Bitcoin Forum

I applied for an airdrop where I connected my wallet a few days later I noticed that my wallet has been hacked and some of my money are gone. I tried sending gas to the wallet to move some tokens to a saved wallet, but if I send gas to the wallet the gas is been moved automatically by a bot. I do not know what to do to recover some of my tokens from the wallet.

Sorry you have to learn this hard way but there is absolutely nothing you can do again. The hacker already has access to your wallet and I am even shocked that he left some tokens or coins there since you can see them. It would probably be a bait to lure into thinking you can withdraw your funds there and you send in gas fee. This gas fee will be wiped out by him every time you send them there.

For future references desist from all this airdrops of connecting your wallet and if you feel obliged to do so then Make sure you connect an empty wallet to it. Separate your funds from this kind of wallets

This is called a sweeper bot. It looks like MetaMask has made an article on how you could potentially save your funds from it[1]. I gave it a quick read, and you're probably going to need some technical knowledge for this.

I'm curious though, are you sure that's what you have? I would imagine that in order for this to work, the attacker would need your private keys/seed phrase, and you can't just get it by linking your address.

[1] https://support.metamask.io/hc/en-us/articles/5716855323675-Fighting-back-against-sweeper-bots

An auto-withdrawal bot has been installed on your wallet, and this was done as a result of your connecting your wallet to a Web3 scam airdrop site that ended up backing up your wallet data. And since your extracted phrase is what was only needed for them to activate the auto withdrawal, you might have little chance of recovering those funds in your wallet since the bots are always activated to target blockchain coins, which are mostly used to cover transaction fees.
 
For you to recover your fund, you will need either another bot faster than the one installed on your wallet (this depends on the amount you have in that wallet, as those bots aren't cheap at all), or if the bot gives a little space before it could move out your fee, then you might just need some extra hands, one of which can serve as the gas sender and the other as the token sender.


I believe the OP gave more than just their address; by connecting their wallet to most of these suspicious Dapps, or whatever they call them, they will at some point grant the site some sort of total access to their wallet which phrase and private key can be extracted without the user's notice.

I don't believe there will be any way to reclaim your stolen coin from the hacker. I'm sorry for your loss.

Airdrops are not profitable, and they are also a technique for hackers to gain access to your wallet and shift whatever you own through the wallet connection you have used.

I'm not sure how they do it, but perhaps the standard wallet connection is less secure than others because scammers can clone anything to obtain access to what they want. I would encourage you to avoid airdrops.

I know how it feels like to get hacked, and losing money. I lost almost $5,000 in January by an address spoof attack. It was my own fault in the end and in your case too, it was your own fault and no one can be faulted to. What you can do is forget the money and believe that if you are alive, you can earn it back with your knowledge and skills. That's how I actually thought of it and decided to make it back, still work in progress though. Good Luck mate! Also, that's why I started using CEXs more and decided to step away from DEX for some time.

There's no solution for a hacked wallet but to abandon it but if the hacker wasn't able to get all your funds then you still have a chance to transfer it to another wallet before the hacker steal it and then abandon the hacked wallet. I'm sorry that you have to learn it the hard way but that's all there is but to only abandon a hacked wallet. It is already compromise if the hacker can access your wallet which means the hacker have the secret seed phrase that you are keeping safe but failed to do so.

Probably a sweeper bot and thats a bad scenario. Ive been hearing some solution to this on social but not sure if its effective. Since sweeper bots are design to loot your eth right after sending. The best solution is to protect your wallet at all cost since you dont want to refeived a potential airdrop and knowing that the one will get it are hackers. As much as possible always take caution on those connected dapp or site cause they might be a chance that these are harmful to our wallets.

The moment you connect your wallet to things like this, consider it to be compromised, airdrops are not worth anything these days; so i can imagine losing money just to earn something that's not even profitable to you. I think you should stop sending any money into that wallet, because it is already compromised and you'll be incurring more losses. As a lesson, take the security of your wallet with utmost seriousness, and don't connect/import it anywhere, or type your wallets secret information anywhere.

Since it's about centralized token, technically the team who create the token able to freeze and reverse the token back to your wallet. But they're don't want to do it if you're not someone who have power, popular or rich.

As an Average Joe, the solution is none and you must not use the hacked wallet to hold your token, use the new created wallet and factory reset your device, maybe there's a hidden virus infected your device.

I've noticed that many members claim there's no solution when dealing with a sweeper bot that automatically executes transactions. However, I came across information stating that it is theoretically possible to create transactions that can perform both functions at the same time - funding the address with ETH to cover gas fees and withdrawing tokens from the address. Such a transaction would be executed in the same block, thereby preventing the sweeper bot from stealing the funds.

I'm not expert enough to provide you with precise instructions, but you can read this comment on the Ethereum Stack Exchange to learn more: https://ethereum.stackexchange.com/a/112099

When you applied for an Airdrop, do so from a separate computer and a new wallet that does not have any balance. Then, hackers will not be able to steal you because your wallet is empty, and in the worst case, you will lose gas fees, which are less than $ 5, but remember that you do not need to have a balance in your wallet to claim Airdrop.

Stop using your old wallet seeds or downloading random apps or add-ons you don't know about.

