Sending amounts > in wallet empties wallet

[gysymple]

This has happend twice now. I've sent btc to some one and the amount I send is sent in the right amount to the receiver but the balance of my wallet is emptied out in to another wallet following the chain. Can anyone explain why this would happen. I do understand there is a small transaction fee for the miner, but when it equals the balance of my wallet. Make me believe the android app developer  is scooping my balance.
I'm not happy about using this app anymore and have used it for many years with out a problem like this.. Any have this happen or know why or who is taking the balance?

[1714154719]

1714154719

[1714154719]

1714154719

[LoyceV]

I assume you mean the change is send to a new address in the same wallet. That's normal, it's the way Bitcoin works.
Think of it as having a $100 bill, paying someone $50, and getting $50 back in return. Bitcoin is, after all, designed as electronic cash.

Unless you mean something else, in that case please start by naming the wallet, and if possible show the txid (transaction ID).

[gysymple]

I don't receive it back though....... I'm using bitcoin.org app de.schildbach.wallet


I did mention that I've used this app for a long time and this has never happened with many transaction using this app with different wallets not with every transaction but reinstalling the app many times. So I'm very familiar with the app as well as running the server core on my windows machine 

[Charles-Tim]

Did you mean if you make transaction, your balance will appear incorrect until you uninstall and reinstall the app? Even if not what it is but you having complain about the wallet, I will advice you to use a better wallet. You can use the open source one like Electrum. Download it from https://electrum.org and verify its signature. Make sure you backup your seed phrase.

[gysymple]

No i did not mention an incorrect balance I clearly stated that when I send btc now that the amount I send  is less then ">"  in my wallet and there remaining balance is removed from my wallet and this is the second time which has not happened before.


https://www.blockchain.com/btc/address/1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d

You can see this from this wallet to see what I'm stating The balance is not returned to any wallet I hold but someone elses

[LoyceV]

https://www.blockchain.com/btc/address/1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d

Did you make this transaction? If so: the entire balance of the address was used (and the transaction fee was much higher than needed). There is no change in this transaction.
If you didn't make this transaction, your wallet may be compromised.

[gysymple]

Did I not mention that "I sent" in my first post. Your answer to your question has already been stated dude. The chain shows where the fees have gone and as I stated its the same app and device. So your thinking the app is compromised. Your statements so far makes me believe even more that developer of this app have some kinda hooks to clear out the balance of my wallet to another wallet which is indicated in the chain as far as i can see. The first time I just dismissed this but did take note and knowing this I monitored the events during the transaction and fueled the wallet in question to see if it would happen again. Low and behold voilà...........so can anyone explain before I start to dig deeper here..........my wallet is public to all that should be concerned. Lets see where this goes......  

[LoyceV]

Did I not mention that "I sent" in my first post. Your answer to your question has already been stated dude.

No need for the attitude dude. Your story isn't very clear. The transaction only shows one output, while you said:

the balance of my wallet is emptied out in to another wallet

What's the txid for that last transaction?

[gysymple]

This has happened twice now. I've sent btc to someone and the amount I send is sent in the right amount to the receiver but the balance of my wallet is emptied out in to another wallet following the chain. Can anyone explain why this would happen. I do understand there is a small transaction fee for the miner, but when it equals the balance of my wallet. Make me believe the android app developer  is scooping my balance.
I'm not happy about using this app anymore and have used it for many years with out a problem like this.. Anyone have this happen or know why or who is taking the balance?

Please read this again, including the subject as such as it is what happened. If your unsure and what I mean or what the question is.

 I know which wallets have received this amounts in question what I'm trying to discover is other transaction of the same nature someone else has experienced using this app.  As well now,  who has control over this wallets that received this fees. I'll explain again that I have been running the core that I have on a windows machine that I can dig out transaction at the command prompt to aid in discovery.

So the question is has anyone had this experience with using this app to control transactions of there wallets ? 
 

