Bitcoin Forum

I just woke up this morning with the notification of unusual transactions on my imtoken app.  The person transferred $1.28 worth of ETH from my account ($0.62 + transaction fees of $0.66).  The ETH was the one I left in the wallet for gas fees.  I can't remember giving anyone my private key.  I just can't figure it out.  Please I need help if there is anything I can do before the one that will be worse than this happen.

Below is the transaction hash

https://etherscan.io/tx/0x427d1c7cc3f6662ef99831dbafd272047fe39e9e9500cb29d6003f80d4333427

Have you ever given your priv key to the your close person? It looks like you must try to migrate into the new wallet as your wallet is not safe anymore. Your wallet will not create a transaction automatically.

If that was happening and then you must never try to use it again. If you never give your privkey or access to your imtoken and then your wallet getting hijacked.

Create a new wallet and forget your old wallet. The hacker was taking your ethereum to be used for sending his USDT and i believe if that was also a stolen money too.

What about the tokens I have on the wallet, is there another way of moving them now that the ETH transaction fees is so  huge?

You will not be able to do anything about it except move all the assets you have to another wallet, because your wallet has been purely hacked by someone else because of your negligence in the past even though you don't remember who gave the key. your personal beforehand.

Alright, thanks for the advice.

You still have tokens on that wallet. If you can't avail of the loss of those tokens, move it quickly but you need to spend the GAS fee for it.

The nearest assumption is that your wallet has been compromised by someone. It could be from the forms that you have filled up or there's an app or file you have downloaded that contained malware.

In my opinion there is no other way than to move the assets in your old wallet to a new one, indeed the transaction fees are quite high now but if you don't move your assets immediately, I am sure you will lose all your assets. . It is better to pay a higher transaction fee than to lose all the assets you own. Think of this as an important lesson in your life, so never open your wallet in another place even if it's your friend's place and never use someone else's wifi to open your wallet, because all of that will be a big risk for you in the future.

Someone got your recovery seed of your wallet so they accessed and send what you got but you didn't lose much since you didn't have anything left on it.If you have any tokens which has value then try to move them to new wallets, don't import it because someone found your keys so changing wallet can't save you from losses.

Generate a completely new wallet.
Make sure you don't keep the private keys info online (mail, cloud/dropbox, your computer, your phone), especially unprotected.
If you plan to go for bigger amounts of money, you may consider buying/using a hardware wallet.

There is always a little bit of risk involved when you do transaction from your computer that is connected to the internet.
It's possible that you were hacked or that you typed in your Wallet private key into a fake phishing website.
What you should do now is create a new Wallet and send everything from your hacked wallet to your new one.

This is only means someone already have access to your account better to make a new one if you don't want to experience big problem next time . Your lucky doesn't have big balance so the hacker only get a little amount for you but as a warning its not safe to continue using that wallet. Create new and transfer all the funds to new wallet that you will be created.

If your wallet didn't have ethereum left and the hacker can't send your token but the hacker can send ethereum to your wallet to steal your token. It's better to use a new wallet rather than try to keep your old wallet that has already hacked.

Never mind, whether you have given now the key to someone or not. ASAP transfer all the coins from that wallet (if you have any) to another wallet, as your wallet is compromised. Do not wait for more damage to happen.   

This should be your highest priority as the wallet is compromised. Once you transfer to another wallet and when its safe , we can backtrack how the wallet got compromised.

I so much appreciate all the advice so far. I've been working on transferring the seems much important tokens to a new wallet address.  Thanks to everyone for helping out.

that's better thing you can do if you know that your wallet is possible hacked because of that unknown transaction . Make that wallet empty and don't use that wallet any more , I don't have any idea if how secure IM token is but its better to sustain wallet like myether and meta mask for creating a wallet.

Now the wallet anyway is just full of shitcoins, I'm sure you can create another wallet and forget about it because there is no way you can get the sent tokens back.

MEW has new app version which you can download through google playstore. I believe you will need to pay some EOS when creating IMtoken wallet but MEW is free.
Also just don't share any data regarding your wallet not even your address if possible. 

Seems you're new in the crypto space. I think there are two things that must have happened.

Either you have a pending transaction that you forgot about but eventually went through or

You have been careless with your private key and have now been hacked. If you suspect this to be the case, then you should probably change all your passwords and get a new wallet.

the only thing you can do now is no longer use the wallet and with the tokens that are there I think you don't need to worry because the tokens you have still don't have a value. so just throw it away, because it's useless to move your token now "very expensive fee" is not worth the price of the token you have

Aside from moving to another wallet and moving your tokens to the newly created one, you must check your system before doing any of these.  Who know some trojan that steals information is intalled in your device.  Better make sure that your system is clean before doing anything because all the effort will be in vain if you failed to remove the malicious file / apps that is stealing your systems information.

Adjust it with lower fees.
As long as you can send it to a different address he cannot do anything about it.
There is no cancel button there that will enable him make another transaction.
That's the best way you could secure your funds.

You might have misplaced your private keys somewhere with an internet connection.
Also just a heads up, don't use it for logging in and don't keep it in your e-mail.

