Call to action: let's catch the thief


Author
Message
Winston
Winston
Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)
Group: Administrators
Posts: 3.5K, Visits: 6.6K
Coordinate your home law enforcement's efforts:
https://forum.helloiota.com/11980/Catch-the-thief-Police-and-Law-Enforcement-coordination


iotawalletloss.claims
Ongoing compiled list of stolen addresses: https://docs.google.com/spreadsheets/d/1IOpYdi8x9R0ivpC2Fl75N9iVDXo82py0yybC9nsxV-I/edit?usp=sharing to th



Updated List of Addresses: January 30
https://forum.helloiota.com/10846/Updated-List-of-Stolen-Addresses
(Addresses from page 13 to 16 of this thread)



Update January 25:
David in an interview:

"I completely sympathize with the people that have lost their funds. We are doing everything we can in order to gather information to track down whoever this scumbag is, but of course, that is not easy, and we’ve seen before that it is borderline impossible.

But, if we are able to dig up any kind of information that will lead to something, we will, of course, hand that over to the police and assist with any kind of investigation that will happen in order to try to help these poor people that have lost their funds.
...
What we’re doing right now is gathering all the intel we can, we’re looking through all of the different leads that we have. In such situations, the community starts doing their own investigations, become the detectives out looking for clues–looking for IP addresses, seeing if this person has been in the community for a long time, if there is any correlation between these things.

We are trying to get an overview because it’s all very chaotic, and this is still ongoing, but that’s pretty much all we can do. All we can do is look through all of the information that is available to us, and of course report it to the registered domains, see if we can find some IP addresses."

Source: https://www.financemagnates.com/cryptocurrency/news/iota-founder-stolen-funds-lots-people-will-screw/ 

January 25:
Dom Tweet:

"We have actually already started filing a police report (the IOTA Foundation on behalf of the users) and are working on a bigger update blog post with some of the actions we're taking."
Source: https://twitter.com/DomSchiener/status/955134744034971648

-------------------------
Let's encourage all victims of the recent theft to consider the pursuit of legal action against the thief. Since this event is outside the scope of the IOTA Foundation, users are either going to have to individually or collectively proceed with litigation (or at least some sort of involvement of law enforcement authorities). It's easier if everyone works together.
EDIT:
It is up to you, the victims of this crime, to report the details of this event to authorities. This thread is a "call to action", meaning that we all need to join together to gather details and help each other through the legal process. To make this even more explicit, the IOTA Foundation isn't in a position to pursue legal action.

That may seem daunting right now, so to make the process easier for everyone, let's leverage the power and breadth of this community to gather as many details about the situation as possible. Hopefully this can help elucidate the scope of yesterday's event, as well as encourage more of us to get involved with potential litigation. It might be a long shot, but let's at least attempt to retrieve stolen funds and ensure that justice served.

Here's a spreadsheet that's some community members are updating with information: https://docs.google.com/spreadsheets/d/1IOpYdi8x9R0ivpC2Fl75N9iVDXo82py0yybC9nsxV-I/edit?usp=sharing

And here's another website where information is being collected: https://www.iotawalletloss.claims/


-----------------------------------------
Currently known details of the situation:
Here's a wonderful summary of the situation, written by Ralf -- https://medium.com/@ralf/what-happened-last-night-on-iota-b6157ade1e03
On January 19th, 2018, some IOTA users lost their funds to an unknown attacker.
The root cause that allowed this to happen was users who chose to rely on online generators to create their seeds.
From what I’ve heard, many users who lost their funds created their seeds at iotaseed.io (not linked here for obvious reasons). Chances are, the folks behind this and potentially other seed generators have sat tight for a while, collecting piles of seeds, though the actual numbers of users affected are not known to me. The fact, that iotaseed.io is still online at the time of this writing might suggest that the site got compromised itself, and its not the folks behind the service who ran the attack.
Other places that are having discussions about the situation:
https://bitcointalk.org/index.php?topic=2791245.0
https://steemit.com/iota/@madmac/iota-thousands-of-wallets-compromised-and-funds-stolen