[AdolfinWolf]

So you're saying that you are the one who initiated these transactions with 1 Input -> 1 Output and are just wondering why the fees are so high, basically?

As well now,  who has control over this wallets that received this fees.

Uhh, the miner that mined your transaction?

So the question is has anyone had this experience with using this app to control transactions of there wallets ?  

http://de.schildbach.wallet/ ? Never heard of it and it won't load either. If this wallet does not allow you to set custom fees I would suggest switching.

edit: seems to be a pretty respected Android wallet.

[o_e_l_e_o]

I agree with Loyce - it is not clear what you think is going on.

The address you gave above has made exactly two transactions. In both cases, the full balance of that address was sent to one other address, and you paid a higher fee than needed. Do you mean the balance of that address is emptied as a fee? Or is being sent to the wrong address entirely? Or do you mean funds from another address in your wallet are also being moved at the the same time?

I have used Schildbach wallet many times and have never experienced something similar to what you are describing.

[LoyceV]

http://de.schildbach.wallet/ ? Never heard of it and it won't load either. If this wallet does not allow you to set custom fees I would suggest switching.

It's Bitcoin Wallet on Android. This was the first mobile wallet I used 6.5 years ago.

[nc50lc]

Can anyone explain why this would happen. I do understand there is a small transaction fee for the miner, but when it equals the balance of my wallet.

The fee was set to 54.398 sat/B on the last transaction which is equals to 0.00010390 BTC when multiplied by the total size of the transaction.
So, that will be deducted from the input together with the sent amount which may be equals to your balance.
It may have used all because the 'change' would have been "dust" (for privacy and to save fee later).

If you do not want this to happen, you should avoid extremely high fee, set it to "Economic" since the normal setting seems to be over-estimating most of the time.
Fee setting is in the "Menu->Fee" when sending funds.

-snip- ....... I'm using bitcoin.org app de.schildbach.wallet

Take note: the wallets listed in bitcoin.org/en/choose-your-wallet aren't developed by bitcoin.org.
Those are just list of Bitcoin wallets to help the end-users to select a wallet based on their preference.

[TheArchaeologist]

Based on the cryptic topic and answers I think this is what the OP means:

He/she is the one who did the funding of the address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d in these two transactions:

Code:

a2bfe07be82c1899ffc5a6c5893a11f8e1437d6a580ed23381fa2e2cfea2bbba -> 0.00066895 BTC
9866a78cf47602b2dd5eeaf0c3803e871bcf9cf45d133d54ecc9eaf29f9d0cd3 -> 0.00185822 BTC

Then shortly after (next day) the output of these transactions were sweeped:

Code:

327f06e4cf65a83207c466f50ecb079c2c546e3e589da6423cb764dfe15b5e4e -> 0.00055000 BTC to 39brUscpDr5WZCCpVDPePBov8iYf1kdeux
bc1963fdc3ef014177325c13a617ed73fac842f49405e89a50e18338f2c3710d  -> 0.00175432 BTC to 132TRb6k6P689LKToerukdBEwperP6bBdx

My analysis is also based on the fact these sweeping transaction are having a really high fee because the attacker wanted to be sure the transaction is included in the next block. So yes I think OP means he funded his/her address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d twice and  both times the funds got sweeped the next day. In that case it does indeed seem the wallet used is compromised.

[gysymple]

Can anyone explain why this would happen. I do understand there is a small transaction fee for the miner, but when it equals the balance of my wallet.

The fee was set to 54.398 sat/B on the last transaction which is equals to 0.00010390 BTC when multiplied by the total size of the transaction.
So, that will be deducted from the input together with the sent amount which may be equals to your balance.
It may have used all because the 'change' would have been "dust" (for privacy and to save fee later).

If you do not want this to happen, you should avoid extremely high fee, set it to "Economic" since the normal setting seems to be over-estimating most of the time.
Fee setting is in the "Menu->Fee" when sending funds.

