Help! My IOTA balance is zero! (steps to help you find your balance v2.5.7)


Help! My IOTA balance is zero! (steps to help you find your balance...
Author
Message
filthyunderwear
f
Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)
Group: Forum Members
Posts: 10, Visits: 0
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
Edited Last Year by Alexa
filthyunderwear
f
Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)
Group: Forum Members
Posts: 10, Visits: 0
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 

That's what I thought.
This first attempt never got confirmed, but the receive address looks very much like the receive addresses connected to the theft incident that started in January and is still going on. At this point, my guess would be that your funds have been stolen after you used a malicious website to generate your seed.
You can read more about it here: https://medium.com/iota-demystified/what-happened-last-night-on-iota-b6157ade1e03

However, there's nothing you can do now, except file a claim with your local (cybercrime) police and hope that the thief gets caught. 
If this ever happens, you will have to provide proof that those stolen coins belong to you.
So even if you don't want to get the police involved, please make sure to keep your seed and all evidence of where your bought your coins from and where you sent them to afterwards (for example save your trade history and your withdrawal history from your Binance account).

I'm very sorry that you've lost your funds! 

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
filthyunderwear
f
Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)
Group: Forum Members
Posts: 10, Visits: 0
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 

That's what I thought.
This first attempt never got confirmed, but the receive address looks very much like the receive addresses connected to the theft incident that started in January and is still going on. At this point, my guess would be that your funds have been stolen after you used a malicious website to generate your seed.
You can read more about it here: https://medium.com/iota-demystified/what-happened-last-night-on-iota-b6157ade1e03

However, there's nothing you can do now, except file a claim with your local (cybercrime) police and hope that the thief gets caught. 
If this ever happens, you will have to provide proof that those stolen coins belong to you.
So even if you don't want to get the police involved, please make sure to keep your seed and all evidence of where your bought your coins from and where you sent them to afterwards (for example save your trade history and your withdrawal history from your Binance account).

I'm very sorry that you've lost your funds! 

I didn't use a malicious website to generate my seed.  This hack, passiive or otherwise has been going on since January.   You guys haven't patched it yet.  Why?
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 

That's what I thought.
This first attempt never got confirmed, but the receive address looks very much like the receive addresses connected to the theft incident that started in January and is still going on. At this point, my guess would be that your funds have been stolen after you used a malicious website to generate your seed.
You can read more about it here: https://medium.com/iota-demystified/what-happened-last-night-on-iota-b6157ade1e03

However, there's nothing you can do now, except file a claim with your local (cybercrime) police and hope that the thief gets caught. 
If this ever happens, you will have to provide proof that those stolen coins belong to you.
So even if you don't want to get the police involved, please make sure to keep your seed and all evidence of where your bought your coins from and where you sent them to afterwards (for example save your trade history and your withdrawal history from your Binance account).

I'm very sorry that you've lost your funds! 

I didn't use a malicious website to generate my seed.  This hack, passiive or otherwise has been going on since January.   You guys haven't patched it yet.  Why?

Like I said, I was just guessing because of the similarities, but it could of course be a different reason in your case. Maybe a keylogger or something, I really can't tell.
But what is certain is that whoever took your funds had access to your seed. 

I'm not sure I understand what you mean about the patching. 
Did you read the article I linked you to? Nobody has been hacked and this isn't even something exclusive to IOTA.
If users generate their login data for any financial application on a phishing website, they will definitely lose their funds.
It doesn't even matter if it's a bank account or anything crypto. The moment they used that website, they handed their private keys to a stranger on the internet.

So, how would the IOTA Foundation patch anything that isn't broken on their end and how would they be able to prevent bad actors from setting up phishing websites in order to scam people? The Foundation has been working with the police since January and they do everything they can to educate people about how to properly create a seed, for example with this blog post: https://blog.iota.org/the-secret-to-security-is-secrecy-d32b5b7f25ef
The new Trinity wallet will have an integrated seed generator. 
I don't see what else they could do.

By the way, this is a community run forum. Neither me nor any other Admins or Mods here are associated with the IOTA Foundation.