Old forum post advertising the malicious website: https://forum.iota.org/t/iotaseed-io-now-also-for-generating-paper-wallets/3915
That post was made by username: norbert   https://forum.iota.org/u/norbert/summary
This may be the same person who deleted their account from Quora: https://www.quora.com/profile/Norbert-vd-Berg/log
and deleted their Reddit account: https://www.reddit.com/user/norbertvdberg/ 
and deleted github: https://github.com/norbertvdberg

btw- You can obtain a copy of the seed generation website from the internet archive here: https://web.archive.org/web/*/iotaseed.io Should be useful for any legal pursuits.
On that archive site at the bottom there are two donation addresses, one which is a bitcoin address. I'm not sure if they are this thieves addresses or the github author they are linking to. There may be more addresses that changed on different snapshots of the website in the archive or possibly other useful data.
The bitcoin and iota donation addresses that were listed on ioaseed.io on that last website snapshot on January 3 2018:
BITCOIN: 1BXaRLe4LMfYjH4vUSJxCy1eEBDxJqeHpc

IOTA: HCBLOBZQXDUWXKFJJXNKWQGSAFFNRY9NBBJGYAANWFIIJMGWZWUFVFIWYPIAFYVWBIEFBV9CQRDOOUU99LWEXAHWEW


Domain Name: IOTASEED.IO
Registry Domain ID: D503300000042872196-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2017-10-15T20:31:54Z
Creation Date: 2017-08-16T12:11:37Z
Registry Expiry Date: 2018-08-16T12:11:37Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.6613102107
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2018-01-20T23:12:39Z <<<


Let's help the exchanges to blacklist the thief's IOTA addresses which currently hold the stolen balances. I'll keep this list updated as more people post addresses:
(Thanks to Alexa, all addresses up to the bottom of page 12 have been included here. If someone can compile the addresses after that page, that list will be added here)

UPDATE (January 24) POSTED BY ALEXA:
Here's an update with new addresses from where you stopped at page 8 to the bottom of page 12.
I couldn't get to all of them, so someone else will have to take over from page 13, if they want more addresses on the list.
It would really be a lot easier it if people could stop posting empty addresses (as there's no use in getting those blacklisted) and instead track the transactions to the address that currently holds the balance. If that one is one the list already: don't post it again.

