Bitcoin Forum

Bitcoin => Electrum => Topic started by: misteroov on August 03, 2019, 07:21:04 AM



Title: missing funds
Post by: misteroov on August 03, 2019, 07:21:04 AM
Good afternoon.Did not come for about two months in my wallet, maybe sure everything is OK, the computer with the installed version of electrum in General was off. Today I check and there are no funds! Someone brought them all out completely! Who's gonna answer for that now?
https://b.radikal.ru/b08/1908/9d/6112d58adaea.jpg (https://radikal.ru)




Title: Re: missing funds
Post by: Rath_ on August 03, 2019, 07:30:45 AM
Today I check and there are no funds! Someone brought them all out completely! Who's gonna answer for that now?

What version of Electrum do you have? Did you get any notification regarding a mandatory update 2 months ago? How did you store your seed? You have to answer these questions before we can get a track of what might have happened.


Title: Re: missing funds
Post by: Boriss on August 03, 2019, 08:04:47 AM
Probably there was an popup box from Electrum wallet update leading to scammed Electrum update site, same happened to some other folks who lost the funds in the same manner. Any other thing that could happen is compromised seeds. :'(


Here is the link to that case:
https://bitcointalk.org/index.php?topic=5170714.msg52012528#msg52012528 (https://bitcointalk.org/index.php?topic=5170714.msg52012528#msg52012528)

This is definitely something for all of us to learn from, lots of people would automatically click on the update from the wallet because they are maybe in the hurry to pay for something and they would never suspect anything.




Title: Re: missing funds
Post by: TheUltraElite on August 03, 2019, 10:12:16 AM
The transaction was done on 21th of June. Are you sure that the computer where the wallet was installed was off on that date?

There was a fake message hack that happened with Electrum older versions but if you device was off then there is no way you fell for that trap. I have a feeling the OP is not telling everything completely here.

Or it could be that their device has been infected by malware.

And nobody is going to answer for a transaction like that. If you have been scammed then it was your fault of not taking security measures properly.


Title: Re: missing funds
Post by: misteroov on August 04, 2019, 07:19:50 AM
The computer was definitely off! Nothing has been updated. How could I withdraw funds from my wallet without being the developer of this wallet? I believe that the funds were stolen by the developer! Why aren't you responsible for the missing money? Why would you even want the purse to use? Just stole $ 600 and nobody's to blame. Wow!


Title: Re: missing funds
Post by: Pmalek on August 04, 2019, 07:25:18 AM
What wallet did you use exactly and what version?
Which exact site did you download it from and have you verified the signatures for the wallet, if you did how did you verify them?

It seems that you either downloaded a fake wallet or someone has gotten access yo your seed or wallet file.
What precautions did you take to protect your seed and the wallet file? Did you also encrypt it?

I am not familiar with radikal.ru site where you added your image so I am not going to click on it. I suggest https://imgur.com/ which is widely used on this site.


Title: Re: missing funds
Post by: Rath_ on August 04, 2019, 07:33:09 AM
How could I withdraw funds from my wallet without being the developer of this wallet? I believe that the funds were stolen by the developer! Why aren't you responsible for the missing money?

No, developers could not have stolen your funds. Electrum is open-source and you should have been safe as long as you downloaded it from the official website (https://electrum.org/#download). What did you do with your seed phrase (12 words)? Did you save it on a different computer? Was it exposed to a third party?

I am not familiar with radikal.ru site where you added your image so I am not going to click on it. I suggest https://imgur.com/ which is widely used on this site.

https://b.radikal.ru/b08/1908/9d/6112d58adaea.jpg


Title: Re: missing funds
Post by: misteroov on August 04, 2019, 10:46:48 AM
https://imgur.com/pfzSc9U
phrase-the key was recorded in Notepad, on paper! Where's my money? You stole $ 600 from me and you're trying to make me look guilty!


Title: Re: missing funds
Post by: Rath_ on August 04, 2019, 11:01:07 AM
phrase-the key was recorded in Notepad, on paper! Where's my money? You stole $ 600 from me and you're trying to make me look guilty!

There are only two possibilities. Either you computer was infected with a malware (in this case download Malwarebytes and scan your PC) or you accidentally downloaded a fake version of Electrum. The latest one is 3.3.8. If you have any number higher than that then you have downloaded one of fake versions which were common at the time. How could we have stolen your money if we didn't know you?


Title: Re: missing funds
Post by: TheUltraElite on August 04, 2019, 11:05:17 AM
phrase-the key was recorded in Notepad, on paper!
Notepad you say? Then it is possible that your device was infected by some malware which could have allowed access to files on your device and thus hackers got access to your private key.

Quote
Where's my money?
In the wallet of a hacker.

Quote
You stole $ 600 from me and you're trying to make me look guilty!
Tell that to the hacker "after" you find them and maybe they will help you. People of this forum are just like you and are no special gods who can recover your money at the blink of an eye. With this attitude you would very likely not get any help at all, you should be grateful that some people are actually taking time to check your issue. I hope you will modify your device's security from now on to prevent such issues and move to a new private-key, because your previous one has been stolen.


