Meta Mask Hacked?

[tarseb90]

Hello Metamask , i think that there is a security gap in your extension , someone stolen my money , he stole the 2 addresses registred in metamask , Despite the fact that I never saved my password anywhere ,i used the Metamask only , I saw that another account had taken all of the Ethereum out of my wallet and transferred it to his.

the transactions addresses is below :

https://etherscan.io/tx/0x1598105716b358e4c657ae162988af3dd41966a23723ec09fe191fe5d64ef502 https://etherscan.io/tx/0xfb2d5f1e73a435ca374f52cb2e814cbc203e8ff7bbfe468a3e273169e4486ffa

and this is the address that stoled my money 👍

https://etherscan.io/address/0x0a585000cee5d93e64dbc37a390f87b27bb41dd0

[tmashuang]

Without any additional information provided on a public thread, such as transaction logs or knowledge of phishing sites that may or may not have been visited, we are not able the pinpoint the cause of the issue. If you have any additional sensitive information please send it to support at metamask dot io

[iamjaime]

I'm encountering the same exact issue! My account was completely emptied out! I got robbed for almost 1ETH.

It's happening ONLY to the non-loose accounts on meta mask!

[tmashuang]

@iamjaime Does this scenario seem to depict your issue https://metamask.helpscoutdocs.com/article/37-ghost-accounts-ether-sending-away-whenever-funding-an-account.

[leekt]

I'm encountering same issue too. I've sent 48 ether to my wallet and someone sent 4.xx ether to another wallet and spent 43.xx ether as txfee and it was first use this time but transaction history says it has been used since 133days ago

0x627306090abaB3A6e1400e9345bC60c78a8BEf57 this is my wallet address

[tmashuang]

@leekt216 seems that is a Ganache address that is used for testing purposes. Which is the default seed phrase for Ganache and is available for everyone that has installed it. http://truffleframework.com/docs/advanced/truffle-with-metamask Around half way down, there is a warning when sending ETH to any addresses that are generated by this default seed phrase on the Main Ethereum Network.

[Mijako]

Hi guys, did you succeed to recover any tokens from your Metamask? It happened to me the same. First in the morning l realised l don’t have any Neurochain token that l have just bought, then within an hour after l opened my Metamask, the rest all disappeared, 0 balance. I am writing emails to support, l did whatever they suggested to me but nothing helped. I think they hacked me!

[tarseb90]

i will never use Metamask for ever , and i will make a video in my youtube channel with 132k followers and beware them . Metamask not secure anymore . You have to resolve this big problem and compensate our money .

[Mijako]

Thank you for your support, but how can l compensate my money? If l can help or add anything to your tube, l am here willing to say something. 

Sent from Yahoo Mail for iPad

On Friday, April 6, 2018, 8:58 pm, tarseb90 notifications@github.com wrote:

i will never use Metamask for ever , and i will make a video in my youtube channel with 132k followers and beware them . Metamask not secure anymore . You have to resolve this big problem and compensate our money .

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[leonlee723]

Me too. I trun in eth Metamask. At once these eth were truned out to 0x2d7311279A3ba818Db2aD84eED09324A2577188A. All records of 0x2d7311279A3ba818Db2aD84eED09324A2577188A on etherscan is in. 0x2d7311279A3ba818Db2aD84eED09324A2577188A is thife.

[Mijako]

Thank you for your reply. It happened that All my coins are back to my acc.now. I sent so many emails to them and it seems they are helping and solving problems. They were testing Beta...They replied very fast after my emails...l lost about 28$ at the end.I hope you will be able to get them back too. Good luck.Maria

Sent from Yahoo Mail for iPad

On Tuesday, April 10, 2018, 5:12 pm, leonlee723 notifications@github.com wrote:

Me too. I trun in eth Metamask. At once these eth were truned out to 0x2d7311279A3ba818Db2aD84eED09324A2577188A. All records of 0x2d7311279A3ba818Db2aD84eED09324A2577188A on etherscan is in. 0x2d7311279A3ba818Db2aD84eED09324A2577188A is thife.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[tarseb90]

can you give me the email that you used ?

