Hacking

[m4ttl30]

I believe I have been hacked. Is there anyway I can get my money back? It’s a lot of money just to lose!

[1714185420]

1714185420

[1714185420]

1714185420

[1714185420]

1714185420

[1714185420]

1714185420

[wakedog]

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

[jackg]

Check addresses on a block explorer like btc.com to confirm if you've been hacked from a bitcoin wallet.

If an exchange account has been hacked, contact their support. It would be helpful if you could go into more detail. It's like asking us how to tell if you've turned your computer on...

[m4ttl30]

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

[jackg]

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

If you downloaded from anywhere but electrum.org then most likely.

You should never download anything if you get a warning like this. It could be a developer scamming at best.

[m4ttl30]

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

If you downloaded from anywhere but electrum.org then most likely.

You should never download anything if you get a warning like this. It could be a developer scamming at best.

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

[jackg]

Unless they find out who stole them. Check your address is definitely empty and that the transaction is confirmed. Then delete the wallet if you have the seed written down. You might want to keep hold of the seed just in case they find the hacker.

[nc50lc]

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

Your coins were gone for good, the only thing you can do is to collaborate with the other victims for a possible police investigation to the whereabouts of the culprit.
But the chance that you'll get back the funds is too slim or unrealistic, specially after weeks and months.

[Heisenberg_Hunter]

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

This was a known serious vulnerability in electrum which was warned well before by developers and users on git. Since electrum is a SPV wallet, it relies on other trusted electrum servers while broadcasting transactions. If your transaction is notified by a malicious server run by a hacker it would display a false message to download a new wallet. Upgrading to newer versions of electrum will limit the displaying of such phishing messages but they would be displayed anyway. Anyway versions older than 3.3.3 are more vulnerable to such attacks and would have a high possibility of getting such messages.

Info from git : https://github.com/spesmilo/electrum/issues/4968

If you are a regular cryptocurrency user, you need to keep track of what is happening around you in the technical stuff. Failing that, you will lose your money. Note that, there are electrum forks for Dash and other small coins. Those forked wallet should also be affected. Also if you have downloaded a new upgrade, kindly verify the PGP key of ThomasV to check for original versions of electrum.

[Morarity]

I believe I have been hacked. Is there anyway I can get my money back? It’s a lot of money just to lose!

This electrum vulnerability has been discussed and solved as of now the funds are stolen once you receive an update about electrum to the specific server in question and if you update kiss goodbye to your bitcoin it starts automating transaction in favor to the person responsible for the hacking and you can't do anything about it.

Check addresses on a block explorer like btc.com to confirm if you've been hacked from a bitcoin wallet.

If an exchange account has been hacked, contact their support. It would be helpful if you could go into more detail. It's like asking us how to tell if you've turned your computer on...

The only thing you can do is to track the address in which your funds went and make a note of that in as many exchange or service as possibly you can.
It is always secure to practice updating electrum on the main website in which you can always verify the signature thus even if the website electrum.org is compromise you can still know if hash is strange because hackers can't generate a valid GPG/PGP for the updated version they deploy on the website.

Lastly don't use copy pasting when surfing to a website always type in the URL bar.

[Harlot]

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

Sorry about that you have been a victim of the message being sent to old versions of electrum asking to update your app with their own version of electrum, once you have added your private key to their own version your BTC is good as gone. They have announced it on their website that hackers somehow have been able to broadcast their own message for older versions of their software, I believe you can do anything to be able to retrieve it back as it might be transferred to a dozen addresses by now.

[peonminer]

Can confirm you must learn how to verify the PGP signature on the download of the wallet! I just learned this vital process. It took maybe 30 mins or so to go through everything from verifying the SHA1 of the gpg progam, then you obtain ThomasV's pgp sig and footprint from electrum's website, then you must verify this against the signature for the .exe download of the wallet. All of the info on how to do this can be found on their website https://electrum.org/#download

additionally you can password encrypt your wallet file for added security

[elda34b]

additionally you can password encrypt your wallet file for added security

That might be useful to protect your wallet if the hacker steals your wallet dat. But if he got your seed, just like what happened to OP if my understanding is correct, then this is pretty much meaningless. Not saying that this is bad, but just know that making sure you use the correct software is more important that building a strong password for your wallet.

[peonminer]

additionally you can password encrypt your wallet file for added security

That might be useful to protect your wallet if the hacker steals your wallet dat. But if he got your seed, just like what happened to OP if my understanding is correct, then this is pretty much meaningless. Not saying that this is bad, but just know that making sure you use the correct software is more important that building a strong password for your wallet.

Thanks for that knowledge. I was seriously wondering just this. This will hopefully help others realize that you must verify each download of Electrum with the PGP signature of the ThomasV.