Had 165k ETH stolen last night.

[kingjudas]

Listen up. I messed up. Seriously. My negligence ended up costing me $165k in Ethereum, and a bit of MATIC. Here's what happened.

Earlier today, I had a significant deposit of ETH enter my digital wallet. Barely 8 minutes later, it was gone. The transaction ID? 0x094f01f9174845200e6324bf18a242e0b19ce7f058a4cb928144d22df8313bcc. Destination? A new wallet, 0x4b9e0ddabad6dff604db3d827f5fa7e1c6952aa8.

I know what you're thinking. "Should've used a hard wallet." And you're correct. I have a Ledger, and it was sitting unused while my ETH was taken. Worth noting, I had about $7k in my wallet all day, untouched. But as soon as the large deposit came in, it was swiped. Clearly, it was a targeted operation.

I'm not avoiding blame here. I failed. Despite being cautious, I wasn't vigilant enough. I'm reeling from it.

So, here's my request: If anyone knows advanced methods to trace this wallet or the transaction, beyond just setting alerts, I'd be grateful for the help. I'm clinging to the slim hope that I might retrieve my lost funds.

To everyone else: learn from my mistake. If you've got substantial crypto, move it to your hard wallet immediately. Don't let overconfidence or negligence jeopardize your assets. It can happen to anyone, myself being a stark case in point.

TL;DR: I lost $165k in ETH from my wallet moments after it was deposited. It went to a new wallet (0x4b9e0ddabad6dff604db3d827f5fa7e1c6952aa8). I didn't use my Ledger, and that's a decision I'm paying for dearly. If you can help trace the transaction or the wallet, please share your advice. Keep your crypto assets secure, folks. It's a hard lesson I've learned firsthand.

[1714660607]

1714660607

[1714660607]

1714660607

[1714660607]

1714660607

[Pmalek]

What wallet did you use to deposit those ETH tokens to and on what kind of system? Phone, desktop?
Very little you can do about it now unfortunately.

I would reformat my device, wipe everything, and seriously consider my online actions and personal security. You need to ask yourself what you did to get infected, how, and where. You must have downloaded something, clicked on some malware links, or given permissions to dubious software.

Regarding the transaction and tracking it. You can hope the scammer makes a mistake and sends it to a CEX with a KYCed account. But even if they do, you'll have to file a police report with local authorities who will have to start an investigation. The exchange won't lock or freeze anyone's coins without proof and the involvement of a government agency.

[Cantsay]

To everyone else: learn from my mistake. If you've got substantial crypto, move it to your hard wallet immediately. Don't let overconfidence or negligence jeopardize your assets. It can happen to anyone, myself being a stark case in point.

I'm sorry for your lose. Losing that kind of money in a blink of an eye is not something one pray or hopes happens to them.

If I may ask, have you ever done anything that you feel might be the cause of you losing your funds? Like how well do you secure your wallet and what other things do you use your system that has your wallet for?
I know alot of people might not want to use their system that has that amount of money to do any other thing as it will reduce the security of their coin... So I'm asking if perhaps you normalize downloading files from unknown source and also the type of Os you're operating.

I'm asking since you made of of others learning from your mistake, providing this information might help others avoid making the same mistake as you did.

As concerning the tracking I'm afraid I don't have that much knowledge to track a transaction deep down the Blockchain but I do hope you get the necessary help needed to help you recover your funds or give you a tip that'll help you.

[Oshosondy]

Regarding the transaction and tracking it. You can hope the scammer makes a mistake and sends it to a CEX with a KYCed account. But even if they do, you'll have to file a police report with local authorities who will have to start an investigation. The exchange won't lock or freeze anyone's coins without proof and the involvement of a government agency.

It is also possible that the person did not send it to an exchange. Hackers are perfect in some ways. If an exchange is used and the person have scam tactics, it is possible that everything about the person is fake, like fake KYC. To know if the person sent it to an exchange, I think there are wallet explorer that can do that? Chain analytic organizations can also help him out, even beyond sending the money to an exchange.

[CODE200]

I was shocked at first when I read your title, 165k ETH but when I clicked the topic it's 165k USD worth, my first thought when I've read the title is that "how come this person lost all of that Ethereum in one go?". Regarding your plight, you need to talk to a cybersecurity company for this kind of thing, also you should probably file a police report about the theft so at the least you know that you've taken some measure to catch the thief. Cybersecurity companies wouldn't magically return the stolen crypto though, most like they will find out who's the person through the investigation that they're going to conduct.

[Xal0lex]

Listen up. I messed up. Seriously. My negligence ended up costing me $165k in Ethereum, and a bit of MATIC. Here's what happened.

