1.4BTC ?Stolen / ?Missing

[superking123]

Hi all, I'm using multibit as my daily wallet, have been for ages and never had a problem.
This morning I woke up and found 1.4BTC missing from my wallet.

My wallet: https://blockchain.info/address/1GvWrJSLNafra26jDwpScY5bqYcQ6BDhPW

There was an initiall smaller transaction: https://blockchain.info/tx/0b8e877506b3388e1cf6ee0de60a6ca4d400d7a4ecf352df88a34f7a4357caa9
Then the TXID of the 1.4 missing: https://blockchain.info/tx/51aabe0726df5334c32ea26c19c88b90d8d44fc3fce4b80603ec9f68fd844c3c

Have I been robbed? or has something else happened?
The fact that it's showing as confirmed on the blockchain is the concerning part!
I run only the local wallet.

I'm rebuilding the blockchain and transactions as I type this, but could anybody shed any light on how this could have happened?

I've also run malwarebytes and hitmanpro and there's no malware running on my PC

Thanks

[superking123]

I should also state that I never made any transactions at all so it's not a failed transfer or anything, it's just an unauthorized transaction.
It occured at like 12:15am my local time.

[minifrij]

I've also run malwarebytes and hitmanpro and there's no known malware running on my PC

FTFY.

Is this wallet on a machine which is used for browsing normally? If so, it may be malware which has not been caught by anti-malware services which has stolen your wallet.dat or private .key files. If the transaction is being shown as confirmed on block explorers such as Blockchain or Blockr there is no way of you getting those coins back, no matter whether you re-sync the blockchain in your wallet or not.
Obviously, I'm assuming you haven't given away your private keys to any service, or used any service which generated the private keys used for that address.

From here, I suggest that you make a new wallet on an offline, formatted computer and send any coins you can't afford to lose there. Do not connect this computer to the internet unless it is completely necessary.

[superking123]

yes it is my daily driver.
normal browsing. Must have been malware.
I've never given out my private key and I generated it locally so something must've stolen the key.
dammit. well that's me out of the bitcoin game

[minifrij]

yes it is my daily driver.
normal browsing. Must have been malware.

Personally, I can't think of anything else it could have been. Perhaps someone else more knowledgeable could shed more light on the situation, though it is unlikely you will get those coins back.

dammit. well that's me out of the bitcoin game

I'm sorry your experience had to end like this.
If you decide to invest again please ensure you store any sizable amounts of Bitcoin on an offline and secured device, and any you have on hand is secured with a strong password. Even if the device is something like a Raspberry Pi, an investment of $20-30 is worth it to secure hundreds of dollars of coin securely is worth it imo.

[MagicPharm]

It's odd... If it was a compromised wallet they would have taken all your coins.

[jim618]

@superking123 Sorry that you do seem to have had your bitcoins stolen.

The two transactions both have the fee and structure (in terms of change address) that MultiBit Classic has so it looks like someone has got hold of both your wallet and (if encrypted) your password.

Please don't let this one incident stop you using bitcoin though.
Compared to MultiBit Classic we now have hardware wallets which are much tougher for people to steal from and, with other clients, multisig where you need to confirm with your phone.