. But they sure showed up today. its so weird. I dont know how to really investigate it further. Or what info to proivde to get assistance in looking into it.

Please go to the "receive money" tab and give us a list of all the Bitcoin addresses that are listed there (if any)

These two addresses:

https://blockchain.info/address/1FDakzHueDwyWk6375JQWvKXzohGT6qaVE
https://blockchain.info/address/15fW4VrNzMLFooUC3ebFMDUrkAd6rWZWYn

appear to me to be mixer addresses (maybe).

0.13438819 BTC of dust has been collected at this address with no spends yet.  This looks to be a vanity address collecting mining output (maybe):

https://blockchain.info/address/1mineraceNChe36ftTXU5Y8EvypyM3iu8  

Wallet Addresses in my wallet addresses reciving bitcoins

Address   Balance   
1NNZQLBFvzAG9S3kN994zfKzBKN5A8bqYo
$ 0.00   Actions
1FDakzHueDwyWk6375JQWvKXzohGT6qaVE
$ 0.00   Actions
16CSHyp8FpqgjvGrX6wVZLJK5KrhVoZF5A
$ 0.00   Actions
19GaDN2h5fDcoc3Weg9QLbV314uYLTtXpy
$ 0.00   Actions
1QLJEAJSChBYMH9wjrrNUsSBKgsmq5bwdN
$ 0.00   Actions
1KEC5Qh36YtXDMCtVS8AUgcvVEfDrw4aCC


Now that you led me there, I didn't create those. And they DEF wern't in my wallet last night. Scratching my head eveeeeeeen more now. I would remember creating addresses.
And again, even weirder that they wern't showing up - these wallet addresses or the transaction in both sections of website last night - but all the transactions were from last month and before. hmmm

Here is a list of all the transactions I see posted in MY TRANSACTIONS

Transactions Summary of your recent transactions  View  Filter
To / From   Date   Amount   Balance
1mineraceNChe36ftTXU5Y8EvypyM3iu8
 2013-12-25 05:34:22
$ -33.79
$ 0.00
1MGx2ZyVmUTgyyXYonGESh3Wj5SZckjbac
18ktAjgzLhxSPfo69JL8hWvRZTZyweYc8u
 2013-12-25 05:34:16
$ 33.79
$ 33.79
1NGToQyfbLRY2ieXH3rpwyJKoNRtM3eBQH
 2013-04-25 21:55:29
$ -78.27
$ 0.00
1NGToQyfbLRY2ieXH3rpwyJKoNRtM3eBQH
 2013-04-25 21:48:36
$ 78.18
$ 78.27
1DMVRSw2maoLy9CyqFL9JFyGA2wNqmSMJC
1CLxDMjQFNgT1fCo7V9AGJUn3gvR2BRC69
 2013-04-23 17:22:08
$ 0.09
$ 0.09

https://blockchain.info/address/1NNZQLBFvzAG9S3kN994zfKzBKN5A8bqYo no transactions

https://blockchain.info/address/1FDakzHueDwyWk6375JQWvKXzohGT6qaVE 2 transactions (looks like mixer related)
 
https://blockchain.info/address/16CSHyp8FpqgjvGrX6wVZLJK5KrhVoZF5A no transactions
 
https://blockchain.info/address/19GaDN2h5fDcoc3Weg9QLbV314uYLTtXpy no transactions
 
https://blockchain.info/address/1QLJEAJSChBYMH9wjrrNUsSBKgsmq5bwdN no transactions
 
https://blockchain.info/address/1KEC5Qh36YtXDMCtVS8AUgcvVEfDrw4aCC 3 transactions, this one is interesting:

This also looks to be mixer related then was the change for a transaction that went to http://www.btcoracle.com

This could be a great clue!

Do you really have the private keys for these addresses?

Please test this by attempting to sign a message with one of them, preferably the last one (Actions drop down, sign message).