[Mijako]

Sure.Support@metamask.ioWith attn to James. They were very supportive. I am not angry with them anymore, hi!Good luck.M.

Sent from Yahoo Mail for iPad

On Tuesday, April 10, 2018, 7:15 pm, tarseb90 notifications@github.com wrote:

can you give me the email that you used ?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[alacrity26]

@Mijako mind sharing your ticket number on support@metamask.io ?

[Mijako]

Maybe it’s that one, not sure, l sent hips of emails..12265.

Sent from Yahoo Mail for iPad

On Wednesday, April 11, 2018, 12:36 am, Adam notifications@github.com wrote:

@Mijako mind sharing your ticket number on support@metamask.io ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[alacrity26]

@Mijako Thanks. From ticket number 12265, it seems like you were able to restore your MetaMask wallet, after (unintentionally I assume) creating a new wallet, and found your original accounts unseen. Glad you were able to restore successfully. For future/user issues, you could send your queries to support@metamask.io again, (though I hope you'll not face any issues in your MetaMask transactions anymore). Thanks again to help clarifying!

[Mijako]

Not at all. I am quite new, reading from other people being hacked...so this is the first thing you think when you open your acc.and there is 0 balance. I didn’t do anything at all, just register into my Metamask and saw empty acc. Today l registered and realised there is again one token missing, but from this experience l think it will not be difficult to bring it back. I hope so. Just don’t understand why it is keep happening you add a new token and the amount of tokens, but when you register again, they disappeare. Am l doing something wrong?Thank you.Kind regards,Marija

Sent from Yahoo Mail for iPad

On Wednesday, April 11, 2018, 1:19 pm, Adam notifications@github.com wrote:

@Mijako Thanks. From ticket number 12265, it seems like you were able to restore your MetaMask wallet, after (unintentionally I assume) creating a new wallet, and found your original accounts unseen. Glad you were able to restore successfully. For future/user issues, you could send your queries to support@metamask.io again, (though I hope you'll not face any issues in your MetaMask transactions anymore). Thanks again to help clarifying!

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[ProZack39]

I have had the Same thing Happen.. It even says Phishing address on the on the OUT address..

What can I do?

[Mijako]

I sent to Metamask few emails...one day everything was bach.Good luck.Marija

Sent from Yahoo Mail for iPad

On Monday, May 7, 2018, 3:46 am, ProZack39 notifications@github.com wrote:

I have had the Same thing Happen.. It even says Phishing address on the on the OUT address..

What can I do?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[ProZack39]

EVERYONE PLEASE EMAIL METAMASK!!!!

[Mijako]

Support@metamask.io

Sent from Yahoo Mail for iPad

On Monday, May 7, 2018, 3:28 pm, ProZack39 notifications@github.com wrote:

EVERYONE PLEASE EMAIL METAMASK!!!!

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[Blackstuntman]

my metamask wallet was hacked also! I sent ethereum from stocks.exchange to my metamask wallet but only received a small portion of my withdrawal so I checked the etherscan transaction and noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet. I contacted metamask about this matter and they are not taking responsibility for my fund's being stolen! stating that I must have visited a phished site, or I have malware installed on my PC which both are not true! I will not use metamask anymore until this matter is resolved and will continue to inform metamask & ethereum user's that metamask is not safe and obviously have a serious bug in they're security feature that they refuse to be held accountable for.

https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb

https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb

[ProZack39]

It's a Freaking shame. I also tried to email them to get them to lock my account when I first noticed it happening. They wouldn't or couldn't.

