Please help to find my stolen funds

[aigarsb18]

Hello folks,

I need a help of people (highly skilled programmers and developers with an in-depth knowledge of how the crypto space operates) in order to find where my stolen cryptocurrency has gone.
If you could localize where my funds are now and if it is possible to recover them, I will share with you further details.

My wallet in the Truset Wallet platform was hacked and USDT stolen.

Please help!


Transaction Hash   0xc1243a2038ebbd761305055e63389623dfbece3b043e106ec834909b10f051f6
BlockNo   19780251
DateTime (UTC)   02.05.2024 05:07
From   0x947141153c8fB15255bEeB20686b3e2d6541F212
To   0x07829FC66c5b7F294Db07690bBc415F3dfCBf8c9
Value   27,270.565089
Token   Tether USD (USDT)

[Charles-Tim]

No need to wait of sharing the address of the person which is what that is needed to trace if the person that compromised your wallet and stole the coins sent the coin to an exchange or not. If the coin is sent to a noncustodial wallet, know that the coin is likely gone forever.

[Catenaccio]

If you could localize where my funds are now and if it is possible to recover them, I will share with you further details.

Is cryptocurrency (altcoin) or Bitcoin what you lost?

You need to check block explorers of Bitcoin or altcoin blockchains, to see where your coins or tokens moved to. What is address your coin/ token moved too.

It's hard to localize where the hackers located because only nodes can know IP addresses of senders. You can try to check with this one https://www.arkhamintelligence.com/ and see if the hacker address belongs to any centralized exchange. You can try to contact centralized exchanges for support to seize stolen fund if you can give exchanges evidence.

[aigarsb18]

If you could localize where my funds are now and if it is possible to recover them, I will share with you further details.

Is cryptocurrency (altcoin) or Bitcoin what you lost?

You need to check block explorers of Bitcoin or altcoin blockchains, to see where your coins or tokens moved to. What is address your coin/ token moved too.

It's hard to localize where the hackers located because only nodes can know IP addresses of senders. You can try to check with this one https://www.arkhamintelligence.com/ and see if the hacker address belongs to any centralized exchange. You can try to contact centralized exchanges for support to seize stolen fund if you can give exchanges evidence.

It is USDT what was stolen from Trust Wallet platform. I posted all details, also my wallet number, in the main post.

[promise444c5]

You can use https://blockchair.com/
The only way for you to report the address is if it's on an exchange wallet but if its beign moved already to a noncustodial wallet  the consider your coins gone just as it's has been mentioned in the comment .

There's actually almost nothing that could be done to such person if he/she is using a non custodial wallet unless you are willing to sperm such person's account ( looks illegal but  still a low chance  ) but if there is an exchange wallet  link  then you can still get something done from your side

It is USDT what was stolen from Trust Wallet platform. I posted all details, also my wallet number, in the main post.

Just seeing  this ...
Locate the network and you can track it using the network used for making the transaction

[Davidvictorson]

The only way for you to report the address is if it's on an exchange wallet but if its beign moved already to a noncustodial wallet  the consider your coins gone just as it's has been mentioned in the comment .

It is USDT what was stolen from Trust Wallet platform. I posted all details, also my wallet number, in the main post.

Just seeing  this ...
Locate the network and you can track it using the network used for making the transaction

If he tracks it successfully, what happens next. Since it is USDT, then it means that it is most likely going to be sent to an exchange wallet. Right? Therefore, it can still be reported to the exchange authorities if this be the case who will then assist with the process of recovery.
However, I still think that the argument stands that assuming it was sent to a non-custodial wallets, those that support USDT (Tether), like the Ledger Nano S/X, Trezor, Exodus, Atomic Wallet, then it cannot be recovered.

[aigarsb18]

The only way for you to report the address is if it's on an exchange wallet but if its beign moved already to a noncustodial wallet  the consider your coins gone just as it's has been mentioned in the comment .

It is USDT what was stolen from Trust Wallet platform. I posted all details, also my wallet number, in the main post.

Just seeing  this ...
Locate the network and you can track it using the network used for making the transaction

If he tracks it successfully, what happens next. Since it is USDT, then it means that it is most likely going to be sent to an exchange wallet. Right? Therefore, it can still be reported to the exchange authorities if this be the case who will then assist with the process of recovery.
However, I still think that the argument stands that assuming it was sent to a non-custodial wallets, those that support USDT (Tether), like the Ledger Nano S/X, Trezor, Exodus, Atomic Wallet, then it cannot be recovered.

