As soon as I sent money to my Electrum wallet it double spened them?

[Gaziibo]

I like to start off saying, I'm new to any of the technical side of bitcoins, but I am a computer science major and very good with computers.

I sent bitcoins from Circle, as soon as they got to my wallet they were sent out at the same time? This has never happened to me before. blockchain says something about a double spend. The wallet says that I have -.6006 unconfirmed is there any way to get them back?

[shorena]

I like to start off saying, I'm new to any of the technical side of bitcoins, but I am a computer science major and very good with computers.

I sent bitcoins from Circle, as soon as they got to my wallet they were sent out at the same time? This has never happened to me before. blockchain says something about a double spend. The wallet says that I have -.6006 unconfirmed is there any way to get them back?

Which Electrum version do you use?

Can you share a transaction ID? If you dont want to can you answer the following question as best as possible please:

#1 was the transaction from coinbase to electrum confirm at any time?
#2 is there an outgoing transaction from your electrum wallet after you received the coins?
#3 If yes, do you create it?
#4 Does the balance actually show negative or do you mean 0.6006 btc?

[Gaziibo]

I like to start off saying, I'm new to any of the technical side of bitcoins, but I am a computer science major and very good with computers.

I sent bitcoins from Circle, as soon as they got to my wallet they were sent out at the same time? This has never happened to me before. blockchain says something about a double spend. The wallet says that I have -.6006 unconfirmed is there any way to get them back?

Which Electrum version do you use?

Can you share a transaction ID? If you dont want to can you answer the following question as best as possible please:

#1 was the transaction from coinbase to electrum confirm at any time?
#2 is there an outgoing transaction from your electrum wallet after you received the coins?
#3 If yes, do you create it?
#4 Does the balance actually show negative or do you mean 0.6006 btc?

verizon 2.5.4

Is sharing the transaction ID dangerous?

The transaction was from Circle.com To Electrum and It was confirmed I had the bitcoins for half a second. Then it looks like my address sent them to me and somebody else as a double send.

I believe so looks like it sent it to some random address.

No I did not create it and it happened within seconds of me getting the coins.

the balance in the bottom left corner says "Balance: .6014 BTC [-0.6006 unconfirmed]"

But actual balance on the wallet says it's gone.

[shorena]

I like to start off saying, I'm new to any of the technical side of bitcoins, but I am a computer science major and very good with computers.

I sent bitcoins from Circle, as soon as they got to my wallet they were sent out at the same time? This has never happened to me before. blockchain says something about a double spend. The wallet says that I have -.6006 unconfirmed is there any way to get them back?

Which Electrum version do you use?

Can you share a transaction ID? If you dont want to can you answer the following question as best as possible please:

#1 was the transaction from coinbase to electrum confirm at any time?
#2 is there an outgoing transaction from your electrum wallet after you received the coins?
#3 If yes, do you create it?
#4 Does the balance actually show negative or do you mean 0.6006 btc?

Is sharing the transaction ID dangerous?

Not in terms of losing coins no. Some prefer to keep their transactions and addresses private though. They are publicly available on the blockchain, so private in the sense that they are not tied to an account here.

The transaction was from Circle.com To Electrum and It was confirmed I had the bitcoins for half a second. Then it looks like my address sent them to me and somebody else as a double send.

I believe so looks like it sent it to some random address.

What I dont understand is whether the double spend was send "from" your address or "from" the circle address. One would mean your machine is most likely compromised, the other would mean circle.com might have an issue with withdrawals.

No I did not create it and it happened within seconds of me getting the coins.

the balance in the bottom left corner says "Balance: .6014 BTC [-0.6006 unconfirmed]"

But actual balance on the wallet says it's gone.

[Gaziibo]

https://blockchain.info/address/14qA78ZDPdCt311H7TWgQEppxwHANx2mxd

That is my wallet's blockchain, I don't think my machine is compromised it's a mac and I don't really download any sketchy stuff. At least I would hope not.

My address is completely cleared out at this point 

[shorena]

https://blockchain.info/address/14qA78ZDPdCt311H7TWgQEppxwHANx2mxd

That is my wallet's blockchain, I don't think my machine is compromised it's a mac and I don't really download any sketchy stuff. At least I would hope not.

My address is completely cleared out at this point  

Ok so you got the coins here[1] and seconds later someone else issues a transaction[2] that spends the newly received coins. Someone else or the same person did also issue a transaction[3] seconds later with a higher fee. Eventually the first TX[2] confirmed though.

This looks like a race too me which only makes sense if your seed or private key was compromised.


[1] https://blockchain.info/tx/43f797400ae71bcd9215aa878d16554f21153b9f1633f68a809c36b10cc7968c
[2] https://blockchain.info/tx/875e1d690f136f7e1ec313f75783552204f8fc6a78dc37899460b4708f3372ae
[3] https://blockchain.info/tx/955a0cacac48ef6513e4d0bc2a7a316cfb7e08758ca8f01a161a005024a50406

[Gaziibo]

So basically somebody stole the bitcoins?

[BurtW]

Where did you get this address:  14qA78ZDPdCt311H7TWgQEppxwHANx2mxd

Or, in other words, how was this address created?

Strange that the thief donated some of the BTC to this organization:

https://rnli.org/howtosupportus/donatenow/Pages/bitcoin.aspx

I also find it strange/interesting that in all the transactions except the last one the thief sent the change back to the original account.

[Gaziibo]

I got the address from electrum.. The whole thing is strange to me never seen anything like this happen. Scanned my computer for viruses and there was nothing.

[shorena]

I got the address from electrum.. The whole thing is strange to me never seen anything like this happen. Scanned my computer for viruses and there was nothing.

How do you store your seed? Do family members have access to your wallet?

[Gaziibo]

I usually take a picture of it with my iphone you think that's how it was stolen?

[BurtW]

I usually take a picture of it with my iphone you think that's how it was stolen?

Starting to smell fishy.

[Gaziibo]

I usually take a picture of it with my iphone you think that's how it was stolen?

Starting to smell fishy.

What's fishy? is that not smart?

[James N]

I am not sure about the built in security on the iPhone, but I think this amounts to having an unencrypted copy of the seed phrase on a device that is directly connected to the internet.

It is best to use the cold storage feature of electrum. This technique means that your seed phrase and private keys have never existed on a computer that is connected to the internet.


The fact that it was removed immediately would seem to indicate that it was some kind of bot or something that was monitoring the address to see if something would be transferred to it. It's unlikely that it was family member or friend that did this.

I am tempted to send a very small amount to that address to see if those 2 things try to snatch it again.