Listed as empty before, but has balance:
AVVTHJXO9BWDEGODGPQOWIQXCAIOZLGCIWNJVIDHWICRICIXQSJUBMZZGLREELE9U9KMMVPRBBHAKJIR9 133 Mi
OQRJJB9MJFOLGALRYNAUNZCRQOZGRQPHTRNGNWLPPNGETIU9JVQNRSOEICJOGLQVPLCMHEBZSHNI9UJQW 461.04 Mi
________________________________________________________________________________________________________________
New with balance:
YLNHDBKQRQPHQZMF9ZOMZYQWQDYOFWXWJJENBLNJSRDPTIYMSZHMCYBKKQXEDW9APLMGHUEWRNUMS9OKD 900.02 Mi
KLG9ENXTJSGFXVGWDUIVIFI9FEOIYWHCLCRHHHUILGBQNEGTTBVBYCOPDZXGPAMQFNTGVYWAXXDKWORZ9 900.02 Mi
UZSDQHCJJQOMMCMGZIQLUYFBRTRSBTFNDVEDTIQDAH9RZFWPYTMDOYFJZPYXBKGYKNQQVJQGLLBNTLMQD 437.33 Mi
IJYISY9VXNKAKZJOPECRN9AXMXOYZMMEEDGJAQZZSPZIDDYOAHFXINNNUSWFXYS9UKWCQFJJOOSFZQQWX 875 Mi
HSGYF99IECBGVMOAKHOPVY9HCEWDNBXUTYZOJOTDRKMGAWM9GHWPVHDYNEIFXAP99JTKSBFBJEQLKRUSA 875 Mi
GEAREGFBVZHEQWWWCFZZYWXUJDFWWCQDNDFHSIZ9R9YKNIVHCEBREFKVHVE9MHZVFJC9QUPVARAYNFROA 449.27 Mi
NVPICEIEILQRJMOOHHVTBDLMSZTDIWYVYU9YGOGSAKLFTFCMJEMXBTFRFYWZQFXVKRVNGYOJASMDEQSKA 449.27 Mi
SQPZWLNF9DPKOIODYIHZW9SKWZWMUOHGVRKDKGVSUVOQNONNHGCGZCRBARGSPJZMJBB9NUPWBKIPSDOCC 132.75
SOY9WIIFUDBE9EITMOZZLXQYOUZRLKOMQZZOIURITCNHMTNYJLLUOCRRLBTXPTM9ZOLENVUEALJJXOOOX 132.75
XRJC9SBOVLCUUYLVJDGRRGKBPWIXEEMGOSLHNS9GBEDNGMQSEFYQEDDQIFOSKBAHCSPJTARDATVAFQUCY 2.6 Gi
UTPHDFSAOVPSZUVKIXWYMYTCKLJXZFEYKKQKLYBIMUOYNDOJFOHZEYFHZPDAYKJVFLURJHGWIUN9XSPVW 2.6 Gi
CRRAFWYRQ99SE9OYHZKIHKPDVGXKSSECOBZT9QRNLSSOAWULGPRXKHWHWGXJVUMGGXZQIXHTMEYKUN9PZ 23.23
ZLXHODYKFAWRGYGRYBBIMLNXLVYHRKPLTYQXYTWTHYYCTWJRGTZEWECPBINVRXCVXAKMDKLETZXLAFN9Y 2.48 Gi
ARFWJXIEMHZZBPDPNKCNZXOPEHFSICNDIXII9WAHW9KCEBRFPMZXNQ9RFASQGAUPDVKSYYJPGAZ9WABKA 199.5 Mi
ZLL9NIMGCWOFKXFWCXZMCASDIRNXHNJPXCXFKVHNWDFUYXUOXURGFOLQYCFZDCYSVDPSPHBJYNBOKIGAY 99.75 Mi
QAPBRALWDFFFZZBL9HTXVEEFATQUMZHPOXPSP9GTUZCPUL9NDDPHFNQXKTAXBLH9JPQVVPQGNPXICNWYD 99.75 Mi
TUQTHXOSHOQVTEIVEUHINYFDVPFQYRGKTDVADKY9IMIKYYTXJVJOPWUW9TIJULNCJZLZQWAFHCMWTVMW9 1.54 Gi
BZNVVFPPHIKTKLAMOCUAKTIOIGNEPZECDH9KSMPLKNIBIARGKVYPLQQEAGJTVDONNURMFFQYSBLUEBXWW 1.54 Gi
YONLPTJKJMONCXNNMTAQDUDTNCUBJPENQUKFADPMYNOFXWGUPUTEBXBVVDOGTEKSSSCZDWNYKGTPDMTSD 8.67 Gi
JQMGWWJYI9UNIRRTWGDIYCDNSPYPKFXHIYDXBOPXXGBHVXTBCUTXOM9ESNEOYIFGJYYXIGSSWGLYJYLSA 7.61 Gi
CE9XUYX9KSLEKFKKSMW9XRBMGLBJ9PRCMDGNV9GXZEKZQQEBJQEMXVCFTNOHZEZPSUZYUIDLTDNTDHIYA 162.12 Mi
9SKDUHUFCIRZSMJQKLAUC9AISRJWNCYMXTUSHBBZJKMTOBDN9GQIUGDX9SCDXGB9GNSAPTRMYLNHAKURX 162.12 Mi
