Strange transaction - where did my bitcoin go

[hoolio]

I have a strange transaction in my bitcoin qt wallet - it says "Payment to yourself" but the address is n/a.

Status: 40785 confirmations
Date: 11.12.2014 18:00
Debit: -0.004 BTC
Credit: 0.004 BTC
Transaction fee: -0.0001 BTC
Net amount: -0.0001 BTC

But if I check the transaction ID on blockchain it says that 1 bitcoin was transferred to another unknown wallet.

Was it stolen and how could this have happened?

[1715440209]

1715440209

[1715440209]

1715440209

[1715440209]

1715440209

[Monnt]

Could you give us a bit more info? Perhaps the transaction hash ID.

Perhaps you have several addresses in your QT wallet.

[OmegaStarScream]

It would be nice if you could post the TaxID and the addresses (receiver and sender) .
You basically sent to yourself . See here for more information's : https://bitcointalk.org/index.php?topic=3442.0 , transaction may take some time to go through according to this .
If you didn't do that by yourself , then maybe you got some kind of malware or something .

[DannyHamilton]

Here's a transaction that has approximately the right number of confirmations and sends the same amount of bitcoins paying the same transaction fee:

https://blockchain.info/tx/8ca1f7c4194f8e02b37afb31173d82f0b267069700f71f06e4653cb8e9d2b120

Is that your transaction?  If not it might be helpful (as has already been stated) if you could provide us with the transactionID and/or one of the bitcoin addresses involved in the transaction.

[hoolio]

Thanks all! Tid: https://blockchain.info/tx/98305b71f0a46a3fd22243f742b5681269fb2c5226eec65882c03eccf45e6595

In my client it looks like this (screenshot): http://rghost.ru/6VzRTFpxr.view

[extrabyte]

Thanks all! Tid: https://blockchain.info/tx/98305b71f0a46a3fd22243f742b5681269fb2c5226eec65882c03eccf45e6595

In my client it looks like this (screenshot): http://rghost.ru/6VzRTFpxr.view

From this i see that the funds have only moved from one address to another but can you see the balance in your wallet? or has been disappeared?

[hoolio]

but can you see the balance in your wallet? or has been disappeared?

My wallet is not up to date - still synchronizing.

[extrabyte]

but can you see the balance in your wallet? or has been disappeared?

My wallet is not up to date - still synchronizing.

Ok let us know when it's done, are you backing up the wallet or running normal like other days?

[hoolio]

The wallet is bitcoin-qt 0.8.6


I've updated the wallet, but nothing changed the bitcoin is gone with this transaction

https://blockchain.info/tx/98305b71f0a46a3fd22243f742b5681269fb2c5226eec65882c03eccf45e6595

but shows up in my wallet like this

Date: 11.12.2014 18:00
Debit: -0.004 BTC
Credit: 0.004 BTC
Transaction fee: -0.0001 BTC
Net amount: -0.0001 BTC

[owlcatz]

Did you at least get to keep the .9953 btc worth of change? This seems really weird. Are you sure it wasn't a tx you did and just forgot about?

[hoolio]

Did you at least get to keep the .9953 btc worth of change? This seems really weird. Are you sure it wasn't a tx you did and just forgot about?

No change left

I'm sure it wasn't me

[vileygroun]

Weird. I can't understand what had happened with the wallet. Did it sync fully?

[hoolio]

Weird. I can't understand what had happened with the wallet. Did it sync fully?

Yes it's synced.

[DannyHamilton]

I've updated the wallet, but nothing changed the bitcoin is gone with this transaction

https://blockchain.info/tx/98305b71f0a46a3fd22243f742b5681269fb2c5226eec65882c03eccf45e6595

Yes it's synced.

Ok, if you've updated your wallet to the most recent version, and it is fully synced, then we should be able to figure out what happened.

To start with, lets figure out if either of the following addresses are part of your wallet...