Could somebody, please, help to track where the USDT are now in which exchange wallet or non-custodial wallet?

[Catenaccio]

Could somebody, please, help to track where the USDT are now in which exchange wallet or non-custodial wallet?

See here
https://platform.arkhamintelligence.com/explorer/address/0x07829FC66c5b7F294Db07690bBc415F3dfCBf8c9

It is the address that received money from your address. That wallet was created and started to use with that address 2 months ago but there are some very big valued transactions.

I don't see any label of centralized exchange name so it is possibly a non custodial wallet. One more thing to think it is a non custodial wallet is most of transactions are on Ethereum and Binance Smart Chain.

[paid2]

OP, you should give a try with SEAL 911 from Security Alliance, they often give help in cases like yours, they are non-profit organization and legit:
https://securityalliance.org/
https://t.me/seal_911_bot
https://github.com/security-alliance/seal-911

Chances are high that you won't be able to recover your funds to be honest, but if the thief sent the coins to a regulated/KYCed CEX, it could be at your advantage

[aigarsb18]

OP, you should give a try with SEAL 911 from Security Alliance, they often give help in cases like yours, they are non-profit organization and legit:
https://securityalliance.org/
https://t.me/seal_911_bot
https://github.com/security-alliance/seal-911

Chances are high that you won't be able to recover your funds to be honest, but if the thief sent the coins to a regulated/KYCed CEX, it could be at your advantage

I appreciate the responses from everyone who is trying to help.

[aigarsb18]

Could somebody, please, help to track where the USDT are now in which exchange wallet or non-custodial wallet?

See here
https://platform.arkhamintelligence.com/explorer/address/0x07829FC66c5b7F294Db07690bBc415F3dfCBf8c9

It is the address that received money from your address. That wallet was created and started to use with that address 2 months ago but there are some very big valued transactions.

I don't see any label of centralized exchange name so it is possibly a non custodial wallet. One more thing to think it is a non custodial wallet is most of transactions are on Ethereum and Binance Smart Chain.

Does for the recovery process not matter in which wallet the funds are currently in: custodial or non-custodial wallet?

[NeuroticFish]

Does for the recovery process not matter in which wallet the funds are currently in: custodial or non-custodial wallet?

It might.
A custodial wallet is an account. You have the coins under your name and you have a deposit address. But it's in the custodian's wallet and they can use the coins as the please (and they will probably do!) and as long as the amount under your name is correct you have nothing to worry about; when you'll withdraw or make transactions you may use funds from the expected address or (most probably) other addresses from the same wallet.
So if the money is "missing" from a custodial service and you show a transfer from your deposit address it may easily be other user's (from the same platform) legitimate withdrawal/transfer.

On the other hand, if your custodial account shows as your withdrawal a tx you don't recognize, then you're good.


Of course, it's simpler from your non-custodial wallet. Then we know that the start tx is correct and that has to be followed/checked.

[DaCryptoRaccoon]

Tracking Report Updated.

https://www.breadcrumbs.app/reports/11165

Looks like the address has seen funds from Kraken and sent to Binance and done swaps for WETH.



You should contact the exchanges and send them the breadcrumbs link and let them know your funds are being sent in.
Maybe the person has KYC so you could also report the stolen funds and give them the information of the exchanges linked to the address.

How did you lose the funds private key leak? Malware? Interaction with some shitcoin contracts?  

Hacker address is in the center showing incoming transaction and outgoing transactions.

They moved USDT to Binance and others listed.


Feel free to update the report it's public with more information.

[BlackHatCoiner]

If you had lost bitcoin, then I'd tell you to lower your expectations, since malware mostly send it to self-custodial hacker's wallet, but if it's Tether, then I'd argue that you can pursue it, since depositing USDT anywhere reputable requires KYC (always, IIRC?).

Contact Binance and send them a good writeup. Use the analysis produced by BreadCrumbs in your mail, as shown above. Maybe they can confiscate his coins and pay your damage.

[Catenaccio]

If you had lost bitcoin, then I'd tell you to lower your expectations, since malware mostly send it to self-custodial hacker's wallet, but if it's Tether, then I'd argue that you can pursue it, since depositing USDT anywhere reputable requires KYC (always, IIRC?).

