Blockchain.info security [FUNDS STOLEN]

[Dougie]

Only a handful of addresses are known to be affected thus far. Likely if you have been affected by this problem your coins will have been taken already. All affected users will be refunded in full, please PM me or email help@blockchain.info.

That is very good of you. I feel very comfortable using blockchain.info. I think google should refund all affected users too.

Interesting that this is going further than the android problem. Perhaps someone should update the announcement to include refreshing the blockchain.info version.

[neoranga]

Are blockchain.info paper wallets with already signed transactions in Firefox vulnerable?
How can we check?

[Jesse James]

@Jesse James
If there are any possible? I keep 4 backup file in same fold. 2 address lose and 2 address still there. And I use 2 FA. If thief stole backup file. Must 4 address all lose. Am I right?

It's hard to speculate.  Assuming this is due to a stolen wallet backup file, it would make sense for the thief to sweep all addresses in the wallet simultaneously.  However, you don't know how many keys were in the wallet when the thief may have had access to it ...  he/she might have waited a long time for funds to accumulate before swooping in.

I did some transaction following and it appears your thief is accumulating loot in the address 1HackerRpwYH7F6uGu8422dScNxaHAtWYz ... which currently has 647 BTC. 

[NewLiberty]

... in the address 1HackerRpwYH7F6uGu8422dScNxaHAtWYz ... which currently has 647 BTC. 

Which apparently donated some here?
http://www.btcfans.com/donate

[AAleron]

I had my Blockchain Wallet drained on aug12 I posted about it on the forum.

Can someone tell me if this wallet was on the list

1Cqfi7gKrbGgQuWNpGrziDzmaNoY2cGGjV

I don't use that wallet anymore and am worried about using Blockchain.info until I know how my account was drained while I was logged in and how someone else logged in to my account from Australia at the same time without my knowledge.
 

[BurtW]

I had my Blockchain Wallet drained on aug12 I posted about it on the forum.

Can someone tell me if this wallet was on the list

1Cqfi7gKrbGgQuWNpGrziDzmaNoY2cGGjV

I don't use that wallet anymore and am worried about using Blockchain.info until I know how my account was drained while I was logged in and how someone else logged in to my account from Australia at the same time without my knowledge.
 

I simply did a search of this entire thread and no, this address did not appear on any of the lists posted in this thread.

Here's every address that has been exposed from genesis through block 253081 ... obviously only a few of these are due to blockchain.info:

121Zna8Dy9W2qDvsJEH2ALeHQkteXaeGng
...
1yiQRuB3KRxZTrSHBNZK9NdjbyJskHiVs

So, unless your account was drained after block 253081 it does not look like this was the method used.

[AAleron]

Thanks for doing that. I'll keep digging. Having not had anything stolen before online, this theft has made me very cautious of bitcoin wallets, its clear they are not safe and while you could have any sort of online account broken into, its coloured my view on the safety of bitcoins for the average user.

[2weiX]

All affected users will be refunded in full, please PM me or email help@blockchain.info.

Customer service win!

If only they'd refund other bugs as well^^

[CoinGames]

We also had some coins stolen, and I would like to know how I can find out if it was due to this blockchain.info security flaw.

In fact the attackers took only 4 BTC from us, but over 200BTC from several other addresses. So I'm pretty sure there are many other victims out there.

See these transactions Hacker https://blockchain.info/address/16oP8up3f8ePer1vfBPhypRqkUnsA9ZfYM

See more details here:   https://bitcointalk.org/index.php?topic=246328.0

We would appreciate any help corroborating that it was indeed this security flaw that was to blame.

[johoe]

Hello,

I just reran my script and no 1cup addresses appears in the list.  So the cause is not a double R-value.

The fact that all addresses were compromised at the same time suggests that someone got hold of the private keys via breaking into the server or some other computer and got hold of the wallet.dat or the output of the vanity address generator.  I see that you still advertise these addresses.  You should really change them as it is quite likely that they are compromised.

Here are all addresses that were compromised since mid-August due to the double R-value bug:

12RqykuRC9esWxtJL3T9WiwsPb8gdPpdDR
17AHXAodFQ33A4DqFENVHCG59qiaRNbhcq
17YujH47nJqYDF91P9GfKbQYap9MdQP7cS
19qnLpn9it7csR9sEay1XrFyfAmUNoXYk4
1HgRa96fuHCde6Rie4nwhaz1hZR694X4wj
1M7UUR1QhTMwoEiVVWf88Dy4in23RjYdic
1NSnZPRR32mrfAADxNJcPRP647gseqEMyj
1P3wCaQNk438cXKsC2YYvpecWa6kZKGCKC
1PCrHhXxS8ZotDvgSA5WxpmtC1qNQchrPr

  Johoe

[Mark_Twain]

Just had a similar problem! 10 BTC ripped off from my Wallet without my consent! Please Help!
https://bitcointalk.org/index.php?topic=373612.new#new

[educatedwarrior]

I just got 16 BTC stolen from Blockchain.info


I learned my lesson.  Never using Blockchain again.

