Bitcoin Forum

so i made a withdraw request on 0.3 btc and then suddenly after that all my coins was withdrawn to this address:13jxBSEBCTNq45ATDxHdTMNdM2dVNH9bmq

I have been looking around the forum and found 2 users who have mentioned that the same happend to them.

I already wrote a email to blockchain asking for my coins to be refunded (dont think it will happend), Also i check'd my pc completley for viruses and found none, So im sure its not a virus, its a browser issue, most a SSL vuln like heartbleed back then.

Do you guys have any suggestion on where to go from now of?, Do you think blockchain will restore the lost coins, since its not our fault that the new SSL have a vuln


Sorry for my crappy english, its not my main language

Do you know whose address is this? Is it possible you had this copied and mistakenly copy pasted this in the send field? I don't think blockchain.info will/can do anything in this matter.

Did you access blockchain.info using Tor?
Then a malicious exit router could manipulate your communication. It has happened in several cases already, so Tor + blockchain.info is absolutely incompatible!

Onkel Paul

if you are using TOR, there is your answer

Isnt blockchain traffic https-encrypted? How is it done then? And is tor in general a bad idea for using it with wallets?

Apparently the problem isn't with bitcoin traffic, but with accessing password-protected sites using Tor. Using bitcoin-qt with Tor to hide your IP is ok.
I have not studied the exact circumstances, but it seems that Tor exit nodes may intercept and manipulate traffic. Normally SSL certificates should protect against that, but I don't know whether users just clicked on the certificate warning as they're used to with all the shady websites that present self-signed certs :-)

Onkel Paul

If it was a bug/security flaw in SSL or similar, it would affect all blockchain.info wallets and there would be a bazillion reports by now.
Far more likely is that you got duped by phishing (or possibly your computer is infected. Running an antivirus doesnt tell you all that much, a good rootkit would remain hidden).

Hackers most like that crappy wallet like blockchain

What?? Its a great wallet.

This guy probably has malware on his PC, or used autofill in google chrome.

where did you get your BTC address? if you use vanity address feature/program to generate it, maybe because of this.
if you get that address from blockchain.info, i think your PC was infected by malware and somebody steal your BTC using this method