TAB TRADER SCAM AND THIEF PROGRAM IT COST ME LOST 6000 DOLLARS (0.922214472 btc)

[mixicali]

Scam and thief program, I woke up this morning and found the balance of bittrex 0 usd, it was about 6000 dollars, and I found a large purchase and sale orders for $iris coin until the balance ended, (more than 80 orders in 2 hours without any notification from app) I know friends who were also stolen, DO NOT TRUST THIS APPLICATION, BE CAREFULL BE CAREFULL BE CAREFULL
https://drive.google.com/open?id=1LyfwE3z_e4s6lHGcFjT3Ggwrxd_QAxOX

[asu]

I only see a proof of pictures that contains the trade history, which is not enough to be consider a proof.

Would you enlighten us more on what really did happened and show some more solid proof.

Scam and thief program, I woke up this morning and found the balance of bittrex 0 usd, it was about 6000 dollars, and I found a large purchase and sale orders for $iris coin until the balance ended,

What do you mean to the bolded part? Do they took/withdrew your balance after trading it numerous times in IRIS or is it still there but converted as an IRIS coin?

[joniboini]

I don't remember Tab trader or any similar apps have the withdrawal feature (even if they did, Bittrex would send you an e-mail isn't it?)?

What API permission did you give them?

[mixicali]

Hi, the operation of scam is not withrawals but it is buy at hight price then sell low, many orders with this way until no enath credit to trade
Api key that utilise in tab trader have all permission read trade and withdraw
Part from bittrex answer:
(This account shows that buy high sell low trades were made using your API keys. Please make sure to delete your API keys. Do you know what third party site had access to your keys?)

[asu]

Hi, the operation of scam is not withrawals but it is buy at hight price then sell low, many orders with this way until no enath credit to trade
Api key that utilise in tab trader have all permission read trade and withdraw
Part from bittrex answer:
(This account shows that buy high sell low trades were made using your API keys. Please make sure to delete your API keys. Do you know what third party site had access to your keys?)

Never heard that app. Is this the app you're talking about?
https://play.google.com/store/apps/details?id=com.tabtrader.android

If I'm right the app permission only are to buy, sell and view balance. Have you thought about with someone else that has an access to your phone and messed things up in your account? Not to defend the app, but that's just a possible scenario, not to mention that this app has 500k downloads that should be aware.

Sorry to hear your loss.

[mixicali]

Yes this is the application concerned with, and my phone is protected with kaspersky is and screen lock no one can access to my phone except me

[mikeywith]

If I'm right the app permission only are to buy, sell and view balance.

It is clear as day that what the member is claiming is that the app pumped and dumped his balance using a low volume coin .
with access to a few accounts you can exactly steal their money without having to withdrawal, i have always warned against the use of trading bots and APIs for this exact reason.

[TabTrader]

We are helping you identify what happened to your funds.
And yet you go to forums too.

For everyone concerned:
1) This individual is the only one had this issue out of hundreds of thousands of users. If there was an issue in the app, scammers would have used this vulnerablity multiple times. Why scam one person if you could scam all of the users. Just doesn't make sense.

[For full disclosure 2 of his mates also from the same African country reported this issue. Maybe it is the same person just with multiple reports, one in the app, one in email one in telegram, group. Anyway we are talking to all 3 of them in best faith trying to help.]

2) Preliminary investigation showed that this user has compromised his credentials somewhere.

3) But we believe it is unfair to go reporting that such an established and reputable app is a scam without any proof. Moreover we are trying to help him understand what happened the very same moment.

More will unfold later.

[mixicali]

If I'm right the app permission only are to buy, sell and view balance.

It is clear as day that what the member is claiming is that the app pumped and dumped his balance using a low volume coin .
with access to a few accounts you can exactly steal their money without having to withdrawal, i have always warned against the use of trading bots and APIs for this exact reason.

Thanks for your important response
I do not understand
Is it possible to further clarify the idea of theft without the need to withdraw the balance

[mixicali]

We are helping you identify what happened to your funds.
And yet you go to forums too.

For everyone concerned:
1) This individual is the only one had this issue out of hundreds of thousands of users. If there was an issue in the app, scammers would have used this vulnerablity multiple times. Why scam one person if you could scam all of the users. Just doesn't make sense.

[For full disclosure 2 of his mates also from the same African country reported this issue. Maybe it is the same person just with multiple reports, one in the app, one in email one in telegram, group. Anyway we are talking to all 3 of them in best faith trying to help.]

