Is my MultiBit HD wallet stealing Bitcoin?

[MWD64]

Got it a few days ago, I thought from the main site, but maybe not. I know it takes tiny sub-penny amounts as transaction tip for devs, but I think it took like 30 some dollars worth of BTC. And I remember reading somewhere that someone had made clones of it that steal.

Here's the record of transactions:
https://blockchain.info/address/13dCaAuCnYaarsBUaqNTkzXZya7AzBMNjY

Here's a screenshot of the wallet (which shows it as having more coin)


Can someone who's better with math and BTC than I tell me what's up? I have reset the wallet, it didn't change anything. It looks to me like this transaction:
https://blockchain.info/address/1HAoU3423JU7k2cGTPz1JcGCTQqPL7Z4k1

for 32 dollars worth of BTC was not one I did, and is shown in the blockchain.info balance, but not in my wallet.

Thank you,
MWD

Edit: I used the wallet function "Empty Wallet" (man, THAT name makes me nervous, lol.) to transfer my ballance to another wallet (Mycelium) on another device. Seems to have transferred the whole amount shown available in the wallet, not the smaller amount shown on blockchain.info. I'm still not sure what was happening before though.

[1715675228]

1715675228

[1715675228]

1715675228

[1715675228]

1715675228

[1715675228]

1715675228

[franky1]

https://blockchain.info/address/1HAoU3423JU7k2cGTPz1JcGCTQqPL7Z4k1

13dCaA....  (0.14 BTC - Output) -> 1HAoU..... - (Spent) 0.096825 BTC
                                                       1C2yohmA..... - (Spent) 0.043075 BTC

to me i see you wanting to pay 1C2yo,,, 0.043075 and then the 'change' of the initial 0.14 (that being 0.096825) is given back to you on the 1HAoU address..



you then today made another transaction
13dCaA..... (0.0003155 BTC - Output)  \
1HdTg9.... (0.01832666 BTC - Output)   \
13dCaA.... (0.03106 BTC - Output)           -> 1DJgke..... - (Unspent) 0.14642716 BTC
1HAoU..... (0.096825 BTC - Output)       /
      
to move funds from your known public key 13dCa... and also from the change address's 1HdTg.... and 1HAoU.... to your new known public key 1DJgke.

by default most wallet programs will not send change' / remaining funds back to the origin address by default, they always make change addresses

[achow101]

I know it takes tiny sub-penny amounts as transaction tip for devs, but I think it took like 30 some dollars worth of BTC.

No, that is the transaction fee, which is paid to the miner that includes your transaction in a block. It is an incentive for the miners to include the transaction so that it confirms faster.

First of all, what you linked to are not transactions but addresses. They are different, but in this case, it doesn't really matter.

What I see is that you are confused by the change addresses. It is bad practice to follow your balance on any block explorer due to change addresses. What most wallets do is that for each transaction the change is sent to another address generated by the wallet which is still in the wallet and still in your control. This is to prevent address reuse which is generally not recommended. So the Bitcoin that you see in blockchain.info going to another address is most likely the change. And the balance you saw in your wallet was correct since it included the change. And the change and whatever was left in that address was sent to mycelium when you emptied the wallet.

As you can see in this transaction: https://blockchain.info/tx/c708e9d51ddd78b55e71e3fe7d5d352d3c7815eedfd2098348df49d26376f313, the three addresses you are concerned about, yours, and two change addresses, are all apart of that transaction which is sending all of the bitcoin to another address, your mycelium. This means that the same person (you) owns the three private keys for those three addresses, so those two extra addresses you don't recognize are your change.

[MWD64]

Makes sense. Thanks y'all! I didn't know about the "Change" thing. My old wallet (VERY old version of MultiBit) put it back in my main address I guess.