Bitcoin Forum

On Saturday hackers stole my 375,000 worth of NFTs and crypto tokens from two of my Ethereum wallet. Before I start I know how stupid I was $375k worth of stupid, I put my private keys and seed phrase in text files on my Mac's filesystem, that is a bad idea. I didn't use a hardware wallet for high value assets.

What Happened?
Hackers found  METAMASK & TRUST WALLET ETHEREUM PRIVATE KEYS on my Mac's  and use them to login to OPENSEA and sell off everything they could for WETH , then they transferred all the WETH and other tokens

I'm kinda confused for you loss as that is an expensive lesson to learn, hopefully you didn't spend $375k on them or that wasn't worth that much to you because that seems like a lot to lose to a hacker when $80 could've saved you.

Do you know how the hackers got onto your mac and if they're still there?

That's probably more important than what the actually did if it was private keys they were after and sent you a phishing mail or something.

Mac is not a hack proof and this is another proof for that.

I don't know how long you have been here in the crypto sector but even the one who have few hundred dollars worth of crypto assets concerned about their private keys but you let all those funds in a text file which can be accessed multiple ways with or without physically touching the device where it got stored.

I didn't spend up to 10k dollar on those tokens and NFt, they actually did a bull run on all

I really wonder what it is to keep your property as well as your personal computer safe for such a large sum of money.
No matter what, I see that you are not really serious about your own money, and maybe this will be a lesson for you in this field.

Huge amount like that should've been hand with care.
People with lots of funds/assets in Crypto should try to avoid having single key for accessing their funds. They could split the funds in multiple parts and store their keys in seperate places so they don't lose everything if a thief finds part of the keys. Or they could use mutisignature feature to keep the assets decentralized and secured.

You may get trapped by phishing or fake link. How is it possible for the hacker was hijacking your mac filesystem if you're not doing something wrong with it? I guess you're also storing all of your privatekey in one place. You should at least spread it into the various folders or store it on your USB. The problem is there's no protection for your privatekey.
I were using keystore instead of privatekey when storing my wallet. Im sorry for your lost but that's big amount of money.

I guess the hacker was sending it on their cex address.

I understand correctly that hackers used your wallet to sell your NTF tokens on OPENSEA only then started transferring tokens to other wallets?
This is the most interesting moment in this story, because hackers usually transfer all tokens and coins immediately to other wallets and then sell the tokens.

Will there be proofs?
What is your Mac model?

I have also lost my asset by putting my private key one airdrop actually we cant understand sometimes what we are doing and what we want to do so we should always avoid free airdrop or free token  now too much smart from investor and normal trader so have nothing to just time. I want to say ethorium should make google authentication kay for all addresses then can it secured.

Someone would even buy a hardware wallet for his $500-$1k worth of crypto and then you've got that much but didn't protected yourself through buying it. Yet, instead you've just saved those phrases on a text file on your mac.
It really is a terrible idea and if this story is true, what are you planning next and what you'll do in recovering from this incident?

They wanted to sell the soonest possible time before the real owner could file a complain to Opensea. I believe part of their terms and condition is they can remove the nft from the list of tradable asset if it's proven stolen.

He bought them at a low price and the price pumped apparently.

Chances are you are trapped by phishing or fake links sent by someone to you, and it's really unfortunate that you have to lose a lot of money that you have accumulated so far so this will be a lesson for yourself and especially for all of us on this forum.

There are several possibilities in your case

- Have you ever sent your private key to a website
- Have you ever connected your wallet to a certain website
- Your Mac has a virus

Next time you should be more careful with these three things

:-\ I am so sorry about this, but you should have known that it is said that you should keep all keys on a paper that you keep in the safest place and don't show to anybody. Actually, if someone knows you seed phrase or private key, you don't have your money on this wallet any more, as who has keys, he has money. It is one more lesson that we should keep our passwords at safe places where nobody has an access.

First of all, sorry for your loss sir and hoping you are still doing well despite all that amount wasted and stolen from your wallet. If you have such huge amount better to secure it using hardware wallet, it's much safer that way and besides you can spend huge amount of NFTs but cannot buy a 200 dollar hardware wallet. Anyways, hoping it will be lesson to us here that better to be safe rather than sorry in the end and better to have hard copy of pass phrases other than storing in our pc or online.

If thats what happened then the hacker have access to your laptop/pc. Thats kinda been strong malware to get it on your pc knowingly the one you are using us apple which has been strong and has a high security features. Also if the nft ia worth 375k, then its so many nft? Its not liquid that can be dump right away, or else you got a very rare nft that has a lot of demand. Im not sure how your asset has been stole so easily without you knowing it. In any casez it would take time and you should have been noticed what is happening.