I have reviewed the contents of your wallet and I do not see the point in spending Ethereum now in order to withdraw these tokens to another wallet. You may need to come back to this later when the Commission on the Ethereum network is low.

If you are the type that is used to Airdrops things, you might have submitted your private key to some those scan target Google form for private keys hunt. Crypto is secure, you have exposed your wallet to second party otherwise no one can have access to your fund.
I will advise you to create another wallet, write the private key on paper and save it. Don't save it on phone, any can hack you or have access to your phone

I had some problem like this on the imtoken before, when I was bounty hunting I just have 1 erc-20 wallet address and I connected it on imtoken then after a week or two, there are some missing coins in my wallet some has a value and some are not, I didn't know that the notification of my app was not on and so I knew if late, and was not able to get those back.


Now my full trust with wallet is on MEW, I have not encounter any problem with it yet.


OP's problem probably cause is that he stored his private key in place where it is easy to compromised like Cloud storages, or something that is connected to the internet. Be careful next time.

Your tokens will be untouched. Don't worry.

The hacker won't waste any effort to get those tokens since they have no price after all. No need to even move it to a new wallet because why spend for gas for nothing unless you precious those tokens with no value.

Even counting for several years, I don't think one of your hold tokens there will be valuable in the future.

i think its better for you to create a new ethereum wallet and keep all the secret file in safe place my friend
then send all your assets to the new wallet, because your old wallet is not safe anymore

Can you replace the private key on the Ethereum Wallet?
if it can be a good solution than having to replace a new wallet when the wallet is hacked.
Can you tell me how?

Surely you are hacked, you have to give more info about the latest installed software on your PC. Maybe it is malware or keylogger which damaged your security and robbed your personal funds. I don't know which device you are referring but having a second backup will be the best solution to protect your personal files. After cleaning the device, the new clean operating system will be a better idea rather than believing a threat checker of antivirus programs.

Ain't possibility that the imToken wallet app is prone to any hacking incident as it because there is no 2FA available to completely secure our funds.

https://www.cryptocompare.com/wallets/imtoken-wallet/

Reading some reviews out there, you can think that this app isn't truly secured and anytime you might lose your funds to the other hands.
Only I can advise you is not to use that app again, the risk is high, and possible that it will happen again.

Well, it's up for you to think and assess every review that they have. I already understood that not all of these are telling the truth, and besides, you can tell it actually.

Your key your coin you must be the only who has sole control of your coins and your wallet if there's a movement, then somebody already has access on it, the only solution is to act fast and transfer all your funds to your other wallet or you will wake up with all your coins gone, there is already a breach to your wallet.

Your wallet was uncompromised. the scenario is you must transfer your token quickly. if you don't have much such a fee, you need to transfer a bit eth then moving it fast into a new wallet. Don't use the same application and device, create a new wallet from other applications, and use a PC because better than a phone. don't forget to create it offline or use an air-gapped device for the long time investment, and adding a passphrase for more confidence either.

Luckily you don't have much ETH, so don't worry too much about it, you just need to use the new ETH address and leave the old one,
if what you use is imtoken, you only need to try to replace another wallet such as the Trust wallet or MEW wallet.

Better to make a new ethereum wallet and the next time try not to click any unknown link that might be contain a phishing link that can stole your private key on your mobile phones or at your pc so try not to saved your private key on your computer or mobile phone also. Try to clear your cookies after using the internet. Just be careful as you will dont know what hacker can do if you make a mistake clicking any phishing site that can stole your data.

In the first place, you can't do anything about it dude, I suggest you create a new one. Because for sure your account there is not safe to use anymore. Next time, you better be careful especially about the private key of your account on Ethereum so on this type scenario will not happen again to you.

You need to transfer everything you got from that wallet to somewhere else and install some anti-virus on your system, never share your private key to anyone else, and preferably use Jason file to access that wallet , You can loose your money easily because the private key is not changeable, once they got it it's about who takes the money out faster!

Your wallet has been hijacked , if you’re still trying to make use of that same wallet, then it would be a really bad idea. Those that hijacked the wallet will likely be checking back to know when you put another money on it and they will also do the same thing, steal it.

So, the best thing you will have to do now is to stay clear from it, uninstall it and look for a better wallet that you’re going to be using and also try to be careful with other things that can give out your information like your email, be careful with it and try to know whether someone had access to that one too and log them out and reset your password to keep everything safe.

IT doesn't have to mean tht you willingly gave your pvt key to someone.
Is the wallet web based? IS your computer secure enough? Are you using your wallet on a public wifi like starbucks etc?

Someone have accessed your wallet very easily, The private key is the only access to make transactions in the wallet, you can say never give the private key to other people, and in fact you get transaction notifications that you never did. You should leave your old wallet and immediately move valuable shitcoin into a new wallet, because the old wallet is no longer safe to use.

Also remember that you have to be fast in moving your coins because the hacker might be watching it to see if you are going to send some eth gas into it. It's also possible that he has a program that automatically sends tokens to the hackers wallet if there's gas in the hacked wallet.

I don't know if you have valuable tokens in there but if there isn't then just completely make a new wallet and secure it properly.