I must say: it's a well-thought idea.
However, you should provide more information about this "Cold Wallet" of yours about "how can it be used often (The more you use your wallet, the more tokens you receive)" and what is the basis of the number of token reward per usage?

Normally, cold wallets must stay offline and even disconnected to local network at all time; is there a companion/partner app which can transfer unsigned transaction to the cold wallet and vice versa? If there is, people who often uses cold storage wouldn't trust it unless they can review the code (open source).

Typical newbies don't really care about the type of wallets that they're using as long as it has ease-of-access which Cold wallets don't have. Most of them settle for Payment Processors and Exchange Wallets at first introduction then some switch to either SPV clients or Full node after learning a few things.
Only users who have a crazy amount of Bitcoins/Crypto use a Cold storage wallet for storage and transactions; the remaining users have a Cold Wallet for HODLing purposes and don't actually open it.

Given that, I suggest to reconsider the type of wallet that your project will offer.

Seriously guys? OP is asking for profitability in Malaysia,
there's only one guy who mentioned "move to Venezuela" and it became the center of the topic 

Anyways, one good thing in Malaysia is: Mining isn't officially taxed by the Government (based on my research) unlike in other countries where some miners are either secretive of their operation or "lawfully" to pay a portion of their profit to the Gov't.

But the weird thing in OP's statement is:
After hitting "OK" or enter, it "downloaded 3 bars" and update by itself (not from a link); after it, Electrum always crash on start.

So I'm thinking that it's possible for the hacker to generate the same message as "Good Servers" are displaying (vulnerable versions) and use the button for a new way of indirect downloading from their link (ie. Internet Explorer Hooking).

But he already wiped the PC now and sent his Bitcoins to a new wallet, let's consider this solved  
(@OP You write the date wrong in the title)

Your coins were gone for good, the only thing you can do is to collaborate with the other victims for a possible police investigation to the whereabouts of the culprit.
But the chance that you'll get back the funds is too slim or unrealistic, specially after weeks and months.

The transaction fee is too low for free Tx accelerators (you might know this already).
Most (90% of) "TxAccelerators" here in the forum are just scam-for-donations gimmick and will just rebroadcast your transaction.

I suggest you to just use the "Increase Tx Fee" option or similar and increase the transaction fee to 24sat/byte, it will use the same inputs and make another transaction that should be confirmed before the 1st low fee tx. Or just wait it out.

Some blockexplorers will tag it as "Double-spent attempt" but do not worry, only one transaction ID will propagate.

Based on the screenshot, those two transactions did not have the same inputs (or even addresses nor wallet) and also sent to different addresses.

Transaction#1: If this address is your deposit addresses: 36JrH91KEj7vsDTRXWnGdVwyHwsdCRGF9s (bc1qz08gm9znrsmgpsduc5nh6cwmk7mfnzxjc9030d belongs to the same wallet with 3JrRBgPbwrQ8iD2xBayvnsHTagMY5EQqW5) it will be credited to the site once it get 6 (or less) confirmations, it's still unconfirmed as of now.

If not, it's gone.

---

-Edit-
I noticed that 36JrH91KEj7vsDTRXWnGdVwyHwsdCRGF9s is one of the address of transaction2, so after 1confirmation (for "real" wallets)/6 for payment processors, you will receive it to the wallet used for transaction#2.

Please use the terms Withdrawal and Deposit correctly, it is misleading IMO or provide more info about the type of wallet that you're using.

Usually, users have a "public address" that they use for (yes) donations or for transparent payments/transaction that should be isolated from their Hot wallet.
You can easily make one using any SPV clients with "Import Private key" feature to make a single address wallet.

There's no alarming issue including privacy since its inputs will not be used together with the "private" addresses.

No one cares, JK.

Some will not be displayed only if your monitor has less than 1280px width since the forum is using "px" instead of "em" for font-size and percentage (%) for table/div sizes.
It's not much on an annoyance but still, you can view the full name by hovering your mouse pointer above the username: JeffJohnsonTheNameYouKnow.

I thought that this was due to a "Conspiracy Theory" of Ethereum Classic miners colluding to attack the network, not by the upcoming fork.
I remembered that there was a thread here that discussed that, now I can't seem to find it.
BTW, this guy have asked the same question on the same date.

In reddit, they also guess that it's a 51% attack (not conspiracy at least) or a buggy client that has ridiculously high Gas setting.

Information for a research or a bruteforce attack? Must be for research purposes...

In case if you're wondering if these "Black Holes" will alarmingly deplete the maximum amount of BTC in circulation, it will not be a problem as long as it's within millions (even 100k's). Satoshi seemingly foresighted this, that's why Bitcoin has 8 decimals right from the start.

Here's some Addresses with huge balance as you requested:

• 1KYYVUwWSMrNkje41jzvubSRsjABu3EUt6 - This was used to receive an average of 1BTC per transaction 'till it reached the current balance of 33BTC; interestingly, if you check all of its transactions, you will find more addresses with huge balance that weren't spent since 2011-2012.
• 1PP8m94LcTDpWXcx2T4niUcFsbf7BDw8Tk - Address used for mining that still has 37BTC balance.
• And the famous 1BitcoinEaterAddressDontSendf59kuE which up until now, has been receiving minimum (change) amounts from random transactions.