On May 22, 2018 11:15 AM, "Blackstuntman" notifications@github.com wrote:

my metamask wallet was hacked also! I sent ethereum from stocks.exchange to my metamask wallet but only received a small portion of my withdrawal so I checked the etherscan transaction and noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet. I contacted metamask about this matter and they are not taking responsibility for my fund's being stolen! stating that I must have visited a phished site, or I have malware installed on my PC which both are not true! I will not use metamask anymore until this matter is resolved and will continue to inform metamask & ethereum user's that metamask is not safe and obviously have a serious bug in they're security feature that they refuse to be held accountable for.

https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb

https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391050884, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRFDS6XtbMpq1YP0LlfSt6jw_Cazdks5t1DmngaJpZM4RxmYc .

[kumavis]

@blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

[kumavis]

@prozak39

get them to lock my account

We do not control anyone's account and are unable to do this. This lack of centralized control is what draws a lot of people to cryptocurrency. However the responsibility of security and understanding comes with that, and it's a lot to take on. If you'd like someone to manage your private keys for you, I recommend a bank-like enetity such as coinbase.

[Blackstuntman]

What do you mean not enough evidence? Just simply check my etherscan activity! It clearly shows my withdrawal from stocks.exchange was successful sent to my metamask wallet address via blockchain, it also shows seconds after it arrived over $200.00 of the over $300.00 initial withdrawal was sent to another wallet before it ever reached my metamask wallet. Upon further investigation you can also see that the stolen fund's were sent to another ethereum address with over 1,000,000.00 dollars in ethereum asset's! Metamask needs to reimburse me for my lost fund's and take full responsibility for this security breache because it's not my fault!

On May 22, 2018 11:35 AM, "kumavis" notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391057303, or mute the thread https://github.com/notifications/unsubscribe-auth/AlsquAuQVwv6qn2f9VO-9ccaQ0Xmfej3ks5t1D5EgaJpZM4RxmYc .

[Blackstuntman]

0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e https://etherscan.io/tx/0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e 5637208 https://etherscan.io/block/5637208 3 days 18 hrs ago 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a OUT 0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 0 .337026 Ether 0.0097881 0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb 5637204 https://etherscan.io/block/5637204 3 days 18 hrs ago 0x97e12bd75bdee72d4975d6df410d2d145b3d8457 https://etherscan.io/address/0x97e12bd75bdee72d4975d6df410d2d145b3d8457 IN 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a 0.53321221 Ether 0.00063

On Tue, May 22, 2018 at 11:46 AM, hassan perry hassanperry33@gmail.com wrote:

What do you mean not enough evidence? Just simply check my etherscan activity! It clearly shows my withdrawal from stocks.exchange was successful sent to my metamask wallet address via blockchain, it also shows seconds after it arrived over $200.00 of the over $300.00 initial withdrawal was sent to another wallet before it ever reached my metamask wallet. Upon further investigation you can also that the stolen fund's were sent to another ethereum address with over 1,000,000.00 dollars in ethereum asset's! Metamask needs to reimburse me for my lost fund's and take full responsibility for this security breache because it's not my fault!

On May 22, 2018 11:35 AM, "kumavis" notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391057303, or mute the thread https://github.com/notifications/unsubscribe-auth/AlsquAuQVwv6qn2f9VO-9ccaQ0Xmfej3ks5t1D5EgaJpZM4RxmYc .

[ProZack39]

Well that's the thing!!!! The guy that stole my $$$ doesn't have my private key!

On Tue, May 22, 2018, 11:59 AM Blackstuntman notifications@github.com wrote:

0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e < https://etherscan.io/tx/0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e

5637208 https://etherscan.io/block/5637208 3 days 18 hrs ago 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a OUT 0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 0 .337026 Ether 0.0097881 0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb < https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb

5637204 https://etherscan.io/block/5637204 3 days 18 hrs ago 0x97e12bd75bdee72d4975d6df410d2d145b3d8457 https://etherscan.io/address/0x97e12bd75bdee72d4975d6df410d2d145b3d8457 IN 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a 0.53321221 Ether 0.00063

On Tue, May 22, 2018 at 11:46 AM, hassan perry hassanperry33@gmail.com wrote:

What do you mean not enough evidence? Just simply check my etherscan activity! It clearly shows my withdrawal from stocks.exchange was successful sent to my metamask wallet address via blockchain, it also shows seconds after it arrived over $200.00 of the over $300.00 initial withdrawal was sent to another wallet before it ever reached my metamask wallet. Upon further investigation you can also that the stolen fund's were sent to another ethereum address with over 1,000,000.00 dollars in ethereum asset's! Metamask needs to reimburse me for my lost fund's and take full responsibility for this security breache because it's not my fault!

