Anyway to be smart about this?

[Dr.Bitcoin_Strange]

-snip-

It was like a rescue mission, lol, but

It actually worked like that: the token was successfully withdrawn, and the rest of the left-over BNB also got automatically withdrawn to the hacker's wallet.

-snip-

Sorry to ask, Dr.Bitcoin_Strange, but did you successfully withdraw the tokens to any of your wallets? or were they withdrawn to the hacker's wallet? As per the BNB it is clear, but I'm not sure how should I interpret the first half of the sentence.

The word "also" expresses the idea that all assets ended up in the same place, but that's not what I deduce from the context. Can you clear it? Because if it worked then I don't think what the OP will eventually do, but IMO it could be worth trying.

@Porfirii, I was not the real victim of what I said; it happened to a close friend of mine who is also a crypto enthusiast.

Regarding your question, yes, the token was successfully withdrawn to another wallet (a new wallet).

The gas fee that was required to withdraw that token was about $0.2 worth of BNB, but what was deposited was almost $5 worth of BNB. After the deposit arrived, each of those friends who got the wallet imported to their phone immediately initiated a withdrawal for that particular token, which was intended to be withdrawn from that hacked wallet.

Successfully, the intended token was withdrawn to a new wallet, but the $4.8 (in BNB) unspent fee quickly went to the hacker's wallet.

[Porfirii]

-snip-

It was like a rescue mission, lol, but

It actually worked like that: the token was successfully withdrawn, and the rest of the left-over BNB also got automatically withdrawn to the hacker's wallet.

-snip-

Sorry to ask, Dr.Bitcoin_Strange, but did you successfully withdraw the tokens to any of your wallets? or were they withdrawn to the hacker's wallet? As per the BNB it is clear, but I'm not sure how should I interpret the first half of the sentence.

-snip-

@Porfirii, I was not the real victim of what I said; it happened to a close friend of mine who is also a crypto enthusiast.

Regarding your question, yes, the token was successfully withdrawn to another wallet (a new wallet).

-snip-

Successfully, the intended token was withdrawn to a new wallet, but the $4.8 (in BNB) unspent fee quickly went to the hacker's wallet.

Thanks for the explanation

Well, it's great in that case. Other members suggested to forget about OP's wallet and the  tokens staked there, but if it worked for you he should at least try to rescue them.

He said that they'll be worthy when they are listed, so I don't think that losing the gas will be a problem for him.

[Mpamaegbu]

And if change the password of the wallet then the owner would not have access to it but since he has not changed it both nof them can use it...

Passwords are only useful on a device a wallet is on. Once the passphrases are imported on another device, whether it's passworded by the original owner or not the new owner can assess the wallet. The main thing when it comes to wallets is the passphrase. Once a criminal gets a hold of the passphrase, it's gone. They become the new owner.

[fullhdpixel]

It's strange that I have never seen anyone ask me this question before until now, and I even try finding answers on here but with no luck.

A friend's crypto wallet was drained and there is a particular token he is staking, using this wallet, he already abandoned the crypto wallet but I am curious if there is anything I can do to help him?

What can someone do if a crypto wallet is compromised but the wallet owner is staking on such wallet still? The APY is coming in but we both curious how possible it can be to get the staked token after the period of staking is over, without ending with the hacker or whatever is fit for the drainer to be called.

As suggested by others, the only way to be smart about this is to avoid using the wallet anymore and depositing any funds while trying to withdraw the stacked funds because anything you deposit in that wallet will be gone since it's compromised and is probably still in the control of the hacker. So a wise decision would be to abandon it instead of trying to fight the situation because that's going to cost your friend more money uselessly.

Unfortunately, the cryptocurrency industry is full of hackers and attackers like these who are always waiting for the slightest opportunity to attack the wallets of vulnerable users and steal their hard-earned funds while leaving them no choice but to regret choosing cryptocurrencies for use or investment purposes.

[merekamo]

It's strange that I have never seen anyone ask me this question before until now, and I even try finding answers on here but with no luck.