2) Preliminary investigation showed that this user has compromised his credentials somewhere.

3) But we believe it is unfair to go reporting that such an established and reputable app is a scam without any proof. Moreover we are trying to help him understand what happened the very same moment.

More will unfold later.

1) My money is lost and effort of years is lost and you only want to help me with words.

2) For the public, there are users installed this app they were stolen like me. Users in the Arabic language can confirm this page on Facebook:
https://www.facebook.com/groups/413865585473202/

3) It is fair and appropriate to warn the masses so that their money is not wasted like me.

4) If you are trustworthy and honest, prove it here to the masses in this forum and return my stolen money to me.

5) about point 2, what does that mean? Explain more

[mikeywith]

Is it possible to further clarify the idea of theft without the need to withdraw the balance

Having access to enough funds on an exchange, one can for an example buy a lot of the same shitcoin which has very low volume, then using the other accounts he places buy orders to buy his bags for a lot higher, they can then make buy orders for the same shitcoin on his main account and then using the other accounts he makes a lot of sell orders so he can buy-back those coins for cheap, and then again sell it for a higher price, rinse and repeat.

Since the hacker/attacker can't withdraw funds, all they do is liquate you to their favor, in other words making 100% winning traders and then withdraw the funds from their main account, one might think that a "reputable" exchange like Bittrex should sense such P&D operations going on and lock all accounts involved, but I don't trust any of these crypto exchanges, you are simply paying for the mistake of using a third-party app that has control over your funds, people think that because these apps can't withdraw money directly from their account - then their funds are safe, which is a misconception.

Also, the fact that no more victims showed up, it's safe to assume the app itself was not hacked and it's more likely that your API keys got compromised somehow. If you are lucky enough then bittrex might have blocked the account/accounts who made those trades and your stolen money is still there, but I would give that a 10% at best case scenario, the 90% scenario is that the funds are long gone, Tabtrader will refuse to compensate you saying it's your fault for not keeping your credentials safe, Bittrex will say those orders were made by an app which you personally gave it the keys to trade for you, and in the end, it's really your mistake for trusting something like Tabtrader or other platforms when you could have simply used the exchange's app itself.
 

[mixicali]

Is it possible to further clarify the idea of theft without the need to withdraw the balance

Having access to enough funds on an exchange, one can for an example buy a lot of the same shitcoin which has very low volume, then using the other accounts he places buy orders to buy his bags for a lot higher, they can then make buy orders for the same shitcoin on his main account and then using the other accounts he makes a lot of sell orders so he can buy-back those coins for cheap, and then again sell it for a higher price, rinse and repeat.

Since the hacker/attacker can't withdraw funds, all they do is liquate you to their favor, in other words making 100% winning traders and then withdraw the funds from their main account, one might think that a "reputable" exchange like Bittrex should sense such P&D operations going on and lock all accounts involved, but I don't trust any of these crypto exchanges, you are simply paying for the mistake of using a third-party app that has control over your funds, people think that because these apps can't withdraw money directly from their account - then their funds are safe, which is a misconception.

Also, the fact that no more victims showed up, it's safe to assume the app itself was not hacked and it's more likely that your API keys got compromised somehow. If you are lucky enough then bittrex might have blocked the account/accounts who made those trades and your stolen money is still there, but I would give that a 10% at best case scenario, the 90% scenario is that the funds are long gone, Tabtrader will refuse to compensate you saying it's your fault for not keeping your credentials safe, Bittrex will say those orders were made by an app which you personally gave it the keys to trade for you, and in the end, it's really your mistake for trusting something like Tabtrader or other platforms when you could have simply used the exchange's app itself.
 
Thank you for your smart reply.
Actually, this is what deceived us, which is that the money is wasted by withdrawals only
But the official is the failed application because my phone is highly secure and I do not use the computer

[mixicali]

Hello dears,
Last answer from tabtrader support in Tuesday 21/04/2020 says investigation finish during this week,

((Hello,
We're still in the middle of investigation. We're going to to come up with the results during this week, as soon as all our suspicions are confirmed.
Apologies for keeping you waiting. We'll update you as soon as possible))

It means before sanday 26/04/2020.
We are now in 1/5/2020 it means one week more, but no answer . I am writing to him and he does not answer, What does this mean ?
Part from last answer from BITTREX:

((We understand this is a frustrating situation. While we are sorry that your funds were lost, it is ultimately your responsibility to maintain the security of your API. There is no way to recover your funds at this time. If you have not already done so, we strongly encourage you to do the following))


Can the respectable brothers help me and my advice?

https://imgur.com/4gLEQ08

https://imgur.com/1qBaO1l

[TabTrader]

Hello respectable brother.
It means that we still doing our investigation.
We are on your case.
There are some preliminary findings which we are trying to confirm.