On May 22, 2018 11:35 AM, "kumavis" notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub < https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391057303 , or mute the thread < https://github.com/notifications/unsubscribe-auth/AlsquAuQVwv6qn2f9VO-9ccaQ0Xmfej3ks5t1D5EgaJpZM4RxmYc

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391065281, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREL-980uKFWjRFGDTpytl9oDGRzkks5t1EPrgaJpZM4RxmYc .

[Blackstuntman]

And the Thief's are now removing fund's from that account because now it only shows a little over 80,000.00 dollars in ethereum asset's where as two days ago it was over 1,000,000.00!

[Blackstuntman]

Exactly! NO ONE HAS MY PRIVATE KEYS! ALSO! I DO NOT! KEEP THEM ON MY PC OR ANY OTHER PLACE THAT CAN BE COMPROMISED! I'M VERY CAREFUL ABOUT MY PRIVATE KEYS!

On May 22, 2018 12:02 PM, "ProZack39" notifications@github.com wrote:

Well that's the thing!!!! The guy that stole my $$$ doesn't have my private key!

On Tue, May 22, 2018, 11:59 AM Blackstuntman notifications@github.com wrote:

0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e < https://etherscan.io/tx/0xf7c8c83e06645708da2873aa01e2 b5b55a613ca52f13b318800fb1de867e6c7e

5637208 https://etherscan.io/block/5637208 3 days 18 hrs ago 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a OUT 0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 <https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0

0 .337026 Ether 0.0097881 0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb < https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5 db359ccbc6ca397368bfdb09a00319775cfb

5637204 https://etherscan.io/block/5637204 3 days 18 hrs ago 0x97e12bd75bdee72d4975d6df410d2d145b3d8457 <https://etherscan.io/address/0x97e12bd75bdee72d4975d6df410d2d145b3d8457

IN 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a 0.53321221 Ether 0.00063

On Tue, May 22, 2018 at 11:46 AM, hassan perry hassanperry33@gmail.com wrote:

What do you mean not enough evidence? Just simply check my etherscan activity! It clearly shows my withdrawal from stocks.exchange was successful sent to my metamask wallet address via blockchain, it also shows seconds after it arrived over $200.00 of the over $300.00 initial withdrawal was sent to another wallet before it ever reached my metamask wallet. Upon further investigation you can also that the stolen fund's were sent to another ethereum address with over 1,000,000.00 dollars in ethereum asset's! Metamask needs to reimburse me for my lost fund's and take full responsibility for this security breache because it's not my fault!

On May 22, 2018 11:35 AM, "kumavis" notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub < https://github.com/MetaMask/metamask-extension/issues/ 3132#issuecomment-391057303 , or mute the thread < https://github.com/notifications/unsubscribe-auth/AlsquAuQVwv6qn2f9VO- 9ccaQ0Xmfej3ks5t1D5EgaJpZM4RxmYc

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/ 3132#issuecomment-391065281, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREL- 980uKFWjRFGDTpytl9oDGRzkks5t1EPrgaJpZM4RxmYc .

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391066205, or mute the thread https://github.com/notifications/unsubscribe-auth/AlsquFX3Vtz4B9FZcZppsp5374_spt61ks5t1ESLgaJpZM4RxmYc .