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
filthyunderwear
f
Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)Attaching to Tangle (10 reputation)
Group: Forum Members
Posts: 10, Visits: 0
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 

That's what I thought.
This first attempt never got confirmed, but the receive address looks very much like the receive addresses connected to the theft incident that started in January and is still going on. At this point, my guess would be that your funds have been stolen after you used a malicious website to generate your seed.
You can read more about it here: https://medium.com/iota-demystified/what-happened-last-night-on-iota-b6157ade1e03

However, there's nothing you can do now, except file a claim with your local (cybercrime) police and hope that the thief gets caught. 
If this ever happens, you will have to provide proof that those stolen coins belong to you.
So even if you don't want to get the police involved, please make sure to keep your seed and all evidence of where your bought your coins from and where you sent them to afterwards (for example save your trade history and your withdrawal history from your Binance account).

I'm very sorry that you've lost your funds! 

I didn't use a malicious website to generate my seed.  This hack, passiive or otherwise has been going on since January.   You guys haven't patched it yet.  Why?

Like I said, I was just guessing because of the similarities, but it could of course be a different reason in your case. Maybe a keylogger or something, I really can't tell.
But what is certain is that whoever took your funds had access to your seed. 

I'm not sure I understand what you mean about the patching. 
Did you read the article I linked you to? Nobody has been hacked and this isn't even something exclusive to IOTA.
If users generate their login data for any financial application on a phishing website, they will definitely lose their funds.
It doesn't even matter if it's a bank account or anything crypto. The moment they used that website, they handed their private keys to a stranger on the internet.

So, how would the IOTA Foundation patch anything that isn't broken on their end and how would they be able to prevent bad actors from setting up phishing websites in order to scam people? The Foundation has been working with the police since January and they do everything they can to educate people about how to properly create a seed, for example with this blog post: https://blog.iota.org/the-secret-to-security-is-secrecy-d32b5b7f25ef
The new Trinity wallet will have an integrated seed generator. 
I don't see what else they could do.

By the way, this is a community run forum. Neither me nor any other Admins or Mods here are associated with the IOTA Foundation.

One solution could be making the wallet 2-factor for any transactions leaving. Another could be slaving the wallet to a specific IP which the user can change using a local password.  I'm no Dev but these fixes seem reasonbale. Using a local password for the wallet.  Also, how could a seed created on a malicious site gain access to the IOTA wallet?
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 5 Aug 2018
Alexa - 5 Aug 2018
filthyunderwear - 4 Aug 2018
YOFAYWFOWCLFAJSKQZAGSRTFPLQWDQVDQNZJPFYTTPCQYLNIPEXDNTDCXTTYMKAPXPUGLQWOGQABSMOQDDXPYXJWKD

B9B9XGEDDAZOXLMS9HSRYYZQLANAIRHLVIJAUCLLDRMRHN9VLFWZEZLHVBMDJAGOOYZOMBXLTWKICS9MBEVDKZAOGW

GKDEIEEMKRCGCNKPJDLZKVXNNDSYTLXMQLIWMFDTHEPETFIOFMFTQUEDBEAUPHRZPYPCLLDLAHQYFJCIWIM9FD9COD

And here are the corresponding addresses in my wallet.

Hi @filthyunderwear

if these addresses now show in your wallet you’re logged in with the correct seed, which is good.
But: all three addresses are empty now, since outgoing transactions on July 7th transferred your funds to three different addresses: 
https://thetangle.org/address/HLCKMDUFGZZNQPZPHZXCLPKXXFXUXFZOVWV9DUISEZHW99IVGXKWYOELQBTZOZQZUPXK9RJMGNUTEIQUD
https://thetangle.org/address/PLJPHKNPLKHA9NIIWSCTDPBBU9MTGNNPBVIUQCBTXXLQFRJOYOYWOCPYNSCJL9MARBSZNRP9KMG9DHVMW
https://thetangle.org/address/CKHNOHSYIXPOLJSOLKWIBB9QKHOW9TYUOMPMYOAPYFSZJKPQYNYXYHRSLOLZVQTHBRJSMNPNUQMPUERYX

Before those three transactions happened, there was a first attempt to transfer the whole balance in just one transaction on July 5th: 
https://thetangle.org/bundle/HDAIUQRENGLL9PNFGAKWZU9WKXLOKXAEIAXGQNIKQLXHEHX9XOGOPLRUXDUHBVA9KXOQODIUKVASHLBPD

Did you make any of these transactions?

