Bitcoins Withdrawn From Wallet Help

[anant15]

Hi everbody,

I had a blockchain.info wallet with a little less than 3 bitcoins in it. The most bizarre thing happened. Someone sent 2.99 bitoins into my wallet essentially doubling the coins that I had. Half an hour later they withdrew the full balance.
Here is the hash fro the transaction.

2.9839.. received from  1D3L7EPi1gKU545ZCWzaNSnUNF5EkykhpC
5.980.. sent to 14rca9tWPSaf8emCz9pyM1dPjwm6toyqeV

Ive been trying to follow it through. Any help on how and why this happened will be most helpful.

Unlikely that I was phished as I never used an internet account to register my bitcoin or talked about my wallet on any website. They were always on my phone. However, i was using a blockchain wallet on IOS that was in use.A lesson for everyone to get cold wallets I suppose.

Has anyone else had a similar experience? Do you guys think I have any chance to retrieve or trace my coins? Any help/ suggestion would be most welcome.

Thanks

[Lassie]

Basically you cannot recover sent coins, once it is sent there is no way you will get it back unless the user who owns the recieving address send it to you. The thing on your issue which I don't understand is why you recieved 2.9839btc that I assume you didn't expect

[Thirdspace]

2.9839.. received from  1D3L7EPi1gKU54ZCWzaNSnUNF5EkykhpC
5.980.. sent to 14rca9tWPSaf8emCz9pyM1dPjwm6toyqev

none of these addresses valid on bitcoin network... can you check the addresses again?
or if you can post the txid hash related to these addresses, that should help too

[anant15]

I'm sorry made a typing error on the hash. Have updated it. Thanks for pointing it out. You should be able to track it on the blockchain hash now

[skorms]

Are you sure you are not confusing bitcoin with bitcoin cash? Doesnt sound logic to me somebody would send you bitcoins first if you are hacked.

[anant15]

Yes I'm pretty sure I'm talking about bitcoins and not bitcoin cash. You can follow the hash in my first post and see it for yourself. Thats what I dont get as well. Why would someone give me extra bitcoins before stealing them?! Why not just take whats in my wallet without depositing anything in it?

[Thirdspace]

To understand it thoroughly, can you give us a little story behind this transaction?
which one is your actual bc.info address? did you have any coin or send coin to your bc.info address?
without any context or pre-condition, we can't really tell what is going on... other than the trails of the money itself

did you just create your bc.info account recently just to follow investment/mining offer by someone?
awhile ago there's someone almost fell for this tricky scam attempt,
something like this https://bitcointalk.org/index.php?topic=2605143.0

[Stedsm]

which one is your actual bc.info address?

1Hajs8vNqZs8Jp6aeQ3Xzn9oeQ6DRxGPPX <-- There it is.
Based on the transactions, I can say that.

did you just create your bc.info account recently just to follow investment/mining offer by someone?

I believe their wallet creation has nothing to do with the transfer of coins.

2.9839.. received from  1D3L7EPi1gKU545ZCWzaNSnUNF5EkykhpC
5.980.. sent to 14rca9tWPSaf8emCz9pyM1dPjwm6toyqeV

Thirdspace, check 1Hajs8vNqZs8Jp6aeQ3Xzn9oeQ6DRxGPPX, both these transactions are there.

acc591231b593a3e0ce84f69440a6c2dc0470e0c6f46c240d4b3d56804db1b8d (Txid of receipt)
8cae62e71ea361e328b0c09b4a4bd813212cf071a6737ce1ed88a5d210ff0437 (Txid of sent one)

Ive been trying to follow it through. Any help on how and why this happened will be most helpful.

Anant, you have your wallet compromised (most probably).

Unlikely that I was phished as I never used an internet account to register my bitcoin or talked about my wallet on any website. They were always on my phone. However, i was using a blockchain wallet on IOS that was in use.A lesson for everyone to get cold wallets I suppose.

Has anyone else had a similar experience? Do you guys think I have any chance to retrieve or trace my coins? Any help/ suggestion would be most welcome.

Thanks

I think your iOS was corrupt? I know that iOS is one of the best operating systems that is not much vulnerable to viruses, but you may have downloaoded something that might have hacked your private key? OR did you download the official blockchain wallet?
Hence, all we can do is - see it over the blockchain as it is a ledger that only shows your transactions.
Sorry bro, such transactions are irreversible and you've lost your coins.

[icoprofits]

u may be confused by sending false bitcoin address or u may have sent to bitcoin cash

[anant15]

@stedsm. You seem to have a pretty good handle of what took place. Basically everything that you said is aligned with my thinking. My quest is to find out if this similar pattern has been seen by anyone else before.

@ thirdspace I didn't actually create a blockchain.info account which was linked to my email until after the withdrawal of my coins.. I only did that to track what happened to my coins. I was hoping that maybe they were just transferred to blockchain address that was within my wallet but invisible to me. Previously I just had the wallet that was on my iphone which I could access using my fingerprint or code. My phone has not been in possession of anyone but me since I created a blockchain wallet. So I dont think it could be physically manipulated in any way.

[anant15]

@stedsm - as per your question
I think your iOS was corrupt? I know that iOS is one of the best operating systems that is not much vulnerable to viruses, but you may have downloaoded something that might have hacked your private key? OR did you download the official blockchain wallet?.

