BTC hacked from blockchain wallet

[dkbit98]

This is exactly why I DO NOT recommend anyone using Blockchain.com or any similar online wallets.
It is much easier for hackers to get your information, or website can be hacked.
Best thing is to have your own private key that never touches any internet website.
I consider them similar like exchnanges, even if they are more secure.

Best use some cold wallet (hardware or desktop), and double backup seed/private key.

Sorry to hear what happened to you...
and I hope you will get much more Bitcoin in future!

[leftgirly]

You many not have secured your wallet well. Once the funds was in your wallet and you have the personal private keys to the wallet then it would be very difficult for another person to conduct transaction you wouldn't know about it. It seems the  blockchain wallet has been compromised by someone who know about your private keys.

[mocacinno]

I've been using an online wallet and I don't have a problem.

These kinds of sites have their own security, you can always connect your email, some have their 2FA, some even require a phone number and I am wondering how can someone access your wallet without you being notified of that. Two points to consider, it is either your fault or the sites fault but I don't think the site will just let someone use your balance without logging to your account.

Sorry, but this logic is flawed... It's not because you didn't have a problem with online wallets (yet) that they're safe to use. It's perfectly possible for a hacker to get his/her hands on the xprv, the seed phrase or the derived private keys (sometimes even without using the gui), in this case no email security, sms, 2fa, biometric security will help you... As soon as a hacker can derive private keys belonging to addresses that "belong" (for a lack of better terminology... When using online wallets, your funds belong to the wallet company) to you and were funded, he'll be able to rob you (even if the online wallet goes down).

Bottom line:
"if you're not (the only one) in controll of your private keys, you're not (the only one) in controll of your funds", this is true no matter which company, which 2FA measures, which guarantees,...

[lobat999]

Maybe it would be possible if you could recall what did you do prior to that incident (any information would help) so that the community could help analyze what happened and give further suggestions and recommendations.

[mitchr4]

I've been using an online wallet and I don't have a problem.

These kinds of sites have their own security, you can always connect your email, some have their 2FA, some even require a phone number and I am wondering how can someone access your wallet without you being notified of that. Two points to consider, it is either your fault or the sites fault but I don't think the site will just let someone use your balance without logging to your account.

This seems to be a personal error, it is not possible that it was the fault of Blockchain. I also use Blockchain and there are no problems while using this wallet. Bitcoin will not move on its own if no one controls the address and most likely it is because of hackers. The money moves 2 times in two different addresses and stops at this address 1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp

[mocacinno]

I've been using an online wallet and I don't have a problem.

These kinds of sites have their own security, you can always connect your email, some have their 2FA, some even require a phone number and I am wondering how can someone access your wallet without you being notified of that. Two points to consider, it is either your fault or the sites fault but I don't think the site will just let someone use your balance without logging to your account.

This seems to be a personal error, it is not possible that it was the fault of Blockchain. I also use Blockchain and there are no problems while using this wallet. Bitcoin will not move on its own if no one controls the address and most likely it is because of hackers. The money moves 2 times in two different addresses and stops at this address 1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp

https://www.walletexplorer.com/wallet/Huobi.com-2?from_address=1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp

That's a wallet belonging to Huobi... I'd contact their support department and ask them to look into this transaction... However, since the funds moved 2 times, it's perfectly possible the thief used a mixer...

Just to summarise:
1FgpbfQ8nVMS523Btnyv3rxhF7YxtiEdr7 belonged to you...
The thief robbed you in tx 4d412c58ab3dba8a138557e41e9ace1c8b36ee3d44107a930c8f31f0198d2b93 and funded what is most likely either his own address or an address belonging to a mixer => 1PdXxtu8Laq773RXT5q5pp6qtaG3HvSw2r