No.  Not at all. 

That's what I thought.
This first attempt never got confirmed, but the receive address looks very much like the receive addresses connected to the theft incident that started in January and is still going on. At this point, my guess would be that your funds have been stolen after you used a malicious website to generate your seed.
You can read more about it here: https://medium.com/iota-demystified/what-happened-last-night-on-iota-b6157ade1e03

However, there's nothing you can do now, except file a claim with your local (cybercrime) police and hope that the thief gets caught. 
If this ever happens, you will have to provide proof that those stolen coins belong to you.
So even if you don't want to get the police involved, please make sure to keep your seed and all evidence of where your bought your coins from and where you sent them to afterwards (for example save your trade history and your withdrawal history from your Binance account).

I'm very sorry that you've lost your funds! 

I didn't use a malicious website to generate my seed.  This hack, passiive or otherwise has been going on since January.   You guys haven't patched it yet.  Why?

Like I said, I was just guessing because of the similarities, but it could of course be a different reason in your case. Maybe a keylogger or something, I really can't tell.
But what is certain is that whoever took your funds had access to your seed. 

I'm not sure I understand what you mean about the patching. 
Did you read the article I linked you to? Nobody has been hacked and this isn't even something exclusive to IOTA.
If users generate their login data for any financial application on a phishing website, they will definitely lose their funds.
It doesn't even matter if it's a bank account or anything crypto. The moment they used that website, they handed their private keys to a stranger on the internet.

So, how would the IOTA Foundation patch anything that isn't broken on their end and how would they be able to prevent bad actors from setting up phishing websites in order to scam people? The Foundation has been working with the police since January and they do everything they can to educate people about how to properly create a seed, for example with this blog post: https://blog.iota.org/the-secret-to-security-is-secrecy-d32b5b7f25ef
The new Trinity wallet will have an integrated seed generator. 
I don't see what else they could do.

By the way, this is a community run forum. Neither me nor any other Admins or Mods here are associated with the IOTA Foundation.

One solution could be making the wallet 2-factor for any transactions leaving. Another could be slaving the wallet to a specific IP which the user can change using a local password.  I'm no Dev but these fixes seem reasonbale. Using a local password for the wallet.  Also, how could a seed created on a malicious site gain access to the IOTA wallet?

Well, you are right about improvements to the wallet and we do see some of your suggestions in Trinity.
But all this takes a lot of time, as we can also see with Trinity's development. 

Now, even if these security measures had been implemented into the Lightwallet at this time, it would not have prevented anything.
The weak spot here wasn't the wallet. You see, you can make transactions just using the code that's publicly available.
A wallet makes this easy enough for people who can't code themselves, but all it does is that it runs the code for you in the background.
The thief most likely didn't use the Lightwallet to pull this off, but let some bots run instead.

Now, let's say you're using Trinity and you have an awesome, very strong password and 2FA.
If you give me your seed, I can just chose to not use Trinity to transfer your funds.
I can use the Command Line Interface or even build my own program from the open source code. 
The second you give me your seed, your password and 2FA is totally worthless. It's just how it is in a decentralised environment. 
If you give away your private keys, you're done. Even if you used a hardware wallet until this point.

As for how the malicious website gained access to the funds, the website owner basically determined beforehand which seeds would be generated.
He made it look like a random generation, but he had all the seeds from the start. All he had to do was to wait for someone to deposit funds and take them.
You can read more about it here: https://thatoddmailbox.github.io/2018/01/28/iotaseed.html


I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
Bert42
B
Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)
Group: Forum Members
Posts: 3, Visits: 0
Thank you for the help you are providing.  I have spent hours reading articles about how to recover my balance and attaching addresses to the Tangle, but my Light Wallet balance is still zero after 106 addresses/transfers.  I did not use malicious software to generate my seed, took protections against potential keystroke loggers, and do not store my seed on my computer. I transferred my coins from the exchange on Dec 25, 2017 (Merry Christmas) to my Light Wallet. The address the coins were sent to is: ZK9JZVKCRVVZCVELUNUULEFAWDAIEIVJBAUFCANPRSR9MRIATWYJLITSNX9XEOIHDBFHXKYCJYONZ9999

