Bitcoin Forum

maybe this happened via Tor, because it was shortly after i logged in to a dark site and also my wallet.

please save all the "you were stupid" comments.  i know that now.  lost $14,000 at the time of the hack. i thought by only writing my wallet identifier down on paper along with my password, and never storing private keys in email or other such things i would be safe.  guess not.  

been playing with coins a long time.  this was my savings.  i know, should not have trusted blockchain.info on Tor.

wow this really hurts.

i made a new account for this post.  don't really want anyone to know who i am.  :(

I feel bad for you mate , really . I'am not going to say that you was stupid or anything that makes your depression condition worst but...
Simply don't never ever store your Bitcoin on an Online wallet (and that include exchangers which are getting hacked one by one since 2015 started)

~ Madness

years ago i tried to store a bitcoin wallet on a flash drive and ended up losing some coins when i couldn't access it.  after that i figured the online wallet was a better choice.  im not an IT person.  blockchain.info seemed like the biggest and most reliable service.

What darknet site did you log into? Did you log onto you wallet via tor. Did you have a second password and 2-factor set up?


It doesn't matter whether you store them on a online wallet or on your desktop if you get a virus.

You could simply use a wallet like Electrum for example , once you setup the wallet they gives you a 12 words seed . just wrote those paper on a piece of paper and make sure you never lose it . In case of a computer failure or PC hacked or whatever , you can recover your Bitcoin and your wallet from those twelve words .

~ Madness

https://blockchain.info/tx/0ada981f1b102cb87469b3ade7da7735b8e086e4f78f9e160c345ade722ca188

that is the transaction.

You can do that on blockchain.info too.

I didn't knew but still it dosen't matter . It's an Online wallet , all the hacker need to do is a Keylogger or malware on your PC and you are done . If OP want more security he should go to the following wallets : Offline , Hardware & Paper wallets . (By order from the less to the top secure)

~ Madness

This is unfortunate :(

yeah i have the seed from blockchain.info.  but that only restores the wallet, that doesn't do anything to protect your coins.  so what if you can restore the wallet if it is empty?

frustrated that i can only post every 360 seconds- 6 minutes.  :(

about 10 hours after i used the wallet it was emptied.

i was using a darknet market.

And exactly the same can be said for desktop wallets. In fact, if you have 2-factor set up on something like your mobile it's probably safer than a desktop. Without your mobile phone the hacker can't get access. The other methods you mentioned all aren't foolproof either especially if you are already infected or get infected with a virus.



He brought up restoring wallets with the seed, but did you have 2-factor verification?

Print a cold paper wallet from blockchain.info should suffice, so your private keys are stored only on paper. It's quick and easy.

I'm really sorry for your loss mate.

Sorry for your lost. Hope you recover soon. Better not touch darknet with an online wallet next time.

i didn't know it was hacked from Nov 30 to yesterday- Feb 20.  i just logged in to move some coins from other places into my wallet and found it completely empty.

i rarely log in to the wallet.  i guess Tor is an absolute no-no, right?

yes it could have been a keylogger or some other malware but i scan often with Malwarebytes and Spybot Search and Destroy. 

thanks everyone for your support it is much appreciated right now.  i realize i made mistakes and this is my fault.  its just tough to accept after so much time and energy invested into bitcoin.  just feel very frustrated.

Tor has seemingly been responsible for many blockchain.info hackings so I would avoid it completely. Can you tell me whether you had 2-factor? I'm guessing not? Everytime someone's bc.info account gets hacked it's always the same story. Blockchain.info has many security features and you need to make sure you use them.

i know people swear by 2FA but the last time i tried to use it with another site i got locked out- my account was frozen and it created a huge hassle.  as a result i never wanted to use 2FA.  of course this probably would have protected my coins.

You could have your money stored in paper wallet. 9k eur is too much to be stored online.


Or buy a Trezzor

Well I'd personally prefer a minimal bit of hassle rather than lose all my funds. I've never seen somebody get hacked when they've got 2-factor set up and it is very simple and quick to use on blockchain. Takes a minute to set up and then only seconds to enter it each time. Better to be safe than sorry the old saying goes.

Don't know about bitcoin wallets with 2FA being hacked, but I know a few banks which used a two factor authentication and still had their clients' money stolen in spite of it (and it was not an inside job). So this is not a 100% guarantee at all (in fact, far from it).

Sorry to hear, $14k is a lot of money.

Sounds like they stole your password via a malicious Tor exit node.

I would never trust storing any Bitcoins on the web without 2FA.  You can easily backup your code by doing a screen shot of the initial QRC setup code.