The unspent output created by the thief was combined with unspent outputs funding the following addresses:
1MXVwghCaz7yPvuyJU35yQdQHnpA9ea8PA (0.06180723 BTC - Output)
1H6htL41r9v8nAAZdpmaxw35kyjCewS9um (0.04020064 BTC - Output)
1H6htL41r9v8nAAZdpmaxw35kyjCewS9um (0.35708617 BTC - Output)
1JHLWuWsDqYwxzrjYcxZ6K7Feiv5R9SyvF (0.03159732 BTC - Output)
1PdXxtu8Laq773RXT5q5pp6qtaG3HvSw2r (0.03435393 BTC - Output)
1DbovmqydEvgFjLPfA6brASV98cmEy8gy2 (0.13459853 BTC - Output)
1MXVwghCaz7yPvuyJU35yQdQHnpA9ea8PA (0.01590557 BTC - Output)
1Q2qYzdeqd1KJdRJwMBqjft9mnMzc98fdp (0.01895248 BTC - Output)
1M7T8LZeJopJMffYRcpvviFvb11eKMLb1j (0.03038733 BTC - Output)
1Q2qYzdeqd1KJdRJwMBqjft9mnMzc98fdp (0.00673544 BTC - Output)
1FWSCxbScSfwrdetudCqArD5VND71JfPiy (0.0296867 BTC - Output)
1Q7SmKLD5Vs597oBZBAaviSzTfLwkZbXLd (0.11753431 BTC - Output)

to fund 1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp

1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp belongs to huobi... So somebody is exchanging those funds, either to other altcoins or to fiat... If huobi requires KYC, the police should be able to either find the thief, or the person who was unlucky enough to use a mixer and end up with the thief's funds after mixing...

[Reatim]

Nothing you can do about this mate and I’m sorry for your losses though it’s not that large amount still this is important case because we have trusted the company to handle our money safely and without our mistakes as you’ve mentioned(but of course instance can happen that either way it’s our fault or really breach from their part)

What you can do now is move on,try to use this experience to be safer next time and prevent being a victim again.

Maybe it would be possible if you could recall what did you do prior to that incident (any information would help) so that the community could help analyze what happened and give further suggestions and recommendations.

Well the damage has been done but of course this realizations will help Him and others to skip same scenarios in future for the benefits of all

[Lapatai]

To avoid something similar in the future I would recommend storing BTC in cold wallet, write some super complex password, write it on the sheet of paper and hide somewhere (don't take photo of it and save to your PC). Store only small amounts of BTC in everyday usage wallet (I would prefer one with Google Authenticator).

[bxmail]

Thank you for your support. Any help or advice is valuable and highly appreciated. I just want to add that the main reason for posting this was to inform other people of the situation and prevent from making same mistakes.

[audaciousbeing]

Its unfortunate that they would not own up to the responsibility of their infrastructure being compromised one way or the other because doing that to them would be bad for business as they know that words would quickly spread fast over the internet because paying you back would mean them admitting of not keeping your funds safe as they have promised millions of their clients all over the world.

This is one issues I have with crypto market despite the reoccurring report of this particular service provider have been determined to be responsible for quite a number of loss of funds but they will go away with it because the market does not have control or overseeing body to put its activities in check.

[FlightyPouch]

Thank you for your support. Any help or advice is valuable and highly appreciated. I just want to add that the main reason for posting this was to inform other people of the situation and prevent from making same mistakes.

We all know this and you said to prevent same mistakes? I don't understand since you never posted a mistake in the OP, you also said it might be a security breach but the thing here is that the hacker might already hacked you log in. Better store your balances in a more secure wallet, I don't think this statement is new since there are a lot of threads here saying that it ia not safe to store on online wallets or some called it hot wallets.

[Lucius]

bxmail, can you tell us where you kept your wallet ID and password? It is important to determine if the attack vector was in compromising that information by remote of someone came in physical possession of that information.

Do you remember last time when you access your wallet, are you use link to blockchain.com from your browser bookmarks, did you click on it from your e-mail or you search for it with search engine?

It is also posible that you somehow infected your computer with keylogger or RAT (remote access trojan), can you tell us do you use any antivirus or other security software?

