Funds from electrum stolen

[vit123456]

Hi, I've received two transactions (about 0.45 and 0.8 BTC) while I wasn't looking at my wallet with a difference of 5 hours. The transactions were sent as payments of my services from a customer. The transactions instantly were forwarded to some unknown to me addresses even though my computer was turned off at that time. The first transaction was forwarded even before it got confirmed in electrum. The client sent transactions from Binance.

Here's my wallet: https://blockchain.info/address/1HSnJR4qm3TT8FPgy9BRthYDLh1fcKGNPp

Screenshot of transactions:

https://c.radikal.ru/c29/1803/82/0926e2c5ec4f.jpg

The second wallet was previously mentioned in scam accusations.

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

note: I haven't used the wallet in over a month

[Cluster2k]

Hi, I've received two transactions (about 0.45 and 0.8 BTC) while I wasn't looking at my wallet with a difference of 5 hours. The transactions were sent as payments of my services from a customer. The transactions instantly were forwarded to some unknown to me addresses even though my computer was turned off at that time. The first transaction was forwarded even before it got confirmed in electrum. The client sent transactions from Binance.

Here's my wallet: https://blockchain.info/address/1HSnJR4qm3TT8FPgy9BRthYDLh1fcKGNPp

Screenshot of transactions:



The second wallet was previously mentioned in scam accusations.

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

note: I haven't used the wallet in over a month

Where did you downloaded the wallet from? Can you provide more infos on this point?

[TryNinja]

Are you 100% sure that you downloaded the Electrum wallet from ELECTRUM.ORG ? How did you arrive in Electrum's website? Was by clicking in a link that you find while searching on Google?

This is not the first time someone comes here saying that he downloaded Electrum, sent some coins and they were sent to a different address. In almost all cases, the user either downloaded a fake Electrum from a similar website which ads were showing on Google or he had a malware on his computer. This is 99.9% not Electrum's fault.

[RocketPot]

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

The client  probably had nothing to do with this (unless they provided you with the link to download Electrum). As long as the transaction you received from them confirmed, they have indeed paid you properly.

[vit123456]

Hi, I've received two transactions (about 0.45 and 0.8 BTC) while I wasn't looking at my wallet with a difference of 5 hours. The transactions were sent as payments of my services from a customer. The transactions instantly were forwarded to some unknown to me addresses even though my computer was turned off at that time. The first transaction was forwarded even before it got confirmed in electrum. The client sent transactions from Binance.

Here's my wallet: https://blockchain.info/address/1HSnJR4qm3TT8FPgy9BRthYDLh1fcKGNPp

Screenshot of transactions:

https://c.radikal.ru/c29/1803/82/0926e2c5ec4f.jpg

The second wallet was previously mentioned in scam accusations.

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

note: I haven't used the wallet in over a month

Where did you downloaded the wallet from? Can you provide more infos on this point?

Are you 100% sure that you downloaded the Electrum wallet from ELECTRUM.ORG ? How did you arrive in Electrum's website? Was by clicking in a link that you find while searching on Google?

This is not the first time someone comes here saying that he downloaded Electrum, sent some coins and they were sent to a different address. In almost all cases, the user either downloaded a fake Electrum from a similar website which ads were showing on Google or he had a malware on his computer. This is 99.9% not Electrum's fault.

I've got it from official electrum website. Version is 3.0

[Cluster2k]

Hi, I've received two transactions (about 0.45 and 0.8 BTC) while I wasn't looking at my wallet with a difference of 5 hours. The transactions were sent as payments of my services from a customer. The transactions instantly were forwarded to some unknown to me addresses even though my computer was turned off at that time. The first transaction was forwarded even before it got confirmed in electrum. The client sent transactions from Binance.

Here's my wallet: https://blockchain.info/address/1HSnJR4qm3TT8FPgy9BRthYDLh1fcKGNPp

Screenshot of transactions:



The second wallet was previously mentioned in scam accusations.

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

note: I haven't used the wallet in over a month

Where did you downloaded the wallet from? Can you provide more infos on this point?

Are you 100% sure that you downloaded the Electrum wallet from ELECTRUM.ORG ? How did you arrive in Electrum's website? Was by clicking in a link that you find while searching on Google?

This is not the first time someone comes here saying that he downloaded Electrum, sent some coins and they were sent to a different address. In almost all cases, the user either downloaded a fake Electrum from a similar website which ads were showing on Google or he had a malware on his computer. This is 99.9% not Electrum's fault.

I've got it from official electrum website. Version is 3.0

This is the only legit link where to download electrum: https://electrum.org/#download

However actual version is 3.1.1

[vit123456]

Hi, I've received two transactions (about 0.45 and 0.8 BTC) while I wasn't looking at my wallet with a difference of 5 hours. The transactions were sent as payments of my services from a customer. The transactions instantly were forwarded to some unknown to me addresses even though my computer was turned off at that time. The first transaction was forwarded even before it got confirmed in electrum. The client sent transactions from Binance.

Here's my wallet: https://blockchain.info/address/1HSnJR4qm3TT8FPgy9BRthYDLh1fcKGNPp

Screenshot of transactions:

https://c.radikal.ru/c29/1803/82/0926e2c5ec4f.jpg

The second wallet was previously mentioned in scam accusations.

Now I'm not sure if I should release the services to the client or what to do. Please advise what would be the right decision.

note: I haven't used the wallet in over a month

Where did you downloaded the wallet from? Can you provide more infos on this point?

Are you 100% sure that you downloaded the Electrum wallet from ELECTRUM.ORG ? How did you arrive in Electrum's website? Was by clicking in a link that you find while searching on Google?

This is not the first time someone comes here saying that he downloaded Electrum, sent some coins and they were sent to a different address. In almost all cases, the user either downloaded a fake Electrum from a similar website which ads were showing on Google or he had a malware on his computer. This is 99.9% not Electrum's fault.

I've got it from official electrum website. Version is 3.0

This is the only legit link where to download electrum: https://electrum.org/#download

However actual version is 3.1.1

Who should be liable for the loss?

[jseverson]

Who should be liable for the loss?

No one. Electrum doesn't come with any guarantees, and it's not like you paid for anything anyway. I would also like to note that anything before Electrum version 3.0.5 has a critical vulnerability where your seeds can be viewed remotely via malicious scripts if you don't have a wallet password, or have a weak one. That was huge news and you should have updated then.

I assume you've had this wallet for a while? Does it come with a strong password? You've either been compromised with malware or got your vulnerability exploited.

[vit123456]

Who should be liable for the loss?

No one. Electrum doesn't come with any guarantees, and it's not like you paid for anything anyway. I would also like to note that anything before Electrum version 3.0.5 has a critical vulnerability where your seeds can be viewed remotely via malicious scripts if you don't have a wallet password, or have a weak one. That was huge news and you should have updated then.

I assume you've had this wallet for a while? Does it come with a strong password? You've either been compromised with malware or got your vulnerability exploited.

No one means the transaction is equivalent to being completed?

[jseverson]

No one means the transaction is equivalent to being completed?

Are you asking whether you should release the service to your customer, as you asked in your OP?

I would say yes. Your customer held up their end of the bargain by paying you, which you were able to confirm. It's not really their fault you got compromised. You could get sued for not delivering, even.