Bitcoin Forum

Bitcoin => Electrum => Topic started by: legendsneednotags on July 20, 2017, 05:46:19 PM



Title: My Electrum Wallet has been compromised. Please Help?
Post by: legendsneednotags on July 20, 2017, 05:46:19 PM
Hello there family!

I just realized that I was hacked on my Electrum Wallet.

I shall summarize below as to what happened. Please suggest what I can do.

The transaction ID : 1877ded9198c63d96dce53bc9d251195fa56aeddad38a616e5a1fdb3a33de636

Amount of BTC withdrawn ( hacked ) : 0.4200212 BTC

Date: 2017-07-11

You can go check more info about this transaction on blockchain.info

It was sent to the address 15WKd1rrYm4P34yvY2cgnow7WH5rfebPMM.

I was not even online when the withdrawal took place.

Can someone please help me figure out whom the wallet belongs to, or any more info on how I can probably do something about this?

I did try to track the chain of events through the tree chart, but then I realized that it has been sent to many different wallets and is gets messy after a point.

I have not shared the seed with anyone nor does anyone know my password. I was under the impression that my BTC is safe since it's on electrum. But turns out otherwise.

It was a part of my savings, which I had kept for a noble cause, a rainy day for the future. Now it's all ruined.

Did Electrum have any loopholes/bugs that were exploited? Anyone else faced any similar situations?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: RealBitcoin on July 20, 2017, 06:30:51 PM
I am not aware of any Electrum bugs, but if the coins are lost then they are lost. Eventually go and file police report 0.42 BTC is like 1000$, if you think that money can be recovered then do it.

Think back how it was possible for the hacker to obtain your wallet info, think of the sites you visited, maybe you can find clues that will help the cops catch the perpetrator.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: legendsneednotags on July 20, 2017, 06:45:06 PM
I am not aware of any Electrum bugs, but if the coins are lost then they are lost. Eventually go and file police report 0.42 BTC is like 1000$, if you think that money can be recovered then do it.

Think back how it was possible for the hacker to obtain your wallet info, think of the sites you visited, maybe you can find clues that will help the cops catch the perpetrator.

It was not lost, it was HACKED by somebody. Could I get more info like, the name of the site it was sent to, IP etc by seeing which address it was sent to?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: kolloh on July 20, 2017, 07:59:55 PM
I am not aware of any Electrum bugs, but if the coins are lost then they are lost. Eventually go and file police report 0.42 BTC is like 1000$, if you think that money can be recovered then do it.

Think back how it was possible for the hacker to obtain your wallet info, think of the sites you visited, maybe you can find clues that will help the cops catch the perpetrator.

It was not lost, it was HACKED by somebody. Could I get more info like, the name of the site it was sent to, IP etc by seeing which address it was sent to?

Unfortunately, it will likely be very difficult to trace where the coins went.

If your wallet was hacked, it is likely that there is some malware on your device. I strongly recommend scanning your PC with several different AntiVirus software or considering a reinstall.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: codehtcmail on July 21, 2017, 08:23:46 AM
If you're using a weak password and are surfing the net with no antivirus or malware protection, your whole computer is compromised and no info on it is safe.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: adaseb on July 21, 2017, 08:32:59 AM
Did you use Electrum by Cold storage (computer never connected to the internet) or did you just use it with your regular PC that you browse the web ?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: legendsneednotags on March 25, 2018, 08:21:32 AM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: legendsneednotags on March 25, 2018, 08:25:00 AM
Did you use Electrum by Cold storage (computer never connected to the internet) or did you just use it with your regular PC that you browse the web ?


Used it with my regular PC


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: ranochigo on March 25, 2018, 08:47:55 AM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.
No. It's not possible for Electrum to compensate everyone who lost their money. It's simply impossible for them to verify who was the one who has lost their money due to a bug in Electrum. Granted that there was a serious vulnerability in Electrum, I don't think anyone was actually affected by it.

