Bitcoin Forum
October 20, 2017, 11:51:20 PM *
News: Latest stable version of Bitcoin Core: 0.15.0.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Received and Lost Bitcoins in 1 minute!!!  (Read 1168 times)
tetrasoft
Newbie
*
Offline Offline

Activity: 4


View Profile
May 09, 2017, 06:34:36 PM
 #1

Hi!

I've been using BitcoinJ to create address and receive payments. However, someone is stealing my Bitcoins everytime I receive a payment.

Here is an example: https://blockchain.info/address/16PJCcVQtptezpFSX8h21aUznzqbtVJWn6


1) I received 1.5 BTC at 2017-05-07 23:59:36

2) less than 2 minutes later, my balance was stolen!!


It happens several times, and it looks like the final destination is this address: https://blockchain.info/address/1Q3SNbBrsmtQ9rCMjgiHEjJSBn8jDdVg2d

I'm completely desperate!!!

Do you guys have any clue?

Thank you!

1508543480
Hero Member
*
Offline Offline

Posts: 1508543480

View Profile Personal Message (Offline)

Ignore
1508543480
Reply with quote  #2

1508543480
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1508543480
Hero Member
*
Offline Offline

Posts: 1508543480

View Profile Personal Message (Offline)

Ignore
1508543480
Reply with quote  #2

1508543480
Report to moderator
1508543480
Hero Member
*
Offline Offline

Posts: 1508543480

View Profile Personal Message (Offline)

Ignore
1508543480
Reply with quote  #2

1508543480
Report to moderator
1508543480
Hero Member
*
Offline Offline

Posts: 1508543480

View Profile Personal Message (Offline)

Ignore
1508543480
Reply with quote  #2

1508543480
Report to moderator
xtyling
Sr. Member
****
Offline Offline

Activity: 378

WankChain


View Profile
May 09, 2017, 06:45:13 PM
 #2

You meant everytime ?

Is it not the first time that you had BTC stolen ? Did you verify for keylogger or malware ?
jak3
Hero Member
*****
Offline Offline

Activity: 700


★Nitrogensports.eu★


View Profile
May 09, 2017, 06:54:33 PM
 #3

that looks really bad, sorry for your loss man but unfortunately I have not seen anything such as this. it seems like someone have your private keys and the hacker has alredy started some scripts to check if your wallet has some balance or not.if it has then it will send them all to that another address. I will advice you to switch your wallet or even your device can also be infected by this virus/malware


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
      BITCOIN SPORTSBOOK     
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █               
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀




  CASINO  ●  DICE  ●  POKER   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
   24 hour Customer Support   

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
Sundark
Sr. Member
****
Offline Offline

Activity: 392


View Profile
May 09, 2017, 07:04:44 PM
 #4

It is impossible that bitcoin network is hacked. Your machine must have been breached somehow, attacker somehow got access to your private keys.
If you are sure that your machine is clean then I would suggest you use standard bitcoin SPV walletElectrum, Multibit or full validation wallet like Bitcoin Core or Armory.
Install it on different PC and encrypt is with a strong password. As for the helping you receive your BTC back... your coins are gone. I am sorry.
coolcoinz
Sr. Member
****
Offline Offline

Activity: 462


★Nitrogensports.eu★


View Profile
May 09, 2017, 07:05:34 PM
 #5

The money ended up in a very big wallet, that contains almost 80 thousand addresses. Looks like an exchange.
https://www.walletexplorer.com/wallet/00015efc88765e70/addresses
Maybe someone can identify it. It's not impossible to track down the thief, but you'd have to get in touch with the owners of this exchange.

This person had access to your address before you even got the money. He waited until the transaction is confirmed and instantly sent the money to a brand new address in an empty wallet (1Ja8Kxn7oeYbc7wWqoVCCqCmygRLEVR3qv).