-snip- ....... I'm using bitcoin.org app de.schildbach.wallet

Take note: the wallets listed in bitcoin.org/en/choose-your-wallet aren't developed by bitcoin.org.
Those are just list of Bitcoin wallets to help the end-users to select a wallet based on their preference.

The APP being used does not allow the setting of fees The wallet in question is the only wallet that this has happened. Knowing the APP assigns the address would you not think its possible that the app is assigning the address in question from a third party some how though intervention when the app request this address.  Setting the fee and the miner address to send fee to seeing that there are 2 addresses collecting the fee. Wondering this and its possibilities because of some that nodes use domain instead of IP.  I'm not going to get into how this intervention could occur but others that know network topology might understand where I'm going with this..

Thanks nc50lc for your your input....

[gysymple]

Based on the cryptic topic and answers I think this is what the OP means:

He/she is the one who did the funding of the address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d in these two transactions:

Code:

a2bfe07be82c1899ffc5a6c5893a11f8e1437d6a580ed23381fa2e2cfea2bbba -> 0.00066895 BTC
9866a78cf47602b2dd5eeaf0c3803e871bcf9cf45d133d54ecc9eaf29f9d0cd3 -> 0.00185822 BTC

Then shortly after (next day) the output of these transactions were sweeped:

Code:

327f06e4cf65a83207c466f50ecb079c2c546e3e589da6423cb764dfe15b5e4e -> 0.00055000 BTC to 39brUscpDr5WZCCpVDPePBov8iYf1kdeux
bc1963fdc3ef014177325c13a617ed73fac842f49405e89a50e18338f2c3710d  -> 0.00175432 BTC to 132TRb6k6P689LKToerukdBEwperP6bBdx

My analysis is also based on the fact these sweeping transaction are having a really high fee because the attacker wanted to be sure the transaction is included in the next block. So yes I think OP means he funded his/her address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d twice and  both times the funds got sweeped the next day. In that case it does indeed seem the wallet used is compromised.

The point of being swept is a great point I'm going to look into some details in the source and how it has changed over the last couple updates and its vulnerabilities in some of this points brought forward

Thanks TheArchaelogist  you on the target here
 

[o_e_l_e_o]

Knowing the APP assigns the address

Wallets do not assign recipient addresses for you.

Setting the fee and the miner address to send fee to

You do not select a miner address to send a fee to. The fee in a bitcoin transaction is simply the difference between the inputs and the outputs. Any output address you see in a transaction is an address belonging to someone else, not to a miner.

It sounds like TheArchaeologist is correct here - your wallet has been compromised, your deposits are being stolen by a third party, and you are mistakenly believing that they are being sent to a miner to cover the fees.

[nc50lc]

The APP being used does not allow the setting of fees -snip-

It should have a fee setting there... anyway:
My reply is based from your replies to the earlier responses,
I've taken in consideration that you initiated those two transactions, the receiver have received the bitcoins and each transactions used your full balance at that time.

If everything checks out, then it's about the fee (but I didn't get what your last reply is all about).
If not, then it's the "other verdict".

Knowing the APP assigns the address would you not think its possible that the app is assigning the address in question from a third party some how though intervention when the app request this address.
-snip-

I didn't mentioned anything about the app assigning address by itself, where did this came from?
Is the receiver's address different than the "assigned address" in those two transactions (that you've initiated)?
Language barrier, perhaps? Try the local boards: https://bitcointalk.org/index.php#5

[uchegod-21]

This has happend twice now. I've sent btc to some one and the amount I send is sent in the right amount to the receiver but the balance of my wallet is emptied out in to another wallet address following the chain.

If you didn't make this transaction, your wallet may be compromised.

You can see this from this wallet to see what I'm stating The balance is not returned to any wallet I hold but someone elses

It sounds like TheArchaeologist is correct here - your wallet has been compromised, your deposits are being stolen by a third party, and you are mistakenly believing that they are being sent to a miner to cover the fees.

Immediately the poster say that the balance is send to another address that is not his own. Also he did not off the change address setting of his wallet. And even his transaction do not have change.
That means he is compromised.