Wallet hacked - Funds lost

[bitcoin2555]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

[1715488318]

1715488318

[1715488318]

1715488318

[NeuroticFish]

Can someone explain how is this possible?

The wallet is only something that allows you see your coins and, most important, allows you spend the coins.
The coins are never in a wallet, they are on the blockchain.
Now, if one has got your private key (or the seed, based on what private keys are generated), he will re-create a wallet identical with yours and with no password protection and spend.

So the first thing to think about is where did you store the private key (or seed) and who had access to that.

Scenario 2. A malware from your computer can record screen and transfer files, allowing somebody have a copy of your wallet and your password too.

Scenario 3. A malicious wallet (usually a look-alike copy of a trusted wallet) will have all the functionalities and one more - send either your seed/private key, either your funds to the hacker.


So... think now what you did wrong and allowed somebody steal from you...
Sorry for your loses, I hope that they weren't too big.

[mocacinno]

i agree with @NeuroticFish, but wanted to add that malwares or fake wallets aren't the only way(s) to lose your keys..

For example, i've seen several people lose their funds because they stored their recovery seed in the cloud (dropbox, apple cloud, box.com,...). Also physical access to your computer (even trough rdp or vnc) or pre-initialized hardware wallets are to blame from time to time.

The questions you need to ask yourself:

• Where did i download or buy my wallet from
• Did i check the signature of my wallet (or, in case it was a bought wallet, was the package already opened, or was it pre-initialised)
• Is my pc sparkling clean, or did i install software from unknown/untrusted sources on the same pc where i'm running my wallet
• Does my pc run an up to date virusscanner and firewall
• Did i use a strong, random password to encrypt my wallet
• Where did i store my seed phrase, and any wallet backup
• How was the seed phrase generated
• Who knows i'm holding crypto assets

For your current funds, it's probably to late, transactions are irreversible... But you'll have to learn at which point you screwed up your OPSEC as to not repeat the same error again...

[NeuroticFish]

For example, i've seen several people lose their funds because they stored their recovery seed in the cloud (dropbox, apple cloud, box.com,...).

That was meant to be the Scenario 1. But I agree, I could have explained it better.
Thank you for emphasizing and detailing that part.

[raidarksword]

This means you are using centralized wallet that you don't have the holds of your private keys that's why it's possible anyone can access your account. The best scenario that you have phished by external links that's why your passwords were exposed through it and impetrator got what he wanted and cash out your funds.

[Bitbtc8]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

Your wallet have a password? I'm guessing you are using a centralized wallet, I expected you to be talking about private key and recovery seed, your email and password is compromised probably through phishing or hack, your coin is gone and there is no way to recover it, it's better you should try to learn the difference between crypto wallets, decentralized wallets and centralized wallets are different

[bitcoin2555]

First of all, thanks for those who answered.

It's a core wallet, which contains the private keys, protected by a password, in my computer.

That's why i don´t get it, how that happened.

[mocacinno]

First of all, thanks for those who answered.

It's a core wallet, which contains the private keys, protected by a password, in my computer.

That's why i don´t get it, how that happened.

Some questions to find out what went wrong:

Did you keep backups of your wallet.dat?
Where did you store your password?
Did you download the wallet from it's official source and check the signature (or compiled it yourself from the sources in the git repo?)?
Which OS are you using?
Do you have "random" programs installed, or is your pc "sparkling" clean?
Do you have a virusscanner?
Does anybody else have access to your PC?
Are you 100% sure your coins are gone, i've seen new users getting confused with change addresses?
Is your wallet fully synchronised?
Are you sure you're looking at the correct wallet.dat (do you see history of the thief's transactions?)
Did you ever export private keys?
Are you running a daemon and using scripts to lock/unlock your wallet?
Any special config in your bitcoin.conf (if you post the content, make sure you don't post any sensitive information like passwords, ip's or hashes)

Like i said in my previous posts, if you're really robbed (and not confused about change addresses, looking at the wrong wallet, or using an unsynchronised wallet) you're plain out of luck i'm afraid... But you'll still need to figure out which "hole to plug". If you don't figure out what went wrong, you'll never be able to trust your setup ever again... Not only your cryptocurrencies are on stake, but basically your whole setup (and everything you do on your machine)

[RabbiTANK]

First of all, thanks for those who answered.

It's a core wallet, which contains the private keys, protected by a password, in my computer.

That's why i don´t get it, how that happened.

If the private key is protected by password how did they move your funds then? And moreover where did you keep the private key? Are you living alone? Also are people around aware that you are into Bitcoin and crypto? Sorry to ask all this questions because this whole thing looks like a inside job to me

[mocacinno]

--snip--

That's strange, the only thing that comes to mind in this type of situation is that perhaps someone comes in contact with those infos which you are not aware of, or you hard those information stored in your computer and you have a software installed that can access this information unknowingly otherwise how will it be possible, hackers are very skillful my friend and it is surprising how they can carry out this act successfully, feel sorry for your situation.

Well, i've been around for a while, and even in this situation, there are plenty of attack vectors:

• fake wallet software
• backups with weak passwords that have been kept in cloud storage (or passwords that have been saved in the same cloud storage where the backup was kept-
• copy/paste virusses
• remote access tools (RAT's)
• OS vulnerability's
• physical access by a collegue, friend or family member
• exported private keys that were kept in an unsafe way
• daemons that have been exploited (scripts that contain the unlock password in clear text)
• wallet vulnerability's (eventough i can't remember any serious vulnerability's in core the last couple of years)

[bitcoin2555]

So, as i said it's a wallet.dat which contains the private keys and is encrypted.

I have a backup of it on an external disk.