Maybe you should learn this for the very first time, any lost coin cannot be recovered as long as the transaction is confirmed, bitcoin or altcoins transactions are irreversible, that is why the security to your wallet is in your hands, you shouldn't allow anyone to have access to your wallet informations, immediately you're hacked, they moved all the funds in your wallet into another wallet, you can only trace the recipient but can't reverse the transaction, always learn to take security measures over your wallet, it's more better needed than investing on the coins to hold.

Sorry about your situation it's things most newbies or less experienced members faced, first you have to be be very careful when trying to get in on airdrops, campaigns, bounties or some sort of giveaways, those stuffs are opened to the general public and has no history of security, so you joining more of those opportunities ( in your opinion) is super risky

But if you must absolutely join in on such things you need to employ some strategies. You can have a wallet where you apply for them and where you would get paid in and then have another wallet where you would be sending your tokens to this wallet should be preferably offline. When you actually give priority to what you have than what you can get you would be better off.

You might want to give the OP's post another look. He's not trying to recover coins (tokens) from confirmed transactions, but rather tokens that are still available at his address/wallet.

It's a sweeper bot if all the tokens are worth it you can apply or get help in implementing this method from one security company from one of their client wallets


A crypto influencer is under a sweeper bot attack. How can Beosin help recover his funds? (https://medium.com/@Beosin_com/a-crypto-influencer-is-under-a-sweeper-bot-attack-how-can-beosin-help-recover-his-funds-1db672c51ace)

How to Beat an Ethereum Sweeper Script and Recover Your Assets (https://blog.mycrypto.com/how-to-beat-an-ethereum-based-sweeper-and-recover-your-assets)

Note: I'm not recommending their services I posted it here so you will get ideas and come out of with your own decision on how to recover your other tokens from your compromised wallet.

Let this be a lesson to all who participated in the airdrop to use another wallet preferably an empty wallet if you're going to participate in airdrops or bounty campaigns where you have to connect your wallet to a platform.

You cannot do anything with that your wallet is already infected so much better if you just let it go because the more you try to recover the funds left their the more money you waste so better move on already and try to make this incident as lesson which need to be learn. Next time don't use your main wallet on airdrops since its hard to spot which airdrop is legitimate and which is not so to to aid that possible happening use alternative wallet and choose hype airdrops and not those random one you pick from unknown source.

The wallet is not really hacked what happened is that you give a sweeper bot access your wallet which automatically allow the scam bot the authority to move your token. 
If the transaction is confirmed there's no way you can get the token back. 
I will advise you totally disconnected your wallet from the website and move your remaining balance to a new created wallet.

I faced the same experience as yours after connecting to some malicious web3 dapp and gave access to my wallet for that hacker to control my wallet and withdraw all my assets ( main tokens and coins as BNB). The problem is when i did connect that dapp to my wallet i didn’t have any coins or tokens inside it so i didn’t notice that it’s a scam dapp and that my wallet is infected.
One day when i sent some BNB i waited long and my coins didn’t appear in my Trustwallet so i suspected something is off, to discover that once the assets arrived to my wallet address they were sent instantly to another address ( scammer wallet). Fortunately it wasn’t a big amount and it was a very good lesson.

The solution for you is just to disconnect that Dapp from your wallet on walletconnect, a small google search will show you how to disconnect the Dapp depending on what wallet are you using.

be aware do not link the wallet where you store assets with any web. if you want to participate in an airdrop campaign that has to link your wallet, you better create a new wallet. and always do it like that so that the main wallet where you store assets is not connected to any site. it looks more troublesome, but because what you do more often connect the wallet with the web which is not clear. of course it is very risky. now you can't do anything with your assets. a valuable lesson that you must experience.

I tried this method but the bot kept defeating me.

Your wallet has been hacked due to your carelessness.  Since you are using a noncustodial wallet they got your private key when you connected the wallet there. So it is no longer possible to protect your wallet from hackers because the private key of a noncustodial wallet can never be changed.  So you should open a new wallet now and use it carefully. Following are the things you should follow after opening a new wallet.

▪️ Do not connect the wallet to any site other than a popular or trusted site
▪️ Beware of phishing links
▪️ Backup the private key carefully

You can go on your knees and plead with hackers to return the coins stolen back to your wallet. They usually have good conscience and easily forgive carelessness, they can return your coins...(Wild Imaginations!). Your coins are lost! so sorry, Best thing you can do is to learn from this experience, choose not to quit, choose to continue and start afresh because it will become your story. 

Since I know that my knowledge about cryptocurrency is not concrete yet, I try to avoid connecting my wallet to things I do not understand. If you do not know much about bitcoins yet to be able to spot a scam, do not do what you do not understand.

[quote/https://bitcointalk.org/index.php?action=post;topic=5462882.0;num_replies=20
https://bitcointalk.org/index.php?action=post;topic=5462882.0;num_replies=20
For a hacked wallet, one of the first steps to take is create a new wallet and transfer your coins or funds to the new one if the hacker don't have access to them already . You can also change your login details,activate two factor authentication and lock out the hacker .

If the attacker wiped everything already, create a new wallet and delete the old one permanently cause a hacked wallet cannot be used again. You can also report the issue online or to the police if you plan on getting your funds back. Scan all your
devices to prevent malicious program.





[\quote]







[https://trustwallet.com/blog/what-can-you-do-if-your-wallet-is-hacked]