Cleaned out stake.com balance!

[CoinSkipper]

Hello guys!
I'm a little bit shocked about situation that happened to me a few minutes ago on stake.com

I'm new at stake.com and today wanted to start play more with them.
I had about 950 TRX in my balance and placed 2 live bets on Sportbook.
When I came back after a few minutes to place one more bet I saw that my balance is too low....
My balance should be about 640 TRX (300 TRX and 20 TRX in game) but there is 2.5 TRX 

I checked my account history and there are a lot of games played in "dice" that I never opened at stake.com
Exactly 284 bets set to 0.03 wining chance that I never placed! It all happened within 1 minute!

One of them:


All bets placed on dice:
https://imgur.com/a/mwbcqlJ

I sent message to support and they don't want to investigate this case.
I'm really grateful that I had below 1000 TRX on this account because I could lost a lot of money but I still request investigate of this case and refund of all bets placed on dice.

[1714472988]

1714472988

[1714472988]

1714472988

[1714472988]

1714472988

[1714472988]

1714472988

[yahoo62278]

I doubt very much that stake themselves would place bets on your account and steal your 2$ but you may have had your account hacked by someone.

Do you use the same username and pw on multiple sites? Shared any pw with friends?

[CoinSkipper]

Nobody of my friends knows my password and don't know that I play on stake.com
if account would be hacked how it's possible that it happened in short margin of time between my 2 bets.

In my opinion it's just an error at stake.com.

What would be a benefit for somebody who could hack my account to clean it out instead of withdrawal all fund to his TRX address?

I wonder why stake.com does not want to check logs?

[harizen]

Difficult to imagine for me that the dice bets were placed just after the moment you placed your bet on the sports.

And it all happened within just a minute. Did you review your sports bet history?

Anyhow, only Stake can answer this. I saw you already addressed this on their thread so I hope you got an answer. Knowing Stake, they are one of the reputable gambling sites here so you can expect they will respond* eventhough the support already tells you they won't investigate this. Just try and try.

[CoinSkipper]

Sportbet history is correct instead of one thing - one bet has been cashed out that I also haven't done. (I would loose on both bets)

Exactly hours of sportbook bets that I placed:
22:01 - 300 TRX
22:09 - 20 TRX
 

[BitSat19]

Sportbet history is correct instead of one thing - one bet has been cashed out that I also haven't done. (I would loose on both bets)

Exactly hours of sportbook bets that I placed:
22:01 - 300 TRX
22:09 - 20 TRX
 

In this all situation one thing is sure someone know your password and used this in your absence because Stake.com cannot do this all surely someone from your side done this all for you and you have no idea about this.

[CoinSkipper]

But how it's possible that someone logged one minute after me. I played here today first time since a longer period of time and haven't told anyone about it. What's the probability that someone logged in the same time like me instead 30 minutes before, 2 days before etc..

[Harkorede]

But how it's possible that someone logged one minute after me. I played here today first time since a longer period of time and haven't told anyone about it. What's the probability that someone logged in the same time like me instead 30 minutes before, 2 days before etc..

If your account has been compromised, then everything you listed above is possible, it could coincidental or it could also be someone very close to you doing this. Now that you've discovered the problem is from your end, itis better to analyze every possible scenario and take necessary measures, check your email and other platforms with which you use the same username/email and or password to prevent further losses.

[CoinSkipper]

I still think this is stake error. Hacker would withdrawal all funds instead of clean out balance.

[DarkDays]

We really need to see your deposit and withdrawal history, otherwise we can't be sure what happened.

You should also ask Stake if they can provide you with a list of the IP addresses that recently accessed your account.

You can then use iplocation.net to check the rough region where the IP is from.

Overall, it's quite possible you accidentally placed a bet twice or entered a wrong amount.

[CoinSkipper]

I use VPN because this website is restricted in my country so it won't tell us much.

Deposit and withdrawal record:
https://imgur.com/a/vJdqRoh

Overall, it's quite possible you accidentally placed a bet twice or entered a wrong amount.

As I mentioned I have never opened dice before this situation so it's impossible.


BTW. There is no withdrawals from stake. It would be nice if they refund at least dice bets.

[chaser15]

In this all situation one thing is sure someone know your password and used this in your absence because Stake.com cannot do this all surely someone from your side done this all for you and you have no idea about this.

The chance for that to happen is really low. We can say OP got hacked if ever the incident happened later on.

But it all happened after OP placed his bets and it just takes a minute.

It looks like a bug to me that Stake needs to address. They need to access their database logs.

[ralle14]

It's also possible that the hacker already knew your account before you logged in recently. If the hacker didn't withdraw the funds then I assume 2fa is activated on your account? Or if it's not yet activated the hacker probably thought that it'll notify your email when making any withdraw so he just bet your funds away.  

