Bitcoin Forum

Hi,
Thief stole my 0.008 BTC .
Thief wallet 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

I see strange TX. He recieved 0.008BTC to 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 but transfer from this wallet 0.018 BTC.
How is possible? He sent higher than recieved..

https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

How can refund my BTC?

Thanks.

I mean "refund" how find thief. I checked and see that use bitcoin mixer.

No. My wallet had 0.008 BTC.

Please check thief wallet.
https://www.blockchain.com/btc/address/3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2

No. Transactions   6   
Total Received   0.008 BTC

But send 0.0018 BTC how?
last TX sent 0.009 and 0.009 BTC.

Just click on the transactions:
https://www.blockchain.com/btc/tx/8c06604cdc3bdf2bdd15673e397b8f7cfa8e70f1490d6968cb55c3dd4a52f9f1
https://www.blockchain.com/btc/tx/eb41e513d1f505c54808efb33a88bb451b12edd101a29cc7f4236d386e5aa4d7

You can see that the transactions have been using inputs from a lot of addresses. So the 0.018 is not coming only from the 0.008 3H4PKtSX6CEZUwDNyT3VMvmHom9YHMKht2 had.

Unfortunately there is no way for you to get the BTC back (neither by 'refunding' in terms of reverting the transaction nor by finding the thief).

It is not possible to send more than received. The last transaction contains more than 20 inputs. blockchain.com just isn't showing them without clicking on the transaction itself.


Instead of trying to find the thief (which is kind of uselesss, especially if he has used a mixer) you should rather try to find out how he got access to your private keys (which i assume he had since you are talking about a thief and not about a scammer).

If you had a desktop wallet and don't know how he got access to your private keys, make sure to check your whole system for malware. And in case of doubt rather set up a fresh OS.

Do you have any clue on how the theft happened ?

No. you read it wrong.
read the numbers on red buttons they're -0.007 BTC and -0.001 BTC sent out of that address
both of them seems like transactions made by exchange/service to consolidate deposit wallets

I'm confused. 3H4PKtSX... is your address or thief's address?
which one is actually your address? and do you own its private key?
or the address you have is simply your deposit address on certain site?

Nothing wrong with the transactions. Spend The address you shared received 4 initial coins, 0.001, 0.001, 0.005 then 0.001 = 0.008.

Then it sent out 2 times, you can see in explorer, first tx spent 0.007, 2nd tx spent 0.001. In those 2 txs, it was part of multiple other inputs that consolidated into 2 outputs each.

Total received: 0.008. Total spent: 0.008. Balance: 0. No mistake.

Click the individual transactions and look for the address, it'll clear things up for you.

3H4PKtSX... is thief's address. I have private keys (I don't use directly..)
No, I use own full blockchain node.

He had withdraw my BTC from my own full blockchain node, he don't have access to my private keys..
System have not malware and virus.
I think he used bugs in server script..

after reading your posts in another thread (https://bitcointalk.org/index.php?topic=2069612.msg47850141#msg47850141), it seems the fault is on your dice script
I think your wallet or server has not been compromised (as well as you suspected)
but your 'bad' dice script enables thief to overdrawn and emptied your wallet :-X