A friend's crypto wallet was drained and there is a particular token he is staking, using this wallet, he already abandoned the crypto wallet but I am curious if there is anything I can do to help him?

What can someone do if a crypto wallet is compromised but the wallet owner is staking on such wallet still? The APY is coming in but we both curious how possible it can be to get the staked token after the period of staking is over, without ending with the hacker or whatever is fit for the drainer to be called.

Usually this happens due to connecting staking with suspicious or phishing websites. So, because APY stores wallet addresses, make sure you don't use this wallet again. The problem with staking is that the returns or APY keep rolling in, but if the wallet is in the wrong hands, I'm afraid it will be a windfall for those pesky hackers. this means, they just sit back and watch the profits being made.

[Samlucky O]

With the little knowledge I had about staking in meta mask, I believe that any amount you stake will be invisible in your wallet balance and if Hackers move your fund from the already existing coin in your wallet, they will not know that you have a staking farm dat is yealding you coin somewhere. If the key of the wallet is still available what the person should do.
1. Download another DEX wallet
2. Enter the seed phrase of the old wallet maybe from that same phone or another
3. Harvest the earn coin being your profit for the investment
4. Unstake the total number of coin which is pear together for example, bitcoin/usdt pear.
5. Swap all to either usdt or bnb and send to the new downloaded wallet.

[cryptoaddictchie]

I don’t know much about staking but, isn’t the stake amount still in the wallet even if the wallet is compromised because the token is restricted from been moved. Then if the rewards  ( APY) which I believe should be spendable then the owner of the wallet both can have access to withdraw that funds if only it is not sweeper bot that is on that wallet. If it is sweeper bot then immediately the funds enter it will automatically be withdrawn to the hackers address but if it is not probably the hacker just has the private key then it will be withdrawn by who saw it first.

No the tokens were moved in the a smart contract when you do staking. So technically its not on the wallet, probably the sweeper bots only able to locate useful tokens on the wallet itself. Also probably best guess is valuable or high amount before it stole something. This hacker might not be able to see yet the staking cause if he has the private key he can access wallet and check for staking contracts using tools such as debank, defi, and other ones to see if the victim got more valuable assets.

[Crypt0Gore]

Before now, this kind of issue had also been experienced by my friend. His wallet got compromised, and every valuable asset in it was moved to an unknown wallet, but there was a token in that hacked wallet that was not yet listed on any exchange (bought from an ICO). I believe it's because the token was not yet listed; that's why the hacker did not move out the token.

My friend wanted to move the token to a new wallet he has created because he knows that when the token gets listed on the exchange, it will be profitable. So, what he actually did was give the wallet phrase to about three friends and ask them to import the wallet on their device. After which, all of them had an agreement that one person among the four of them would send BNB to the wallet, which would serve as a gas fee, while the other three people would initiate a withdrawal after the BNB deposit was successful.

It was like a rescue mission, lol, but

It actually worked like that: the token was successfully withdrawn, and the rest of the left-over BNB also got automatically withdrawn to the hacker's wallet.

@OP, If the staking period of that friend's coin is due, it will be transferred back to the hacked wallet you are talking about, and if the coin is already listed on an exchange and it's a valuable coin, there is a high chance that it will be withdrawn to the hacker's wallet even before you think of sending it out. But if it is not done by the hacker before you try, I will advise you to try the technique my friends used. If it's an Ethereum-based coin, use an ETH deposit for the fee, but if it's a BNB-based coin, you can deposit BNB for the fee.

This works because the hacker don't use the automatically sending trick on the wallet already, if not, once the BNB entered the wallet it will automatically be moved into the hackers private wallet, there won't be enough time to move your tokens.

If the recovery seed is lost to a random person who have not much skills with crypto wallet you can also move the token out, I guess that's why your pals are able to move the token, OP should try moving the token out by sending $1 worth of BNB to the wallet, just to see what will happen, if the BNB also vanish in seconds then the whole wallet is compromised with the staked tokens.

[Coyster]

And if change the password of the wallet then the owner would not have access to it but since he has not changed it both nof them can use it and the hacker is waiting for the owner of the wallet to deposit funds again so the best way is to withdraw everything from the wallet and abandon the wallet and us another one.

