Bitcoin Forum

Scam and thief program, I woke up this morning and found the balance of bittrex 0 usd, it was about 40 Neo coin, and I found a large purchase and sale orders for $iris coin until the balance ended, I know friends who were also stolen, DO NOT TRUST THIS APPLICATION, BE CAREFULL BE CAREFULL BE CAREFULL.
This is their support response.

Hello,
We cannot really pay out any compensation legally, because there's no legal case.
As a company bond by law, we cannot possibly do it.
However we can grant you a lifetime PRO subscription. This is the least we could do for you. I'm very sorry.
They just laugh at us, so please minimize this app.
And any person who wants proof of that exists

Do you have screenshots? or a tx transaction.

The hacker has therefore send the full balance you received a warning email message like coinbase or binance.

It's This one ?

https://bitcointalk.org/index.php?topic=2308957.0

Or the first on google>

https://tab-trader.com

I have a screenshot of the bittrex platform
https://drive.google.com/folderview?id=17w2V2suMld-lX7kKphh_xIt5CSV6xp5j

I see you posted in the other thread about the user that also lost his funds through someone using his Bittrex api key to do trades and wipe out his balance. And like I said to the other user, I also need to say it here: are you sure you didn’t end up leaking your api key somehow? Malware, phishing, saving it in an online compromised account, etc...? You are the case number one but I still think that if this was a major issue on TabTrader’s part (like a exploit in their code), we would end up seeing a lot more complains than you and another dude.

Also, it’s better to use imgur.com to post the images. I can’t see your Google Drive image.

You can go to this site, you will find them

https://500px.com/lamehdi2014

This case sounds like an API abuse. To be honest it's quite difficult to prove whether the leak happens through Tabtrader or some other way and like TryNinja said, if Tabtrader is faulty then there should be more cases like yours.

I used them in the past and I don't face this problem. I don't defend them but maybe you should check again whether your API got leaked or not, and then remove all existing APIs from your exchange. Check whether your phone is infected with malware or not, check your e-mail, etc.

An analogy for this case is someone lost his funds after importing their seed through Electrum, while in fact their seed was exposed in the process due to malware or leaked through another way.

Let's say my phone is infected
Why isn't hackers hacking my other wallet?
Do you understand what i mean
We are more than 6 people have experienced the same accident
There are people from India and there is a person from Algeria and me and another person from Morocco
Plus why are they expelling us from the group on Telegram?
This indicates that they are responsible
Years work goes on in a second
Finally, this was their response
Hello,
We cannot really pay out any compensation legally, because there's no legal case.
As a company bond by law, we cannot possibly do it.
However we can grant you a lifetime PRO subscription. This is the least we could do for you. I'm very sorry.

What is this disgusting response

What happened:
a) you were careless by reusing your password and also using the same passwords in multiple services.
b) this password leaked before multiple times and we showed you a service where anyone can purchase all your passwords.
c) among hundreds of thousand of users you were one the very few users who reused leaked passwords and was affected. You admitted that you reused a password from a previously leaked database.
d) our service is not hacked, no data breach happened, no funds were lost. If the app simply allowed hacking the bad actor would have stolen millions of dollars, which never happened.

Below is our post mortem explaining what happened in your case.
https://tab-trader.com/blog/

The best course of action for you is to contact you local law enforcement.
Exchanges will be able to reveal bad actor identity because he was KYCed.
And you will be able to get your funds back.

Try to avoid the following your mistakes in future:
Do not to reuse old passwords
Do not use same passwords on multiple services
Do not use passwords with you name
Use strong unique passwords especially in financial services

Because ultimately your mistakes allowed the bad actor to simply login to your account. He was not even trying brute forcing, he just logged in. Because he knew your leaked password.

Your API key was probably exposed somewhere and orders were made to that coin. There are a lot of hackers that are trying to pump shitcoins or rare pairs and setting a sell order of that coin, making that pump and getting the BTC by those hackers with those orders. What I saw people experienced before is VIACoin IIRC.

I don't know if Tab Trader's security protocols have been breached. If that's true, there are other people who got victimized as well. In any case, I think that's what happened.

Or it was maybe this (https://bitcointalk.org/index.php?topic=5248708.msg54853439#msg54853439) what happened ;)

Can't stress the security measures TabTrader mentioned enough. Everybody here should at least have a subscription to the (free) haveibeenpwned.com service. Add all your email addresses and you'll at least get a notification for most major breaches, letting you know which passwords of yours are exactly compromized.
If you treat your opsec sloppily, they'll come after your funds. It's not a matter of IF, but WHEN.

Oops sorry I didn’t look at the user name posted it I didn’t know that it was actually TabTrader. Lol for me.  At least for all those who are using the application, they can be assured that there's no breach or something.

I think one thing you could do is to check the order history and check what type of entry point is the orders are like if it is through API, the website, etc.

I am subscribed to that, and it’s accurate as well because my password manager also tracks the email addresses that are being used or breached or something. It’s a great service, IMO.