[BUG] XCH Missing from Wallet, FULLY SYNCED, 51% Network atk? Or all XCH Stolen?

[kingbbs990]

Can someone please help. I've only used SWAR(https://github.com/swar/Swar-Chia-Plot-Manager) + PSChiaPlotter(https://github.com/MrPig91/PSChiaPlotter) <<< careful w/ these then if this was stolen.

Checked the wallet today, fully synced, blockchain also sycned I should have about 5.6XCH on balance but saids 0. I've checked the chia explorer, it also says 0 Net. I don't see any transactions going out, doesn't seems like its got stolen? Is this a bug or some sort? Any advice would greatly appreciated. Thanks!

even though 1st screenshot and 3rd seems wallet at different height due to timing of the screenshots, but they are synced in my end.

Upon checking, https://www.chiaexplorer.com/blockchain/address/xch14y526hj72ew7fxfs2lmd8zev7r7gm2edyw8vfx6elfqdpptxunyq8hw89z (i made the 6/5 transaction for testing)

It looks like it spent on block 384,133 to address: https://www.chiaexplorer.com/blockchain/address/xch1cnm0qj7j9403yhs4wxqwqpk5cuku2n78lrtc3406nwlsmer2jrdsha9g7s

Question is, why would the wallet not show the transaction in both gui or CLI but somehow my coin got spent on the block 384,133? If my wallet or coins indeed got stolen, wouldnt I be able to see the actual transaction from a with to b with xcoins within the gui or cli txn history? how was the coins taken from my account then if I have not initiated the transaction?

[verabeniel]

Hello, I have the same problem. I had two chias until yesterday night, suddenly they disappear from my wallet and It looks like it spent on block 384,135 and in chia explorer says the two chias are spent; so I am very angry and don`t know what to do. I am always farming solo, so I don´t understand nothing. If you discover what is the problem please answer to me. Good luck

[verabeniel]

This is my chia explorer link : https://www.chiaexplorer.com/blockchain/address/xch12x0ke62mery35jarwwnglkvvjsgg593sycuslpfsmnefw0avdtaqvu9gpn

[verabeniel]

How do you know the address to where your chias are sent?

[kingbbs990]

This is my chia explorer link : https://www.chiaexplorer.com/blockchain/address/xch12x0ke62mery35jarwwnglkvvjsgg593sycuslpfsmnefw0avdtaqvu9gpn

It looks like you have the same issue. Please tell me what scripts you have installed in your PC? I got SWAR & PSCHIAPLOTTER both from original github links that I mentioned in my post. I am not sure if those scripts are the problem, since SWAR is used by quite a bit of users for plotting, then PSCHIAPLOTTER is made by this youtuber seems to do good tutorials https://www.youtube.com/channel/UCoZUMScbhZRG-GLLlJ5xsUA

It got spent on block 384,137 and to the same address:

[verabeniel]

I have nothing of these scripts. I only have the Chia Blockchain official client and Claymore Ethereum mining for eth.

So I think your scripts aren`t the problem.

I dont know how we can solve this problem because its horrible what is happening.

Do you anything more about this?

[verabeniel]

A moderator says to me it´s probably that someone stole my keys and stole my chias but I dontt understand that because I always farm solo and dont have any script , only Official Chia Blockchain so if people can steal chias so easily, What kind of security and protection Chia developers give us? It`s shameful...

[verabeniel]

And I dont have any outgoing transaction in my history , only the incomings, so Its weird that someone steal the chias so easily and without marks. The moderator also says to me that if i can find out the address of the person who steal the chias and track it, we must do it, but do you think is possible that we recover the chias if the address you send to me is the thief? What can we do?

[verabeniel]

Can we do anything with this information for recover the chias?

[kingbbs990]

And I dont have any outgoing transaction in my history , only the incomings, so Its weird that someone steal the chias so easily and without marks. The moderator also says to me that if i can find out the address of the person who steal the chias and track it, we must do it, but do you think is possible that we recover the chias if the address you send to me is the thief? What can we do?

it went to the same address: xch1cnm0qj7j9403yhs4wxqwqpk5cuku2n78lrtc3406nwlsmer2jrdsha9g7s https://www.chiaexplorer.com/blockchain/address/xch1cnm0qj7j9403yhs4wxqwqpk5cuku2n78lrtc3406nwlsmer2jrdsha9g7s

whats funny is you and I are in the same block at the same time if it was stolen... without any transaction history, i dont think its stolen, something is wrong with the network randomly taking/spending coins from our wallets.. otherwise it would show the transactions in our wallets

[verabeniel]

I think same , but do you think they will solve the problem and restore our chias?

[kingbbs990]

no idea, wait for the dev to respond, technically hpool seem to have alrdy 50% network space if not more anyway

[verabeniel]

Do you think the developer could answer to this conversation? Or do you have any other way for contact him? like an email or something like that.

[verabeniel]

In the other support conversation I have, they have just answered me this :

There accident is a transaction history. If you look at the block in which the coins were transferred out, you will see a transaction call to transfer the coins from your respective wallets to another wallet. The fact they both happened at the exact same time would seem to reinforce my belief that it was a deliberate action taken by someone with keys to multiple wallets who was trying to “sweep” them. It’s possible that you won’t see a transaction on your side because it’s likely when they used your keys to load the wallet on their side that they generated a new wallet public address that was tied to the same base wallet key, and initiated the transfer from there. I can assure you that the core fundamental technology in the Chia Blockchain is the same general concept and technology used in by various blockchains over the last decade, and it’s highly improbable there is a bug allowing non-transactional removal of coins from a wallet. All evidence so far indicates that this was clearly a case of compromised keys being used by a bad actor, if you did indeed have no agency over this transaction. It’s possible for keys to be compromised in a multitude of way even if you are using the official software, countless malware and viruses completely unrelated to chia will deep dive a users system and look for anything remotely resembling a password or security key or keyphrase that is sent back home to a central server and applied to every known platform until a valid use for it is found.

[verabeniel]

I have just answer them in Support by resending the answer you gave me, saying that you tested all and its not true what they say. I hope they could help us it seems very difficult because of the answer they gave me.

[kingbbs990]

https://www.reddit.com/r/chia/comments/n90s9q/virus_warnings_after_installing_chia_114/?utm_source=share&utm_medium=ios_app&utm_name=iossmf

after checking my chrome downloads and the addresses, it appear to be similar issue here where 1.14 was a rar downloaded. O well, official github downloads a malicious version of the client, those genius then locked the wiki after but not thought of it before nor made any noise/big post or suggestion to users on the incident with recommendations, just pretend nothing happened cuz a young coin like this cant take such pr i understand np. can conclude this got stolen, not gonna waste more time with this matter. whoever download from official github, dont think ur safe, its just not time yet, get a cold wallet end of story. just keep farming peace

to whoever took the coins, just know things come around usually for you if not you then your kids or grand kids so sleep well on it.