I downloaded the official blockchain wallet. I highly doubt I downloaded something that could have hacked my private key. I was talking to a couple of friends that had bitcoins stolen too. I have to say I usually do very little on my phone that could compromise it. I don't watch porn or youtube videos or anything like that on my phone. The things I mainly use it for online are whatsapp, apple music a couple of dating apps and thats it. Usually prefer working on my laptop. So not sure

[audaciousbeing]

@stedsm - as per your question
I think your iOS was corrupt? I know that iOS is one of the best operating systems that is not much vulnerable to viruses, but you may have downloaoded something that might have hacked your private key? OR did you download the official blockchain wallet?.

I downloaded the official blockchain wallet. I highly doubt I downloaded something that could have hacked my private key. I was talking to a couple of friends that had bitcoins stolen too. I have to say I usually do very little on my phone that could compromise it. I don't watch porn or youtube videos or anything like that on my phone. The things I mainly use it for online are whatsapp, apple music a couple of dating apps and thats it. Usually prefer working on my laptop. So not sure

I can't really phantom what could have happened here because based on what I have read, you have discontinued the use of the IOS only to then say its now responsible for this. My own question though:

1. The amount that came in before the heist, what is the source of such?

2. Blockchain.info always send notification email to you anytime someone logged, I wonder why its after the attack, you then register your mail to them.

3. I think you should contact support to lay your complain because its a great vulnerability in their system if this should happen without you knowing.

[Stedsm]

@stedsm - as per your question
I think your iOS was corrupt? I know that iOS is one of the best operating systems that is not much vulnerable to viruses, but you may have downloaoded something that might have hacked your private key? OR did you download the official blockchain wallet?.

I downloaded the official blockchain wallet. I highly doubt I downloaded something that could have hacked my private key. I was talking to a couple of friends that had bitcoins stolen too. I have to say I usually do very little on my phone that could compromise it. I don't watch porn or youtube videos or anything like that on my phone. The things I mainly use it for online are whatsapp, apple music a couple of dating apps and thats it. Usually prefer working on my laptop. So not sure

I'm known to such cases that happened before like yours. They too lost their coins as the coins went to some address, those entities didn't even knew about. This is one of the reasons why I don't support/use blockchain's wallet any more. They've gone worst after the increase in the number of daily users. I guess it's easy for a DDoS attack to take place between a server overload. There've been times when I saw blockchain saying "We're under maintenance". Probably, such attacks would have been performed?

[Thirdspace]

@ thirdspace I didn't actually create a blockchain.info account which was linked to my email until after the withdrawal of my coins.. I only did that to track what happened to my coins.

Previously I just had the wallet that was on my iphone which I could access using my fingerprint or code. My phone has not been in possession of anyone but me since I created a blockchain wallet.

I'm sorry I failed to understand the chronological event here...
So, in the beginning you have blockchain wallet on your IOS?
then you said
"I didn't actually create a blockchain.info account which was linked to my email until after the withdrawal of my coins"
what actually do you mean by that? did you create another account just for the purpose of tracking?
you could've just login normally on the web instead of app to do that, couldn't you?
btw, is that 1Hajs8vNq... the one and only address you've used in your wallet?

Thirdspace, check 1Hajs8vNqZs8Jp6aeQ3Xzn9oeQ6DRxGPPX, both these transactions are there.

acc591231b593a3e0ce84f69440a6c2dc0470e0c6f46c240d4b3d56804db1b8d (Txid of receipt)
8cae62e71ea361e328b0c09b4a4bd813212cf071a6737ce1ed88a5d210ff0437 (Txid of sent one)

To understand it thoroughly, can you give us a little story behind this transaction?
without any context or pre-condition, we can't really tell what is going on... other than the trails of the money itself

that's why I said what I said. The transactions speak for themselves... the money trails
but to figure out where the problem started (pk leaked, wallet hacked or etc) we need the story behinds the said tx
received from where, someone else or just transfering between his addresses?
how did he create the address/wallet? what has he done with the wallet recently?
just showing address and txid won't really tell anything else than the numbers shown on it
because the addresses doesn't have name attached to them or message on tx, unlike we usually have with banking transfer

Why would someone give me extra bitcoins before stealing them?! Why not just take whats in my wallet without depositing anything in it?

you don't receive extra bitcoins, but the tx grouped the utxo as inputs and send to another address
it's like taking out small amount money from different pockets to make a single big payment

[anant15]

3. I think you should contact support to lay your complain because its a great vulnerability in their system if this should happen without you knowing.
[/quote]

I have sent blockchain.info two mails but they have yet to respond. I'm not sure how else to contact them. Any suggestions?

[anant15]

@thirdspace

Apologise for my lack of clarity. What I should have said is I created a blockchain.info wallet on my IOS. I never logged on to a laptop or any other phone using my wallet ID number. Only after my coins were stolen did I log on to a laptop to track the coins.

I have never transacted using the bitcoins that I got. Only transaction that I had was to get my initial bitcoins that were transferred from a friend to me and I paid him for it. And we did a test transaction of me sending him back a some coins a day later. After that I was just keeping the coins as an investment and not really using for any transactions as such. Very few people would know about me owning bitcoins. I'm not in a habit of broadcasting about my money or investments that I have made.

I would log on to my phone occasionally to check the value but nothing else. I'm not sure if this is enough background info. If you want to know more please let me know.