Diamond 5 Stake, account was hacked

[South Park]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

[1715600854]

1715600854

[1715600854]

1715600854

[1715600854]

1715600854

[klidex]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Although it's not a huge amount for Op or for anyone but still it's a fatal mistake to keep large amount of money in online platforms which have vulnerability to be hacked by bad people out there.
If convenience is the reason for someone to deposit money on an online platform like an exchange or online casino, that is not the right choice and would be better off keeping in a hot wallet or depositing in their local bank.
This is a valuable experience that Op has had and this should also be a reminder for us to be more careful in storing crypto assets.

[tusandii]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

[AHOYBRAUSE]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

True. It's a high risk to keep money at a site where it's possible you can't have 100% access to it. They can always deny a withdrawal for whatever reason and then what. Since I had a problem in the past I only kept as much money on the site as I needed, not 1 satoshi more. That's the way to go I think.

Also seems like it didn't go too well for OP there since he is looking to buy crypto now https://bitcointalk.org/index.php?topic=5446023.0 .

[Hirose UK]

Wow
I was first moved with the fact that you had over $165k in your betting account and I was really mad that what the f*ck are you doing with such amount of money in your betting  aaccount ? I'm so sorry for your loss mate but I really don't think it will be possible for stake or any other casino to share responsibility of the loss with you because you made all the mistake to have clicked on the link and you don't expect the casino to partake in fixing a mistake causes by you exoevt they just wanted to be fair with you.
This is another wake up call for everyone to stay very active in protecting their accounts and checking eveey links thoroughly before clicking non them.

Most likely this is not as much money for the OP as it is for us, and as we know a great deal of traders and gamblers out there use online wallets to store their funds as they find this arrangement more practical for them, but as we know this convenience comes with a price, and the price is that their coins are at a higher risk of being stolen as hackers have all the time on the world to try to figure out how to access their account and steal everything that is in it.

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

Op seems to be one of the rich people who is a big gambler so it's only natural to keep a large amount of money in the casino for him to bet on big bets.
Maybe the loss of the money was due to his own fault, who was not vigilant and was too careless, so that someone hacked and took all of his money.
This error does not originate from the casino if I think it is due to an act of hacking caused by the OP himself not a casino failure.
In crypto or gambling, even a small mistake can be dangerous, so don't take everything for granted.

[AHOYBRAUSE]

theres an issue with buying crypto? lol I buy crypto everyday with or without the hack. Keeping money on a casino shouldn't be an issue as stated earlier, they should have acted earlier when this happened to smaller players and not waited until a bigger player got hit. That's all, still playing there and will continue to do so, just very weak security prior to it happening. Hope all is well in tokyo

Well glad to hear you are doing well. Tokyo has hanami (cherry blossom festival) season now so it's all good. 

We know you are right, they should have acted faster, way before that happened. But they didn't and knowing that this problem/weak security exists could have been indicator to not hold that much money on a site, that you must admit.

Good luck with your games there. I am not routing against you, I am always routing against the house, especially when it's a greedy one! If I had the funds I would try to take them down myself, but I don't so I trust you with that.

[robelneo]

Keeping most of the money in the wallet by saving it in the form of tokens is indeed very profitable for some people because indirectly it can also be an investment.
But here what I'm wondering is that OP has the nerve to take the risk of keeping such a large amount in the casino's wallet.
This is an inappropriate choice in my opinion because the risk is big and if you have bad luck, it's like the OP where he became a victim of hacking to the point where he lost everything he had in the casino wallet.
I don't know what the OP's goal is by keeping so much money in the casino's wallet, whether to gamble or just save it, but this is a valuable lesson for all of us to be more careful and always consider what to do, especially regarding the money we have.

It's a sign of being a compulsive gambler, you don't make the casino wallet a place to store your funds, two of the unsafe place to store are exchanges and casinos, noncustodial wallets are always the safest.
I'm not comfortable keeping even a small amount on casinos I make sure to deposit what I will use to play and if I won I withdraw it all, I know my limitation and I know how the amount I will fund that I think will satisfy my gambling urge.

[benalexis12]

Actually, this scenario of losing funds in our wallets is worrying. I just can't imagine that even if we have 2FA, a hacker can still disable this thing. I used to think that when someone has 2fa, their account is definitely safe, but that's not the case when we accidentally click on a phishing site without knowing it.