That word mean anything to you "couchbeerrob"?

[Husires]

People in an online forum can't help you recover millions of dollars because all the information we have is available to everyone. you have to start by filling out papers at the nearest police station, enclosing your data, source of income, and details of what happened.
And if you have little money or acquaintances, you can ask a specialized company to track those currencies with the issuance of personal data and statements that you will get from the police.

If you are lucky, the money will be frozen through a judicial order from the court, but it depends on the source of income and on the state whether it is friendly to cryptocurrencies and whether they cooperate or not.

[AbuBhakar]

TL;DR: I lost $165k in ETH from my wallet moments after it was deposited. It went to a new wallet (0x4b9e0ddabad6dff604db3d827f5fa7e1c6952aa8). I didn't use my Ledger, and that's a decision I'm paying for dearly. If you can help trace the transaction or the wallet, please share your advice. Keep your crypto assets secure, folks. It's a hard lesson I've learned firsthand.

This is a sweeper bot which is popular hacking techniques when you exposed your private key through phishing or malware. This is huge amount and you should hire someone to track it, hoping that hacker will deposit on centralized exchange.

This money is too huge to be stored on a software wallet alone. You knew your mistake and I'm sure this a great lesson to teach newbs here.

[coin-investor]

TL;DR: I lost $165k in ETH from my wallet moments after it was deposited. It went to a new wallet (0x4b9e0ddabad6dff604db3d827f5fa7e1c6952aa8). I didn't use my Ledger, and that's a decision I'm paying for dearly. If you can help trace the transaction or the wallet, please share your advice. Keep your crypto assets secure, folks. It's a hard lesson I've learned firsthand.

This is a sweeper bot which is popular hacking techniques when you exposed your private key through phishing or malware. This is huge amount and you should hire someone to track it, hoping that hacker will deposit on centralized exchange.

This money is too huge to be stored on a software wallet alone. You knew your mistake and I'm sure this a great lesson to teach newbs here.

This is indeed a big lesson for all of us and its a reference for those who do not want to use hardware wallets and check their machine regularly for malware like all the others here your chances is for the hackers to move the wallet to a centralized exchange to trace the identity of the hackers.

Can you give us more details so people here will learn how scammers work, OP is right that this is a targeted operation how did the malware land it seems he is tracing the wallet for a big amount to come, and when it did it triggered the malware to hack the wallet.

[Shishir99]

I am afraid after hearing these things. Why wouldn't a hacker take the $7K in your wallet before the transaction? $7K is not a tiny amount that hackers can throw away. Or was it someone who knows that this wallet will get some large deposit in the future? Who knows? Maybe it was someone who know you very well and he may get access to your wallet somehow. This could be your friends or neighbors or even a family member. Do you remember sharing information related to your crypto investment?
To everyone: I am afraid about it. Even though I never keep my private key online, is there any way I can check if my wallet is already compromised or not? Is there any wallet that shows login logs? Do you guys believe we can request such a feature to some wallet providers and do you think they may consider it?

[aioc]

I am afraid after hearing these things. Why wouldn't a hacker take the $7K in your wallet before the transaction? $7K is not a tiny amount that hackers can throw away. Or was it someone who knows that this wallet will get some large deposit in the future? Who knows? Maybe it was someone who know you very well and he may get access to your wallet somehow. This could be your friends or neighbors or even a family member. Do you remember sharing information related to your crypto investment?

This is something OP should consider either there is malware or there is an intrusion and the hacker knows that you have a big amount coming so he waited for it, this is a big concern, it's not recommended to put the big amount in one address we should divide the amount to a different address and different wallet.

To everyone: I am afraid about it. Even though I never keep my private key online, is there any way I can check if my wallet is already compromised or not? Is there any wallet that shows login logs? Do you guys believe we can request such a feature to some wallet providers and do you think they may consider it?

All I know is your wallet is compromised if there are unauthorized transactions, the community will be benefited if developers can add this feature but still nothing beats a hardware wallet.

[DireWolfM14]

Sorry for your loss.

Care if I ask which wallet(s) you used to access this account?

Worth noting, I had about $7k in my wallet all day, untouched. But as soon as the large deposit came in, it was swiped. Clearly, it was a targeted operation.

So, the first question you should be asking yourself is who knew you were about to receive the large deposit.  Obviously you don't want to answer that here.

[Dr.Bitcoin_Strange]

This is really a huge amount. Sorry for such a huge loss. Tracking your coin can be a bit possible with the idea of Pmalek, but unfortunately those Ethereum are still sitting in that new wallet, and if the hacker decides never to send out those coins hastily, I don't think there's any other possible way you can easily gain back your asset. Perhaps the hacker can also decide not to send those out at once to any exchange. Still, as others are deliberating on the matter, I am also shocked that the $7k you talked about was untouched, even after the ETH was pulled off, which makes me think you have someone around you who knew you had more than just $7k and that you will still deposit it in that wallet.