UCMCYTMEKKUFQBKTFDHSVZWFGPAOXISIALVOZLUODQGQJOBHBPLACPR9NNJWQMSCBWHKEGUFOBJHETY9X 4.15 Gi
CTORMCUAAMTBPK9XPSQEHJPARDRA9XTPUWC9EEARSWMZNTYAWXGLEVXVKQDXKBHARUFZEKBGSVKFJYHMZ 2.75 Gi
KXUEFCAA9OLOPJXFBIN9YPFSDIWGCPPUQVJ9ACNADWUWSEYXWBDYQNHUYDHYJGZGFEPDNYGRHSD9UKFJD 11.4 Gi
OQRJJB9MJFOLGALRYNAUNZCRQOZGRQPHTRNGNWLPPNGETIU9JVQNRSOEICJOGLQVPLCMHEBZSHNI9UJQW 461.04 Mi
ZUPLQWPGXGTWEFAXGXPYGCUFDDTJQTYLRNWUDNGYAONXPHFRJFYLMGLSCFOQKOPOHPIFQZJGCFYDWPIBD 3.21 Gi
F9FPU9DMTZEIG9HQVYQHUWXULRUHFYFS9ZHIOFGKGCJJXLDLMYCLXUVXFNVCJQBNVLYVTHZNEXBBFGUQB 721.04 Mi
SWHLVQBTESLTGQIOSKMCEJMAOEEORWSQSNIHHENRAHKCBDBWRGTTUFFRHMJQVLTJTJOYWBSHJPYFBFZUY 721.04 Mi
DVNCCLRSERRMRVSQFCBKYAEFHKOZSUGTVXUMQKKLUPMSBZUEPCGTBQBTLWXHAMZALZONVJJXJSENJIBBX 308.34 Mi
IVIFATZRJUWBDLTYLQHCNMCEGFGBZN99SAAVRDUVYTAAPLYLEGZPBCFFVAJXOGSYILSIOXWIENCCTFTZY 308.34 Mi
BESICQSDBXQEBCIZMKOFWOUOC9IJJDUR9JC9LJJKPRHFRGUAVJTKYJSG9FFATVX9KUIYOQPBHDT9XIFOD 4.44 Gi
LCDZEY9MGCUCB9PEYTWMVMZSXQVFMUZCDQHWBRVZQKYXXQORANTYZYDCCEEOWJGGOQIEXLQGWLGMBHRYX 11.64 Gi
XZ9OMFCMAPTMAUHPBFFNKSCXBD9TOTTIAUJRBRUNSJVDVRBQROCFOMHISYFHXNCDXYNIXFIIUAMFIMAKY 12.01 Gi
LCSPIPXZLJVNT9XUOEHEMXJVOFXOETELXTCNABPPODQPMYYRSDNKUTF9SEL9QLPSIXO9QAVPWOGHEICSD 7.37 Gi
ARBDBWY9DGEWXCCFWSXISLVOIPGR9AMVAHSZRXTKMMCEOT9BJACSVEKAKP9QIBZBEFHBVL9BOPABWDCUZ 7.27 Gi
HGKLYH9VELSHTUV9TFUJLZ9OE9TDUELKPYUAE9IPILFBOKQR9NLRWPUBXPINZGCPUGWOHRZFFXGEPIHFY 4.04 Gi
NNYOMYMLRYNOVLJBPHIIIQDTQHFXIVMTOYPTCHFIYUGBSCCUWBZYZYDVNZQMUZLIRNGGQNYPCBZNAPDQB 1.54 Gi
BLPVFPHBWJOFBEXNOCOWWCCENBVNSVPMZEWKEBWNQJZKNM9JJPATDLOYUOVSJAGJOHKZMLCUMJKMOHWVX 268.11 Mi
J9SICTLXMNWXBT9BKLVPFCJVJKGQCHVAHIPX9URBFVDFE9LNZNWQVRCAKSTHKFUGUWDXUOW9KNRTQKINB 152.2 Mi
K9MWGM9QYZHEAAMPYINRAEKVMNCWEKLZQYWNRTHQJUHJIMZGZPILGOJJNMLSQUDFSTDXHKNXBNHUSKHUD 1.15 Gi
PQJYSELQJTEEYCXFOYCTWOMBC9HDZBJMVVHOGGYEAPCGSAOYEDEZHEYEPFDBYCDXJAZ9DNVIPHIJWTY99 4.6 Gi
9WWDWLGC9MVAAQKANMHQSXHRXAGCPHSMPRPEZP9EOVKUJLKYCHPPFSGRIPXKHVNEWBIFLPWUG9JRUIZSW 1 Gi
BXEEYUTTPFZBSUHEXDHGERFP9OFOIOKJGCCFFLOZJOG9NDDEFWBJUNWTVW9YXZNBRYRBEAALEXLYOPNQD 1 Gi
ESXIEZHHLEYZJLXBWRLYAJECSHBUMXGZMBINNAWNPLIFRIFGNDPHZKJOACZNEXRKQBKKHBMLDKLWWTQYD 58.5 Mi
HMJGVWELDDZDEGVSTOPZ9SUEFMZCYOBRRFIZDNERCELDDUFIDIAXTTWPGUFGQVDAWGJDGSKSJVPXQWUJB 249.23 Mi
CGYTGBKLOJUZWVDXCKKZKDMSDVTEYDFGEDTWTMPMFJBRQPCUQSIACCXBDFZMBELYKQFTWYLVOPSQSJSEX 127 i