I don't know KYC is always required for depositing UDST but Tether has their full rights to seize USDT in any address with their smart contract.

PSA: Most Stablecoins Can Be Frozen, Even in Your Own Wallets
Stable coins and blacklists

Victims need to contact Tether and provide enough convincing evidence to Tether, to seize it in hands of hackers. How to get that money back, I don't know but maybe it will require more complicated steps with engagement of government.

These addresses can be added to Tether banned addresses with 1500 banned ones now.
https://duneanalytics.com/phabc/usdt---banned-addresses

[aigarsb18]

If you had lost bitcoin, then I'd tell you to lower your expectations, since malware mostly send it to self-custodial hacker's wallet, but if it's Tether, then I'd argue that you can pursue it, since depositing USDT anywhere reputable requires KYC (always, IIRC?).

I don't know KYC is always required for depositing UDST but Tether has their full rights to seize USDT in any address with their smart contract.

PSA: Most Stablecoins Can Be Frozen, Even in Your Own Wallets
Stable coins and blacklists

Victims need to contact Tether and provide enough convincing evidence to Tether, to seize it in hands of hackers. How to get that money back, I don't know but maybe it will require more complicated steps with engagement of government.

These addresses can be added to Tether banned addresses with 1500 banned ones now.
https://duneanalytics.com/phabc/usdt---banned-addresses

Tether can not help much here , they're saying:

"The referenced addresses where the funds were transferred to do not belong to Tether and are not controlled by Tether. We are not in a position to determine the validity of these transfers.

Please know we are not legally entitled to intervene on a wallet which is not under our control without its owner's permission or without a legal law enforcement request."

[aigarsb18]

Tracking Report Updated.

https://www.breadcrumbs.app/reports/11165

Looks like the address has seen funds from Kraken and sent to Binance and done swaps for WETH.

https://i.postimg.cc/pXJpmYkz/1.jpg

You should contact the exchanges and send them the breadcrumbs link and let them know your funds are being sent in.
Maybe the person has KYC so you could also report the stolen funds and give them the information of the exchanges linked to the address.

How did you lose the funds private key leak? Malware? Interaction with some shitcoin contracts?  

Hacker address is in the center showing incoming transaction and outgoing transactions.

They moved USDT to Binance and others listed.

https://i.postimg.cc/g0TKfPZz/1.jpg
Feel free to update the report it's public with more information.

This is great! Could anybody share an expertise how to find the next blocks after the MEV Bot: 0xfbeedcfe378866dab6abbafd8b2986f5c1768737?

After this transaction: 0xc570a37440748102def52b24d2c5b2b41b29ca851b7a81e5a3e91a3c6cd1b405

I have created a trace in the MetaSleuth.

Thank you!

 

[ryzaadit]

I'm really curious about these case.

Do we have history someone can freeze the fund on exchange or at least (USDT) blocked the asset ? I mean how is the process, what's the catch, and did someone actually successfully blocked the fund.

I'm looking for some regular people experience, for big tech off course they can do that because they have the resource. However, I'm wondering for someone like me just a regular people can do these and success without spending so much money.

[jrrsparkles]

Tracking Report Updated.

https://www.breadcrumbs.app/reports/11165

Looks like the address has seen funds from Kraken and sent to Binance and done swaps for WETH.



You should contact the exchanges and send them the breadcrumbs link and let them know your funds are being sent in.
Maybe the person has KYC so you could also report the stolen funds and give them the information of the exchanges linked to the address.

Exchanges doesn't respond to these kind of requests unless they gain so much attention so first step should be register a complaint and then he can proceed with the above ad a proof that the funds or the address has trail from the exchange then they might be willing to give details about the customer details but still I don't think he should have his hope higher cause usually it's like gone forever unless some miracles happens.

[lombok]

Unfortunately the exchange will never be responsible for hacking or hacking that occurs on personal accounts. I am sure the exchange has provided several options to add security so that cases like yours do not occur. Many people on this forum have responded to let go of those who have left and use this as an important lesson so that it doesn't happen again in the future.

Note, there are still exchanges or sites that can launder all incoming assets and move all USDT to other Altcoins. What is special is that this exchange does not require KYC to carry out money laundering and until now this exchange is still very actively used by many users.