TheTangle.org explorer shows the coins at that address with no transfers out. I purchased IOTA as a long-term hold, put them in my Light Wallet, verified they were there, and have not checked the balance until now.  Upon seeing a zero balance, I found and followed the instructions on this post (including updating to Light Wallet 2.5.7).  Still zero balance after 106 tries attaching to the Tangle (many times more tries than transfers I made previously).  I have also searched the  IOTA foundation custody addresses at the following link and the address with my coins is not in the list.
https://gist.githubusercontent.com/cyclux/2bb05d873c4ec6115cad1d100263d489/raw/612a49e46091586957448f6606ea981ab18022e7/snapshot_validation_20171023.txt  
I've been in crypto for over a year and never had a problem like this.  Your help will be very appreciated!   

p.s. I've tried four different nodes as well as CCurl and Webgl 2 Curl implementation to no avail.


 





Edited Last Year by Bert42
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
Bert42 - 7 Aug 2018
Thank you for the help you are providing.  I have spent hours reading articles about how to recover my balance and attaching addresses to the Tangle, but my Light Wallet balance is still zero after 106 addresses/transfers.  I did not use malicious software to generate my seed, took protections against potential keystroke loggers, and do not store my seed on my computer. I transferred my coins from the exchange on Dec 25, 2017 (Merry Christmas) to my Light Wallet. The address the coins were sent to is: ZK9JZVKCRVVZCVELUNUULEFAWDAIEIVJBAUFCANPRSR9MRIATWYJLITSNX9XEOIHDBFHXKYCJYONZ9999

TheTangle.org explorer shows the coins at that address with no transfers out. I purchased IOTA as a long-term hold, put them in my Light Wallet, verified they were there, and have not checked the balance until now.  Upon seeing a zero balance, I found and followed the instructions on this post (including updating to Light Wallet 2.5.7).  Still zero balance after 106 tries attaching to the Tangle (many times more tries than transfers I made previously).  I have also searched the  IOTA foundation custody addresses at the following link and the address with my coins is not in the list.
https://gist.githubusercontent.com/cyclux/2bb05d873c4ec6115cad1d100263d489/raw/612a49e46091586957448f6606ea981ab18022e7/snapshot_validation_20171023.txt  
I've been in crypto for over a year and never had a problem like this.  Your help will be very appreciated!   

p.s. I've tried four different nodes as well as CCurl and Webgl 2 Curl implementation to no avail.


 





Hi @Bert42,
welcome to Hello IOTA!

You're right, your funds are still on the address where you sent them to, so everything's ok.
Addresses are always generated in the same order. If your address was No. 4 when you sent your funds, it will always popup as No. 4. So, I think you can stop generating more addresses.... All you need to access your funds is the correct seed.

If the address can’t be generated from the seed you're logged in with, you’re not using the same seed as before. 
It could be a typo or a character that you've missed when you copied and pasted your seed to log in. Please double check for any such mistakes. 
Try to type in the seed by hand very carefully and pay attention if the checksum (three characters given by the wallet at login) is the same as when you've logged in before you sent the funds to your address.

As a last resort, you could give fvantom's Seed Recovery Tool a shot if you can’t find the mistake yourself:
https://forum.helloiota.com/7000/Seed-recovery-tool-for-typos


I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
Bert42
B
Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)Attaching to Tangle (24 reputation)
Group: Forum Members
Posts: 3, Visits: 0
Thank you, Alexa.  I have a system of copying and pasting my seed keys directly into a file that is stored offline.  I do this specifically to eliminate the possibility of a typo and stay safe from potential keystroke loggers.  I don't know what could have happened.  My stored seed is legit and not too many/few characters (no extra space or anything).  In addition to my seed, I have a seed mnemonic written down.  I don't remember where this came from, but I assume it was generated by the wallet when I first set it up?  Is this of any use?  No one is talking about an IOTA seed mnemonic, so I am quite worried at this point.
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
Bert42 - 7 Aug 2018
Thank you, Alexa.  I have a system of copying and pasting my seed keys directly into a file that is stored offline.  I do this specifically to eliminate the possibility of a typo and stay safe from potential keystroke loggers.  I don't know what could have happened.  My stored seed is legit and not too many/few characters (no extra space or anything).  In addition to my seed, I have a seed mnemonic written down.  I don't remember where this came from, but I assume it was generated by the wallet when I first set it up?  Is this of any use?  No one is talking about an IOTA seed mnemonic, so I am quite worried at this point.

