IDEX Account hacked somehow?

[prickles]

hey hatch, first off, commiserations for your loss.

i joined so i could reply to you. i experienced exactly the same thing on idex  as you did.

like you i don’t know how this happened. i’ve checked all my histories only to find nothing.

however my account was then hijacked by * and tens of millions of $’s worth of eth was funneled through my account in a 24 hour period. i read somewhere that the hacked 40$ million coinrail hack, was sent through idex! i’m getting 2+2=4. i wouldn’t at all be surprised to see the amount gone through my account is $40 million dollars.

idex advice was don’t use the account again. surprisingly, nothing was done about the illegal transfer of millions of dollars through my account! my problems started with their system crash several days ago.

shabby!

[hatch789]

Yikes that would feel terrible just the same way. Watching and seeing all those transactions but being helpless. In my case I just want to learn from my loss it's pisses me off but I know that in every bad situation there can always be something good to come of it. In this case it would be nice for me to fully understand what I did wrong to allow this to happen.

I did go back in my history and found a site: idexmarket-secure.com and that has NOW been taken down so I can't see the site to refresh my memory.

But I wonder if I was in a hurry one day just trying to see my account and put my JSON file in there along with the PW. I want so badly to believe it was something like this because then at least I have an explanation and even more importantly I don't feel violated like this could just happen again at any time. I want a clean explanation if you know what I mean. I can handle it if I did something stupid. At least then I know it wasn't just this all-powerful that that can and will happen again. The uncertainty is the worst part of it.

So I have a breadcrumb but don't know what I did on that site (above). Did I see instantly it was a wrong site and get off or did I put my information in there giving everything to the bastards!?!?! Enquiring minds want to know and that's what drives me nuts here.

[felissss500@gmail.com]

Sorry for your loss my friend, the bad and the decentralized stock exchange, there can be easy to lose money,so it was with etherdelta and so it will be with idex, the money will not return unfortunately,suggest no longer to use the services of idex.

[rosebit]

to me i believe its not too easy because the private key requires a password or key phrase to use it and I'm having trouble understanding how this could have been possible.

[hatch789]

The only thing I can think of is that I accidentally went to a phishing site and gave them the information they needed to pull this off. I have no other explanation.

I am extremely careful but sometime I get rushed at work and may have done a quick google for the IDEX site and come up to a Phishing one instead of the real thing. I'm praying that this is what happened and I can just chalk it up to me being a stupid idiot.

[danherbias07]

The only thing I can think of is that I accidentally went to a phishing site and gave them the information they needed to pull this off. I have no other explanation.

I am extremely careful but sometime I get rushed at work and may have done a quick google for the IDEX site and come up to a Phishing one instead of the real thing. I'm praying that this is what happened and I can just chalk it up to me being a stupid idiot.

I guess this can close the case.
You will just have to be careful next time.
That is money we are talking about here and you will really have to slow it down with the transaction.
If I were you I will clean up my Browser history, cache and auto log ins. Google also have the history of what site you have visited and you might want to clear that out.
Maybe next time use an incognito if you are really in a hurry.

RIP to those tokens. Move on and make another.

[laskybok]

You might have clicked on a phishing site by mistake, because i do not see how possible that could have happened. I use IDEX almost every time and nothing of such had happened to me. I have already bookmarked the idex site  use and there no way i can click on phishing site. Hackers have really devised several means through which they can hack into people's account. Try checking the site you use again and confirm the authenticity.

[khufuking]

I will not gonna guess how you got hacked because posts above already stated all possible ways that you can lose your Ethereum wallet . Now let me tell you 2 very important advice .

1- Always bookmark you exchange and never visit them threw google search or email you received .
2- When you are using decentralized exchanges always use an disposal address and never leave any tokens or Ethereum in it . ( Transfer tokens/Ethereum when you want to sell/buy from your main account to your disposal account make the trade you want then move your toekns/Ethereum back to your main account  ) .

[LitleCryptic]

You know on this exchange I have been trading for several months and while everything is good. The more the principle of working as an ethereal purse and here the main thing is to keep keys and passwords in safety and there will be happiness.

[bitcok]

maybe your computer or PC has entered the mallware and you do not realize it, you should do reinstall your PC then secure your PC from the mallware attacks

[keycellko]

This is one of the reasons why i don't like to log in to my idex. They ask for private keys to access your account. This made me think twice in opening my account there. But idex has a lot of coins listed so it made me open an account. I don't see any problems with idex. Maybe its a phishing site that popped up and prompted you to put in your private keys

[MicaleFalcon]

I think it's not a easy task for doing. Because IDEX accounts provides high class security. They are always developing their security. If this happens it will miracle.

