looks like i've been hacked - please help me understand what's happening

[notlist3d]

so i checked my wallet a couple of days ago and noticed my 50 coins were missing.

i restored my wallet from a backup and after rescanning it showed i only have 0.05 coins left.

almost 50btc where 'sent' unauthorised from my wallet to 1LAosJwSQHmUzNnToPgjLaRTVUHP2WM8Wt

https://blockchain.info/address/1LAosJwSQHmUzNnToPgjLaRTVUHP2WM8Wt

according the my wallet it matches up on block chain showing 4 transactions. im still trying to follow it, but i have no idea what to do

i was trying to restore for backup and do a double spend, but it looks like its too late for that now...

it looks like they are trying to launder it, anyone else able to dissect anything out of this?

Wow... 50 is a big value...
I'm just a newbie, I don't really know how to solve it but I'm so sorry for your loss.
How much is the coin that the thief left? Is that just 0.05 or 0.05xxxx?

If you click the blockchain it shows everything as far as your question.  And no it appears all was sent somewhere, they did not leave anything.  Which is not to surprising on a compromised wallet.

[beesa888]

it looks to have stopped at the last address and hasn't moved in a couple of days. It seems fairly inactive. The final transaction appears to be somewhere in China, however im not sure how accurate that is.

[notlist3d]

it looks to have stopped at the last address and hasn't moved in a couple of days. It seems fairly inactive. The final transaction appears to be somewhere in China, however im not sure how accurate that is.

Sadly most likely it's behind a proxy so hard to tell who actually did it or where.

I would watch it to see if they ever happen to make a mistake that can identify who it is.  Most likely they will sit on the btc not moving it or go through a bitmixer.

[defcon23]

the last transaction to this adress :  1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL   

big fat wallet.. 

[notlist3d]

the last transaction to this adress :  1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL   

big fat wallet.. 

OP might actually be lucky.  It appears it was sent to like 3 or so different BTC address's.  It makes me wonder if he/she thinks it's hiding it by going through the 3 addresses but since linked together we can see it.  No mixer or anything I thought would be used was.

The final address is HUGE: 3,862.54723801 BTC   .   This makes me think it is linked to maybe a hardware company or exchange not a lot have this kinda of balance.

If you can figure out what that final address belongs to there is a slim chance of getting it back.

[defcon23]

a liitle more infos: http://www.walletexplorer.com/wallet/02218b04537fe585?from_address=1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL
 

[notlist3d]

Farthest I could track it was someone else getting scammed on bitcointalk on a purchase: https://bitcointalk.org/index.php?topic=739917.15

Looks like a big time scammer that is just holding it there.  Which makes sense if he/she does not withdrawal or spend money from it makes it hard to track.

[defcon23]

imput the adress in this tool   and see the cluster !
https://bitiodine.net/

[zen2]

it looks to have stopped at the last address and hasn't moved in a couple of days. It seems fairly inactive. The final transaction appears to be somewhere in China, however im not sure how accurate that is.

i am sorry for your loss.
have you installed any cryptocurrency-software or altcoin-wallet or something in the past time (before the theft-TX happened) ??

this wallet look like a scammer coldstorage-wallet: https://blockchain.info/de/address/1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL

[erikalui]

Probably this address hacked your account:

1DN1VGT7DcfpjaS3R43quv2ZpbYxUumHVv on 28th March.

Then it sent that amount to 1EsBPY677Dbft6FT39zJQYsVU5CC3QWRJw on 2nd April

Then    1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL on 6th April and this address seems to be the scammers bitcoin address as it has many transactions.

And this address was noted here: https://bitcointalk.org/index.php?topic=739917.0 (and this address is known for scamming many members). Any way of finding out who owns this address?

[yeponlyone]

it looks to have stopped at the last address and hasn't moved in a couple of days. It seems fairly inactive. The final transaction appears to be somewhere in China, however im not sure how accurate that is.

if you are checking the first broadcast node, it is totally inaccurate. You can broadcast transaction to any other node from anywhere on earth. if the other user were to use Bitcoin Core, the node owner could check connection logs and determine it. But probably a proxy is used.

[notlist3d]

Probably this address hacked your account:

1DN1VGT7DcfpjaS3R43quv2ZpbYxUumHVv on 28th March.

Then it sent that amount to 1EsBPY677Dbft6FT39zJQYsVU5CC3QWRJw on 2nd April

Then    1B8XBJ3g7sNZj4AUtJ15UgcfE3waYw7pPL on 6th April and this address seems to be the scammers bitcoin address as it has many transactions.

And this address was noted here: https://bitcointalk.org/index.php?topic=739917.0 (and this address is known for scamming many members). Any way of finding out who owns this address?

If he/she keeps it in storage and does not spend/cash out.  It is unlikely of finding out who.  It appears who ever it is has done a huge amount of scams.   But he/she does not use the BTC which makes it hard to tell much of anything.