MV9HMDKLIQDEYEZWTYZVOLDYI9LPOMHKTZOEKEUKTQONFO9NZZOJYPCIAZKOBZIPQFQUQXVQJCEPVEPKD 4.84 Gi
T9PILZIWPQJUIYLSAAXHIYJAFCAYNKBILPKGPSZBXJVIMEDAPJGOSAUBCFQ9GKQDGBFNCHGZMIFNSXPBA 2.5 Gi
ZGRJDIIZXIBDZYWAKHZDGFQKFAADXOTWEVNXTBTVR9COAPGGEFLFZJWMISDWDT9LILYYYLZSPILSBXSFD 2.5 Gi
KRDTGTERZCIXCCAE9ERSLFD9UWIYSKKXALVUTDVAOGZLNOOTKVHRWWTNRPFPTWSQMRCYR9HGMCSATQUPY 9.49 Gi
WDLLKDTZTOFGQRTBUSTZOSZQYSUEBFQGOVFLHTTRSTZTRXDTTKRVG9I9YUE9VTUIE9NRWGSLTHWIUTPRX 9.1 Gi
FKBGLDFVBCBTQIX9QXKMDSPKWXO9FNATQWZHGAFNMNJVSYRKM9QSSEQYSEYEXQHQFSGVOSJTFQGNAOPDC 520.98 Mi
SXUMDYWTFWCUYEEOQGUXUP9CQA9NGUZQDTJBJCOSOKYRRDIFMLPEIBBQD99EZCBVQHPHVJA9ACTVBXGOZ 78.2 Mi
FPIBCILPJFRZAQRTSKNOVONZIKPIQEHQQIGL9MKYEDFAJXXOWNMVACKQDSFLCREYP9EYJJKG9BYIRLAUW 12.07 Gi
QUYCDCGDQQJQBXBYIGDLQFQQEYSNU9EALXPFMTUU9BLFAHETMQMLLINDMHEAFSMXRR9VGEVWVNFEHAHJD 3.18 Gi
YWYYOXSTN99BUCQGXLITLSABX9QUCWSCTZEVCKSDJLTGLHZIHGPGLEVWUAQIZUUURHZFQBZJYBWDJABDC 18.62 Gi
SHQGRZTMSELZSUVHWWZQGSDVWXOAQ9YWYWEDQSMPNXMUTASFSZWJDKDZXNENJJHHUSHPKWBTBQJIJQNVD 419.01 Mi
RYSSOMRMNCG9KRAUEGPURNWHPHBPKKLG9OWZNWXGLBCIWNECLA9WYSKYXHBJKSPLHXDQ9NMVORDCA99DA 4.34 Gi
________________________________________________________________________________________________________________
Now empty:
PZQRE9QMRPQZ9SMZRAEDGXFDQADBNMBUVHJPEOSECLKDCNETUYQMMBLLPPKCNBBWWLFXYKOUHEK9ZE9TDKXVQGMNTY
SGRLFSBORTTDTSNIQZIQPYGXRQSYVCPZWCH9ERPLRFHVMWRTIGNEIBWGUYRAGHHADSDNTMBOCE9RHNALCORRNDNOSD
XTWX9FDSWOCOJOKIJANSZUUBJLQVFXCSEMHTHHN9SBGEINJZRULXLGBFWRSBFKCNCCNZ9HAMY9CWYQLDBYISIJGYUY
KQAHUBAXMMFSPEDVMWNPULRNKQOVX9FEIYVXLLLHRPNGPWBQQECZXDL9CMVWTJOJGBXNQZKRYTBUILSHZLUGXUMTZZ
JQTKULYLUWAWOPIURRGVGOQAYVUHPSMAUGLIRQGUGUW9NZPCSREAKXUPCEYPIUHPVJEXACXJDYAEDJRVA
ILFHRYIJPWQ9HGCKRAOXEECZVKBPVKXDNTCKOOO9SITAGLZR9ASDTCMV9MEO9TGTRHONKEJIWEL9GAEAWFPWAJEOQW
BTRKYJCVBSFVMEJL9KSSJRTDQSAYCS9GJBLBKVEXWXNBFEDBEWQAITDPZCGDJQ9HHE9FDCIJNQAQB9RMWD9FK9QUMZ
PZQRE9QMRPQZ9SMZRAEDGXFDQADBNMBUVHJPEOSECLKDCNETUYQMMBLLPPKCNBBWWLFXYKOUHEK9ZE9TDKXVQGMNTY
ESWVKJWXTGIWBOSEREELRFWCFKZDEIOXJGGQGBUOJUBAGVFGARFDFZRPPIYVSINMVMHURNXUBSYAXYV9Y
VOC9TWBRQTEKAZOWCFDVAVJ9ILCLRWTGNWTHGKSNBHWCDNFLN9WDQCILQMXQNARCSISZDKWRRCMKPRK99NRNGGYYXD
YXRCTAVQTU9OSQBI9NYARSLBMATKROHJHCRX9IIPTMXXGFLDCOR9PIWDPCGTAGXZBYUPXUXRWZIK9GEBWIUHATXWMZ
YEWQRBJMLTDKNUFAOEBPY9CHINLWAYQWWSJHNY9BBPMCBEOHLYZIACTGTHZUDTAQMRWQFK9RKJ9TSRJIANTQGCOKBZ