[ProZack39]

I really think Metamask has some involvement. They continue to let this Happen. SMDH

On Tue, May 22, 2018, 12:14 PM Blackstuntman notifications@github.com wrote:

Exactly! NO ONE HAS MY PRIVATE KEYS! ALSO! I DO NOT! KEEP THEM ON MY PC OR ANY OTHER PLACE THAT CAN BE COMPROMISED! I'M VERY CAREFUL ABOUT MY PRIVATE KEYS!

On May 22, 2018 12:02 PM, "ProZack39" notifications@github.com wrote:

Well that's the thing!!!! The guy that stole my $$$ doesn't have my private key!

On Tue, May 22, 2018, 11:59 AM Blackstuntman notifications@github.com wrote:

0xf7c8c83e06645708da2873aa01e2b5b55a613ca52f13b318800fb1de867e6c7e < https://etherscan.io/tx/0xf7c8c83e06645708da2873aa01e2 b5b55a613ca52f13b318800fb1de867e6c7e

5637208 https://etherscan.io/block/5637208 3 days 18 hrs ago 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a OUT 0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 < https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0

0 .337026 Ether 0.0097881 0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb < https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5 db359ccbc6ca397368bfdb09a00319775cfb

5637204 https://etherscan.io/block/5637204 3 days 18 hrs ago 0x97e12bd75bdee72d4975d6df410d2d145b3d8457 < https://etherscan.io/address/0x97e12bd75bdee72d4975d6df410d2d145b3d8457

IN 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a 0.53321221 Ether 0.00063

On Tue, May 22, 2018 at 11:46 AM, hassan perry < hassanperry33@gmail.com> wrote:

What do you mean not enough evidence? Just simply check my etherscan activity! It clearly shows my withdrawal from stocks.exchange was successful sent to my metamask wallet address via blockchain, it also shows seconds after it arrived over $200.00 of the over $300.00 initial withdrawal was sent to another wallet before it ever reached my metamask wallet. Upon further investigation you can also that the stolen fund's were sent to another ethereum address with over 1,000,000.00 dollars in ethereum asset's! Metamask needs to reimburse me for my lost fund's and take full responsibility for this security breache because it's not my fault!

On May 22, 2018 11:35 AM, "kumavis" notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman this is not enough information to determine what happened but when you say

noticed that over two hundred dollars $200.00 of my withdrawal had been sent to another ethereum address before it ever reached my metamask wallet.

This suggests that it's not an issue with metamask, as metamask cannot interfere with sent funds before their arrival.

If you want further diagnosis you'll need to provide more information about your accounts, which is for the exchange and which is from metamask. I recommend you do that privately via the support email thread you started.

Malware and phishing targeting cryptocurrency users are extremely common these days, we've seen many users with cases that were infected and did not realize it. While I'm not sure that's your case (they likely would have taken everything), you should take care to properly identify the source of the anomolous transaction to ensure you are safe.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub < https://github.com/MetaMask/metamask-extension/issues/ 3132#issuecomment-391057303 , or mute the thread < https://github.com/notifications/unsubscribe-auth/AlsquAuQVwv6qn2f9VO- 9ccaQ0Xmfej3ks5t1D5EgaJpZM4RxmYc

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/ 3132#issuecomment-391065281, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREL- 980uKFWjRFGDTpytl9oDGRzkks5t1EPrgaJpZM4RxmYc .

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub < https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391066205 , or mute the thread < https://github.com/notifications/unsubscribe-auth/AlsquFX3Vtz4B9FZcZppsp5374_spt61ks5t1ESLgaJpZM4RxmYc

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391070093, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRPquvQRXvaJCLLIif37znFR_YKBEks5t1EdqgaJpZM4RxmYc .

[tmashuang]

Does this sound appropriate? https://metamask.helpscoutdocs.com/article/37-ghost-accounts-ether-sending-away-whenever-funding-an-account

[ProZack39]

Mine was nothing like this.. It just had me sending all my assets to a Account that was Labeled PHISHING!! Really!!! You cant di ANYTHING BUT WATCH THESE PEOPLE STEAL FROM THIER CUSTOMERS

On Tue, May 22, 2018, 12:19 PM Thomas Huang notifications@github.com wrote:

Does this sound appropriate?

https://metamask.helpscoutdocs.com/article/37-ghost-accounts-ether-sending-away-whenever-funding-an-account

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391071480, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRMlrqzLgmsj6XrHRzKdZigrmhrBgks5t1EiDgaJpZM4RxmYc .

