Yes, it's confirmed in bitcoin core someone managed to steal all my coins out of all wallets in armory with passphases on the wallets

It just doesn't make sense to me, I need to confirm in bitcore-qt

I'm working to generate payment in coins here.. have about 5..

Then one day armory just shows incorrect balances and the interface starts being buggy..

And so it's now a trojan or something that stole the coins but the interface is buggy so I can't tell

I want to export into bitcoin-qt core to see the balances there before I conclude someone must have trojaned my computer and stole  those from multiple wallets with passphase

But now I can't export to bitcoin-qt with any armory export?

Any ideas?

I have no way to verify this is correct in bitcoin core.

I need to export my wallets in core to make sure my coins are stolen.

importprivkey is not working on the armory exports

I keep getting Invalid private key encoding (code -5) in bitcoin-qt console

I am not calling Armory a trojan, I am talking about a trojan running at the same time as Armory trying to steal bitcoins.

Thanks, I am trying to import now. I am thinking of how this could be possible.

No, I haven't done this exported and imported before

I am still trying to figure out how to export from armory to a format I can use in bitcoin-qt console for function

importprivkey

I tried PrivBase58, PrivHexBE, SHA256(?) format but it would give me the error:

Invalid private key encoding (code -5)

Wallets should not have been unlocked with bitcoind at those two times. I don't see how they can have my passphrase. Will update soon.

That address is still growing where coins have been transferred.

There is some brief window in time that allows this to be read from bitcoind after unlocked?

So I guess this is some type of trojan that has been sitting calling bitcoind every 10 minutes or something trying to extract private keys?

I'm trying to port over to bitcoin-qt now to verify. I don't know exactly how it was done. I remember it was a day I visited a litecoin website and installed litecoin.

Ok, I will now try to import all 5 wallets into wallet.dat on my bitcoin install and see if that restores the coins

I have 2 wallets I need to try this on..

Is there instructions for exporting and importing into a wallet.dat?

I need to do it twice?

Try to export private key in new wallet and check using bitcoin?

I noticed bitcoin-cli can connect while armory is open.. not sure if it is possible to issue commands such as get wallet balance and transfer..

Otherwise, if this is not a bug that has made a mistake in transaction account, I have no idea

I'm telling you, if these coins are coin, it's a trojan most likely used RPC while armory was open.

Unless this is another type of attack. Who knows why it was done like this.

I'm still hoping for a bug

Nope, no one has access to my machines or my office

Whatever it was appeared to push all my coins to this wallet:

18mhcZ4tdD2GQquSrMda5TPzgRodAEfYeF


I am hoping it's a bug.. I just spent money and time to lose money.. $2000 is alot of money for me.

It is theft. I don't spend any coins.. I was about to transfer out but I wasn't able to.

I collect small payments into 2 wallets from my business. I never spend and then I was going to exchange it..

Unless this has somehow "spent" into an address which I can still access? This doesn't make any sense to me. What do you need?

Armory was running in the background

I am scanning for malware now, the only thing i can think of is it want bitcoin client and got the wallet address and balances and RPC a transfer.

I agree it doest look like it's theft, but I didn't use them.. so unless it's a bug.. it's definitly thefy

Is there anyway to confirm this was stolen? Bitcoin is really not useful. People stealing $2000 just like that? I'm so'posed to run a business like this?

Can you confirm someone has stolen all my coins?

If this is true. This is something connecting to bitcoind while armory is loaded with the RPC configuration in the config file, scanning wallets and transferring out.

Ok, thanks. I did not spend these. The only way is a bug or someone stealing them with a trojan. I didn't spend, the balances are very weird to leave money like that. Thanks