Metamask Scam? I think I f@cked up HELP NEEDED

[Ultegra134]

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

[Bitcoin_Arena]

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

[Ultegra134]

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

[Bitcoin_Arena]

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they  just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

[cabron]

If you have suspicions and still can login to that ETH, move your coins to a new one. This will help you ease your mind.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

Metamask sometimes can be confusing. I once have a wallet where I was prompt with a mnemonic phrase which is a problem in metamask because you can't import it to metamask using the phase. I have to login to myetherwallet using my mnemonic phase just to find my private key. it gives medoubt whether to use that Ether wallet anymore.

[Ultegra134]

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

How sure are you that they  just have only your private Key and not the mnemonic phrase?
If I were you, I would just create a new account with a new mnemonic phrase and move all my assets there. Do you have any idea how your account got compromised?

You might wanna check your device for any malicious apps too.

I'm sorry, I was in such panic that I didn't even bother to explain what happened, I will briefly explain.

I was on WaultFinance's discord server, when some guy posing as an administrator contacted me, after I made a specific question. At first, I thought he was a real one. Long story short, I'm on a copy cat website trying to "connect" my wallet. He convinced me and I inserted my private key, because automatic authorization wasn't working. What a dumb@ss I am.

The next second I did that, my heart sunk, realizing what I've just done. I promptly created a new Metamask account, unstaked and moved all my coins and balances there.

That's why I mentioned that they only have my private key, the mnemonic phrase is safe. Fortunately, I wasn't that dumb to give that out too.

[vv181]

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

You are safe according to:

~
There is no way to use any of the private keys to generate the master key or mnemonic. But the mnemonic can be used to regenerate the master key, chain code and any of the private or public keys.
~

My concern is how should you be aware of and remembers that particular address and privkey is already exposed(and shouldn't be used again) in cases you restoring the mnemonic phrase in the future.

Because of that, I think it's either you move all your fund to a brand new mnemonic or try just to make a note or something to notify the particular privkey is exposed. 

[Ultegra134]

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

You are safe according to:

~
There is no way to use any of the private keys to generate the master key or mnemonic. But the mnemonic can be used to regenerate the master key, chain code and any of the private or public keys.
~

My concern is how should you be aware of and remembers that particular address and privkey is already exposed(and shouldn't be used again) in cases you restoring the mnemonic phrase in the future.

Because of that, I think it's either you move all your fund to a brand new mnemonic or try just to make a note or something to notify the particular privkey is exposed. 

Thank you, I was in such a panic that I didn't even look in which subforum I created this thread. I just woke up, my funds are still here, so I also guess that my second account is safe enough. For the time being, I will at least be cautious not to confuse the two wallets, it would suck to mistakenly receive money on my compromised account.

I don't understand how I fell for such a scam, I feel like an idiot. I was lucky enough that even when it was a little late, I trusted my gut feeling. I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

[Yogee]

Did you create a fresh wallet with a different seed just like what Bitcoin_Arena said? Your funds may not have been stolen but I would also suggest to dump that wallet with a compromised private key.

...
I don't understand how I fell for such a scam, I feel like an idiot.

There are other people with years of experience in crypto who became victim of the same modus. Be extra careful and don't open crypto when you're drunk or tired.

I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

I'm not stopping you but I think I've seen a lot of threads sharing the same kind of scam.

[hosseinimr93]

Can that be extracted somehow? Am I currently safe?

All your private keys can be derived from your seed phrase, but it's not possible to derive the seed phrase from the private key.
If one of your private keys has been compromised, other private keys are safe.

I read your previous posts in this thread, but I didn't get whether you have generated a new wallet or not.

As already suggested by others, create a new wallet with a new seed phrase, move all your fund to that and don't use the old wallet anymore.
In this way, you will be sure that you will never use the address corresponding to the compromised private key.

[Ultegra134]

Did you create a fresh wallet with a different seed just like what Bitcoin_Arena said? Your funds may not have been stolen but I would also suggest to dump that wallet with a compromised private key.

...
I don't understand how I fell for such a scam, I feel like an idiot.

There are other people with years of experience in crypto who became victim of the same modus. Be extra careful and don't open crypto when you're drunk or tired.

I'll make another thread (In Reputation or Scam accusations, not sure) to warn other users and to share my experience.

I'm not stopping you but I think I've seen a lot of threads sharing the same kind of scam.

Thanks. Found the WalletConnect main thread and posted there, no need to make several threads for the same topic.

Can that be extracted somehow? Am I currently safe?

All your private keys can be derived from your seed phrase, but it's not possible to derive the seed phrase from the private key.
If one of your private keys has been compromised, other private keys are safe.

I read your previous posts in this thread, but I didn't get whether you have generated a new wallet or not.