It has a strong password.

My computer has no virus nor any strange software that i am aware.

Still even if someone got my wallet.dat how on earth would it be possible to pass the encryption and get the private keys.

No one knows the password.

[mocacinno]

So, as i said it's a wallet.dat which contains the private keys and is encrypted.

I have a backup of it on an external disk.

It has a strong password.

My computer has no virus nor any strange software that i am aware.

Still even if someone got my wallet.dat how on earth would it be possible to pass the encryption and get the private keys.

No one knows the password.

There still has to be a reason... It's possible you've kept your wallet.dat safe and encrypted, but there are 2 possibility's:
1) you're looking at an unsynchronised wallet, a wrong wallet or you're confused about change addresses
2) somebody found a vulnerability...

I presume you know the basics, so the odds of 1) are small (but not nonexistant)... So you'll have to figure out who found which vulnerability and fix said vulnerability... We can only give you pointers i'm afraid... I've listed the top reasons i've seen in my years hanging out on bitcointalk... The list is not complete, but it should cover >90% of the cases.

Good luck

[aemma]

Someone might have accessed your wallet through your private keys and transferred the assets or funds out of it, so that brings the question of how? It could be you visited a phishing website and accessed your wallet with your private keys thus exposing it to the scammers, or it could also be that, someone found where your wrote or stored your private keys and copied it or it could be a virus. How can you prevent such a thing from happening again? First always be careful of the websites you visit, make sure you cross-check the URL to be sure it is correct. Also, make sure you store your private keys or mnemonic phrases off your computer if possible, write or store on a paper and keep in secure places, such that if your devices is compromised maybe by a virus, your keys will also be safe. And lastly, before visiting any website which will ask you for private details, make sure to get it from the right source, that is, if it's a project get it from the team and so on.

[bitcoin2555]

The wallet comes from 2019, i never transfered any funds from it, so i never typed the password ever! It just contained one adress!

Therefore i never ever exposed my private keys!

[passwordnow]

The wallet comes from 2019, i never transfered any funds from it, so i never typed the password ever! It just contained one adress!

Therefore i never ever exposed my private keys!

No any form that you have filled online that asks for the same thing? It's hard to distinguish that how it can be gone if you have never type it. There has to be a reason why you have lost it and it could be related to how you've used your computer and how you're browsing through it.
Can you look up to the history of the usual browser you use and check if there are unsolicited and unknown websites that you have visited. And if there are some apps that you have installed accidentally? this is weird.

[leatutz]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

When you need proper advice, you should reveal all your information. Which wallet or blockchain because a private key is enough to steal your money. New scam process I found out that by sending some shit coins to your wallet, your other coin can take when you try to sell those shit coins.

[ahoenk]

1. What wallet you use ? If it is non self custody wallet , there is a vhance owner of the wallet service can do it.
2. If you use self custody wallet, there is a chance your computer infected by spyware then your secret key and your password is already stolen now.
3. If you use second hand hardware wallet, ask the seller of your hardware wallet, there is a chance he knows your secret key.

[bittick]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

When you need proper advice, you should reveal all your information. Which wallet or blockchain because a private key is enough to steal your money. New scam process I found out that by sending some shit coins to your wallet, your other coin can take when you try to sell those shit coins.

It looks like he's device already hijacked by the hackers. There are some possible things.
People can send it when they have access over the wallet. That means if he's getting scammed through the malware, phishing.

The question is what kind of wallet that he was using it right now.

[bitcon]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

Unfortunately, scammers are not asleep. They are developing more and more new hacking schemes. It happens that you don't follow the links, and the data is stolen. I recently came across a video that viruses, even in the form of documents, can collect information. Never disable your antivirus! The safest way to store passwords on paper wallets or wallets like ledger

[ReliabilityAlert222]

No one can not vanished without any reasons. Some reasons behind of wallet hacked has been descried in maximum thread. Everyone should have to aware about their wallet. Because your silly mistake can be a big destroyer.

[btcb3g1nn3r]

There are few guys playing to brute force private keys, move your question to the tech board here: https://bitcointalk.org/index.php?board=6.0

Maybe those tech guys will give other hnts besides what was written above.

My assumption is that your wallet data was stolen then it was subject for brute force.

[Mahanton]

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?

Question:

Where those wallet password/keys had been stored out? If those were compromised or been known then high chance or possibility for this is the reason on why those coins had been stolen.
Possibilities?
-Phishing site
-You had downloaded malware into your pc
-Someone has seen or stole your password.

Just remember on where you had make your mistake and you'll realize that you have done wrong.

[TanakabZX]

Don't ever store private keys and recovery seed on windows PC because once your PC is infected by trojan or malware they can spy on your files and have access to them, also private keys are more safer offline, done keep or store in email accounts, be more cautious next time, sorry for your loss

[Findingnemo]

The wallet comes from 2019, i never transfered any funds from it, so i never typed the password ever! It just contained one adress!

Therefore i never ever exposed my private keys!

OP you are not active for a while but if you ever comes online, I would like to know that you find out what is the reason behind the hack?

First of all I suggest you to check that address got balance or not using any bitcoin explorer, if exists then it is due to sync problem with nodes, if not then you need to find out which caused the password of your encrypted wallet dat file to be exposed.

[JollyGood]

Which crypto was in the wallet?

Which wallet version were you using?

Though you make it clear your funds have been withdrawn from your wallet you have not elaborated much in the posts you made in this thread after starting it. If you can post back here with as much information as you can somebody might be able to point you in the right direction.

All my funds were transfered to another adress.
How is this possible, when my wallet has a password and i haven´t done it.

Can someone explain how is this possible?