The hacker already compromised the wallet and stole the keys, so the hacker is in control of the wallet and has moved the funds out of the wallet, OP is talking about withdrawing funds from staking he was doing in that wallet, though i don't think it is possible because the hacker must have set up a sweeper bot to move any funds that enters that wallet and it would definitely be faster than an human action.

Having said that, mind you that passwords only protect your wallet file when it is in your device, if an attacker has your keys or seed phrase, they would import it in their own device and set any password of their own choice.

[GxSTxV]

The only way you can protect yourself in similar cases is to understand how your wallet can be compromised, maybe what happened is not totally bad (sorry for your friend's loss). Now you can understand what exactly happened and when he did that mistake leading his wallet to be drained and compromised.
Any little mistake could be the reason of this case, I don't know which wallet you are referring to, because every wallet has different systems of functioning and also the devices they support. Since you talked about staking I may suggest that it's that smart contract between your wallet and that token who lead to the compromise


Personally, I had a similar experience [1] with MetaMask wallet where my wallet got hacked and drained instantly. The solution unfortunately was abandoning it too.

[1] : https://bitcointalk.org/index.php?topic=5465856

[Mr.right85]

There was a recent vulnerability with Web3 apps, metamask including some Hardware wallets which might have led to this downfall of your friend.

That's some scary stuff there. So, we've more than safekeeping our seedphrases to grapple with now and into worrying our already stressed minds about vulnerability that's outside our control. To even think that Metamask was immuned to vulnerable attacks now leaves a panic situation at hand. I thought it's clicking on unverified links that can expose one's wallet. Doing that would be left in the hands of the wallet owner but to be told that it can come down to a situation other than that is really heartbreaking.

Apparently, it ain’t Bitcoin that is being discussed here as, I don’t know of any Bitcoin wallet that allows you to stake your coin. It’s some altcoin been discussed and just anything could go wrong with altcoins I tell you.

Though, it’s the first time I’m getting to know about this and the chances of recovery leave me with wide mouths. Like, even when it ain’t your fault, even when you’ve got your security loopholes tightened and even in the phase of discovering a compromise, you still don’t get to save your staked coins, that’s just as bad as it gets.

Am seeing suggestions from other comments and I hope your friend gets to try that. The 3 parties thing, sending of gas fee in some alt and simultaneous withdrawal. Just hope it doesn’t get worst and I don’t hope to find myself in similar position.

[tech30338]

It's strange that I have never seen anyone ask me this question before until now, and I even try finding answers on here but with no luck.

A friend's crypto wallet was drained and there is a particular token he is staking, using this wallet, he already abandoned the crypto wallet but I am curious if there is anything I can do to help him?

What can someone do if a crypto wallet is compromised but the wallet owner is staking on such wallet still? The APY is coming in but we both curious how possible it can be to get the staked token after the period of staking is over, without ending with the hacker or whatever is fit for the drainer to be called.

I have not tried this one that has some stake but I have tried the trick to make a ready transaction to then send a small amount for the gas fee, in this way, you will be the one to make the first transaction since I think the automation of the drainer/hacker has some seconds delay before it do the task, and it works from my side, I have done this trick twice, and works well, always send an exact gas for your transaction, and click the transfer or send to your wallet once you have initiated the gas for the compromised wallet, hope this will do the trick
note: don't ever send an amount of funds if you will not do a transaction, because it will help the hacker transfer your account
I hope this will help you with your problem.

[tech30338]

And if change the password of the wallet then the owner would not have access to it but since he has not changed it both nof them can use it and the hacker is waiting for the owner of the wallet to deposit funds again so the best way is to withdraw everything from the wallet and abandon the wallet and us another one.

The hacker already compromised the wallet and stole the keys, so the hacker is in control of the wallet and has moved the funds out of the wallet, OP is talking about withdrawing funds from staking he was doing in that wallet, though i don't think it is possible because the hacker must have set up a sweeper bot to move any funds that enters that wallet and it would definitely be faster than an human action.