Title: Re: missing funds
Post by: misteroov on August 04, 2019, 07:15:24 PM
position super. The meaning of your wallet if someone wanted to withdrew the money. And you're not responsible for anything! If I had lost money in the Bank , it would have been returned. The position of the developer is not clear. Hope many will read this subject and would make for themselves conclusions.


Title: Re: missing funds
Post by: BitMaxz on August 04, 2019, 09:02:47 PM

Any bitcoin wallet is not 100% secured since your device is connected to the internet someone can still hack your device to steal any data from your device. Like the other said Electrum is made as a normal wallet it is not the same as the bank with bank insurance anytime they can give your money if you can prove that the loss of your money from the bank is not your fault.

Electrum wallet is not just like that the security and protection of your wallet should be your responsibility there is no insurance if your wallet is hacked it is not the same as the bank that has bank insurance.

If you want to use a wallet with the highly secured wallet you can try hardware wallet which is proven much safer than the other wallet.



If your bitcoin lose today maybe you did a mistake past days ago much better to review your activities and maybe you expose your wallet seed to someone.
Better to tell us all information about your wallet if where did you download and what version you use because lower version still infected with fake Electrum wallet so if you use a lower version of wallet you might be infected with this attack you should always use the latest version from real source which is Electrum.org and learn how to verify it.

You don't need to blame developers they are always working to fix all security breach and fix this attack and develop the wallet.


Title: Re: missing funds
Post by: joniboini on August 05, 2019, 05:11:23 AM
position super. The meaning of your wallet if someone wanted to withdrew the money. And you're not responsible for anything! If I had lost money in the Bank , it would have been returned. The position of the developer is not clear. Hope many will read this subject and would make for themselves conclusions.

Stick with banks then.

You should've learned about crypto and its security before you bought any coins. If you want to blame the developer, show which code is broken and how to fix it. Don't start accusing people of stealing your money when they tried to help you out.


Title: Re: missing funds
Post by: bob123 on August 05, 2019, 08:13:05 AM
Hope many will read this subject and would make for themselves conclusions.

Yep.. we are also trying to encourage anyone to not save the mnemonic code (especially unencrypted) on an online computer.

Unfortunately you - and only you - are to blame.

You didn't even follow the simplest security guidelines.
Sorry, but the developer are not at fault here.


Would you consider the manufacturer of your purse at fault if you leave it inside of a train with a few hundred $ inside of it ?
Imagine you come back to the seat 24 hours later and find out that your money is gone. Who is at fault ? Obviously only you for leaving it there.

Same happened here. The mistakes you made:
  • Stored mnemonic code on an online computer
  • No encryption of your mnemonic code
  • Probably using windows in addition ?
  • Probably downloading any software which is either free or earns you a few bucks ?
  • Most probably no proper threat modelling


Accept it as a loss and learn from it.
Ignorance won't help you at all. If you don't lean from it, i can guarantee that this will happen again.


Title: Re: missing funds
Post by: Pmalek on August 05, 2019, 08:45:51 AM
phrase-the key was recorded in Notepad!
You should never have done this. In case your computer is compromised anyone who opens that notepad file has access to your funds.
Anyone using your computer has access to your funds.

Where's my money? You stole $ 600 from me and you're trying to make me look guilty!
You lost your money because you didn't take the necessary precautions to safeguard them. At this time you should consider your computer compromised and for your own safety consider reinstalling your OS.

You have not answered any of the questions that were asked and instead you are putting the blame on the developers. 


Title: Re: missing funds
Post by: Rath_ on August 05, 2019, 08:51:49 AM
You should never have done this. In case your computer is compromised anyone who opens that notepad file has access to your funds.
-snip

Take a look at his post again. He claims that he has written down his mnemonic phrase on a paper notepad. If that's the case then either someone managed to find it and stole the coins or his computer was infected with malware from the very beginning. We still don't know what version of Electrum he has and where he downloaded it from.


Title: Re: missing funds
Post by: Pmalek on August 05, 2019, 09:27:28 AM
Take a look at his post again. He claims that he has written down his mnemonic phrase on a paper notepad.
Maybe you are right. The way I understood it is that he saved it both in Notepad on his PC and on paper because he put a comma between the words.

phrase-the key was recorded in Notepad, on paper!

But anyways, a lot of information is missing especially the origin of the downloaded Electrum wallet. Even if he downloaded from the original website we still don't know his online habits. Has he used the computer where the wallet is installed in connection with pirated software, torrents, illegal downloads, pornography... prior to installing the wallet which could have resulted in malware being installed on his system.


Title: Re: missing funds
Post by: NeuroticFish on August 05, 2019, 09:34:39 AM
position super. The meaning of your wallet if someone wanted to withdrew the money. And you're not responsible for anything! If I had lost money in the Bank , it would have been returned. The position of the developer is not clear. Hope many will read this subject and would make for themselves conclusions.

You should have read more about how Bitcoin works. Let me make it simple: the bitcoins are not in your wallet, they are always on the blockchain. The wallet contains only the keys to spend those coins.
But anybody that has access to those keys can spend the coins. The access of your wallet is optional.