Well, maybe you're using your correct seed now, but had a typo in it when you logged in to generate the address back then.
The Seed Recovery Tool is the only suggestion I have, maybe you should just try it. 

The only other explanation for a seed to not be able to generate a specific address in the wallet would be that you created this address using a paper wallet tool with security level set to something other than "2". Did you maybe do this?

I don't think that the official IOTA wallet ever provided a mnemonic backup, but I'm not 100% sure.
We do see though that your funds are still where you sent them, so I wouldn't worry about this too much.


I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
mgnet
m
Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)
Group: Forum Members
Posts: 4, Visits: 0
Hello,
Hope somebody can enlighten me.

Last year in July I transferred some IOTAS from Bitfinex to a cold wallet. Yesterday I checked the public address of my cold wallet and found that the balance is shown as zero.
After some research I figured out why and found my address in one of these “snapshot validation lists” with category “CURL_NOT_TRANSITIONED”, so I downloaded the light wallet V. 2.5.7 and tried the reclaim tool. I typed my old seed and a new seed, which I created previously, into the input line and clicked ok.

Unfortunately I was very impatient and I was wondering why the transaction hash I got don’t displayed the incoming funds, so I tried it 4 or 5 times with different new seeds. After some more research I figured out that the whole process is handled manually by the IOTA Group and needs some time.
Now my Questions is, do I just have to wait now or do I have run through the verification process because of the several tries. I really wanted to avoid that. I have the Seeds from the four attempts but I forgot to wrote down the transaction hash from the last attempt. Theoretically, the IOTA should transferred to the new seed after some time or do I have I forgotten something? Thanks for clarify, I have read a few articles but I am unsure that I have understood everything correctly.

Address with funds is PZWNZHKQRRYRUXSYEILNOOVBZEKALGHKPQIUCRRNJOJISYXTLMFUJIVIGZ9IEXKOFUWXECC9VJEHNGGOEJORBPYRTF

Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
mgnet - 17 Aug 2018
Hello,
Hope somebody can enlighten me.

Last year in July I transferred some IOTAS from Bitfinex to a cold wallet. Yesterday I checked the public address of my cold wallet and found that the balance is shown as zero.
After some research I figured out why and found my address in one of these “snapshot validation lists” with category “CURL_NOT_TRANSITIONED”, so I downloaded the light wallet V. 2.5.7 and tried the reclaim tool. I typed my old seed and a new seed, which I created previously, into the input line and clicked ok.

Unfortunately I was very impatient and I was wondering why the transaction hash I got don’t displayed the incoming funds, so I tried it 4 or 5 times with different new seeds. After some more research I figured out that the whole process is handled manually by the IOTA Group and needs some time.
Now my Questions is, do I just have to wait now or do I have run through the verification process because of the several tries. I really wanted to avoid that. I have the Seeds from the four attempts but I forgot to wrote down the transaction hash from the last attempt. Theoretically, the IOTA should transferred to the new seed after some time or do I have I forgotten something? Thanks for clarify, I have read a few articles but I am unsure that I have understood everything correctly.

Address with funds is PZWNZHKQRRYRUXSYEILNOOVBZEKALGHKPQIUCRRNJOJISYXTLMFUJIVIGZ9IEXKOFUWXECC9VJEHNGGOEJORBPYRTF
Hi @mgnet,
welcome to Hello IOTA!

If you really completed (!) more than one reclaim attempt with different seeds each time, you will have to go through the verification procedure.
The reclaim process in only complete when both transactions (proof and reveal) are confirmed and the reclaim tool displays the address where your funds are going to be sent to. The last screen you need to see looks like this:


If you saw this screen once, you're fine.
If you saw it twice or even more often, you'll have to do the verification procedure.
If you never saw it, none of your attempts was completed.
Do it once more, write down both transaction hashes and the address displayed at the end, then wait.
If you're not sure about this, do it once more until it's complete, go through the verification process afterwards, then wait.
Don't lose or mix up your seeds.