[Blackstuntman]

No this isn't the situation at all. because I've never sent anything to that address before. It's completely a mystery! And by the looks of that account it's has been stealing ethereum and ethereum assets for quite some time. And is now in the process of funneling those assets God knows where!

On May 22, 2018 12:19 PM, "Thomas Huang" notifications@github.com wrote:

Does this sound appropriate? https://metamask.helpscoutdocs.com/article/37- ghost-accounts-ether-sending-away-whenever-funding-an-account

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391071480, or mute the thread https://github.com/notifications/unsubscribe-auth/AlsquBZFWvkCxPdq0KJOBhwH8zWJXrtDks5t1EiDgaJpZM4RxmYc .

[kumavis]

I really think Metamask has some involvement. They continue to let this Happen.

we don't have any control of user accounts or the blockchain

THESE PEOPLE STEAL FROM THIER CUSTOMERS

@ProZack39 we dont have any customers, we are an open source wallet if you don't want to use metamask some other options are parity, mycrypto, myetherwallet, status.im, cipher, toshi

[ProZack39]

Yea I know.. I'm currently in the Process of Moving everything! Which is a Pain in the Butt!!!!

Horrible Experience with Metamask! If yall cant do any better you should SHUT DOWN! Don't keep promoting something that will Hurt People in the Long Run

On Tue, May 22, 2018, 1:07 PM kumavis notifications@github.com wrote:

THESE PEOPLE STEAL FROM THIER CUSTOMERS

@ProZack39 https://github.com/ProZack39 we dont have any customers, we are an open source wallet if you don't want to use metamask some other options are parity, mycrypto, myetherwallet, status.im, cipher, toshi

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391086948, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRCc8gKiNT-tHks172jTNVv5t6F5hks5t1FPLgaJpZM4RxmYc .

[kumavis]

@Blackstuntman

Just simply check my etherscan activity!

its difficult to review etherscan without knowing what what addresses are what

is 0x0f85ffa9c291a2b4ee5f0647725c7c41e5d6981a your metamask address? or a different ethereum address you own?

[Blackstuntman]

@ProZack39 how do I move tokens from Dex without going through metamask?

[kumavis]

@ProZack39 did you submit your metamask state logs to the support email? helps investigate what happened

[ProZack39]

You can use a Ledger.. I went ahead and spent the $$$ it's the Only real way to Own your coins.

On Tue, May 22, 2018, 1:15 PM Blackstuntman notifications@github.com wrote:

@ProZack39 https://github.com/ProZack39 how do I move tokens from Dex without going through metamask?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391089646, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRIljJGKA632qApTPA96JwDbgzI7lks5t1FXKgaJpZM4RxmYc .

[Blackstuntman]

@kumavis yes that's my metamask wallet address. Just follow the most recent transactions from a couple of days ago, because I haven't used metamask since because I'm too afraid to, and you will see exactly what happened.

[kumavis]

how do I move tokens from Dex without going through metamask?

@Blackstuntman likely the best way is to import your seed phrase into another ethereum browser like mist, status.im, parity

[kumavis]

@Blackstuntman did you provide your metamask state logs to the support email thread?

[kumavis]

@Blackstuntman having the state logs might help verify, but it looks like you might have approved the tx (the ~$200) earlier but it could not execute because you did not have enough ether. After receiving ether here, the tx was able to execute and went through.

That unexpected behavior is discribed here https://metamask.helpscoutdocs.com/article/37-ghost-accounts-ether-sending-away-whenever-funding-an-account

the empty account + sweep on retrieval seen here https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 is typical of a centralized exchange deposit flow. do you remember sending eth to an exchange recently?