As already suggested by others, create a new wallet with a new seed phrase, move all your fund to that and don't use the old wallet anymore.
In this way, you will be sure that you will never use the address corresponding to the compromised private key.

I've generated a new account/wallet on Metamask, it has the same seed phrase as the compromised one. However, it has a new address and private key of course. Since he doesn't have the seed phrase, there's nothing they can do to compromise my new wallet.

[carlfebz2]

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

[Ultegra134]

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

[mexite]

Thank goodness that your mnemonics are safe and you were able to get out your tokens in time but you should still beware of using that same wallet address as it has been exposed already.

It is advisable that you just stop using that exposed account for transactions. Be more careful next time. There are so many scammers on Telegram and Discord group waiting to pounce on unsuspecting users.

[stomachgrowls]

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

Just like on what carlfebz2 was indeed on point and true on where as long you dont give out your phrase then other addresses would be safe.Good for you that you didnt give out the phrase or else all of those assets
will really be wiped out instantly.This do actually proves out that no matter how experienced you are there are still situations on where we do really get confused or there are situations where we know but still
got slipped and skipped which cause for some exposure of our precious keys.Be careful on next time because you wouldnt know on what comes next but at least this is really a lesson learn.

[bayudndy]

Title and content???
Whether you made the mistake of providing your personal wallet access. I noticed that a lot of people have been like this lately, however with srmember, this is hard to accept.
If you still have time, immediately transfer all assets to another wallet that you feel safe. And you can check if you allow access for your own sake.

[livingfree]

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

[Ultegra134]

Hello,
I need immediate assistance, I did a stupid and now someone probably has my private key on Metamask, I created a new account and moved all my assets there. Am I safe or not? I noticed that the second account has a different private key. I literally have no time to explain right now.

You would be fucked up if the seedphrase of that wallet is been exposed since all of the addresses inside of that wallet would really be accesses once they do have the phrase

but if you do only expose the privatekey or the ones you had extracted on metamask for specific address then only those assets inside of that address would really be
only hacked not the entire batches of address inside that metamask.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

Just like on what carlfebz2 was indeed on point and true on where as long you dont give out your phrase then other addresses would be safe.Good for you that you didnt give out the phrase or else all of those assets
will really be wiped out instantly.This do actually proves out that no matter how experienced you are there are still situations on where we do really get confused or there are situations where we know but still
got slipped and skipped which cause for some exposure of our precious keys.Be careful on next time because you wouldnt know on what comes next but at least this is really a lesson learn.

Fortunately, I didn't have the mnemonic seed in hand, I'm not sure if I'd given it if I had immediate access to it. In the future, I'll definitely create a completely fresh wallet, I don't want to get any balance on the compromised wallet by mistake.

I'm not experienced by any means, definitely not a newbie, I've received quite a few messages on Discord but always ignored them, I don't know why and how I fell for that.

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

It did look fishy, I'm still trying to figure out why I fell into such a scam. The funny thing is that after reaching the official WalletConnect group, I was messaged by another scammer who was trying to give me directions into "encrypting" my new wallet. What a petty scam attempt.

Never trust anyone on there.

[livingfree]

I was lucky that I wasn't dumb enough to give out my mnemonic phrase. I really don't understand how I fell for such a scam. At least, I instantly moved all my funds and didn't lose a penny. The next day, the administrator of that Discord informed me that there were reports from quite a few people who got scammed, the largest of all was $68k!

This is common in most discord groups.

If somebody is asking related to wallets and other stuff, some strangers will randomly message you and will tell that they're the support of that group.

Never ever entertain any of them next time.

It did look fishy, I'm still trying to figure out why I fell into such a scam. The funny thing is that after reaching the official WalletConnect group, I was messaged by another scammer who was trying to give me directions into "encrypting" my new wallet. What a petty scam attempt.

Never trust anyone on there.

They'll give you a sort of link where there's a form and asking for your keys.

Maybe you're stress and lack of sleep when you fell for that but anyway, good thing that everything's fine now.

[pealr12]

Did you create a fresh account with a new mnemonic phrase, or you are using the same account but just a fresh address with the old mnemonic phrase?

If it's the latter, then your assets might not be safe in case the person has the mnemonic phrase. It means that all the addresses you will create under the account are compromised.

I've simply created a new account, it has a new address and private key, but is under the same mnemonic phrase. They have the private key, but not the mnemonic phrase. Can that be extracted somehow? Am I currently safe?

I don't know how I dun goofed so badly. I'll definitely get into details when this is all over.

Under the same mnemonic am sure whoever got hold of the keys can still access it because in metamask you can create more than one account with same keys, why not just quickly create a fresh account with new keys and push the coins while you still can, probably the person don't understand how mm works very well reason why your coins still intact.