[film2240]

This isn't looking good.I think now would be a good time to find a local bitcoin wallet for my android phone (as the only one I have now is blockchain.info at the moment) that works whereas the official android wallet seems to make my funds disappear.

Maybe that's what my mac's for,store them away from online services.Any options?

[leopard2]

We need better legislation for Bitcoin theft. Unbelievable how much dirt is out there  

Similar to horse theft in the Wild West, which was so critical that capital punishment was the only way to go.

I suggest something like Sharia or Codex Hammurabi.   One finger cut off, per Bitcoin stolen, is a good start.

Scum of the earth scammer dirt, will have trouble typing with their hands cut off.

[educatedwarrior]

Hi I know this is an old post.  

I just found the address that stole the bitcoin and laundered the money.   They stole the bitcoin and spit up the coins into to address (mixed the coins) then merged back into 1 address later down the blockchain.

• Bitcoin address the assets were stolen from was 1376AFc3gfic94o9yK1dx7JMMqxzfbssrg  and went to 1AkcY9NLEBH8Esyxwnwu9HiFQaSUjfDooa.    Here is a visual node diagram - https://blockchain.info/tree/51585845
  Bitcoins were laundered and then merged back into address 1L7YRcL9h7tc5B4gWKikdz7UvwrxtBDPWp
  The coins were then transfered to  1BGZohKS9QboP9gwCs4jw7vUXEvyPEs3FL  on 4/14/2014 where they stayed until   2/24/2016..  After that looks like this one person started profit taking of 10 btc converting into fiat.

I just need to found out who owns 1BGZohKS9QboP9gwCs4jw7vUXEvyPEs3FL.   Should be a depositor address at one of the exchanges.  Looks like 1L7YRcL9h7tc5B4gWKikdz7UvwrxtBDPWp was the hackers person wallet address.

[erikalui]

Hi I know this is an old post. 

I just found the address that stole the bitcoin and laundered the money.   They stole the bitcoin and spit up the coins into to address (mixed the coins) then merged back into 1 address later down the blockchain.

• Bitcoin address the assets were stolen from was 1376AFc3gfic94o9yK1dx7JMMqxzfbssrg  and went to 1AkcY9NLEBH8Esyxwnwu9HiFQaSUjfDooa.    Here is a visual node diagram - https://blockchain.info/tree/51585845
  Bitcoins were laundered and then merged back into address 1L7YRcL9h7tc5B4gWKikdz7UvwrxtBDPWp
  The coins were then transfered to  1BGZohKS9QboP9gwCs4jw7vUXEvyPEs3FL  on 4/14/2014 where they stayed until   2/24/2016..  After that looks like this one person started profit taking of 10 btc converting into fiat.

I just need to found out who owns 1BGZohKS9QboP9gwCs4jw7vUXEvyPEs3FL.   Should be a depositor address at one of the exchanges.  Looks like 1L7YRcL9h7tc5B4gWKikdz7UvwrxtBDPWp was the hackers person wallet address.

My funds too went in a similar way. It got stolen on 7th June by this address: 1PTKJsu66KFAYmaKTFv7h9d38enhtdxdCf  and then was sent to multiple addresses which I was unable to track and the final address had some 10 btc in it from multiple addresses (including my coins). It was about 0.057 btc that was stolen. Anyways to track the hacker?

[Hopeful Man 2024]

Well this is a blast from the past.

Is there any way in this modern world to identify who might have done it, I want my BTC back

[logfiles]

Well this is a blast from the past.

Is there any way in this modern world to identify who might have done it, I want my BTC back

I think It would be a good idea to tell us what exactly happened. Have you been unable to access your account, like it has been the case with some other members lately? Was there a security breach in your account that lead to the theft of funds?

[Hopeful Man 2024]

Did a little mining back in the day, woke to an empty wallet, then gave up on btc.

I have access to the wallet & I can prove ownership by other means.

I just want to know if locating the person may mean I can get something back.

It seems we know where the final destination was, wallet wise the last I read.