Here's more, the site has a so-called "shoutbox" where clients can communicate or chat in real time,
but if you inspect the site's HTML code, everything in it was just pre-defined. Pretty much the same fake-chat from those "Bitcoin Generator" scams that you'll stumble upon crypto faucet sites except in generator scams, the chat is seemingly active.

Image:


Can someone (any victim) please open a scam accusation? I'm not qualified to do that.

(lol) When was the last time you've entered a cinema?

Whether it's SM Cinema, Robinson's or any other Major Malls, you'll have to pick the seat number as you pay.
(By the way Avengers Endgame on April)

---

For users who're wondering how is this (btc payment) possible, I'm pretty sure that it will be handled by payment processors than Peer-2-Peer payments.
Establishments nowadays accept Paypal, Paymaya or any "Mobile cash";
and marketing "We Accept Bitcoin" by using such services (Like coins.ph/bitpay) is reasonable enough given that they almost have the same function or protocol with fiat payment processors.

P2P can be accepted too without confirmations on Over-the-Counter purchases of cinema tickets, why?
There's always a CCTV camera on places like Malls and if anyone tried to stupidly double-spend a <$10-20 amount, there will always be a hard evidence. -Just an example.

So far, no one.
But you might wanna double-check if it was bookmarked or a google search result, there has been a fake site with Big letter i for an "L" like this: eIectrum; users who don't use serif fonts wont notice the difference.

I removed all of my bookmark with my Bitcoin addresses of that site since that BCH shill scheme disease infected it.
I really liked their UI, the colors and the layout; the seemingly intentional incorrect dollar equivalent isn't much of an issue to me but adding one more click in every address/transactionID search, I'm out!

BCH now has "q" addresses by default, why do they have to assume that visitors who pasted BTC addresses (1,3,bc1) in the search bar is looking for BCH chain in the first place? It's been a while since they've added BCH chain to the site and adding a BTC/BCH button in the search bar isn't that hard in my perspective, everything looks so intentional (the UI and overdue SegWit support).

Suggestion: Convert the list's texts into direct links.

Beginners might use this thread as a reference/list of Mixers and we know that they are the most susceptible to scams.
Speaking of scams, there are tons of fake sites with altered letters, name or domain extension, specially mixers;
so, it's best to link the official site(s) of those mixing services to prevent them from using Google search which is the number one reason of "website misdirection".

Some of the previous list were actually exchange/payment processor or online wallet clients.
Say no more: Choose your wallet.
From there, (Based on my own reasons) I will tell you which is the best in my short opinion, or which is best suited for a specific use.
[I wont include some because I haven't used them, it's up to you to trust them]

List1: (Full node wallets)
Offers complete security as advertised by Bitcoin, huge disk space and bandwidth as well as technical knowledge required.

• 1. Bitcoin Core
• 2. Bitcoin Knots
• 3. Armory (Least recommended)

.
List2: (SPV Clients)
Uses a third-party or a centralized server as the "validator" (full node).

• 1. Wasabi - Second best choice from Electrum but with the current "scare", its centralized servers (nodes) may be "safer" until Electrum filtered out most of the bad servers.
  
• 2. Electrum - The most functional Lightweight client available. If you're not a total "dimwit" and uses the Latest Version, you don't have to worry about the "current situation"
  
• 3. Copay - Same as Wasabi but has different features.
• 4. Bither (Not-updated or stalled since Apr 2018)

[Android clients not included]

It's not "flawed", it is "well thought".

IMO, the idea of including merit requirement to "Trust Rank Voting" is to prevent newly created accounts, 1-merit Jr.Members or even 10-default-merit Members (which can be easily mass-produced by a single person or group) to participate in the voting.
With merit as the filter, we can always assure that most of the votes are from active users, not from an army of 0-merit accounts.

Check this post by theymos about that "voting": Page25 - DefaultTrust Changes

Blockchain wallet, blockchain.com? That's why.
Even if it is a priority transaction, they still have the control on the actual sat/byte of fee in every transaction.
So in many cases, the estimated/pre-configured fee isn't enough or updated so it will not be accurately "prioritized" by the system.

In situations like this, you can't really tell if Bitcoin's current mempool is the problem or their service.
And who knows if there's "something" happening under the hood.

Hah! Scan the older versions and you'll get more false positives than that and we've been using it for years.

---

Obviously false-positives from those "super-aggressive" antivirus software.

Example: Electrum v3.1.3 (Windows Installer Version) https://www.virustotal.com/#/file/4f2e0b548e1a8e7b8cc37b55ef4fdc663f93d20008f5b7948ed8cfafbce9b4c9/detection
I never heard of those AV aside from Kapersky which is known for its aggressiveness.
My antivirus never detected anything from it so...

I know that this is a little bit off-topic but...
Make sure that you're using the latest version from the official site (electrum.org) because any older version has a vulnerability on its server error report. Just look at the drama here in Electrum board.

---

Back to topic:
As for Bech32 addresses, you can just use it as your "storage wallet" and send small amounts to a "Hot Wallet" (standard or P2SH nested SegWit) that supports all services and sites.
Because you might be needing it for huge transactions since its inputs and outputs are almost half the "weight" of a standard transaction, means roughly half transaction fee is required compared to a same-size transaction from standard addresses.