[Odusko]

Actually, this scenario of losing funds in our wallets is worrying. I just can't imagine that even if we have 2FA, a hacker can still disable this thing. I used to think that when someone has 2fa, their account is definitely safe, but that's not the case when we accidentally click on a phishing site without knowing it.

2FA authenticators have proven to be the most secure security protocol for any account, but if I site does not demand for 2FA  code when a user tries to disable the 2FA on their account because, in a normal security protocols where 2FA security is fully authenticated, the code is demanded at every point and if one disables the features withdrawal from that account is suspended for 24 hours, this way hacker has an almost impossible task to take control of your account because the hacker will have to have access to the 2FA device or apps which most time is offline.
But if stake own security systems allow the disabling of 2FA features without the demand for code, that will open up players' accounts for hacking since there are a lot of phishing attempts

[Lida93]

Hey all, random one as i am not trying to make any big accusations against the company or cause any unwanted commotion(yet).

I am diamond 4(6 percent from diamond 5) member on stake and the account is 5 months old. So I am one of if not their biggest sports players on the site.

Recently I was trying to login to check the status of my bet and was logged out of my account. I didn't think much and wrote the chat, finally got back in and saw I had a zero balance and my live bet had been cashed out. The company wrote to me and queried a set of tips that were sent from my account totaling 165k. the balance would have been 205k if the hacker had not cashed my bet out.

Anyway long story short, I was either phished on telegram or in the stake chat on the site and the link i had opened disabled my 2fa, so the hackers waited and stole the money after I had grown a balance. My issues here are many but I obviously hold a lot of responsibility for clicking the link. If I had my account and email compromised and people accesed my account and stole the funds I wouldn't have much of a gripe but they didn't, they were only able to 'tip" another brand new account 55k and 110k in a matter of seconds, the thief managed to steal the 60k and get it off the site and the rest was blocked. Also, should be noted my 2fa was removed from the acct at 944am and the theft at 11am and still no triggering on the site to block six figure tips(which i've never done before) to a brand new acct that automatically withdrew them.

Anyway i am hoping they will do the right thing and at least split responsibility with me as I did make the mistake of clicking on the phishing link but to have no protocol to stop and internal funds transfer within the site and a withdrawl of those sizes an hour after 2fa was disabled is pretty sickening.

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

The phishing site I ended up on is here https://stake.com-bonus.io/?action=login&modal=auth&error=fail  it's obviously pretty pathetic replica but it was 5am when i clicked and it did the trick.

If anyone would be willing to help out and see if any real info is connected anywhere I would be super grateful and happy to send a reasonable bounty out.

I sympathize with your financial loss at the moment, it's not always folly to finding oneself as a victim to such situation as mistakes are inevitable with humans. Also it shows a lot how matured you're as a gambling willingly taking in responsibility to what has happened rather than pushing it all to the gambling company stake. Am sure there would be few persons who would be experienced and ready to giving solution to your case but even as that, try to be careful let no one use your vulnerability at the moment as you're seeking for help to rather milk you or scam you furthermore of your remaining balance, cause it's possible some unscrupulous person's might rather see this as an opportunity to dupe you easily rather than presenting the help you seek.

[Desmong]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

[Newlifebtc]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

it is not even advisable for someone to leave it money online leaving your money online anything can happen to it and you will lose the money totally I think it is happened to binance exchange before when some people left their money in the platform and the hacker attack the platform all the forms of people who left their money in the platform was hacked and binance have to refund the money after the return for business no platform that is good for someone to leave it forms there because of hacker

[noormcs5]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

Phishing attacks do exists as hackers are always looking for an loophole to scam people by making a replica of the site and fool the people who do not take the attention of the site URL.  
I really feel sad for the OP for losing his funds at stake due to the hack. Also, it is almost next to impossible to recover those funds now as it is not easy to track who hacked the account.

it is not even advisable for someone to leave it money online leaving your money online anything can happen to it and you will lose the money totally I think it is happened to binance exchange before when some people left their money in the platform and the hacker attack the platform all the forms of people who left their money in the platform was hacked and binance have to refund the money after the return for business no platform that is good for someone to leave it forms there because of hacker

This has been emphasized enough on this forum to not leave you extra funds on the gambling sites or any other central site including the centralized exchanges. But people always are lazy about it and they only realize this after the incident happened like the one experienced by the OP.

