Funds Gone

[Pieter070]

Hello everybody,

Ik think i have a little problem.
In my electrum wallet there has been a transaction that I, myself did not do.
Now all my funds are gone.

How is this possible?

Regards en greetings from Amsterdam!

Piet

[OmegaStarScream]

Which version were you using? Did you update your wallet prior to losing the funds and from where have you installed it? Can you also post the transaction ID?

[o_e_l_e_o]

How is this possible?

There are multiple possibilities. The most likely are:

• You downloaded a fake version of Electrum. Where did you download your Electrum software from? Did you verify the software against ThomasV's PGP key prior to installation?
• You have malware on your computer which either made the transaction or stolen your wallet file and transmitted it to an attacker. What OS are you using? Do you visit any suspicious sites, download random software or click on random links? Perform a thorough scan of your system.
• Someone accessed your seed phrase. How did you back it up? Where did you store the back up?

[Pieter070]

e013f96568875c847e430370eb1efbfcc4c59a659f4a1071514a35697d8f7b4e

I.m using 4.1.2

Must be something under the second dot Oeleo. Downloaded the original version and no-one have seen the seed.

Ive downloaded the wallet back in 2017....but since 2019 i'm a small crypto trader on an exchange. Is it safer to leave you funds at the trader rather than a software wallet?

Thanks!!

[BitcoinGirl.Club]

I.m using 4.1.2

This should be the laterst version.

Ive downloaded the wallet back in 2017....but since 2019 i'm a small crypto trader on an exchange.

Warning: Electrum versions older than 3.3.4 are susceptible to phishing. Do not download Electrum from another source than electrum.org, and learn to verify GPG signatures.

https://electrum.org/#download
Maybe this is where you were trapped.

Sorry to say that your funds are gone.

Is it safer to leave you funds at the trader rather than a software wallet?

It's safer to have your funds in your own wallet but you at least need so security related knowledge.

[o_e_l_e_o]

Downloaded the original version and no-one have seen the seed.

You are certain you downloaded from electrum.org and nowhere else? But you didn't verify the file?

Again, you are certain no one has access your seed phrase? You wrote it down on paper and stored it somewhere safe? You never stored it electronically, took a photo of it, saved it in a text file, etc?

Is it safer to leave you funds at the trader rather than a software wallet?

Generally no, it is safer to store your coins yourself. However, a software wallet on a permanently online device is one of the least secure ways to store your coins yourself. If you want better security, then the easiest option is to buy a reputable hardware wallet such as a Ledger or Trezor. A more complicated but potentially cheaper option is to use an airgapped device (i.e. one without any internet connection) to store your coins.

[Lucius]

I.m using 4.1.2
Ive downloaded the wallet back in 2017....but since 2019 i'm a small crypto trader on an exchange.

If you first downloaded Electrum 2017, and now you have a new version, how exactly did you get it? Did you perhaps install the new version directly from the old wallet or did you download it directly from the Electrum site (https://electrum.org/#home)? See in your browser (browsing history) if you visited exactly this page I linked.

Following your coins, I can conclude that they have already changed a lot of addresses, which leads to the conclusion that you are definitely hacked and that the new owner is trying to cover his trail.

[Pieter070]

Thanks All!

Gotta be more careful definitely....hope he's happy with my 18 mbtc

[Lucius]

Gotta be more careful definitely....hope he's happy with my 18 mbtc

It's not about whether someone will be happy to steal something from you and many others - but it would be advisable to write down how you get scam, so that you might help someone else not to fall into a similar trap. Have you visited the fake Electrum site, are you a victim of an old vulnerability from 2018 or have you saved your seed in the wrong place?

[Pieter070]

This is where i was trapped...I recognize it....too bad

https://electrum.org/#download (thanks bitcoingirl)

[khaled0111]

This is where i was trapped...I recognize it....too bad

https://electrum.org/#download (thanks bitcoingirl)

This is the link to Electrum official website.
BitcoinGirl.Club was referring to the phishing attack affecting versions older than 3.3.4 but since you downloaded the latest version then this is not how you got hacked.

Most likely, your device was infected by a malware. I advice you to back up all your important files/data and wipe out its hard drives then reinstall your OS.

[BitcoinGirl.Club]

BitcoinGirl.Club was referring to the phishing attack affecting versions older than 3.3.4 but since you downloaded the latest version then this is not how you got hacked.

While he did not clear it yet but I assume he updated his Electrum from the pop-up which comes when there are any updates available. The hacker phished his version at that time.

hope he's happy with my 18 mbtc

I hope this was not much for you to lose it. Lucky that you did not have huge number of coins.

[nc50lc]

-snip-
Downloaded the original version and no-one have seen the seed.

From the discussion, it's still not certain that you've downloaded a malware version of Electrum.
And the transaction is just recent, if you've installed the malware version before, the funds should've spent the moment you typed your password.

How certain are you that no one seen your seed phrase?
Where is it stored? Written on a paper in a safe storage, a device which is connected to the internet or somewhere online like a cloud storage?
Only the former is the recommended and safest way to store the seed phrase, the other two have a great chance to get hacked.

[Pmalek]

The associated address where the coins went hasn't had that many transactions. If he downloaded a fake Electrum app, I think the address would have seen much more action than this. It might be difficult to swallow, but can you rule out an inside job with 100% certainly? Who else has or could access to your computer and personal files that hold your secrets? 

[hosseinimr93]

The associated address where the coins went hasn't had that many transactions.

It's possible that the hacker has generated a new address for each of victims.
The fund stolen from OP has been co-spent with 64 other inputs in this transaction.

Edit:
I just found one of inputs of the transaction above on electrum's github.
Unauthorized withdrawal of btc from e-wallet version 4.0.7.

Someone claims that 0.017 BTC has been stolen and withdrawn to bc1q65usegx7mqmqxzf6rkzlkwkny73vfxypn8pxyr.
This address and the address OP's fund sent to (bc1qas8f5hw73rcec72yy2rl92mwsvq3wsg8z2883q) are owned by a same person. Both of them belong to this wallet.