[khaled0111]

First, I'm sorry for your loss.
Based on the little information you have shared, I suppose this is your eth address: 0xbed5681AB526863c4CCee75e394db537A75DA761, right!
According to etherscan.io, you received 111eth from bitcasino.io then, few minutes later, ~28eth were sent to a contract address and the remaining balance sent to the address you have mentioned.

I'm not an expert when it comes to ethereum and other altcoins but I think your case has more to do with the smart contract than with the wallet you are using.

[Aanuoluwatofunmi]

I know what you're thinking. "Should've used a hard wallet." And you're correct. I have a Ledger, and it was sitting unused while my ETH was taken.

Ledger cannot do anything than compromising the whole privacy and security measures in place, don't even think of ledger in this, but you can make use of Trezor or any other hardware wallet, but before then, let's hear the complete part of the story, i think it's getting more interesting.

Worth noting, I had about $7k in my wallet all day, untouched. But as soon as the large deposit came in, it was swiped. Clearly, it was a targeted operation.

Have you been careless with the way you handled the wallet or what could have caused this, also, one of the reasons why there's no more trust confided with ledger is in such scenario of data breach they do behind your permission to spy and steal your crypto asset unknowing to you

[robelneo]

Sorry for your loss.

Care if I ask which wallet(s) you used to access this account?

Worth noting, I had about $7k in my wallet all day, untouched. But as soon as the large deposit came in, it was swiped. Clearly, it was a targeted operation.

So, the first question you should be asking yourself is who knew you were about to receive the large deposit.  Obviously you don't want to answer that here.

That's a good question that is worth an answer, for a hacker if they have malware in your machine will move that amount right away because $7k can be considered a big amount but it seems it waited for that huge amount to move in so he can do, it can be considered a targeted operation if the hacker knows there's an incoming huge amount or the malware can only read amount that is higher than $7k so it remains untouched until the big amount move in and sent the notification to the hacker to move the funds.

Since it mentioned that there is an interaction to a smart contract address can you give us the name of the platform where you interact, that could be the culprit, this is a lesson here, do not put a huge amount on the wallet that has an interaction with any platform, use a new address on a new wallet.

[PX-Z]

Well, at least reply for what people has asked to offer you some help.

After searching the address in google, i found this reddit thread^[1], OP is much more active there responding every reply, only if the OP here is the same person on that reddit thread.

[1] https://www.reddit.com/r/ethereum/comments/15cc1la/lost_165k_in_eth_straight_talk_about_crypto_safety/

[rat03gopoh]

I am afraid about it. Even though I never keep my private key online, is there any way I can check if my wallet is already compromised or not?

If you're talking self-control addresses, if that address has output transactions that aren't from your activity, its definitely compromised.

Is there any wallet that shows login logs? Do you guys believe we can request such a feature to some wallet providers and do you think they may consider it?

Technically your address is active all the time and can be exported to other wallet platforms by some key derivation method, so there is no log detection and no point in requesting such a feature.

[Husires]

Well, at least reply for what people has asked to offer you some help.

After searching the address in google, i found this reddit thread^[1], OP is much more active there responding every reply, only if the OP here is the same person on that reddit thread.

[1] https://www.reddit.com/r/ethereum/comments/15cc1la/lost_165k_in_eth_straight_talk_about_crypto_safety/

He have another topic in which he talks about the same story here https://bitcointalk.org/index.php?topic=5461357.msg62616437#msg62616437 And really,
The date shown on Reddit is 29 and here is 28, so I don't know if the problem is in formatting the dates, or is it the same user.

I don't know what the details of the story are, but with the loss of such an amount and without disclosing legal data, no one will be able to help him, whatever it is. Details we give him here.

[owlcatz]

He have another topic in which he talks about the same story here https://bitcointalk.org/index.php?topic=5461357.msg62616437#msg62616437 And really,
The date shown on Reddit is 29 and here is 28, so I don't know if the problem is in formatting the dates, or is it the same user.

I don't know what the details of the story are, but with the loss of such an amount and without disclosing legal data, no one will be able to help him, whatever it is. Details we give him here.

If you look at the comments section of the receiving address on etherscan.io, you can see it's already full of bullshit-scammers looking to make or steal more BTC from anyone who's been robbed ...

Sad story OP. Sorry for the loss. The consequences of contract-interaction are still pretty weak. What the heck were you using anyhow, metamask, .... or??