Bitcoin Forum

Today I have sent a little Ethereum to my address but it instantly transferred to another address. Later, I tried again sending 0.002 ETH and the same. It also transferred that same address instantly.

How to get solve this?

I think You're wallet was compromised, I have read this kind of thing a year ago. where you will send ETH on a certain wallet but any amount you sent will also be sent to another address. this is another way to scam people. they put a large amount of token inside that wallet and they let you have it with its private key, the moment you sent any amount of ETH to that wallet it will automatically transfer to another account. That's how I remembered it. maybe this is the same on what is happening to you right now.

You can read more answers here from your question: https://ethereum.stackexchange.com/questions/34143/my-ether-has-been-automatically-sent-to-another-address

You should give us some additional information about your Ethereum transactions:
(1) Deposit address
(2) The deposit/ receiving address does belong to exchanges or not.
If your answer is exchange address (of your account on exchange), the situation become clearer and easy to understand. Nowadays, most of crypto exchanges use cold wallets, it means after you send coins to your address on exchanges, they will be automatically sent to different address, that managed by the exchange, and in their cold wallets. Cold wallets are safer than hot wallets. So, you should not worry about that if it is your case.

---

And if after you log in your account on that exchange, your balance and history transaction show that the amount of Ethereum come to your account, it's fine, eventually.

I also read that article.
It's because of creating address through truffle.

No way to get rid of it? I have $500 valued token on that address and I can't send it for gas fee.

It's my personal address, not an exchange address.

So, please make sure that you download and install wallet from official sites (of whatsoever wallets you used). There are so many phishing sites, and fake Ethereum wallets. If you download and install fake wallets, your coins will be stolen for sure. Please read these topics:
⚠⚠️⚠~Beware on active phishing Electrum websites~⚠⚠️⚠ (Collection list updated) (https://bitcointalk.org/index.php?topic=5126880.0)
Warning: There is an ongoing phishing attack against Electrum users (https://bitcointalk.org/index.php?topic=5095856.0)
Don't click on links from wallet update requirements sent into your emails:
Protecting your email is of great importance (https://bitcointalk.org/index.php?topic=5105543.0)
Whenever you received wallet update notification in your emails, let visit official website of that wallet, and check their annoucement to see whether they actually release wallet updates or not.
Bookmarking your most used sites is important, too.

I have come here to solve my issue, not hearing your lecture.

I did not made any lecture here, fella. You asked for help, with very limited details. So, if you keep all things in secret, I believe that no one can help you.
Due to your limited and vague details, I assumed your issues fall into those ones, so I shared those topics for you. Feel free to read them for your interests. If you don't think those topics are helpful, just ignore my post. I think I finished my replies here.
Best,

Feel free to read the previous post I made right before your stupid lecture.

On topic-
Can someone help me getting out of this situation. I would not use this address anymore if I didn't had my token left there worth approx $500.

You are pretty harsh while requesting help ...

I fear your mnemonic seed was stolen and someone installed a bot which automatically redirects funds when sent. If this is really the case then I am sorry, your funds are gone, someone else is controlling them now.

Do you have the transaction ids so we can have a detailed look into your problem?

So what wallet software you used to generate this address? or what eth wallet software/website you are using?

Are you sure that you're the only one who have access of its private key? Mostly likely your device or private keys are compromised.
Since it's not an exchange wallet where they are using smart contract to send automatically when someone send eth/token amount to one of their exchange address which is not your case here.

Cryptocurrency transaction are irreversible, so for starters if your wallet have been compromised by scammers there's nothing the community or you can do to retrieve back your coins. You haven't provide the deposit transaction ID or address so your issue can be properly access. For now the possible conclusion is either you're using a phishing site or downloaded a phishing wallet without knowing in this case you have to uninstall the wallet, clean up your device and download the correct wallet from the right source or if you're using a site like MEW make sure you're using the right site

For more precautions, you should create a new wallet and send all your coins there as your previous might have been compromised that's if non my possible conclusion above are the case.

I have read an article where some people mentioned that it's because of creating address through truffle. The article has been mentioned in the 2nd post..

Sorry, I wouldn't be harshed, that user was to be honest spamming here posting off topic replies. The 2nd reply from that user isn't necessary in this thread at all.

I am not using phishing site. It has been said for the 3rd time that there's no false from my side, it's because of truffle or whatever. Why don't you guys check the article mentioned by the other person.
No need to post my address here because I have shared all the details needed here. I have shared the main problem and reason behind it too. You guys are making me boring despite solving this issue if possible.