KQAHUBAXMMFSPEDVMWNPULRNKQOVX9FEIYVXLLLHRPNGPWBQQECZXDL9CMVWTJOJGBXNQZKRYTBUILSHZLUGXUMTZZ
DJHLLQBYDYTKGVOJRL9DCKYWVLVWAGAQSS9DQQMHVTSCDSYGHRXRXKPOELQZKNQENEKWCKMLHIPNK9XZW9EP9CWGUB
MKPMJQSEURTQMCFXBEIXAUXZRHYQCWTVOTROAUAZWPNZYJRSXGZHMHZIWWAEVHJVGV9TWLCOZUXBMETKXODAAODZV
UXVZ9NGZZVRGAOAV9OWT9SZGLXI9DQGIIEMGIVCPUB9CTLWRSIRQNRLOQ9AHZXJRBDGVGCSZFDRPUOPVDIDFJODMOA
LQ9STJCRQXTTIJAKZHRNGVBKYZW9VTKHSHQF9LFSII9UYOBDLSWYSUVXDZRGKCPDMJYFJDPXDEDXUAECAOBFKFKITB
YTJAXHWHZILUBVDKTPCGPNQJGJDBDDRPDVJKMAMQEVXSITKURZDAFZCFUT9WI9CHVBEFVMHULANFOMIFY
GZ9YXGWVZQHYRAEORBSONYWNSYGWBLCO9BUNTMEWKHKCDVTZLOOHJ9YSQTIQORFSAFUNCDKRKWHTKWNGYOC9NWEGID
RUPPRPDPAIRORAITFD9HVOGBMKBLMMZIHGOYAEZLMY99EPIJEEQNGOIWGDKIAIUYKBWMVNRYEUFLJGNLDGPUQHDHTB
VXKXKPAMRPKJKBJFEGEXSXVRPJLBMUBPUIJQLI9FGWAUPHJTGBCMPVRI9AOPOOQLNSYEGZHYOCOGGRSBCNIVFDGAZD
HPHQTRANKNABYOWJLS9OTAMRABRBQAAQA9LMIKVAZBNXUMAATDFPPWWJGGVQAOQJZJ9OAJHEQU9XPERPXJCVXIEQRW
UABWCOAOUM9MKDZPXSGEEEKTO9RUSROSPJWMPXZQBHWMRI9BZQKPRTTUPGOWGHUKQBRNWDHFOGLRUWTOWVRDLMYMOY
AFUKOEVPJLMVCSEAQIFZDXARCS9CEBGAHNWMJZQHQP9TLCLKUCFUSQZOZFGZKSLZSO9KNSPRKUOVMRVSXFVIETDGQW
GLQUHWHUQQRTJLTGWFWNTROJGUDVWDUMOMGMQKXUKEAVVURRQCUHIJMSSSBEKFBBPXQ9HZEIBVDEVBT9ZQZPWISPBW
XXRQ9DBYHCGEPOOAIEBEBVSSVTYJEJBEOXWDNNFCPDBYKZFGG9KPBEWVGCUUDZNBTAVXGOOHNSRJUGDOWITQOGEBZ9
YGCCEMWOJGEXFKHCWNNIGMFPIZDOYJYIJAOUAFGJVQUVVVODFOSFXYPWPI9UJNGQZXSXJVUPQQUKQFEWDX9YUZHCWD
HNECRND9HUSYPLIWULZKYQWLGZFMOVPTTWTNBOWAXFVXZW9HFPOYWIYIXFRZKDVATZJGJFDOECFSXSVVZZUPDHOPXA
JBEFKJZAMUZUYZOWKMSX9BKAYMZPCWWKRHQDGIJHHVL9NXARTFYRVJJUVQNHQGHM99BEPULISPCVYBHXCFZTRDL9EW
GHWQCDMSIGFISWBRZDLZLLFPYLPNKESLXHMWIMW9ZHOVSIOOCSY9YQNATAE9FLXEIJPATCXDBIINSRWECYNAUAUIP9
ALCBFBQ9BQYDSSWQHJLKFENDITLBYFXHMBSWFYVAZWGYJKEZGSOZJXE9BXKQZNOHVSRNQGUMDLIGGSIL9HTFSEIGCA
ERZFDGJYXTGUJ9SE99AFOFAXRSVFXVNKNBNIOLAUHRSYRALCSSBJOJOVB9BPQBYQTBRVNTDBZIAQSWYUXWGBLYCSHY
HMCTIZTDONLZUAAMEBIFHNLXQDFENUZZ9RCHOI9SAUEWSOTCYIGIMHXPWM9OVTNOERUZPSRJ9LDYN9RFA
BXZIGGDVGMVOWLSSISNWSCRAANCDHXXDYGTPYLVFVBAVGWJJZCIGP9VMBWDVTCRWBLEZHDFUPRRIKMAWYBESFKPNCZ
9UOWNHHYPEDTHXCBEKGLGORURZYJFOUZKZYMVBNRFYNWJZFJOGNB9UIPFNLWANVCSNW9GLJXENGT9LTOBCMLPBEEUA
MMAJPSFJCDFJIPFUYGYEPSLWUGQVP9SMTAGGQRWYZ9VHQPVZODAGYTMFKIPKPOLLYJONJROB9HP9HUBHDQNFXKJIL9
RFZQWLQRGMAIOTZSDOKGGQXLOHGPMWQPVLTLMNKAVODIERHRQIFDLKXXAGVHUUWU9FLYTHEALEWWMHBOWSHAMFWAUD
ULXCGRVWGFNUFXSRJRGKVJJUXYBWNTIORQAMQJQGVMDQYVOOOC9FUVHHVJIPBQ9ZYKLEOK9WFM9KBMMPXCANVZMXHY


