iotaledger / legacy-wallet-use-trinity-wallet-instead

IOTA Wallet
GNU General Public License v3.0
2.08k stars 414 forks source link

IOTA- not sure if stolen from wallet #478

Open yts101 opened 6 years ago

yts101 commented 6 years ago

Hi I am kind of new to this but my iota were sent to this address an hour after put them in there ZTIFVLWTAUEHTBPZZGXCSIFGAA9O9TVNEMIBJKYYVANMCDMJJMQMKXKGVACTGCUXVJDBRXBTLZDKVVRJCSNFDCJXMZ

I used this link to make my seed https://ipfs.io/ipfs/QmdqTgEdyKVQAVnfT5iV4ULzTbkV4hhkDkMqGBuot8egfA

Im not sure if they were stolen or not but if they were what did i do wrong

yts101 commented 6 years ago

Is it safer to just leave it on bitfinex then to use this wallet. And also this means that my iota is gone and i cant get it back right?

screen shot 2017-11-20 at 12 05 07 pm
psychlops commented 6 years ago

That particular site is recommended by !seedgen on the slack. If it's compromised, then there are a lot of people with the same problem. Seems the move was an hour after the purchase, are you certain @yts101 that it wasn't you and that you don't control the destination addresses?

It may be worth considering other avenues of attack, another user of the computer, keyloggers, etc.

AwenCrypto commented 6 years ago

Wow.

I suggest NOT sending your seed out like that over the public Internet.

FYI: I was able to find my transaction in the ledger. Everything was correct.

Launched the wallet after recovery tool and attached - 2 Tangle about 10 or 12 times.

No luck. I do not pass judgement here. We’re all in this together - I’m just an odd case, that’s for sure.

On Nov 20, 2017, at 8:11 AM, yts101 notifications@github.com wrote:

Hi I am kind of new to this but my iota were sent to this address an hour after put them in there ZTIFVLWTAUEHTBPZZGXCSIFGAA9O9TVNEMIBJKYYVANMCDMJJMQMKXKGVACTGCUXVJDBRXBTLZDKVVRJCSNFDCJXMZ

I used this link to make my seed https://ipfs.io/ipfs/QmdqTgEdyKVQAVnfT5iV4ULzTbkV4hhkDkMqGBuot8egfA https://ipfs.io/ipfs/QmdqTgEdyKVQAVnfT5iV4ULzTbkV4hhkDkMqGBuot8egfA Im not sure if they were stolen or not but if they were what did i do wrong

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/iotaledger/wallet/issues/478, or mute the thread https://github.com/notifications/unsubscribe-auth/ANRiNBmv4vSuS1kiKKa8tMOyqOWzKPTKks5s4YepgaJpZM4QkT-T.

yts101 commented 6 years ago

@AwenCrypto Where did I send out my seed? I put out the address that it was sent to from my wallet

psychlops commented 6 years ago

You didn't. Other than generating it on a website. Use an offline method in the future.

aliemami commented 6 years ago

this is very scary - why so many iota users are experiencing the same problem?

I wish there was a way to lock the Wallet!

max1mn commented 6 years ago

the same thing just happened to my yesterday. iota's were moved to someone's address after 4 hours. seed was generated also on https://ipfs.io/ipfs/QmdqTgEdyKVQAVnfT5iV4ULzTbkV4hhkDkMqGBuot8egfA

my address https://iotasear.ch/address/KOJNBXHES9WHB9AJGDGWUQVPZNEMQMVRWNUEIBUFBGENRN9VMJPBGORPWSFFEONAFZCEDQRTNDMMT9BTYGPUUDJLTZ

patryk-wlaz commented 6 years ago

Cool. I also used this site: https://ipfs.io/ipfs/QmdqTgEdyKVQAVnfT5iV4ULzTbkV4hhkDkMqGBuot8egfA And all iota was gone the next day, I just saw it today.

jasonkyc commented 6 years ago

Please help? I'm din't send my IOTA but this transaction appeared and my wallet balance is 0... https://iotasear.ch/address/DWGRNCZASEYBP9JMTMJIADWITURXE9IDA9IASTVNVBUTPRIMWXPUGTVZKMRIXCL9ZPGQYBSIFM9USGVSXH9WABYPVX STOLEN??!! Who can i contact support to help on this matter?

patryk-wlaz commented 6 years ago

There is no support, noone will help, your money got stolen - like mine. I seriously would recommend keeping iota on exchange rather then using this shitty wallet. Iota is still just a promise I guess.

@jasonkyc how did you generate your seed?

cloak-design commented 6 years ago

Doesn't matter where you generated your seed if your machine is compromised or you store your key in the cloud (Notes, etc) it is open to other means of hacking.

There are clipboard spys that run in the background. If you copy and paste your seed, then you are introducing another vulnerability. This also applies to any other key generator including ipfs, which is considered one of the few good online keygens.

Think about how you have either stored your key or used your seed...

The safest and best option is to create a paper wallet without using your clipboard in any way and run in a safe Linux environment on a USB stick until Trinity Wallet is out.

patryk-wlaz commented 6 years ago

I know that, thanks. But I keep my computer safe (no downloading cracks, porn and shit plus running antyvir scans regularly). Moreover I had about seven different wallets created on my machine, some of them secured stronger than iota (additional password in wallet was avalaible) but some of them treated exactly the same (which means copying seed and pasting it on pendrive). None of my other cryptos were stolen (also no private account of other kind of mine were never hacked), so I guess my computer is clean, so - maybe the seed generator is compromised.

prinsleo commented 6 years ago

Hello. The ge erator they recomend iotagen. Io or somting.

Få Outlook for Androidhttps://aka.ms/ghei36

Fra: Patryk Sendt: torsdag 25. januar, 17:05 Emne: Re: [iotaledger/wallet] IOTA- not sure if stolen from wallet (#478) Til: iotaledger/wallet Kopi: Subscribed

I know that, thanks. But I keep my computer safe (no downloading cracks, porn and shit plus running antyvir scans regularly). Moreover I had about seven different wallets created on my machine, some of them secured stronger than iota (additional password in wallet was avalaible) but some of them treated exactly the same (which means copying seed and pasting it on pendrive). None of my other cryptos were stolen (also no private account of other kind of mine were never hacked), so I guess my computer is clean, so - maybe the seed generator is compromised. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/iotaledger/wallet/issues/478#issuecomment-360512841, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AiCbt9tuk5iZfR7w9QJbb87l9EdgCvpbks5tOKY-gaJpZM4QkT-T.