[WillyAp]

makes me wonder how those hackers singled you out in the first place, plus waiting till money is there.
Pretty good insider info if you asked me.

[Ebede]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

actually we don't need to leave any phones in any online platform except that you want your phones to disappear or for people to hack it from the classifieds I've come across of many articles where am I the writer or the author instructed people who do online banking so to leave their money for a platform that is not verified or that does not have a kyc so leaving your phone's there it is at your own risk

[Fivestar4everMVP]

I'm sorry for the loss of your funds due to the hacker who took it op, that's a pretty big amount to be honest and not a trivial amount.

     Talk about a phishing link because what we have done without realizing it is very impossible for us to really recover what we have lost.
 It wouldn't matter if only invalid 2fa was the problem, you can tell if that can be fixed, but I don't think phishing attacks really exist anymore.

This is why we need to be careful the way we leave our funds in a casino and nit withdrawing them at the appropriate time. I would prefer I bet and make winnings, withdrawing my funds as fast as possible because I know that anything cam happen to casino like getting hack or something else. We had been hearing something like this frequently these days.

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of OP..
One thing that is certain is that, we are literally our own security.
First, it is not advisable to leave funds in your gambling account, try as much possible to withdraw after gambling.
Secondly, activate 2fa on your account, plus other security majors made available to users by the casino, with 2fa, even if a hacker manages to hack. Into your account, they probably won't be able to withdraw, except they have access to your email address to enable them turn off the 2fa.

[BlackyJacky]

The point, whether you guys are all shilling for online casinos or not is that they had a flaw in their system that they had been made aware of and didn't care to update the security.

That makes them liable!

Also, it should not be possible to donate such huge amounts as it is in breach of the applicable AML laws!

However, based on my experience they ignore if they are at fault!

Did you contact complaints@stake.com?

[Mahanton]

When it comes to this then there's no way that you would be able to get those amounts back.It is really just right that Stake has nothing to do or would be giving out at least half of the lost amount since it was really your fault on the first place.If you havent just go into that phishing site then you wont really be experiencing this problem plus Stake wouldnt really be that too much strict on blocking access considering that the hacker do able to bypass and able to get that 2FA which means that there are no means that they would really be that suspicious and let those transactions passed and confirmed without any issues
considering that you are a Diamond 5 player.

[TwitchySeal]

I have the hash for the withdrawl here https://etherscan.io/tx/0x1ae29bdb23b038de73b398947343013ba0df7d45ec322b87de53e0d798c7fa62  

After being withdrawn, your funds were sent to 0xdeb197c73270288adbd93ac537311b46cab96f71 and then 3 days later to 0x4648451b5F87FF8F0F7D622bD40574bb97E25980,
which has been linked directly to the hacker of the infamous Indexed Finance Hack in October 2021 for $16 million in ETH.

You can read the details of the hack here: https://ndxfi.medium.com/indexed-attack-post-mortem-b006094f0bdc

You can see the connection with the 0x46 address here: https://hackmd.io/@laurenceday/H1OylawSF#Finding-Links-To-Fiat

It turns out that obfuscating your transactions doesn’t really help you when your adversaries are motivated by the theft of sixteen million dollars.

Here comes a flurry.

The attacker received funds twice from 0x4648451b5f87ff8f0f7d622bd40574bb97e25980, which was funded through Binance as the initial source of Ether for gas three years ago.

The hacker goes by BogHolder/tensors/UmbralUpsilon/ZetaZeroes, BogHolder#1688 on discord.  

And here's a pretty great article that has loads of personal information on the guy: https://www.bloomberg.com/news/features/2022-05-19/crypto-platform-hack-rocks-blockchain-community?leadSource=uverify%20wall  
(I recommend this article to anyone interested in this kind of thing).

Can't say 100% it's the same guy, but it seems likely and if not, they definitely know each other.

Either way, he seems like a chatty guy, but 0 chance you're getting that money back - you'll understand why I say that if you dig into the big hack I mentioned for $16m.

[WillyAp]

I don't know if i am living in a hole, but somehow, I've never heard that an online casino itself was hacked, aside individual users accounts, like in the case of

To have singled you out requieres intelligence, internal intel.