Bitcoin Forum

Hi Guys,

I don't know where to post this so hopefully this is the right spot. I need some help figuring out how this could have happened. 3 days ago it appears someone got into my IDEX account and sold my XYO coins then proceeded to transfer to the ETH to their own account. I am unclear how this could have taken place as I have been very careful with my IDEX account and my JSON file there. So is there anything (any clues) in this transaction that point to something beyond someone brute force hacking my IDEX account? Please help me understand how this could take place.

I get that my 1 ETH is gone ...yes it pisses me off to high heaven and people will be like too bad buddy I had xxx amount stolen. But what I'm trying to understand is HOW this happened so I can avoid it in the future. It makes no sense to me. My google accounts are secure e-mail etc... so I'm not sure what on earth happened.

Any help unraveling this mystery would be greatly appreciated.

transactionId   date   market   type   tokenAmount   etherAmount   usdValue
cbaee360-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   6312.983039   0.04116633   28.81643177
cbae4720-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   72461.66778   0.5   350
cbadaae0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   25209.15473   0.1759599   123.17193
cba8eff0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   29405.399   0.20554374   143.8806173


http://etherscan.io/tx/0x91714ee08c34934036b52c903cbc7f9441082e97b9a6f824773cbdb49b3f84eb

Well, considering that when you open an IDEX account, a private key is generated for your wallet address, it's very much possible that you somehow ended up giving that info out...Unfortunately, there is not much anyone can do for you besides telling you to be more careful with your private keys during the next time you use them.

GL

But that private key requires a password or keyphrase to use it and I'm having trouble understanding how this could have been compromised?

It's not so easy to imagine, because most likely you were caught in phishing or it was inattention on your part and you sent someone a private key, because otherwise it's impossible.

Phishing scams? Keyloggers? Access to your info? I'm no security crypto genius sorry, I'm not sure exactly how but when it comes to cryptos, anything is possible.

Best thing is to never leave all your tokens/coins in exchanges. Try to diversify them with different storing options (best ones currently are hardware wallets - trezors, ledger nano s), etc.

If you use json file then it is impossible if yiu are using your own PC or laptop.
For it requires the file and the password.
But one question though, is there a json file log in at idex? I thought it was just private key log in there.
Anyway, if there is then it maybe you have inserted your usb to a computer shop to take the json file out.
It is a combo of copying the files in your USB and also a keylogger for your password.
If not in a shop then it is impossible. Are you certain that is idex.market? You might want to bookmark it now to avoid this from happening again.

Maybe in this case you are logged in and the fake IDEX website and that website has stolen your private key then stolen the coin in that account. To ensure the safety of my wallet MEW I often transfer coin wants to trade to another wallet MEW to trade on the decentralized floor such as IDEX, ED, Fork Delta.

Yeah this is what's soooooo crazy. I have always been very careful with my account and been trading Crypto now for over a year without any issues ever. So yes I know this is "lucky" that it's my first event and I only lost 750 dollars or something like that but damn if I don't know how it happened then I'm going to have a hard time avoiding it or knowing if other things are somehow compromised.

Is there any way to see any more detailed information on these transactions? It doesn't seem like IDEX has a way for me to see if someone logged into my account. They don't appear to track stuff for us like that.

The date/time of the hack is odd too middle of the afternoon on Thursday but nothing eventful took place that day and no other "red flags" for me that day so without a password and no real way I could have been phished... I don't understand how this would be possible it's not computing at all with me.

I am always careful to make sure I'm on the real sites and never entering a fake or phishing site.

I think you are wrong to enter a phishing IDEX address. So you do not suspect if one enters the privatkey to the phishing address. So your solution should change your address. No time to regret.

Seem like you should scan virus for your computer or maybe you should change to use another better Browser cause you also can be hacked just because your Browser cookie stolen. Beside, I think next time you should use Meta Mask to trade on IDEX, it's much safer than you log into your wallet on IDEX directly by your Private key :)

Of you are using idex through input your privatekey and it doesn't require any password. It's the worst part right now. Maybe you are getting hacked or another possible thing your desktop has been infected by malware and your privatekey has been stolen. so many scammer in these days.

Yes, json file log in is available is IDEX and I think something is wrong here because its really impossible not unless you go to a phishing site or your ETH wallet was hack literally and not on Idex. You’d better to be careful next time, will follow this thread for me to know the reason behind and to protect also my wallet.