I'm sorry if I'm too harsh here.

I used MEW web for creating this address. My tokens are there which worths approx $500, I had sent ETH for gas fee and those ETH are instantly going to another address.

And this another address is not associated to you, right? Then I might say, that there is/are someone who has access your private keys which your address is not safe to use anymore.

But I wonder why your token isn't move yet from other address while someone got access your keys.

Read this please-
I'm not sure if that address owner has my private key, if he has, why my token isn't moved yet.
It's like a contract made by the hacker. I have no idea how to get out of this problem.
I just want to send my tokens on another address, since when I send eth to my address and it's being transferred within seconds, I am not able to pay the gas fee.

If you're referring to this https://ethereum.stackexchange.com/questions/34143/my-ether-has-been-automatically-sent-to-another-address/34167
Then like what I said your address is not safe to use anymore. And sad to say your tokens there are stuck and cannot be transferred by you.

Btw have you try to google search your address? You might not surprise if someone used that wallet before you and encountered the same as yours.

yes, I'm referring to that thread.

I tried with google searching now and got nothing.

How is it happening? I mean the instant transfer? Is it any kind of a contract?

Its a bot which instantly transfers any incoming coins to another address. Scan the redirected address via etherscan, I am sure there are lots of incoming transactions per day ...

Sadly if this is the case you dont have any chance to transfer your tokens out, they are gone :(

Yes, a smart contract, if ever the address is a contract address, with forwarder function generate by the hacker, you can see it when you access your eth address to the etherscan Code tab  - https://etherscan.io/address/your_address_here#code.
If not, then the hacker just sent the ether manually.

I think I remember it now, there was this person who sends his ETH address with its private key, inside the address a large number of tokens worth a thousands of dollars, but the problem is, there is no gas fee for transaction so the people who see the address are excited to send some eth to that address so that they can get all of the tokens from it. unfortunately after any amount of eth sent to that address it automatically sent it to another address. little they know they are being scammed in a professional way, the reason the person did not get that tokens, its because he used it to lure more people to send some gas fee to that address so he can get more money from it. he goes to every telegram group to send that address so he can lure more people. I think this is the same as your wallet, he didn't get the token because he knows he can get more money when you send some eth to that wallet.

The address was created by me, the tokens are mine. I have deposited that tokens long time ago.
However, seems like no way to get out of it. It's a bit weird that I can't get out of this. If anyone can help, please reply here or PM me.

I'm sorry to everyone if I was really too harsh.

Some where i have heard that ETH got hacked and it was hacking all the wallets whose passwords are easy and they are cracking the password and hacking the wallets and after hacking they are placing the bot in that wallet that what ever eth you send to that address it will automatically send to the hackers address.

But i am seeing before this is happening hackers have given useless token in bulk and made users to send eth to their address to utilize that token but they are hacked. Nice trick

Honestly, I never know bots can be places on a wallet address when private key has-been compromised and funds redirecting. This is actually new to me but with this being the case maybe you should try to see if you can remove the bot. Also you should have used a trusted wallet

That's just logical isn't it? If someone does have your private key putting a bot up for that wallet shouldn't be too hard for a hacker.

So the sender/receiver's address is not an exchange but a personal address and as I can understand the receiving address is compromised which has your tokens and your tokens are still on the address. Is it right? Are those tokens locked by any chance as if your address is compromised, locked tokens cannot be sent even if the wallet is compromised.

Sorry for what happened to you OP but because my wallet also once was compromised earlier where I lost $200, I hope it doesn't happen to you and you can get your tokens back if possible.

what kind of wallet do you used?, i thing you got phising wallet when they put malware to sending automatic to hacker address.
try to close your wallet and use another etherum wallet or reinstal your pc if you sure got hacked

Immediately stop using this address. It is hacked. Just forget about it, and never send Ether into this - Ether will always get to the address of the attacker.

My niece was once careless when registering for a bounty. He submitted his private key instead of his wallet address (MEW), while there were several tokens that were of high value. Eth stored inside was drained and remaining tokens were slowly sent out too. Twice I and my friend at a different location, tried to help him by sending a number of gas fees to pull out tokens that still had value. I had the role of sending in a number of gas fees, while my friend would immediately sent out certain tokens shortly thereafter. However, everything didn't work properly, eth that came in wasn't even seen by me and my friend, after being reloaded many times, the eth has been sent out again to another address. I didn't know this because our internet connection was inadequate or something else. What was clear, the perpetrator was always faster. So, we just gave up.
I'm sorry I can't give any advice or solution, I just hope you can figure out how to solve your problem.