Damn man that sucks... That's a lot of money. Any chance they got the mnemonic if you had it on your computer or something?

Moral : never use Tor with an online wallet. A lot of people have lost coins this way in the past.

Is it really possible to hack bitcoins from blockchain wallet ?  I thought its safe and most secure wallet service . But now I am moving my all funds from my all blockchain wallets to coinbase wallet.

I feel coinbase Vault ( cold storage ) is the safe place to store my all bitcoins.

Several weeks, maybe months ago, blockchain.info created hidden service for accessing their online wallet via Tor. It's unsafe to access their clearnet wallet service via Tor, but it should be safe to use their hidden service via Tor.

They definitely didn't get my mnemonic- the only place I had that was written on paper.  Same as my wallet identifier and my password.  The only thing I can imagine is that it was the Tor exit node as mentioned.  I don't understand how that works but apparently it is a serious threat. 

I am reaching the point of acceptance slowly.  It is what it is.  Hopefully others will see this and stay away from Tor when using the wallet, and also use 2FA.  But probably the best idea is offline storage.

Someone should start a thread warning people not to use tor with blockchain.info wallet and mods make it stick at the top of the forum. This is easy pickings for hackers and equally easy to prevent.

Sorry for your loss...

So, don't rely on 3rd party. Period.

This, when you access blockchain.info via Tor you must get out from the darknet to the clearnet via a Tor exit node, there are well known attacks that can be set up using exit nodes like MiTM (Man in the middle) where essentially all your traffic goes unencrypted via the exit node.
Using the hidden service (*.onion address) instead of the web address should be safe.
Education is what will protect you the most.

EDIT: https://blockchain.info/wallet/anonymity

It won't help restore your lost coins (I'm very sorry about that!), but I did learn some good info using 2FA this morning that I posted over here:
https://bitcointalk.org/index.php?topic=962306.msg10557511#msg10557511

If you follow it, you'll find you are able to recover from losing a 2FA device such as your smartphone.

Best wishes and hope you can achieve a totally secure bitcoin setup going forward. And that the thief eventually is caught and hung out to dry.

If you want my opinion. I suggest you now use Coinbase as a wallet.

You can force it to use 2 factor autenticatoin and can use a Vault wallet (funds are sent only after 48 hours, meaning you can easily stop the transaction in this time).

My sympathies for your lost funds.

That is serious amount of money hope they can help you out to get your money back.

blockchain.info has had several problems with their wallets through the years, including one that happened to me.  I had some BTC (+/- $400 worth), protected by 2FA, but "lost it" even though I had done nothing...  After some back & forth with them (I had the goods on 'em), they restored my BTC, but never told me what exactly what had happened.

I only keep small amounts at blockchain.info for convenience.  Larger amounts for cold storage in my Trezor and Ledger Nano.  Both of those hardware solutions work well for me.

*   *   *

A similar thought occurs to me re MIXING.  I would not mix large amounts all at once.  Learn to do it correctly, then mix smaller amounts to hide your trail without risking a big loss.

The BitcoinFog thread has quite a few tales of woe among people trying to mix large amounts.  A lesson there.....

Necro bump just to give awful advice? 

Moral of this story is DO NOT USE AN ONLINE WALLET TO STORE YOUR COINS.

You should never keep that much on a online wallet

Sorry about that mate, i hope you get over it soon, i dont believe in all this backups because once the hacker access your account and the funds are removed it will be of no use but i still trust 2FA to some extent.

never trust online wallet or any promises given by any individual or institution. Just use cold wallets or hardware wallets if you have large amount of money. Hardware wallets are the most easy way to store your money but cost you a little money but comparing with the amount of money you are holding, it will be ignored.

you already lost 39 btc i think that is terrible thing and i understand that why you are so sad but my advice is if you want to keep lot of btc please do not save it in online wallet because it is too risky and better save it in cold storage it's more secure than online wallet

this is a really sad story, its not a stupid just a clumsy act to log in into dark site, make this into a valuable lesson, you can try to store it into offline wallet, and nowadays scammer and hacker are getting smarter be careful if any website provide for you a link or try to install s program into your computer

I really don't understand why people don't use 2FA's
It's easy to set up with Google Authenticotor.

And the best of it, it's impossible (unless you are stupid) that both will be hacked...

it is a good point 2FA's is very important for every online accounts that used to store your valuable money inside , But finally i figured out peoples these days used to find everything in an easy way so it is difficult for them to do that.
So Laziness lead to loose a lot of things around money,girls, sometimes your life too.

Sorry to hear that but offline storage of online combined with 2FA are the only acceptable solutions for me.