[PaulTrace]

Only you can access your IDEX account with your private key and it also has HTTPS technology which makes it more secure. I think somehow you were uncertain and the hacker take that chance and get your password.

[maiiyeuvo]

Hi Guys,

I don't know where to post this so hopefully this is the right spot. I need some help figuring out how this could have happened. 3 days ago it appears someone got into my IDEX account and sold my XYO coins then proceeded to transfer to the ETH to their own account. I am unclear how this could have taken place as I have been very careful with my IDEX account and my JSON file there. So is there anything (any clues) in this transaction that point to something beyond someone brute force hacking my IDEX account? Please help me understand how this could take place.

I get that my 1 ETH is gone ...yes it pisses me off to high heaven and people will be like too bad buddy I had xxx amount stolen. But what I'm trying to understand is HOW this happened so I can avoid it in the future. It makes no sense to me. My google accounts are secure e-mail etc... so I'm not sure what on earth happened.

Any help unraveling this mystery would be greatly appreciated.

transactionId   date   market   type   tokenAmount   etherAmount   usdValue
cbaee360-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   6312.983039   0.04116633   28.81643177
cbae4720-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   72461.66778   0.5   350
cbadaae0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   25209.15473   0.1759599   123.17193
cba8eff0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   29405.399   0.20554374   143.8806173


http://etherscan.io/tx/0x91714ee08c34934036b52c903cbc7f9441082e97b9a6f824773cbdb49b3f84eb

First, I use an incognito browser when signing up for IDEX.
Second, my computer always install anti-spyware, anti-keylog software.
Third, I never use the Prative key to log in.
Others may invade your wallet ETH and sell what you have.
I recommend creating a new wallet. That's the best way.

[Chucksmith229]

I downloaded a fake Idex app from Google play that hacked my account then got in my vps. Got me for like 550 total

[argus312]

What a mistake was all the same if you made it happen, but it's hard to say which one!

[julzcoinbit]

Hi Guys,

I don't know where to post this so hopefully this is the right spot. I need some help figuring out how this could have happened. 3 days ago it appears someone got into my IDEX account and sold my XYO coins then proceeded to transfer to the ETH to their own account. I am unclear how this could have taken place as I have been very careful with my IDEX account and my JSON file there. So is there anything (any clues) in this transaction that point to something beyond someone brute force hacking my IDEX account? Please help me understand how this could take place.
I get that my 1 ETH is gone ...yes it pisses me off to high heaven and people will be like too bad buddy I had xxx amount stolen. But what I'm trying to understand is HOW this happened so I can avoid it in the future. It makes no sense to me. My google accounts are secure e-mail etc... so I'm not sure what on earth happened.

Any help unraveling this mystery would be greatly appreciated.

transactionId   date   market   type   tokenAmount   etherAmount   usdValue
cbaee360-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   6312.983039   0.04116633   28.81643177
cbae4720-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   72461.66778   0.5   350
cbadaae0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   25209.15473   0.1759599   123.17193
cba8eff0-6a7e-11e8-a34d-252f02cc8c1a   6/7/2018 14:15   XYO/ETH   sell   29405.399   0.20554374   143.8806173


http://etherscan.io/tx/0x91714ee08c34934036b52c903cbc7f9441082e97b9a6f824773cbdb49b3f84eb

I don't have an Idea, how can I help you mate with your situation now, since I'm just an ordinary trader and such as a bitcoin users. Better luck next time and be secure by every step of trading In IDEX exchange because I notice on that exchange was so easy to used and now I read this post, I can say Its to used and easy to hack as well.

[dirgayeah]

Hi Guys,

I don't know where to post this so hopefully this is the right spot. I need some help figuring out how this could have happened. 3 days ago it appears someone got into my IDEX account and sold my XYO coins then proceeded to transfer to the ETH to their own account. I am unclear how this could have taken place as I have been very careful with my IDEX account and my JSON file there. So is there anything (any clues) in this transaction that point to something beyond someone brute force hacking my IDEX account? Please help me understand how this could take place.

wow I was suprised if someone can do bruteforce attack to your IDEX account. why he must do a bruteforce if they can do something simple like social engineering ? and guest you already trapped by hackers. maybe you ever login with your private key in fake IDEX website or MEW. so simply to made conclusion your private key already hijacked. don't ever use JSON file anymore. you must be more careful. use NANO LEDGER or metamask to store all your balance man.

[dicaprio]

It is a bad idea. This simply can not be, because IDEX has a very similar system of protection as MEW, so the only thing that can be, people who previously sent their private keys could somehow draw money from you.

[Gurueconom]

It's very simple to steal your password through some extension in your browser or through a phishing site. And if you store all the data in an online Google table, then it's likely that your mail was hacked.