=============================
OLD BELOW
=============================
Addresses as of January 23:

1.77 Ti
J9JC9VSQCMAODPPDWOPPDTPBPUKSYTYGZKFWOKQABPK9OQJIIZYUKXNTKPHMOCXCY9ARMKP9JYXJBOWTXGXGRIBLTB
https://thetangle.org/address/J9JC9VSQCMAODPPDWOPPDTPBPUKSYTYGZKFWOKQABPK9OQJIIZYUKXNTKPHMOCXCY9ARMKP9JYXJBOWTX


804.79 Gi
OKVDOXIKGRGRJQZTPVPWXZGXFQXEAKEFD9PIVZCVSWFXWIPVAOGABBNMIAVR9AMIUPAMFPMVDJIOJWZLYWQKQHQFJW
https://thetangle.org/address/OKVDOXIKGRGRJQZTPVPWXZGXFQXEAKEFD9PIVZCVSWFXWIPVAOGABBNMIAVR9AMIUPAMFPMVDJIOJWZLY

520+ Gi
GOBXTNODUGURNEESTGFVMGFBVBFGIXJLYPOUWMXTBMECORN9IHHCLVWD9UM9WYKJMB9YOFMUHZ9SJASYXNWGUPOSDD
https://thetangle.org/address/GOBXTNODUGURNEESTGFVMGFBVBFGIXJLYPOUWMXTBMECORN9IHHCLVWD9UM9WYKJMB9YOFMUHZ9SJASYX