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
.BITCOIN SPORTSBOOK
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █         
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀



    CASINO    DICE    POKER   
     ▬▬  24 hour Customer Support  ▬▬   
franky1
Legendary
*
Offline Offline

Activity: 1834



View Profile
May 09, 2017, 07:07:09 PM
 #6

for someone to steal ur coins so fast means they have your private key.

things to check

think about all bitcoin related downloads you have
have you ever downloaded any of them scammy "bitcoin generators"
where did you get your bitcoinJ from

did the bitcoinj program generate your address or did you import it from another program/pc previously.



I DO NOT TRADE OR ACT AS ESCROW ON THIS FORUM EVER.
Don't take any information given on this forum on face value. Please do your own due diligence & respect what is written here as both opinion & information gleaned from experience. If you wish to seek legal FACTUAL advice, then seek the guidance of a LEGAL specialist.
cazza
Jr. Member
*
Offline Offline

Activity: 36


View Profile
May 09, 2017, 07:08:17 PM
 #7

How distressing!  Sorry to hear this.  If I were you, I'd create a new wallet and clear out my PC, checking it for viruses, etc.  

Thanks for sharing and reminding us of one of the challenges and risks in the cryptoworld.
lite
Legendary
*
Offline Offline

Activity: 1064


The most Professional Cryptocurrency Casino


View Profile
May 09, 2017, 07:19:38 PM
 #8

The money is gone, sorry. why do use BitcoinJ? there are many wallets better than BitcoinJ. anyways which os are you using?
switch to linux for good! (if you're using windows)

FORTUNEJACK.COM[
                             
9 BTC WELCOME PACK FOR 1ST 5 DEPOSITS
FREE 1,000 mBTC daily for LuckyJack winners
[
           
]
coolcoinz
Sr. Member
****
Offline Offline

Activity: 462


★Nitrogensports.eu★


View Profile
May 09, 2017, 07:20:12 PM
 #9

for someone to steal ur coins so fast means they have your private key.

things to check

think about all bitcoin related downloads you have
have you ever downloaded any of them scammy "bitcoin generators"
where did you get your bitcoinJ from

did the bitcoinj program generate your address or did you import it from another program/pc previously.
Those are great points. Also check if:
you have an antivirus software and it's up to date, try scanning your pc.
you are sharing a connection with other people via lan/wifi? It's quite easy to access pc through wifi and even easier through LAN
anybody else have access to your computer (roommates, friends)

Someone suggested a keylogger. This would only give away his wallet passphrase, not his private key. If he only generated the address and never displayed or copied the private key, he'd be safe. It looks like full access hack with the thief being in control of his OS account and logging in remotely, or his Bitcoin address was generated in a hacked wallet (not downloaded from a trusted site) that shared the priv key with the hacker.


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
.BITCOIN SPORTSBOOK
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █         
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀



    CASINO    DICE    POKER   
     ▬▬  24 hour Customer Support  ▬▬   
RodeoX
Legendary
*
Offline Offline

Activity: 2422


The revolution will be monetized!


View Profile
May 09, 2017, 07:24:29 PM
 #10

You should be using a Linux machine. Winxx is a joke. Next, NEVER download any bitcoin related software on that computer. Only a well established, trusted wallet. I would guess that the computer you are on is compromised. I would format the HD with an easy distro like Ubuntu and start over. Sorry I don't have better news for you.
 Cry

The gospel according to Satoshi - https://bitcoin.org/bitcoin.pdf

Free bitcoin in ICELAND - https://bitcointalk.org/index.php?topic=1610684
Sundark
Sr. Member
****
Offline Offline

Activity: 392


View Profile
May 09, 2017, 07:38:21 PM
 #11

You should be using a Linux machine. Winxx is a joke. Next, NEVER download any bitcoin related software on that computer. Only a well established, trusted wallet. I would guess that the computer you are on is compromised. I would format the HD with an easy distro like Ubuntu and start over. Sorry I don't have better news for you.
 Cry

Linux is not a perfect solution and bastion which will prevent every form of malware. It is safer than Windows, but nothing is 100% safe.
There are viruses, malware and even ransomware attacking Linux distributions.