Indeed your wallet is cmpromised, and someone somehow for your private key and access your wallet, and i think they use some program who automatically send the ETH after you send it, you should use another wallet and maybe a option should be to buy a hardware wallet, which will protect you better.

Maybe some smart contract code that automatically resends Ethereum and tokens from deposit address to another one? :)

Am yet to understand how this can be possible, please explain better incase I can have anything to contribute to atleast show more insight on how to go about that.

I also heard some kind of malware might be the cause of such problem. To be double sure, make sure your wallet is not compromised. This is just strange.

The MyEtherWallet team very often reminds its users of fake websites! Mosheyniki create very similar sites in order to seize your passwords. You may have visited a phishing site! Always carefully check the address bar! You may have picked up a virus that replaces the address before sending! Scanning System!

This wallet is affected by some script that makes these transfers, so admit that you've lost it and go on, create a new one. Don't think you can solve this somehow.

almost certainly the wallet is compromise there is a bot that redirects payments even to an external address,there is no solution stop using this wallet and create another one

Perhaps you have a virus on your computer that automatically replaces your address with the hacker address. Check computer antivirus. I also advise you to change the wallet, perhaps attackers also got access to it.

But this in my opinion is very strange, the problem that I just encountered. When sending eth, it automatically sends it to another address. I don't think it's a virus on the computer. There might be something wrong with the myetherwallet.

Do not use that wallet again ,I repeat your wallet is been hacked ,someone has full access to your wallet private keys ,forget the wallet and build another one ,not on PC but on mobile ,PC wallets are easier to get hacked

I think you've come to a phishing site that will replace your ERC-20 wallet. Try doing the same on another computer or device. I think this will help you. Participants of this forum had a lot of such problems. But all the problems were solved by changing the device or reinstalling the software. And in the future, I advise you to constantly monitor the sites on which you go as there is a lot of malicious software.

Sadly, Mostly You Can't Do Anthing With That Wallet.
My Wallet Got Hacked (Like You) And It Still Have Some ERC20 Token.
I've Tried To Double Spend The ETH, But The Hacker Ended Up Double-Spending My Double-Spend Attempt(With Higher Gas).
Sadly, Sending ERC20 Need More Gas Than Sending ETH, So, Any Double-Spend Attempt Will Fail (EXCEPT If Your Transaction Get Confirmed Before The Hacker Could Double-Spend)
The Chances Are Low, But Worth Trying(For You). ;)

I Creating A Transaction That Including ETH, While There Are Other Transaction That Including The Same ETH On MemPool.

Example(This Is What I Mean In My First Reply):
1.I Sent 0.2 ETH To The Hacked Address
2.The Hacker Sent The 0.2 ETH To The Network(Waiting New Block)
3.I Immediately Sent A Transaction With Same Nonce Consisting Of Sending 0.2 ETH To My Non-Hacked Address.
4.The Hacker Know That I Want To Spend 0.2 ETH, So He Created New Same Transaction With Higher Gas
5.I Doing The [Step 3] Again But With Higher Gas
6.The Hacker Doing [Step 4] Again But With Higher Gas
7.The Loop Will End When New Block Was Found.

On The Ethereum Network If There's 2 Transaction Spending Same ETH(Same Nonce), The Miner Will Pick The One With Higher Gas Price (Not Transaction Fee)

INFO :
-Ethereum Average Block Speed Is Around 17 Second
-Hacker's Double-Spend Attempt Has A Delay Around 1-2 Seconds

If Your Transaction get Confirmed Before The Hacker Do The Double-Spend. The Transaction Is Success.
Sadly The Block Time Is "Random" Around 10-20 Second So You Need To Do Some Attempt(And Some Luck) Before It Works.

One thing that can cause this is that

Did you copy the proper exchange etherum address ??

In exchange platforms erc20 tokens deposit address and etherum deposit token address are alike but different
Did you choose rightly the deposit address ??

Double spending in ETH is meaningless as it takes sometime to realize that the transaction has been resent and by that time the transaction is already confirmed on the network. In BTC transactions, it takes 5-10 mins atleast to get a confirmation and hence double spending would make sense. In this case, OP sent ETH to a hacked address and has tokens in the hacked address so double spending too won't work here.