I haven't had any trouble on using Idex so far. For me, it is so easy to use and has a good interface. I have bought a lot of cheap coins from their and would continue still on.

unfortunately, nobody can help you because that transaction already made and you can't get back your ETH, you are in control of your own assets, but but the price to pay is that you are in charge of your own security, I'm sure that hacker already steal your private key, reinstall your computer and be careful don't click any unknown link, buy a hardware wallet to secure your assets

Anything that is connected to the internet are not safe at all to hackers, I really think the best way to prevent this is to keep your coins and tokens safe in a offline cold storage next time, I had a work mate that was a victim to this kind of thing just like what happen to you, And I really think if you have stored your coins in your IDEX account it is not surely 100% safe, I really think they don't really miss the part where they keep on reminding us that Exchanges sites is not to be treated as a wallet or storage devices right?

Why do you want to shorten? News does not mean that Korean platforms are hacked. Why did you come out to talk about this? Do your malice need better prices to hold? Although I also need. But I hate your behavior, haha.

It is quite unfortunate. I think you were phished. Try to triple check your url and ensure it is correct before you login any sensitive information.

Can’t really see anything strange from the transaction.

If you haven’t logged on to a phishing website, then it might be some virus or malware in your computer. As the above members have advised, it is really important to do a clean up of your compu

it already happened. I dont know how and what would be the main reason why your funds has been stolen, even if it requires a password or a keyphrase, the hacker must have fully control of your wallet, maybe you become victim of phising or someting, just be careful next time.

Phishing link?
Keyloger?
Accidentally typed private key somewhere public?

There are many solutions. Think what you were doing that day and perhaps you will remember what happened. Users usually enter private keys to phishing sites without knowing it.

hey hatch, first off, commiserations for your loss.

i joined so i could reply to you. i experienced exactly the same thing on idex  as you did.

like you i don’t know how this happened. i’ve checked all my histories only to find nothing.

however my account was then hijacked by * and tens of millions of $’s worth of eth was funneled through my account in a 24 hour period. i read somewhere that the hacked 40$ million coinrail hack, was sent through idex! i’m getting 2+2=4. i wouldn’t at all be surprised to see the amount gone through my account is $40 million dollars.

idex advice was don’t use the account again. surprisingly, nothing was done about the illegal transfer of millions of dollars through my account! my problems started with their system crash several days ago.

shabby!

Yikes that would feel terrible just the same way. Watching and seeing all those transactions but being helpless. In my case I just want to learn from my loss it's pisses me off but I know that in every bad situation there can always be something good to come of it. In this case it would be nice for me to fully understand what I did wrong to allow this to happen.

I did go back in my history and found a site: idexmarket-secure.com and that has NOW been taken down so I can't see the site to refresh my memory.

But I wonder if I was in a hurry one day just trying to see my account and put my JSON file in there along with the PW. I want so badly to believe it was something like this because then at least I have an explanation and even more importantly I don't feel violated like this could just happen again at any time. I want a clean explanation if you know what I mean. I can handle it if I did something stupid. At least then I know it wasn't just this all-powerful that that can and will happen again. The uncertainty is the worst part of it.

So I have a breadcrumb but don't know what I did on that site (above). Did I see instantly it was a wrong site and get off or did I put my information in there giving everything to the bastards!?!?! Enquiring minds want to know and that's what drives me nuts here.

Sorry for your loss my friend, the bad and the decentralized stock exchange, there can be easy to lose money,so it was with etherdelta and so it will be with idex, the money will not return unfortunately,suggest no longer to use the services of idex.

to me i believe its not too easy because the private key requires a password or key phrase to use it and I'm having trouble understanding how this could have been possible.

The only thing I can think of is that I accidentally went to a phishing site and gave them the information they needed to pull this off. I have no other explanation.

I am extremely careful but sometime I get rushed at work and may have done a quick google for the IDEX site and come up to a Phishing one instead of the real thing. I'm praying that this is what happened and I can just chalk it up to me being a stupid idiot.

I guess this can close the case.
You will just have to be careful next time.
That is money we are talking about here and you will really have to slow it down with the transaction.
If I were you I will clean up my Browser history, cache and auto log ins. Google also have the history of what site you have visited and you might want to clear that out.
Maybe next time use an incognito if you are really in a hurry.

RIP to those tokens. Move on and make another.

You might have clicked on a phishing site by mistake, because i do not see how possible that could have happened. I use IDEX almost every time and nothing of such had happened to me. I have already bookmarked the idex site  use and there no way i can click on phishing site. Hackers have really devised several means through which they can hack into people's account. Try checking the site you use again and confirm the authenticity.

