search

elucidsoft / dotnet-stellar-sdk

Stellar API SDK for .NET 6.x
Apache License 2.0
116 stars 55 forks source link

After using this library, all my digital currency was stolen. #323

Closed rulingcode closed 3 years ago

rulingcode commented 3 years ago

After using this library, all my digital currency was stolen. Are you sure this is a secure library?

Kirbyrawr commented 3 years ago

What do you mean that it was stolen? The library is secure and it's being used in many places. What did you do that didn't work as expected?

Kirbyrawr commented 3 years ago

Also please take a look here: https://github.com/elucidsoft/dotnet-stellar-sdk/security/policy

rulingcode commented 3 years ago

A few hours after using this library, all my assets was stolen. I do not know how this happened.

This is the first theft transaction https://stellar.expert/explorer/public/tx/155254383326543872#155254383326543873

One thing is strange to me. In the transaction description, the money is said to have been returned to the issuer's account, while the recipient is not the issuer. Of course if in this link https://stellar.expert/explorer/public/account/GDXK4GJD3342L4FCLMNPIYORSRYEAPLIIAGARWRKDVC5V6X4QO6ILAB6 See this transaction: 155254383326543873

This is the second theft transaction https://stellar.expert/explorer/public/tx/155254430571393024#155254430571393025

I gave my private account key to this library and a few hours later my bag was stolen

rulingcode commented 3 years ago

I lost $ 600. This amount is very high in the poor country of Iran. I'm very sad.

elucidsoft commented 3 years ago

I am sorry to hear of your loss of transaction, this however has nothing to do with this library. Their is always inherited risk when your making transactions and you need to ensure you keep your private keys secure. The only way someone could of done this is you failed to properly secure your private key. We hold zero liability for this type of event.