A hacker breached my server and stole all the funds: https://www.blockchain.com/btc/tx/1a62267aa812b8d289148192ff15cb2d6a1fccf40ce0e31278125191ff9d181b

A very low fee was used.

Just got back server access and am trying to cancel the transaction. Tried zapwallettxes and deleting the mempool, didn't work.

If anyone has a solution that would be excellent.

39U2gKxvdL25WZgRwxg1Y1a5k3cv1U3uad is the address I would like the funds sent to.

I am hoping someone from here can build a transaction for me to sign from the wallet and rebroadcast at a $5 fee since I don't know how to. Or, any other help or suggestion.

I will pay 0.03 BTC from the recovered amount to whoever can help out.

My client was Bitcoin Core. Luckily it seems like a novice since he used an ultra-low fee. Hoping someone can help me compile a new transaction which I can sign from the node and rebroadcast. Zapping the wallet, abandoning tx, or a double spend from the wallet isn't working.

Your chance is almost 0, but if you're desperate there are 2 options :
1. Make transaction with same input, but with different output (Bitcoin address which owned you and not hacked). Then personally make a request to pools/miners to include your transaction.
2. Similar with 1st step, but broadcast the transaction instead (which most likely will be rejected by other nodes).

How do someone will know who is a miner and how do someone contact them? I think OP needs a very quick movement. Do you know anyone in person?

Unfortunately no, otherwise i'd already give such information to OP. Few pools have social media (such as https://twitter.com/btccom_official), but i doubt they'd make respond quickly.


At least on my node, transaction made by the thief isn't available on my mempool node while your transaction is available on my mempool.
On other blockexplorer such as https://live.blockcypher.com, both of the transactions are available.

I think you made it!
http://prntscr.com/oxt9u7


I do not see the old tx in the block explorer anymore but I see the new one and it's going to your desired address which is this: 39U2gKxvdL25WZgRwxg1Y1a5k3cv1U3uad

You are good now :-)

The old transaction still exists in some nodes. For example:

https://blockchair.com/bitcoin/transaction/1a62267aa812b8d289148192ff15cb2d6a1fccf40ce0e31278125191ff9d181b
https://explorer.viabtc.com/btc/tx/1a62267aa812b8d289148192ff15cb2d6a1fccf40ce0e31278125191ff9d181b
https://live.blockcypher.com/btc/tx/1a62267aa812b8d289148192ff15cb2d6a1fccf40ce0e31278125191ff9d181b/

Just because the new transaction has currently been accepted by some nodes, doesn't mean it will definitely confirm first. The miners who find the next few blocks might only be seeing the old transaction and not the new one. The mempool being a little fuller right now will work in your favor, as even if they are only seeing the old transaction, they are unlikely to pick it for their block due to its low fees. Having said all that, you aren't 100% safe until you have some confirmations on the new transaction.

Edit: Looks like the new transaction has one confirmation and the old one has disappeared from all the sites above.

Given the OP's history, I would not be especially surprised to see him not follow through on his bounty promise. I also have doubts as to his story, but that is besides the point.

You are right, he is not inclined to pay anyone here as none of them helped in the solving the transaction problem, and asking about it is somewhat stupid.

Anyways, he has already paid the bounty ( funds to help ) to his dev, as he stated here.

---

@StackGambler, I am more than interested to know, basic details about how your dev managed to change the output address ? It would be nice if you can let us know.. Thank You !

This pretty much sums it up, nobody here built the tx I asked for, but my dev handled it.