The most likely scenario is that your computer was infected and compromised.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: nc50lc on March 25, 2018, 09:58:35 AM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.
Does the US Government compensate you if someone robbed your dollars? It's obvious right?
Electrum team didn't offer the wallet to you and you have agreed to their TOS.

There are too much things that might happened like:
  • Exported private keys was exposed
  • Malware
  • Phishing sites
  • Fake Electrum installer
  • Your seed was compromised during your backup process and
...The hacker may have just patiently waited for a reasonable balance to show before moving the funds.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: Ayanamirs on March 25, 2018, 08:55:03 PM
From where you download the Electrum?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: TryNinja on March 26, 2018, 12:55:19 AM
From where you download the Electrum?
https://electrum.org/ (https://electrum.org/)

This is the ONLY official website. All others are fake, so be careful.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: teddy5145 on March 26, 2018, 09:41:35 AM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.
Nope, electrum just provide you with a wallet to store your Bitcoin, they do not compensate for any security issues on their user's end.
Same thing with online wallet, if you got your hacked they won't compensate you.
I'd suggest to make sure that you are downloading the real electrum, chances you might be visiting a phishing website.
Other suggestion is to scan your PC for Malware that hijacks your clipboard.

The address 15WKd1rrYm4P34yvY2cgnow7WH5rfebPMM only has one transaction in it, either the hacker generated a new fresh address or you just somehow sent it accidentally to someone's elses address ::)

Edit: What's your Electrum version?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: legendsneednotags on March 26, 2018, 02:16:51 PM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.
Nope, electrum just provide you with a wallet to store your Bitcoin, they do not compensate for any security issues on their user's end.
Same thing with online wallet, if you got your hacked they won't compensate you.
I'd suggest to make sure that you are downloading the real electrum, chances you might be visiting a phishing website.
Other suggestion is to scan your PC for Malware that hijacks your clipboard.

The address 15WKd1rrYm4P34yvY2cgnow7WH5rfebPMM only has one transaction in it, either the hacker generated a new fresh address or you just somehow sent it accidentally to someone's elses address ::)

Edit: What's your Electrum version?

It has only one transaction because that was supposed to be my savings. I sent it to Electrum, and next time I checked it was gone. The hacker has then sent small amounts to different addresses. I downloaded the wallet from the official website itself, and not a phishing site.


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: Ayanamirs on March 26, 2018, 02:34:51 PM
Will Electrum compensate me for my loss? So many Electrum users have been compromised. My warning was ignored in the beginning.
Nope, electrum just provide you with a wallet to store your Bitcoin, they do not compensate for any security issues on their user's end.
Same thing with online wallet, if you got your hacked they won't compensate you.
I'd suggest to make sure that you are downloading the real electrum, chances you might be visiting a phishing website.
Other suggestion is to scan your PC for Malware that hijacks your clipboard.

The address 15WKd1rrYm4P34yvY2cgnow7WH5rfebPMM only has one transaction in it, either the hacker generated a new fresh address or you just somehow sent it accidentally to someone's elses address ::)

Edit: What's your Electrum version?

It has only one transaction because that was supposed to be my savings. I sent it to Electrum, and next time I checked it was gone. The hacker has then sent small amounts to different addresses. I downloaded the wallet from the official website itself, and not a phishing site.

Please go to your website history and copy and past here the exact url you download the electrum wallet.

What your OS?

What Electrum version you have?


Title: Re: My Electrum Wallet has been compromised. Please Help?
Post by: bob123 on March 27, 2018, 11:56:04 AM
I sent it to Electrum, and next time I checked it was gone. The hacker has then sent small amounts to different addresses. I downloaded the wallet from the official website itself, and not a phishing site.


Unfortunately your coins are lost.
But if you want to find out what exactly happend, please answer these questions:

  • Did you verify the file after downloading?
    If not, check the signature. This eliminates the risk of using a malicious version of electrum.
  • Did you have a password set?
  • Which OS are you running?
  • Which version of electrum did you use?
  • Did you already scan your PC for malware?
    If not, do it.


This won't help you to get your coins back. But knowing what happened is the first step towards securing your coins better the next time.