Having said that, mind you that passwords only protect your wallet file when it is in your device, if an attacker has your keys or seed phrase, they would import it in their own device and set any password of their own choice.

Im not pretty sure they got the keys, since if they have the keys for the wallet, they would have transfer the amount for the transfer but instead what they are doing is wait for us to send a certain amount that will automatically send it to their desired wallet, although the exact reason for this is you have connected you're wallet to a fake site and from their you have given them permission to transfer the funds , but maybe they only want us to send funds for them, to save time, but maybe if the wallet has millions they maybe open the wallet themselves.

[Mpamaegbu]

~snipped~

Apparently, it ain’t Bitcoin that is being discussed here as, I don’t know of any Bitcoin wallet that allows you to stake your coin. It’s some altcoin been discussed and just anything could go wrong with altcoins I tell you.

But of course, it's not Bitcoin being discussed there. However, the scenario can still wipe off one's Bitcoin in that same wallet with other alts if it's compromised. I want to believe you know there's something called crypto wallet – a wallet that contains various alts and Bitcoin too. We've many of them. A very popular one is Trust Wallet, just to mention but one, which can also be used for staking and all that.

A wallet specifically for Bitcoin alone is called a Bitcoin wallet while those that contain more cryptos are called crypto wallets.

[Coyster]

Im not pretty sure they got the keys, since if they have the keys for the wallet, they would have transfer the amount for the transfer but instead what they are doing is wait for us to send a certain amount that will automatically send it to their desired wallet,

What are you talking about, read the OP well before commenting. According to the OP, the wallet was compromised and the hacker has already emptied the wallet. The problem here is that the owner of the wallet has a token that he staked and the hacker cannot move it yet because staked funds are locked, so OP now wants to know if there is a way to stop the hacker from moving the staked coins and the accrued yield once it is released.

A wallet specifically for Bitcoin alone is called a Bitcoin wallet while those that contain more cryptos are called crypto wallets.

Wouldn't the most appropriate term be a multi-coin/multi-crypto wallet.

[Mpamaegbu]

A wallet specifically for Bitcoin alone is called a Bitcoin wallet while those that contain more cryptos are called crypto wallets.

Wouldn't the most appropriate term be a multi-coin/multi-crypto wallet.

Well, I think it's a matter of being politically correct or legalistic. As for a wallet being tagged multi-crypto or multi–coin, it passes the same message as a crypto wallet. Since we all know that Bitcoin is the only coin that isn't an alt or referred to as crypto, there shouldn't be any conflict of interest. The point of interest in my earlier observation is so newbies don't mistake any wallet that's solely for Bitcoin as crypto wallet or vice versa. By the way, most crypto wallets now have Bitcoin addresses enabled on them. Every dev wants to court the friendship of Bitcoin.

[libert19]

A friend's crypto wallet was drained and there is a particular token he is staking, using this wallet, he already abandoned the crypto wallet but I am curious if there is anything I can do to help him?

What can someone do if a crypto wallet is compromised but the wallet owner is staking on such wallet still? The APY is coming in but we both curious how possible it can be to get the staked token after the period of staking is over, without ending with the hacker or whatever is fit for the drainer to be called.

Unless there is drainer that instantly withdraws whatever amount comes into your friend's wallet, solution is easy as unstaking the staked token and move it to a new wallet.

[AakZaki]

But of course, it's not Bitcoin being discussed there. However, the scenario can still wipe off one's Bitcoin in that same wallet with other alts if it's compromised. I want to believe you know there's something called crypto wallet – a wallet that contains various alts and Bitcoin too. We've many of them. A very popular one is Trust Wallet, just to mention but one, which can also be used for staking and all that.

A wallet specifically for Bitcoin alone is called a Bitcoin wallet while those that contain more cryptos are called crypto wallets.

Trustwallet is also called a Multi-Wallet or multi chain wallet because it can be used for all crypto assets including Bitcoin. There are many supported blockchain networks so it will be very easy to use them.
But a Bitcoin-only wallet like electrum seems to be better because it only focuses on Bitcoin, and it's also open source.