I will not gonna guess how you got hacked because posts above already stated all possible ways that you can lose your Ethereum wallet . Now let me tell you 2 very important advice .

1- Always bookmark you exchange and never visit them threw google search or email you received .
2- When you are using decentralized exchanges always use an disposal address and never leave any tokens or Ethereum in it . ( Transfer tokens/Ethereum when you want to sell/buy from your main account to your disposal account make the trade you want then move your toekns/Ethereum back to your main account  ) .

You know on this exchange I have been trading for several months and while everything is good. The more the principle of working as an ethereal purse and here the main thing is to keep keys and passwords in safety and there will be happiness.

maybe your computer or PC has entered the mallware and you do not realize it, you should do reinstall your PC then secure your PC from the mallware attacks

This is one of the reasons why i don't like to log in to my idex. They ask for private keys to access your account. This made me think twice in opening my account there. But idex has a lot of coins listed so it made me open an account. I don't see any problems with idex. Maybe its a phishing site that popped up and prompted you to put in your private keys

I think it's not a easy task for doing. Because IDEX accounts provides high class security. They are always developing their security. If this happens it will miracle.

Only you can access your IDEX account with your private key and it also has HTTPS technology which makes it more secure. I think somehow you were uncertain and the hacker take that chance and get your password.

First, I use an incognito browser when signing up for IDEX.
Second, my computer always install anti-spyware, anti-keylog software.
Third, I never use the Prative key to log in.
Others may invade your wallet ETH and sell what you have.
I recommend creating a new wallet. That's the best way.

I downloaded a fake Idex app from Google play that hacked my account then got in my vps. Got me for like 550 total

What a mistake was all the same if you made it happen, but it's hard to say which one!

I don't have an Idea, how can I help you mate with your situation now, since I'm just an ordinary trader and such as a bitcoin users. Better luck next time and be secure by every step of trading In IDEX exchange because I notice on that exchange was so easy to used and now I read this post, I can say Its to used and easy to hack as well.

wow I was suprised if someone can do bruteforce attack to your IDEX account. why he must do a bruteforce if they can do something simple like social engineering ? and guest you already trapped by hackers. maybe you ever login with your private key in fake IDEX website or MEW. so simply to made conclusion your private key already hijacked. don't ever use JSON file anymore. you must be more careful. use NANO LEDGER or metamask to store all your balance man.

It is a bad idea. This simply can not be, because IDEX has a very similar system of protection as MEW, so the only thing that can be, people who previously sent their private keys could somehow draw money from you.

It's very simple to steal your password through some extension in your browser or through a phishing site. And if you store all the data in an online Google table, then it's likely that your mail was hacked.

Could it be some virus or malware in your computer? I suggest that you do a scan to check whether your computer is infected. Try asking in idex telegram chat to see whether anyone has such experience.

It's not so easy to consider, succeeding well-nigh likely you were caught in phishing or it was inattention on your divorce and you transmitted individual a crotch important, succeeding differently it's impossible.

I did not have problems with this exchanger. He's decentralized.I think you are mistaken.

Man, it kind of sucks that hacks like this happen because not only the owner lose money, but the price of the coin will also drop. Sad to say this but there is no way a hacker could brute its way into your account because your information is not saved in the site. I think the only for you to get hacked is to give your personal information to the hackers themselves or you log in into a phishing site. Well, there are numerous ways for you to secure account. The first thing you need to do is to make sure your computer is clean. Next is that you should always bookmark that page that you are using to avoid phishing sites. Last is to never store your tokens into exchanges. It's better to pay fees rather than to get hacked.

Yeah, it sucks. I am sorry for you... It's good that there was only 1 ETH, it could be much worse.
I am not an expert, but I think the most safe authorization method is through MetaMask. This way you don't use/leave your private key in direct form. Probably you should consider to use it especially for DEXs.

There's not much you can do with IDEX (if that's still possible). Advice for the future. Be careful, and be careful to Open sites only with bookmarks.

Do you search the IDEX exchange directly on the Google engine?
So the first one and the second both show a phishing site, which eventually points to IDEX, but no one knows what it will record.

This thread isn't clear at all, and IDEX isn't even giving an official reply.

I want to know whether
a) we are talking about a simple man-in-the-middle attack, which means users got hacked due to accessing a phishing site
b) there is actually a bug on idex (possible hack?) which sends the private key somewhere