electrum wallet - lost btc - money transfer which was not my own

[djwincnc]

yesterday I see in my wallet a money transfer which was not my own and in particular, took all the amount that was available. I do not know how it could be done because I did not do it, and no one else, except to me, knows my codes or the seed. nor do I have my codes stored on my computer so, someone can steal them.and something else. my last transaction was at 22/10/2018. ever since i only check my wallet. no transactions.  please help me find what happened, to find the money was probably stolen or if is some problem on servers or something. many thanks. https://i.imgur.com/InVIZZq.jpg https://i.imgur.com/g3qg66q.jpg https://i.imgur.com/g3qg66q.jpg https://i.imgur.com/InVIZZq.jpg

[bob123]

The most probable explanation is that your mobile is infected with malware.

It is not recommended to store more than 'pocket money' on your mobile phone.

A lot of vendors do skip security patches for android (even though showing that the latest patch is installed).
This creates a lot of vulnerabilities which makes it pretty easy for an attacker to infect your mobile.

Do you have any AV software running on your mobile ?

or if is some problem on servers or something

This doesn't look like any kind of server fault. Unfortunately your money is gone.

It is recommended to store higher amounts either offline or on a hardware wallet.

[BitMaxz]

If your phone is not rooted no one can remotely send bitcoin from your electrum wallet to other wallets but if your phone is rooted I'm sure your phone is infected with spyware who steal your private key or seeds.

However, if your phone is not rooted maybe someone uses your phone and send it to other wallets or maybe you are a victim of phishing.
If you copy and paste your seed or private key to other website someone knows your private key/seeds.

Better to move your bitcoin to the new wallet to keep your funds safe.

[djwincnc]

thanks guys! my phone in not rooted and no one can touch it from my close people because i never leave it alone. and something else... before 4 days i was download from play store: Antpool Monitor by Gasling. i was download it but i never setup it. this is the only thing i was do, to my phone the last days

[djwincnc]

is there some way to contact with the developers,for example, to find a solution or more information thru the transaction ID or something?

[Lucius]

is there some way to contact with the developers,for example, to find a solution or more information thru the transaction ID or something?

Developers of Electrum can not help you with your loss, they only provide software and you need to take all all necessary steps to provide for any unauthorized use of this wallet. Also every BTC transaction is irreversible, you can only try to report this to police - but chances that you can get back those coins are very low. Whoever stands behind this has taken care of that transaction is included in next block by paying fee of 86000 satoshi, which is too high and completely unnecessary.

Did you recently update your wallet or use it on public wi-fi maybe? Also are you sure that your seed is not compromised, because someone obviously managed to get your seed or private keys.

[Master1781]

Always try to use the mobile wallet as "watch-only", by only entering the xpub key. Keep your seed always offline, that is, use a safe envronment, like BitKey or Tails to sign a transaction and then broadcast it now with your mobile or on PC. As said, it's quite risky to keep your private keys on Android.

[djwincnc]

thanks guys for the informations and for your time. i will follow your advices thanks again

[djwincnc]

what you suggest me to do, to protect my account?

[Master1781]

There may be other tutorials posted. I think you need to move all your remaining BTC from that wallet, and create a new one.

Preferably by using Bitkey (https://bitkey.io/) or a safe PC. Always keep this seed offline, write down on a paper. To send BTC, use a watch only wallet (with your new XPUB key), and sign the transaction in Bitkey (the Cold-offline mode)

It's just a draft idea, you can find a more detailed explanation on the other topics here on the site. But the main thing is. Create a new wallet (offline), send all your funds there, discard completely that old wallet. And never put your seed or private key in an online PC/Mobile.

[djwincnc]

thanks Master1781 !

[HCP]

Just out of curiosity... Which device do you have? What version of Android OS and what is the "keyboard" that it is using? do you use a custom keyboard on your Android device at all?

There are usually warnings when you go to install them about how "3rd party" keyboards can basically act as keyloggers...

[bob123]

what you suggest me to do, to protect my account?

Basically: Don't store your coins (at least the majority which you can't afford to lose) on a device which is connected to the internet in any way.

The best combination of security and convenience is a hardware wallet. These store your coins in an isolated offline environment which can be accessed by infected computers without losing your coins since you have to verify each transaction on the hardware wallet itself.

If you don't want to spend ~70$+, your best bet for storing higher amounts would be either (1) an offline computer or (2) a paper wallet.
Both are very inconvenient to use, but offer very high security (even better than hardware wallets since you basically don't have 'any' attack surface).


It all depends on your personal needs.

If you don't want a hardware wallet and don't want to have the inconvenience of pure offline storage, i'd suggest you install linux on your machine (besides windows) and install a wallet there (e.g. electrum). Then only use this OS to access your wallet when needed.
Also protect this wallet with a password.

Most malware is written for windows, android and iOS. With anything else, you are 'pretty good to go'. At least for amounts less than a few thousand dollars.
Anything above, should be secured pretty consciously.

[keychainX]

what you suggest me to do, to protect my account?

You should start using 2FA, in this case to another phone or to your laptop, then you have doubled your security.

There are also some exchanges that send you a confirmation code through email (like poloniex.com or bitbay), that secures your crypto even further.

[Lucius]

what you suggest me to do, to protect my account?

Before than you listen to any advice you should start thinking in a completely different way with regard to cryptocurrency. When you are in possession of BTC or any other coin you actually become a bank, and you know in what way banks protect funds of their clients. Even more difficult is to protect something so sensitive such as cryptocurrency, so before you acquire new coins take some time to learn about best wallets and security.

Many are skeptical about hardware wallets, some say they are not safe or they are too too expensive, but this is not true. You lost 0.312 BTC which is today around 1400$, and hardware wallet which would save your coins cost less then 100$. This is small price to pay for security of your coins in the future, and certainly the great saving of time in case you want to try some other ways of safe storage - buy&use and be safe.

[djwincnc]

You are right guys, that's exactly how it is... i already have trezor wallet but i use the electrum too, for "quick" transactions. i feel confidentially with the electrum, because of the good reviews but if you are not very good protected (i understand it now) everything is vulnerable... im using for mobile samsung galaxy s7 whit android 8.0.0 and i use no custom keyboard. my computer is a simple desktop with windows 10 pro 64bit eng 2016 edition(old)

[keychainX]

Your funds from https://www.blockchain.com/btc/address/16S5ixVGo3AuD4SvkgLHWfSbEz1rFFr36P moved yesterday, it starts to split up, but bulk of the BTC is here now:
https://www.blockchain.com/btc/address/1FyoJkstgozSV8ccJGb4HJsXDeRQ3Esme7

the other 50 BTC ended up here, https://www.blockchain.com/btc/address/1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g probably the scam receiving address or an exchange (as total amount of BTC to this address amounts 6.1 million) and is probably sold or exchanged to another crypto.

/KX