Tell us what happens when you try to sign a message.

Do you use, know about, or are in any way associated with http://www.btcoracle.com

???

it gave me a signature with some code. i clicked sign three times. the last code it gave me was G2VczJPzAG22yIh++0+6jKwQvEW170GUQrhvrNJtMd/aJJU1UZTS3lU/CLmK3s26OnfHFCsb4Ud7Jnl30KrrY2Y=


whats that mean and now what. did i sign it ? lol i wrote "ok i signed it"



btw i signed the 1kec5 address




Lol nope. never even heard of it.

The message does not verify but I am worried about how you did it because you said you clicked it three times.  However, the fact it worked at all or appeared to work proves that you probably do have the private keys.

Select the same Bitcoin address (1KEC5Qh36YtXDMCtVS8AUgcvVEfDrw4aCC ), enter the text "This is a test message" without the quotes and then sign it once.  Give me the giberish code that is produced and I will check it for you.

HJtk0OEWOvXwB8KG2ihGTy2ghR7ehPujKnGLSWGfB5BrnJ0KglDUEWrn+MfLBGZdhiAuYcQhzRh5tKfz4j4vVac=


only clicked once.
here is screen cap just so you can see whats up.

http://i43.tinypic.com/102t3bm.png

http://i43.tinypic.com/102t3bm.png

That message verifies which proves that you do in fact own and control that address, which means your wallet does in fact contain the private key that was used to create the public key and Bitcoin address.

We could verify all the other addresses but I expect that you do have the private keys for all of them.

So, we have to wait for piuk to respond.  Unless someone else has any other ideas?

One other thing you can check for the heck of it:

Wallet Home -> Account Settings -> Continue -> (enter wallet main password) -> Continue -> Debugging -> Integrity Check -> Run

I expect it will probably just verify your wallet and be done but you never know...

Instead of scratching your head as you said why don't you change your bitcoin address to know what happen' ?

What are you going on about?  You lost me there.

He lost me there too. Completely.

What does that have to do with anything lol?

I would remove that address that the btc going to minerace was sent from and make another. Apparently someone else has the key to that address.

True and obvious.  However, the question we are pondering here is how did two people get the same private key?  The simplest answer is that there is a problem with the random number generator being used to generate the private keys.

Or could it be something along the lines of a jailbroken iphone infected with malware that is leaking information - like the priv keys??

Read his post carefully.

1) He created an empty wallet.
2) All of the sudden someone else's transactions appeared in his empty wallet.
3) He never got or sent from the wallet - someone else did.
4) We have proved that he does, in fact, have the private key for this wallet.
5) Yes, someone else has the same private key
6) This someone else is not a hacker, in fact they are probably unaware that our OP has his key.  They are not a hacker because what hacker goes to all the trouble of stealing a private key only to use it for their own personal transactions?
7) I do not think the OP is a hacker either.  If he stole the private key through some key logger as you suggest why would he post here?  Why would he be confused to see transactions in the wallet if he stole the private key?

Most likely scenario is a bug in the wallet creation process that caused two wallets to end up with the same private key.  This is serious.  This bug should be found.  

I had an idea for the OP.  The OP could transfer in a small amount of BTC and then transfer it out right away.  This will cause his transaction to be show in the other person's wallet - confusing them.  Maybe they will show up here.  The OP can also send the other owner a message with the transfer.  In fact we can all try to message him with satoshi transfers containing messages.  Might be worht a tru.

1KEC... address belongs to Dr Evil  ;D

http://evilwallet.wordpress.com/

its strange lol

OP imported compromised private key to his account

is this fraurd with his private key

It is not *his* key! This private key belongs to Dr Evil !

E-mail blockchain support or the app developer TBH, doubt anyone but them can help you with this.

Very strange though

Looks shady, my advice? Don't use online wallets. They are danger sooner or later.

From the OP's posts, he didn't mention importing the private key at all...