But like we said if we were hacked and our user data was compromised hundreds of thousand of users would have been here in this thread. But they aren't.

[mixicali]

Hello respectable brother.
It means that we still doing our investigation.
We are on your case.
There are some preliminary findings which we are trying to confirm.

But like we said if we were hacked and our user data was compromised hundreds of thousand of users would have been here in this thread. But they aren't.

I am very sorry to attack you in this forum, but it was my lost money that made me neither sleep nor sleep

[TabTrader]

We are 100% with you.
We really are sorry that you lost some of your funds.
We are trying to find what happened.

[mixicali]

We are 100% with you.
We really are sorry that you lost some of your funds.
We are trying to find what happened.

Thanks for the encouraging reply
Please put yourself in my position and look at the scale of frustration
I hope for seriousness and firmness because every day that passes without a solution is destroying me

[TryNinja]

There are some preliminary findings which we are trying to confirm.

Related to security issues in your app or OP simply getting his API keys compromised by something that was his entirely responsibility (e.g malware in his device, phishing, etc...). I'm not trying to spread any FUD, but if there is any possibility of your app being vulnerable in anyway, you need to disclose it.

I myself have used your app for quite some time and only stopped recently because you do not support my favorite local exchange, but I still have the app installed in my phone. I don't want to risky anything because of a possible issue on your part. =/

Now, if the issue is on your hands, OP, I can't see why TabTrader would return anything to you. Electrum or Bitcoin Core don't reimburse people if they get hacked or download a fake wallet.

[mixicali]

There are some preliminary findings which we are trying to confirm.

Related to security issues in your app or OP simply getting his API keys compromised by something that was his entirely responsibility (e.g malware in his device, phishing, etc...). I'm not trying to spread any FUD, but if there is any possibility of your app being vulnerable in anyway, you need to disclose it.

I myself have used your app for quite some time and only stopped recently because you do not support my favorite local exchange, but I still have the app installed in my phone. I don't want to risky anything because of a possible issue on your part. =/

Now, if the issue is on your hands, OP, I can't see why TabTrader would return anything to you. Electrum or Bitcoin Core don't reimburse people if they get hacked or download a fake wallet.

Thanks for participating
I did not download a fake wallet but rather from the official website that referred me to the Google Store
If the problem from me , how do I buy at a high price and sell at a cheap price?
Does this do sane?
I have done all the protection measures in my phone and I have been dealing for years with other sites and applications, and I have not been exposed to such before
How do you want me to lose something I have no reason for.

[TryNinja]

I did not download a fake wallet but rather from the official website that referred me to the Google Store

That's not the only way you could have messed up. Phising and malwares can occur from many sides. You could have been infected with a different app, or you could have been hacked in other ways. Even your BitTrex could have been hacked somehow. However, those are only POSSIBILITIES. I'm not saying this is what happened. This is what COULD have happened with you or anyone else. And in the same way, that could have been their fault.

If the problem from me , how do I buy at a high price and sell at a cheap price?
Does this do sane?

I mean, if you somehow ended up leaking your API keys (malware, phishing, etc...), the user with possession of your keys could do any kind of trades (along with what permissions you choose for it) without any issues. They could, for example, buy or sell any coins they wanted for any price they wanted, which is what seems to have happened. When you give TabTrader your api key, they do all of this stuff in your name (selling, buying, trading, etc...). If a malicious actor also gets hold of that key - from you or TabTrader - , he can do the same, but in a way you didn't permitted and which benefits him (e.g selling low and buying high).

I'm not saying it's your fault and TabTrader is clean. And neither I said thats all their fault. Only them can give you an answer, and they said they are investigation, so you can only wait. In the end, I can only see them possibly giving you any kind of reimbursement if they admited it was their fault and that their system/app were breached, which we can't if it happened.

I hope it all goes well for you. I have used them before and never had any issues, but this doesn't make them hack-proof. Losing your coins like this is one of the most frustrating things that could happen with anyone.