[CoinSkipper]

It's also possible that the hacker already knew your account before you logged in recently. If the hacker didn't withdraw the funds then I assume 2fa is activated on your account? Or if it's not yet activated the hacker probably thought that it'll notify your email when making any withdraw so he just bet your funds away.  

I don't have 2fa. Hacker should know exactly how stake.com works and for sure nobody would not spend time to hacks accounts to clean out balances.

As an example:
If you were a hacker, get access to account and saw 10$ balance. Would you:
1. withdrawal all funds
2. monitor account and wait for higher amount of funds
3. spent 10$ on the dice and let user know that you have access to the account

I don't think so it could be option number 3


I have never been hacked in my life. For sure this is a bug.

[Stunna]

It's also possible that the hacker already knew your account before you logged in recently. If the hacker didn't withdraw the funds then I assume 2fa is activated on your account? Or if it's not yet activated the hacker probably thought that it'll notify your email when making any withdraw so he just bet your funds away.  

There's a minimum withdrawal threshold. I see that 47 $0.04  Tron bets were placed at a 0.03% win chance. Maybe someone got on your account and could not withdraw and was just trying to win it big and then remove funds. I can send you a list of IP's that accessed your account if that helps but my guess is unless you were running a script or bot then someone got on your account.

My first suggestion is changing your password and if you have any other info we can explore this further. Also I highly recommend using 2FA, anyone who says they have never gotten hacked but doesn't use 2FA is just waiting for it to happen.

There's simply no way our system can just arbitrarily place 47 bets, it has never happened before and we've done 70 billion+ bets between both our websites so the above is my best guess.

[LUCKMCFLY]

Everything points to it being an attack, stake.com has always been very legal in its bets, I would like to know if you can post the complete history to see what happened or at least investigate to make hypotheses.

Do you have 2FA activated? It is very important that you always enable that extra layer of protection.

[CoinSkipper]

It's also possible that the hacker already knew your account before you logged in recently. If the hacker didn't withdraw the funds then I assume 2fa is activated on your account? Or if it's not yet activated the hacker probably thought that it'll notify your email when making any withdraw so he just bet your funds away.  

There's a minimum withdrawal threshold. I see that 47 $0.04  Tron bets were placed at a 0.03% win chance. Maybe someone got on your account and could not withdraw and was just trying to win it big and then remove funds. I can send you a list of IP's that accessed your account if that helps but my guess is unless you were running a script or bot then someone got on your account.

My first suggestion is changing your password and if you have any other info we can explore this further. Also I highly recommend using 2FA, anyone who says they have never gotten hacked but doesn't use 2FA is just waiting for it to happen.

There's simply no way our system can just arbitrarily place 47 bets, it has never happened before and we've done 70 billion+ bets between both our websites so the above is my best guess.

To be honest I have been using the same login details for a few bitcoin sportbooks for a lot of time and it happened only on stake.com.
It's strange for me that it happened a few minutes after I placed my bet and that this situation has not happened on another sportbooks where I uses the same login details.

So there is no change to get TRX refund? Even this low amount of TRX?

[Haunebu]

To be honest I have been using the same login details for a few bitcoin sportbooks for a lot of time and it happened only on stake.com.
It's strange for me that it happened a few minutes after I placed my bet and that this situation has not happened on another sportbooks where I uses the same login details.

Same login details everywhere? I advise you to drop whatever you are doing and enable 2FA for all your accounts asap since the hacker could easily gain access to your other accounts in a similar fashion. Stop making it easy for him.

So there is no change to get TRX refund? Even this low amount of TRX?

I doubt they will refund you since your balance was used up playing their games even though it was technically not you due to a security issue on your end. Be happy that it was a small amount and make sure to enable 2FA in the future.

[ethereumhunter]

To be honest I have been using the same login details for a few bitcoin sportbooks for a lot of time and it happened only on stake.com.
So there is no change to get TRX refund? Even this low amount of TRX?

That is your first mistake. Never used the same login in every site, not just gambling but all of the website you want to register because you don't know if your account will be safe or not. You can use the same login, but not use the same password for every account, try to make it different so at least, you can protect your account.

I don't think stake.com will refund your TRX since that mistake come from yours. You should not make the same thing in the future.

[kryptqnick]

But how it's possible that someone logged one minute after me. I played here today first time since a longer period of time and haven't told anyone about it. What's the probability that someone logged in the same time like me instead 30 minutes before, 2 days before etc..

I don't know, but you're very lucky that it wasn't a big sum of money. I think it makes sense someone would log in right after you. Say, it's a keyboard malware tracking the buttons you press. Then it would be logical to act on it right after you've logged in so that no time is wasted. This is very alarming, and I am sure Stake will say something about it, but it's not likely to be a trouble on their side... Just check your PC for malware using at least two antivirus system (perhaps one of them would not catch what the other one can). And avoid typing in any passwords and logins from that computer until the mystery is solved.
And never even use the same log-in and password for two different things, it's a big point of vulnerability.