It's Actually Easier To Do On Ethereum Since The Block Time Is Faster
The Problem Is The Hacker Is Also Double-Spending The Double-Spend Transaction. Bitcoin Block Time Is Ten Minutes, So If Both Of You Are Double Spending It Will Need More Attempt Compared To Ethereum.
And Double Spend On ETH Is Not Meaningless, As Long You Already Pre-Build The Transaction(So You Just Submit It To The Network).

---

My Post Above Is Just An "Analogy" Tho, Here Is How My Idea ACTUALLY Work:

1.I Sent 0.002 ETH To The Hacked Address (THE Address have 69 BCC)
2.The Hacker Sent The 0.002 ETH To The Network (Waiting New Block)[Gas : 6 Gwei;TxFee : 21000 X 6]
3.I Immediately Sent A Transaction With Same Nonce Consisting Of Sending 69 BCC To My Non-Hacked Address.[Gas : 7 Gwei ; TxFee : 65000 X 7]
4.The Hacker Know That I Want To Spend* 0.002 ETH, So He Created New Same Transaction [As #2] With Higher Gas [Gas : 8 Gwei; TxFee : 21000 X 8]
5.I Doing The [Step 3] Again But With Higher Gas
6.The Hacker Doing [Step 4] Again But With Higher Gas
7.The Loop Will End When New Block Was Found.

---

If When The New Block Is Found, Our Gas Price We Used Was Higher Than The Hacker, We Will Win The War With The Hacker :D.

*As Transaction Fee

Are you certain you have not being hacked? The receiving wallet seems to have been compromised and the hacker may have used a bot to initiate the movement of funds from the receiving wallet

Very similar to hacking. I'm certainly not an expert on such issues. But in matters of security you need to be very careful and attentive!

Yes, this type of scam I met last year. They sent me an email with a PK of an address for ETH with $ 100,000 inside token value, but no ETH. If you are cheated and send ETH there to transfer the token, ETH will immediately be transferred to another wallet. Looks like it's a smart contract.

something strange here
why you didn't share your ethereum wallet address here, of course without private keys, just your ethereum address my friend
i'm sure nobody can touch your token or ethereum if you didn't share your private keys to the others,,
except your ethereum address is a smart contracts address

If you enter the target address into etherscan it'll tell you whether it's a contract or a regular address.

Either way your first step is to mark the recipient address as a scam on Etherescan so others will know. Then monitor the transfers into exchanges and notify those exchanges that these are stolen funds. The exchanges should then close those accounts so the scammers cannot profit from the heist.

Other than that there's nothing you can do. Transfers are irreversible. You obviously have malware on your system and should not put this computer back online at all, ever, until it's 100% formatted and reset to factory settings.

I also do not understand what he meant by that since I am not familiar with this type of problem, but I don’t think it will be possible for an hacker to completely gain access to control our address without first finding us faulty of a very weak password, even if they get to install malware on our software, provided we are using a very strong wallet that has extra security tools in place, I think it will be completely hard for the hacker to gain access.

Anyway, I am still waiting to learn more as regards his issue, let us hope they have not devised another strategy that will go beyond strong password and anti-malware tools, because that is all I rely on for now.

It is possible your wallet has been hacked, what i am sure about is that someone is sending from your recipient address to his or her own address it can't just auto send to another wallet your private key has been exposed to a third party. As it stands you should open a new wallet or buy adware wallet for better wallet security.

That is one of the function of smart contract in ETH, you can automate the transaction.
But seems like this is misused by evil peoples to scam other peoples.
Usually they made some address with some token and give private key to public.
Everyone will be tempted to take the token, but need some gas to send the token, then peoples start to send ETH for gas, but the ETH will be sent
to other address immediately. This is clearly a trick to scam peoples.

I have seen this kind of thing happened before, though it was to my bitcoin wallet and not ethereum, but I think you wallet has been hacked, what the hacker did you that he/she wrote a script that will monitor anytime you try to send money out of your wallet, and redirect the coin to a wallet specified by that hacker, all you need to do now is try to sweep the private key in another wallet because the more you try sending, the more you keep giving the hacker your coin, try what I just told you to do and give us feedback.

I have seen these case quite number of times, and I think it only occurs when you have a spam software already on your system that is changing the address for you, first you need to take more precaution, there is nothing you can do about the ones you have transferred already, as they are already lost and gone but you can further prevent it.