I though mac was more safer than windows? Did you installing any shady application before or maybe clicking some phising link? Dude 375 was huge amount and you should trace it, Can you give us your address we can also checking this one? I personally have same experience with you, Hacker stolen my private key through my PC and i think it's because i'm installing some malware application before, Not an big amount i loss around $3k (ETH + UNI) check here https://bitcointalk.org/index.php?topic=5221759.msg53734483#msg53734483

just be careful for the next time and always do some virustotal check before downloading or installing any application and don't click any shady link.

It's really shocking unawares showing from your side, you are one of them which one avoid their wealth security. study more about how can you secure your most valuable digital assets, it’s a huge loss.

That's scary to see how hackers could gaining an access to our local computer, i wonder why how they do that so we could be more careful in the future.
Did you visited any untrusted website before or the hackers could trace our computer just by the address that they see ? if you are not doing any dangerous activity and the hackers could hijack your PC, that means the wallet security have to be improved.

Such losses are now very common and, most likely, their number will grow with the increase in the number of users of the cryptocurrency. The majority of people will not be able to avoid all mistakes, no matter how we warn them about it. Of course, the most common mistake is keeping the secret keys from wallets in places where hackers can get to them. Now I do not store private keys anywhere in electronic form at all. Only in paper form and in a few safe places. If I use certain secret keys often and it is very inconvenient to type them manually from time to time, sometimes I store on my computer most of the key code, or the code of this key changed in a certain place. Thus, if hackers hack into my e-mail or place a malicious program, they will still not get to my secret keys.

Well, you got lucky because you've managed to earn that amount of money just by using a small amount of money.
The bad thing is that you let the hackers take the money.

Just a few weeks ago, I don't know how but it seems that a hacker managed to hack my computer for some reasons and got this account. Fortunately, he didn't got any cryptos that I'm holding right now so I don't know the reason why and how the hackers managed to hack your NFT's.

You spent less knowing the amount that you got that you said but still it is a loss and you must've learned from it :). Hardware wallets are always there and you can buy one. Be careful with the links that you are clicking and don't save your seed phrase in your computer. That is what I'm doing right now.

Sorry for the loss of your friend. It's exhausting and stressful when something the same has happened to you. People should really be careful where they're keeping their assets or else they'll have a bad experience just like OP and your friend. Be responsible with the assets that you're keeping because we have to learn from the experience of others. We have never wish it to happen to them and to anyone, we just need to take extra care.

that's sad mate, actually it's too skeptical to store in our devices especially if we used to browse different sites online because that's the main causes when it comes hacking, and indeed we don't know if we already stepped on their phishing links around the internet or what ever it is that will become a key for them to have an access on our devices.  So i suggest just lesson learn mate and be aware next time.. And also void public wifi because they're now not safe especially if you use to saved txt files on your computer, because some of them is like a phishing link nowadays..

I can't imagine how I feel when that happens to me and before it happens to me/us, we should have to secure our funds first by using a hardware wallet if possible or not to use put our keys on the gadgets as it was easy for the hackers to find it.

That is totally a big loss for you mate, you can't take it back anymore. It is a lesson to learn and needs to be correct now. A lot of people got this kind of scenario, maybe we could say that they are unlucky but who knows that someday hackers will found us as well. That is why we should need to keep our keys separate and we let these hackers find a hole to access and take control of our wallet.

For someone owning even a $1,000 asset, I'm expecting they are aware of how they will secure their respective assets. If a person holds an asset worth $300,000 they are much more strictier on that part. No one to blame here but OP. It's hard to move on from that loss and it will take years of disappointment and regrets. It's ok to be like that but try to slowly catch up with your normal life.

I don't know how hackers are able to dig your MAC without being in touch with it. No such actions should be made even remotely if no permission from the owner.

losses with a very large value ,usually what I hear is that a hacker uses a file type of virus that can send data on the target computer to the hacker's computer ,but for such problems there is usually an anti virus that detects it, does the OP turn off the anti virus performance? Why are important files not saved properly

I remember exactly the same thing happened to my friend. He also put his seedphrase to txt file with a filename "<name> axie". It is so easy to find. That was his investment and his only team. He spent his savings to it. His axie team was only 1 month old and whats worst is that his capital has not yet been returned. I know up to now he can't get over with what happened. He became easily sad if he remember it. The moment he noticed that he lost his team, he was two days unable to talk to anyone. What more of your $375k. What did you do to try to bring it back? Did you feel you want to stop investing in crypto ? Have you move on already ?

of course, fantastic values can be retrieved very easily, is there any mistake from the op himself being able to experience this and whether or not a reliable save is made. this is a question for many people if one gets hacked and its worth a lot.

it could be that what you said happened because the hacker had sent a type of virus that he didn't realize was actually opened and hacked the data on his computer, but if he used the original anti-virus, there would obviously be a warning. did he ignore it, or could there be a trick of his own by not realizing that he was giving access to his computer, because the hacker's unconscious request was thought to be wanting to help.

but from this there is a lesson in not being able to trust anyone and keeping valuable data as safe as possible with reliable security.

is there any solution now???
cause 375k$ is a big amount
can opensea come for any help??