search

Multibit-Legacy / multibit

Deprecated Bitcoin Wallet
https://multibit.org
MIT License
462 stars 395 forks source link

BitCoins Disappeared on Opening Wallet #515

Closed ckti closed 10 years ago

ckti commented 10 years ago

Bug report Operating System:Windows 7 x64 MultiBit Version:0.5.17 Steps to replicate the problem:Opened multibit last night and all my coins were sent to the following address: 1E3FRMfDiJsRnkGn3HYgwtoeE3XXnrN8Ho unauthorized Is it just me? Coins still are present in my Bitcoin-QT wallet

gary-rowe commented 10 years ago

Blockchain.info gives this: https://blockchain.info/address/1E3FRMfDiJsRnkGn3HYgwtoeE3XXnrN8Ho

It looks like that spend occurred as reported. Perhaps Bitcoin-QT hasn't caught up with the blockchain yet?

ckti commented 10 years ago

The withdrawal was unauthorized. All I did was open MultiBit and my coins disappeared with that transaction. I have been able to transfer coins using BitCoin-QT since the coins went missing from MultiBit.

gary-rowe commented 10 years ago

Obviously MultiBit won't just create a transaction and spend it without your permission, so there are few scenarios that could be explored:

What puzzles me is that Bitcoin-QT is allowing you to spend funds that are not present. Could you explain your set up a little more (are you sharing keys etc?).

ckti commented 10 years ago

I have never left my keys exposed anywhere. I have a virus scanner which I run daily. I'm currently running MalwareBytes anti-malware on my Windows system. I opened Multibit and saw the previous transaction come in (mining) and watched while it synched to the network and took the coins. I run Bitcoin-QT on my Linux box with the same Wallet as MultiBit and only use the Windows MultiBit system to quickly check balances and transactions on my wallet.

gary-rowe commented 10 years ago

If you examine the link to Blockchain.info I gave earlier, the transaction you're seeing in MultiBit does not match up with what has occurred on the blockchain. It is possible that your MultiBit is out of synch with the main chain so I would suggest running a Reset Blockchain operation.

ckti commented 10 years ago

That was one of the first things I did :( I've tried it again but no luck. My antivirus caught a program called Show-Password_1030-8101.exe which may or may not be the culprit (I can't find any real information on it). I'm a bit hesitant to open MultiBit with coins in my wallet again :(

jim618 commented 10 years ago

Having the same private keys in both Bitcoin Core and MultiBit can be problematic because of change addresses. Bitcoin Core will create new change addresses and send the change to those and you would not see those bitcoins in MultiBit (as it does not have those new address). There is also a 100 key 'hidden' keypool which complicates things too.

Generally it is more trouble than it is worth to have the same private keys in two places I find.

Try syncing your Bitcoin Core fully and see if the bitcoins balance is what you expect. If it is then it is most likely change addresses rather than malware.

To be on the safe side then yes don't type your password you are using in MultiBit again just in case you have a MultiBit specific wallet stealer/ key logger. You can always create a new wallet (with different private keys in) that is completely separate and use that for spending money.

ckti commented 10 years ago

Did a bit more digging on my end as well and you're right. It looks like MultiBit and the new BitCoin-QT (0.9.0) are not compatible using the same private keys anymore. BitCoin-QT creates new wallet addresses every time you send coins and this is interfering with the original wallet from MultiBit. All the coins wound up in a new wallet in BitCoin-QT....but not my original wallet. Confusing? Yes, but sorted now. Thanks for the help I really appreciated it stopped me pulling (any more) of my hair out :) Charlie

jim618 commented 10 years ago

Great - glad it was this rather than a malware attack.