I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
mgnet
m
Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)Attaching to Tangle (4 reputation)
Group: Forum Members
Posts: 4, Visits: 0
Hello Alexa,
Thank you for your very detailed answer.
I am almost sure I haven’t seen this screen. When the screen with the transaction hash came up, I waited some minutes and closed the screen or the wallet, so I think none of my attempts was completed. But if I am wrong, do you know whether the list of KYC addresses will be updated? ( https://gist.github.com/th0br0/5b599c813f6edbc684eae40364112461 ) I only want go through the verification process when I really need to.

HSSareen
H
Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Hey IOTA community. 

I have done everything that was stated in the article and have still not been able to find my balance. I have only ever recorded two actual transactions to my Iota wallet. Both from binance to my desktop wallet in late December. Since then I have been re-attaching my addresses to the tangle to restore my balance until late January, I think. 

I have not actively used my iota wallet and now after re-attaching my address 50+ times I am still yet to receive my balance. Can someone please help or provide some advice? I read about the recent hack as well but I am not sure if my wallet was hacked, though I did use an external website to generate my seed but cannot see the history. 

Any useful insights would be sincerely appreciated!  


Caulerpa
C
Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)Attaching to Tangle (2 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Hello everyone, this is my story and any help is greatly appreciated:
I haven't accessed my wallet (GUI light wallet) in a long time (probably more than 6 months) and I did it yesterday after downloading the latest one, but it says my balance is 0.
It happened to me before but generating new addresses would help. Now, I have generated over 50 addressed and the balance is still 0 (I believe 50 new addresses is enough since I did not use the wallet much before). I connected to various working nodes, reattached the address 50 times and still nothing.
I have also used the reclaim tool, but no IOTAs appeared on the new address either. I am sure I was not the subject of any hacks since my computer is malware free and I did not use that compromised site to generate my seed.
Also, in my transaction history it says -XXX MIotas (all my funds) on 29th of April when the snapshot took place.
radek_marko
r
Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)Attaching to Tangle (6 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Hi,
I'm just trying to help the friend of mine - he was not on-line for a very long time and his IOTA wallet shows ZERO and no history. I've used his seed on other computer and it's the same, but when I'm checking it on-line, it shows some movements.

https://thetangle.org/address/9RLYQRJMBMDJQPWZHRDFDZJAELIZUHNBVSQOZJVWBTCEDXZAUJDYHKLKZBWHCEOSCOWXGDNEVHTVYPBHA

In the wallet history on PC is shows only 1 address with zero balance and no transactions!

Please advice what to do.

Best regards,
Rad.
Arnbassador
A
Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)
Group: Forum Members
Posts: 4, Visits: 0
[Zitat]
[b]mirkimc - 25. Juli 2018[/ b]
Hi,

ich habe ein großes Problem. Ich hatte eine Brieftasche mit über 500 GigaIOTA und nach dem Erzeugen von ~ 60 Adressen ist es immer noch 0 Balance. Ich glaube nicht, dass ich jemals so viele Adressen benutzt habe.

Ich brauche ernsthafte Hilfe. Welche Informationen benötigen Sie von mir? Könnten die jüngsten Probleme mit dem Gewirr etwas damit zu tun haben? Wie kann ich herausfinden, ob der GIOTA aus der Brieftasche gestohlen wurde, als er vor dem letzten Snapshot auftauchte?

Dies ist eine der Adressen: QCGFIIQXKSYHVGAJJIXDNFSKDKDLDWPNIFFOHBETEMLUMWVAMZJIUUHSGLZBMBQ9R9DOSTRDPRFKBLRIA
[/Zitat]


Hallo, ich habe das selbe Problem. Ist Ihnen schon etwas Positives passiert?
Arnbassador
A
Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)
Group: Forum Members
Posts: 4, Visits: 0
Hello, I write here on this way, because I do not know who could help me with that. I have the Light Wallt since February and until 4 weeks ago there were still about 8Gi, now everything is gone and I do not know why it should be. After the snapshots I always generated the addresses and everything came back. Now I wanted to look again before the snapshot, how much I have exactly inside to generate this amount back. But it was all down to zero. Also no transaction history. I thought it would turn up again but so far I've generated over 80 addresses and nothing happened. My seed is not from the generator, so I think it will not be because someone has my seed. What can I do now? How can you check that? I am a musician and 8Gi is a lot of money for me, calculated that I got in January. Please help!!! Many Thanks. Arnold
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...




Reading This Topic

Login

Explore
Messages
Mentions
Search