[ProZack39]

Is there an explanation for Mine?

0x60609608f67dc7e83f496e152b768f439d819292

On Tue, May 22, 2018, 1:31 PM kumavis notifications@github.com wrote:

@Blackstuntman https://github.com/Blackstuntman having the state logs might help verify, but it looks like you might have approved the tx (the ~$200) earlier but it could not execute because you did not have enough ether. After receiving ether here https://etherscan.io/tx/0xe1553296e99490d9f675f61c17a5db359ccbc6ca397368bfdb09a00319775cfb, the tx was able to execute and went through.

That unexpected behavior is discribed here https://metamask.helpscoutdocs.com/article/37-ghost-accounts-ether-sending-away-whenever-funding-an-account

the empty account + sweep on retrieval seen here https://etherscan.io/address/0x090b0ca0b824b1bc7e67df944fc9c63989e92ba0 is typical of a centralized exchange deposit flow. do you remember sending eth to an exchange recently?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391094604, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiRDeQ2KhF9r7OifMMGG8evn2tAZiiks5t1FlqgaJpZM4RxmYc .

[kumavis]

State logs can be downloaded from the settings menu with the "Download State Logs" button

Be sure to email them to support and not post them in a public place like this github thread

[kumavis]

@ProZack39 its really hard to follow your situation in this thread of lots of users. Please send your state logs to support@metamask.io

tell me your email so i can find your support thread

[ProZack39]

I already have.. its not a mystery. The Address that my funds went too literally Says "PHISHING" ON IT.

On Tue, May 22, 2018, 1:37 PM kumavis notifications@github.com wrote:

@ProZack39 https://github.com/ProZack39 its really hard to follow your situation in this thread of lots of users. Please send your state logs to support@metamask.io

tell me your email so i can find your support thread

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391096784, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREztLNgeuBkTHBVKndPdDMaF3Yxfks5t1FrsgaJpZM4RxmYc .

[kumavis]

@ProZack39 does this "free airdrop" advertisement look familiar?

https://etherscan.io/address/0x903bb9cd3a276d8f18fa6efed49b9bc52ccf06e5#comments

[ProZack39]

Unless you think there may be a Ending where I get my funds back I'd rather not waist more time on it

On Tue, May 22, 2018, 1:40 PM Zack Sanderson zcsanderson72@gmail.com wrote:

I already have.. its not a mystery. The Address that my funds went too literally Says "PHISHING" ON IT.

On Tue, May 22, 2018, 1:37 PM kumavis notifications@github.com wrote:

@ProZack39 https://github.com/ProZack39 its really hard to follow your situation in this thread of lots of users. Please send your state logs to support@metamask.io

tell me your email so i can find your support thread

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391096784, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREztLNgeuBkTHBVKndPdDMaF3Yxfks5t1FrsgaJpZM4RxmYc .

[ProZack39]

Yea I clicked on an Airdrop link. But that still doesn't explain how they steal my$$ without my Private key.

On Tue, May 22, 2018, 1:42 PM Zack Sanderson zcsanderson72@gmail.com wrote:

Unless you think there may be a Ending where I get my funds back I'd rather not waist more time on it

On Tue, May 22, 2018, 1:40 PM Zack Sanderson zcsanderson72@gmail.com wrote:

I already have.. its not a mystery. The Address that my funds went too literally Says "PHISHING" ON IT.

On Tue, May 22, 2018, 1:37 PM kumavis notifications@github.com wrote:

@ProZack39 https://github.com/ProZack39 its really hard to follow your situation in this thread of lots of users. Please send your state logs to support@metamask.io

tell me your email so i can find your support thread

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MetaMask/metamask-extension/issues/3132#issuecomment-391096784, or mute the thread https://github.com/notifications/unsubscribe-auth/AhXiREztLNgeuBkTHBVKndPdDMaF3Yxfks5t1FrsgaJpZM4RxmYc .