The only way is to take care of your security, keep proper digital hygiene, encrypt your wallets and don't be naive idiot.
The_Dark_Knight
Hero Member
*****
Offline Offline

Activity: 490


For Lady and Mister! Enjoy Bazista!


View Profile
May 09, 2017, 07:46:39 PM
 #12

Hi!

I've been using BitcoinJ to create address and receive payments. However, someone is stealing my Bitcoins everytime I receive a payment.

Here is an example: https://blockchain.info/address/16PJCcVQtptezpFSX8h21aUznzqbtVJWn6


1) I received 1.5 BTC at 2017-05-07 23:59:36

2) less than 2 minutes later, my balance was stolen!!


It happens several times, and it looks like the final destination is this address: https://blockchain.info/address/1Q3SNbBrsmtQ9rCMjgiHEjJSBn8jDdVg2d

I'm completely desperate!!!

Do you guys have any clue?

Thank you!


At this point the coins are lost, so the best you can do is to wipe out your hard drive and make a new installation on your machine and don’t install anything except the necessary things to run a wallet, if you don’t want to run your own wallet then create a new web wallet and don’t write your password anywhere, if I were you I will install Linux but that is up to you.


▄██████████████████
███████████████████
███████████████████
█████████████████
███████████████
████████████████
████████████████
█████████████████
███████████████████
████████████████████
█████████████████████
▀████████████████████
Bazista®
██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██
██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██
██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██

██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██
██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██
██ █  ██ ██
██   ██  ██
██  ██   ██
██ ██  █ ██
|||
squatz1
Sr. Member
****
Offline Offline

Activity: 462


View Profile
May 09, 2017, 07:49:17 PM
 #13

You should be using a Linux machine. Winxx is a joke. Next, NEVER download any bitcoin related software on that computer. Only a well established, trusted wallet. I would guess that the computer you are on is compromised. I would format the HD with an easy distro like Ubuntu and start over. Sorry I don't have better news for you.
 Cry


This is if you're going to be using something along the lines of a wallet which is on your computer, which I would avoid doing in hopes of wanting to use something such as a hardware wallet with such a high amount of Bitcoin or a high security web wallet, which I personally would rather choose.

Something along the lines of BitGo, or BlockChain (With all security done and enabled) would work fine for something like this, you just have to have some faith in the companies that have been around for awhile and have set themselves as reputable.

Though if you want ultimate security, Trezor or Ledger.

       ▀
   ▄▄▄   ▄▀
   ███ ▄▄▄▄  ██
       ████
    ▄  ▀▀▀▀
▄▄
      ██    ▀▀
██▄█▄▄▄████████
▄▄▄▄▄▄▄▄▀▀███▀▀▀
██████████████████
████▄▀▄▀▄▀███▀▀▀▀▀
████▄▀▄▀▄▀███ ▀
████▄▀▄▀▄▀████████
▀█████████████████
]
CoinPayments
█████
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████
█████
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████
█████
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████ ██
█████
dissident
Full Member
***
Offline Offline

Activity: 224


View Profile
May 09, 2017, 08:52:01 PM
 #14

windows is secure if you know what you're doing. Having been using it since the windows me days and having vivid memories of pirating windows xp version 2505, which was release candidate 1 way back when, I can keep my rig secure just fine.

If you have only an 'average joe' level of PC skills you probably shouldn't be using linux either, lol.. like you'll know what you're doing... not.

П    |⧛ ☛  Join the signature campaign and earn free PI daily!  ✅ |⧛    П
|⧛         ☛  PiCoin - get in now  ✅     ☛ No ICO!  ✅          |⧛
tetrasoft
Newbie
*
Offline Offline

Activity: 4


View Profile
May 09, 2017, 09:06:14 PM
 #15

Hi guys, thanks for all the messages!!!