So maybe you should start thinking on who had access to those keys (seed, private keys, or simply access to your computer, although you claim that wallet was not opened)


Title: Re: missing funds
Post by: Abdussamad on August 05, 2019, 01:07:41 PM
bitcoin is not a bank


Title: Re: missing funds
Post by: misteroov on August 06, 2019, 04:11:47 PM
Hope many will read this subject and would make for themselves conclusions.

Yep.. we are also trying to encourage anyone to not save the mnemonic code (especially unencrypted) on an online computer.

Unfortunately you - and only you - are to blame.

You didn't even follow the simplest security guidelines.
Sorry, but the developer are not at fault here.


Would you consider the manufacturer of your purse at fault if you leave it inside of a train with a few hundred $ inside of it ?
Imagine you come back to the seat 24 hours later and find out that your money is gone. Who is at fault ? Obviously only you for leaving it there.

Same happened here. The mistakes you made:
  • Stored mnemonic code on an online computer
  • No encryption of your mnemonic code
  • Probably using windows in addition ?
  • Probably downloading any software which is either free or earns you a few bucks ?
  • Most probably no proper threat modelling


Accept it as a loss and learn from it.
Ignorance won't help you at all. If you don't lean from it, i can guarantee that this will happen again.


You didn't even read my message carefully. The phrase key was written in a pen in a paper notebook! How can I withdraw money without knowing it?
Version 3.3.2 of the purse. Downloaded from your official website. Prove that it is not you as the developers stole my money! No one else could access the key phrase except the developer.


Title: Re: missing funds
Post by: TryNinja on August 06, 2019, 04:33:22 PM
You didn't even read my message carefully. The phrase key was written in a pen in a paper notebook! How can I withdraw money without knowing it?
Version 3.3.2 of the purse. Downloaded from your official website. Prove that it is not you as the developers stole my money! No one else could access the key phrase except the developer.
Here is the proof: https://github.com/spesmilo/electrum

You messed up somewhere. There is no way anyone from Electrum stole your money. NO WAY. Simple as that. Either you downloaded a fake version of Electrum, or your PC was infected with malware, or you stored your seed in an insecure place.


Title: Re: missing funds
Post by: HCP on August 07, 2019, 01:10:11 AM
You didn't even read my message carefully. The phrase key was written in a pen in a paper notebook! How can I withdraw money without knowing it?
Version 3.3.2 of the purse. Downloaded from your official website. Prove that it is not you as the developers stole my money! No one else could access the key phrase except the developer.
Did you ever type this seed phrase into a wallet other than Electrum or into a website to check addresses or try and claim "fork coins" or an air drop etc? If the answer is yes, then it is highly likely that your seed phrase was compromised and the thief has used it to steal your coins.

Did you ever store this seedphrase in a digital form (ie. email, text document, screenshot etc)?

Other scenarios are:
- Someone accessed your notebook. Are you 100% sure that no-one other than you has access to this book?
- Your wallet file was compromised. Do you have a password setup on the wallet? If not, and someone had a copy of your wallet file, they would have full access to the seed/private keys.
- If you do have a password setup on your Electrum wallet, but your computer was infected with a keylogger, it's possible an attacker would have both your wallet file AND your password.Have you checked with Malwarebytes and "Spybot Search n Destroy" to see if there are any known malware/trojans on your pc?


As others have mentioned, there were issues with "fake" versions of Electrum being touted by fake Electrum "phishing" websites (Identical copies of the website on similar domain names). Do you still have the original .exe installer? ??? If so, have you checked the digital signature of that file to confirm that it was indeed a legitimate version of Electrum. You can get instructions on how to check the digital signature here: https://bitcoinelectrum.com/how-to-verify-your-electrum-download/

If you still have the .exe, but are unable to verify the signature, upload it to a file host, post the link here and I'll be happy to check the signature on your behalf.


In case anyone else is wanting to investigate... the following may be useful (so you don't spend forever trying to transcribe from the screenshot ;)):
TXID: 09aac6b71d6342066176e6e5a7d57e2460d1562ba8cbf3892c90c0f422582727 (https://www.blockchain.com/btc/tx/09aac6b71d6342066176e6e5a7d57e2460d1562ba8cbf3892c90c0f422582727)


Title: Re: missing funds
Post by: bob123 on August 07, 2019, 07:29:29 AM
You didn't even read my message carefully. The phrase key was written in a pen in a paper notebook!

Yes, BitCryptex already pointed that out.
My mistake that i didn't realize it was a notepad on paper (that's probably the first time i see notepad without meaning the windows-notepad).



Version 3.3.2 of the purse. Downloaded from your official website. Prove that it is not you as the developers stole my money! No one else could access the key phrase except the developer.

That's wrong.

Everyone with access to your computer (theoretically at any time after the installation of your OS) could gain access to your private keys.
The developer do not have any way to access them. This is a fact.

You can continue blaming everyone else. But it would be more helpful for you if you try to find out how someone gained access to your private keys / seed. You are the only one to blame here.
If you don't change your habits and don't make yourself familiar with securing digital information, i can guarantee you that you will lose your coins again if you decide to store them the same way (the actual wallet software doesn't matter).