• 1zA9tQmCpZQ5p5mPQNbwKYZZKh3bSiRMo
• 1KAodAfbDzSXWYARQZfqjgyWs4mt8rdrJT

Choose the "Console" tab in the "Debug Window" found under the "Help" menu.
If your wallet is password protected, then enter the following:

Code:

walletpassphrase 'yourPasswordHere' 600

substituting the yourPasswordHere with your actual password.  This will unlock your wallet for 5 the next minutes.  You'll need to enter the remaining commands within that 5 minutes or else they will fail and you'll need to re-enter the walletpassphrase command.

If your wallet is not password protected, or if you have already unlocked it, then enter the following two commands:

Code:

dumpprivkey 1zA9tQmCpZQ5p5mPQNbwKYZZKh3bSiRMo

AND

Code:

dumpprivkey 1KAodAfbDzSXWYARQZfqjgyWs4mt8rdrJT

If either of those commands result in the message:
"Private key for address . . . is not known (code -4)"

Then the address is NOT an address that your wallet has control over.

If the command results in a private key (a 51 or 52 string of characters that starts with 5, L, or K), then your wallet DOES have control over that address.  Be VERY careful not to share that private key with ANYBODY.  If anyone else gets access to that private key, they can steal any bitcoins that are associated with the corresponding address.

Do not tell us the private keys, but let us know if either (or both) of the commands resulted in a private key.  Once we have that information, we can move on to the next step in figuring out what happened.


Additionally, we can see if the wallet recognizes either of the outputs from that transaction as contributing to your current balance.

In that same console window, run the following command:

Code:

listunspent

You should receive a list of all the transaction outputs that the wallet is using to calculate the current balance.  Look through all the outputs in the list and see if any of them indicate any of the following txid:

• 98305b71f0a46a3fd22243f742b5681269fb2c5226eec65882c03eccf45e6595
• efe118a73d50e9cdeaa815b885724b258c13fa4358e6e054cd8258d6adb94f50

If so, please copy and paste that transaction output from the console so we can understand which outputs are being included in your wallet's balance.

Finally, did you send a transaction to the Counterparty (XCP) prrof-of-burn address, 1CounterpartyXXXXXXXXXXXXXXXUWLpVr, back in January 2014 (perhaps somewhere around January 24 through January 26)?

[hoolio]

DannyHamilton, big thanks for the reply.

Both dumpprivkey commands resulted in private keys.

Listunspent lists one of the transactions you mentioned:

Code:

{
"txid" : "efe118a73d50e9cdeaa815b885724b258c13fa4358e6e054cd8258d6adb94f50",
"vout" : 2,
"address" : "1zA9tQmCpZQ5p5mPQNbwKYZZKh3bSiRMo",
"account" : "xcp",
"scriptPubKey" : "76a9140acf59bcf857e4ab6dd29c68f8ef87bf6dc1d48f88ac",
"amount" : 0.00374400,
"confirmations" : 56559
}

did you send a transaction to the Counterparty (XCP) prrof-of-burn address, 1CounterpartyXXXXXXXXXXXXXXXUWLpVr, back in January 2014

Yes

[achow101]

DannyHamilton, big thanks for the reply.

Both dumpprivkey commands resulted in private keys.

Listunspent lists one of the transactions you mentioned:

Code:

{
"txid" : "efe118a73d50e9cdeaa815b885724b258c13fa4358e6e054cd8258d6adb94f50",
"vout" : 2,
"address" : "1zA9tQmCpZQ5p5mPQNbwKYZZKh3bSiRMo",
"account" : "xcp",
"scriptPubKey" : "76a9140acf59bcf857e4ab6dd29c68f8ef87bf6dc1d48f88ac",
"amount" : 0.00374400,
"confirmations" : 56559
}

Since you have both private keys you should be able to spend both of the outputs of your original transaction in question. Since that original transaction is not listed in listunspent, I think you will need to rescan the blockchain for the transactions. That can take some time but it should be able to find that transaction and add it to your unspents list so you can spend from it.

Add -rescan to the end of the command to start Bitcoin Core. If you tell us what OS you are using, I can give you more specific instructions.

[hoolio]

Thanks a ton to everybody for helping me!

Since I found the private key to the wallet I imported it into a blockchain wallet and resent it to a safer place

Still don't know how the wallet might have dissapeared from my client, but it does not matter now anyway!