Let me send some more information, maybe someone can have a light with me  Grin


- this wallet is running in a super new webserver, hosted at Amazon Web Services. So, I'm pretty sure it doesn't have any virus or keyloggers

- it is a Linux machine

- after the first time I noticed the problem, I stopped using the wallet and created a new one. But the problem happened again, and again, and again (no matter how many new wallets I have created)

- I'm using BitcoinJ because I'm integrating the payments to my Java software. I need to create new addresses, receive money and eventually withdraw


Do you guys know how can I improve my wallet and addresses security? Below is the code I'm using to create the wallet and addresses:

------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------

NetworkParameters params = MainNetParams.get();

WalletAppKit kit = new WalletAppKit(params, new File("."), WALLET_NAME);  // BitcoinJ creates the wallet if it doesn't exists

kit.startAsync();
kit.awaitRunning();


String newAdd = kit.wallet().freshReceiveAddress().toString(); // this command creates a new address for me

------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------


THANK YOU SO MUCH!!!
darkangel11
Hero Member
*****
Offline Offline

Activity: 826


View Profile
May 09, 2017, 09:19:35 PM
 #16

You should try to find the problem step by step. Did you manage to receive any coins that weren't eventually stolen? If yes, what were the amounts, circumstances, analyse the situation and find the difference.
If not (each transaction was intercepted), what machine/network are you using to access the Amazon server? I understand the server is secure, but your point of access could be compromised, unless I'm missing something and you're actually typing from the server room. Try using different setups: a different wallet, different access point (try your phone or a friend's computer) and send a small test transaction to each new wallet, maybe he'll take the bait and you'll be able to identify his point of entry.

jonald_fyookball
Legendary
*
Offline Offline

Activity: 1218


Core dev leaves me neg feedback #abuse #political


View Profile
May 09, 2017, 11:03:22 PM
 #17

Hi guys, thanks for all the messages!!!

Let me send some more information, maybe someone can have a light with me  Grin


- this wallet is running in a super new webserver, hosted at Amazon Web Services. So, I'm pretty sure it doesn't have any virus or keyloggers

- it is a Linux machine

- after the first time I noticed the problem, I stopped using the wallet and created a new one. But the problem happened again, and again, and again (no matter how many new wallets I have created)

- I'm using BitcoinJ because I'm integrating the payments to my Java software. I need to create new addresses, receive money and eventually withdraw


Do you guys know how can I improve my wallet and addresses security? Below is the code I'm using to create the wallet and addresses:

------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------

NetworkParameters params = MainNetParams.get();

WalletAppKit kit = new WalletAppKit(params, new File("."), WALLET_NAME);  // BitcoinJ creates the wallet if it doesn't exists

kit.startAsync();
kit.awaitRunning();


String newAdd = kit.wallet().freshReceiveAddress().toString(); // this command creates a new address for me

------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------------------------


THANK YOU SO MUCH!!!


So I assume this is not for personal use, but some service you are building?  Otherwise its pointless and foolish to keep your wallet on AWS.

I don't know much about security in those cases, but I think many big sites use multisig.  They may be passing unsigned transactions to
a more secure server, signing them and then returning for broadcasting.


tetrasoft
Newbie
*
Offline Offline

Activity: 4


View Profile
May 09, 2017, 11:39:06 PM
 #18

Yes, I'm using it to create a virtual store, it is not to keep my personal wallet Smiley

I'll research more about multisignature.. thanks for your hint!
nachius
Hero Member
*****
Offline Offline

Activity: 532


View Profile
May 09, 2017, 11:42:50 PM
 #19

Yes, I'm using it to create a virtual store, it is not to keep my personal wallet Smiley

I'll research more about multisignature.. thanks for your hint!

Why code all that yourself? There are better options than doing it all yourself
tetrasoft
Newbie
*
Offline Offline

Activity: 4


View Profile
May 10, 2017, 02:29:27 PM
 #20

I tried using some APIs, such as Blockchain and Codebase API. But they lack some important features, such as how to withdraw or send coins, for instance :/

Do you know any other Java API I could use?
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!