I see you posted in Web Wallets board also, but in case you missed it, people lost coins from this wallet long time ago in cases like this :

https://bitcointalk.org/index.php?topic=2488493.0

[killat]

I'm sorry for your loss,  mate. If your Blockchain account has been compromised then I'm afraid there's no chance to recover your funds back.

In order to avoid this to happen in the future try to use a hardware wallet instead of holding your private key on your PC.

[MrCrank]

@bxmail can you tell us your bitcoin address, a transaction id, and a full story?
it would be more helpful if you can share the story from the beginning
about how you received the bitcoin, when you realize you lost it,
and what you do with your computer during that time? did you just create the account recently?
any information can help us figure out what happened to your bitcoin

My BTC address: 1FgpbfQ8nVMS523Btnyv3rxhF7YxtiEdr7
Created with blockchain.com 2 years ago.
Funds received more than a year ago. It was safe during all period, I always paid much attention to security.
The loss was realized yesterday, Aug 27, 2019 morning, I turned on computer, checked my e-mail as usual (again there was no notification from blockchain.com),
before that, the computer was turned off all night.

2019-08-27 07:03:08
Amount: 0.035 BTC (350 USD)
Transaction ID: 4d412c58ab3dba8a138557e41e9ace1c8b36ee3d44107a930c8f31f0198d2b93
Recipient address: 1PdXxtu8Laq773RXT5q5pp6qtaG3HvSw2r

Last TX showed 1L5tLc6ayc3RXAyicHRv2c2uSNVJzoP4Yp, this address recieved 77.7 BTC.
it's not easy address..

[Thirdspace]

The loss was realized yesterday, Aug 27, 2019 morning, I turned on computer, checked my e-mail as usual (again there was no notification from blockchain.com),

the transaction was made about the same time you're checking your email
but it gets confirmation almost an hour later, if you had acted fast you would have saved your coins
can you remember what emails you were reading/opening at that time?
did you open or click any link in your email?
did you check your blockchain.com wallet before or after reading your email?

[Mpamaegbu]

Once the private key is in your hands you're responsible for the funds. Truly speaking someone might have known about your private keys and passwords. Myself too have experienced loss of funds from my blockchain wallet which happened due to my negligence of keeping private keys securely.

If you carefully read my post, I always double-check and secure it, no one has access to my private keys or passwords. This is the case of the blockchain wallet security, please take some time to read similar posts, it happens these days on a regular basis.

This really is a frustrating experience I must say. I feel your loss. But I also think what bxmail said isn't wrong. I have used blockchain for close to three years now but I haven't experienced such. This is where I encourage people to always access their wallet through the app and not through web. In all,, we should at all time safeguard our PKey and passwords. You never can tell who is lurking and waiting for the unguarded hour to strike.

[BitValve]

Unfortunately it’s very hard, if not impossible to prove that it’s blockchains fault. The most probable scenario is that you have been phished, for example when googling “blockchain”, there maybe Advertisements on top of results, which appear to be the same site, but in the end it’s somthing very close like “blockchian.com”.

[bitbenzhong]

becareful your private key.that's important

[barbara44]

What would you have had them done, they should refund your money because they are binance with safu fund? My dear, it is true that they are saying, there are so many hackers right now that would gain access to your account at any time if you are careless with your passwords or careless with the website that you go to.

I am also sorry to have heard your story, and thank God they dint steal more than that, there should be some sort of way that you can really trace it and I am not sure that is their  problem, if it was network bridge, I am sure that they would have been able to sort it out for you, and which may have also affected thousands of their users also, and you would surely have seen so many complains. I think you have to look for a more reliable way to secure your coin then if you no longer trust blockchain.

[Leonardo7]

Sorry about this, some persons usually get hacked on blockchain .info, some users said they had activated SMS option as against a more secured google autenticator, and another had saved his private keys online, which is unsafe and not recommended to do so. Try to have a separate email from bitcoin login, and never use the same password, you may want to get phone for for the sole purpose of sending and receiving bitcoin and never download anything there. Alternatively, get a hardware wallet which is the most secured provided your keep the private keys safe.