I would advise that you first format your system and get a very strong anti-spamming tool, then change your password to a very strong one, never use a weak password as they are easy to guess, for your mail, change all the passwords too, use 2 authenticated password as I see that we have lots of some software too that tries hijacking my crypto mail several times.

I first heard a problem or a case like this. How can our wallet be hacked? Is the lack of security on the devices we use or we are exposed to dangerous links. Should we no longer use the wallet and make a new wallet. So that our assets are no longer taken by hackers. Honestly, I have never experienced anything like this. Has this often happened in the crypto world?

Perhaps you are right and this is a smile in order to conduct transactions that are very dangerous.  But initially, if you are the owner of all these wallets and the funds that are on them, then there are no problems.  But if someone else has got access to your wallet and is trying to withdraw funds from there, but for this they need ethereum, then this is his problem if the film is automatically withdrawn from this wallet.

These guys are really so smart in programming that they will do anything possible to crack any password that they see, they have also gone to the extent of creating BOT services to run scripts that will monitor some addresses they have targeted, but before they can successfully manipulate the script controlling our wallet, we must have given them access to it through our weak password like you said.

So the whole security control is still in our hands too and not to be left as responsibly to wallet issuers, we have to get a strong password that will take 100 years to crack, and then activate some extra security tools like Google authenticator and many more.

Please can you give us more details on it? What wallet are you using that is giving you such problems and please if it is an exchange wallet you may want to stop using it so your money doesn't get compromised in future.

I carefully read all the information on this issue and also wanted to invite the user to withdraw all funds from this wallet and stop using it.  But initially you need to correct the settings in order to be able to send ethereum to this wallet, so that you can pay for gas.  But but since the wallet automatically sends ethereum to another address, this is the main task and complexity.

LOL, it is a trap to lure many peoples to sending ETH to the address.
If you have some unknown private key address, and find some worth tokens there, just ignore it.
It's just some way to scam another peoples.

I've never heard of funds leaving wallets automatically and a matter of fact there is no such thing ,someone you trust or very close to you have access to your private key ,don't use the wallet anymore and if you have any fund left in there move it out to new wallet

As I understood, this is the main problem.  But if the user gets to the settings and makes certain teams, then there will be no need to get rid of this wallet address.

This is unheard of mate.  I think your wallet has been compromised. You have probably entered your private key or mnemonics in a fishing website. Kindly transfer all your tokens and eth to another safer wallet to curtail the loss

You can't get your money back. And in the future I advise you to check the URL of the site and wallet several times. Also, many sites infect your computer with viruses. These viruses can change the wallet address when making transactions. It is important to have an antivirus and constantly update the software.

Moving it out is now the issue, because according to his statement, when he tries transferring it using different address, the address he intend transferring it to keeps changing to another one, so this is not about his friend or relative doing this, a spamming tool has just successfully act into his account and probably controlling the account either directly or using the spam software on his account to do so.

The best would be for him to either format such wallet, change is private keys to a stronger one and finally apply some wallet extra security measure and see if the problem will be solver, otherwise, he may just have to will that account to the hacker.

I think your key has been compromised and the tokens that were on it have already been lost forever. It remains only to "arm" you with advice, do not keep the private key in the clear, especially on cloud storage, do not click on the links and save the sites in the tab to protect yourself from phishing.

As far as the hacker who is rerouting his address has not completely gain access to the account to the extent of taking control, things can still be done to solve the problem, he might either leave the account for a very long time and probably the hacker would have died for him to stop monitoring him.

Secondly format his laptop against any phishing software that has been already been installed to his computer and system, I had this issue onetime and that is how I resolved it, I do visit gambling sites a lot from my laptop and from there was when I mistakenly installed a phishing software running underground my system and hijacking my address.

Nothing will work because a script os automatically doing this stuff. It's only possible by the script/bot owner, no one else however, it will be better if OP create a thread on ethereum forum. They might have answer this correctly.

There are some information you’re not giving us though,  like how you have created that account. I will advise you to stop making use Of that address and generate a new one, cause if you continue like that the same thing will keep in repeating itself and you will be losing your ether.

I have seen something like this once on reddit. Where someone was sending eth and it keeps sending out to another address and some explained that the address was Generated by truffle develop. The same thing is what is happening to you here. I believe the solution to change that address you’re using.

I think I've experience that on allot of exchanges and what happens is that, not all of the address are appearing the same, there are times at it will change and what good about it is that, it is still capable of receiving deposits which I find not a hindrance at all. I'm I align with the topic that you've created?