235.65 Gi
NTPYIPERTMLJLNJVBAK9DQQQCZGMPQJXUAZIDPNSMEPXZWKBTMRTGPEVEWHQICSTKJSTBWULZPJOXZNNBQKVQEYTYD
https://thetangle.org/address/NTPYIPERTMLJLNJVBAK9DQQQCZGMPQJXUAZIDPNSMEPXZWKBTMRTGPEVEWHQICSTKJSTBWULZPJOXZNNB

151.29 Gi
EFMEPAWSH9SOLQEMJHQBIXHCXVYKYGMUAMULAWMPZHHGPBMSLRXUSCOIZVXOZDXCRIAZJFNBNNMTXDPUWKSQDOXETB
https://thetangle.org/address/EFMEPAWSH9SOLQEMJHQBIXHCXVYKYGMUAMULAWMPZHHGPBMSLRXUSCOIZVXOZDXCRIAZJFNBNNMTXDPUW

1.11 Ti bundle:
TUAJSFJGPXKJRTXIGGVZZHWLLZCN9ZQMDDJNDZKVAZKWJZDVKDOGJDDCMEJSFHDETZYCFCXOGGHHYWDIZ

108 Gi bundle:
LQFIHCELYGCYAXFTWQGYPQK9SNUSN9F9ALPOBFJFUDCIW9HNHZVRDGKDUUAFJRRYUJZ9LTJKSNCFDPTLW

HURWQIBSAEVZSBCK9LSYCVR9ZGOCSHHQIENAZURGCVCKXEMYIGHTYQQDRHJNUNPEIKIDKQTABQNFOWUMADSCRBWLXW
https://thetangle.org/address/HURWQIBSAEVZSBCK9LSYCVR9ZGOCSHHQIENAZURGCVCKXEMYIGHTYQQDRHJNUNPEIKIDKQTABQNFOWUMA

9NVYWFBV9HGFQWCNROMZIAOPGIHRUVPAURUKUGPWGBN9TQJFYJZJWBRHBG9YXTNTAESKHZFNOQAFIYRSXOSKWAIDRW
https://thetangle.org/address/9NVYWFBV9HGFQWCNROMZIAOPGIHRUVPAURUKUGPWGBN9TQJFYJZJWBRHBG9YXTNTAESKHZFNOQAFIYRSX

GAHJVAHMGEGOES9XECPGBUCYHETYGCPZX9EIHERQGXIHTFFWHY9FMUZCEGBZOBQRNJUEJOLKRPAZENDBDVKRXUUFRD
https://thetangle.org/address/GAHJVAHMGEGOES9XECPGBUCYHETYGCPZX9EIHERQGXIHTFFWHY9FMUZCEGBZOBQRNJUEJOLKRPAZENDBD 

(Thanks to Alexa, all addresses up to the bottom of page 12 have been included here. If someone can compile the addresses after that page, that list will be added here)

4.24 Gi
MYFQ9GTCQFLFAQEOXEVYNJSHYFQHGKE9HGWMZVR99BUZJWHYALUYMWYJEBTWGF99RCYZCBUVYMSCJEYWWWWZXYCHEB
1.8 Gi
RGAWHCLYZFLPHTALTVQAJDYPULAGVCNKNTJY9DQTSVHNYEHNGJLTLBNOWASQRYEGYOLWFBZSLGGVPWFBBRIOJKCNW9
99.5 Mi
HYIYQMPOZSQT9WBGANFMCAQUEMBA9VOYLLG9HXZIHBDRJRFWANEFWULW9PKHMONLUCMWYTLRQARZMKQZDPCADNUVKC
15.09 Gi
XGRAUZWMXEUEOACWQJVJYEDOWNBMHZPTFUTLHJAOTSOWGHIHIRYKPJZCNALHZUZQSEYUJXQHKXLIADCLDQEGCXEHPW
7.15 Gi
9C9OXMNORPVLFDXIMFENPFMKIBQLGWTNTBHQWEFQUIJNCERVGNHVPAVLQEHWPKZVSXQEUDDJQYGKCUVGCJRTRXPIKD
18.59 Gi
TMGWYV9F9YGQZ9LZARTUHQGIGCAHWCXYMAGZOXNGMZJBIMVOTIFWTVOZEKKWAOLPJCHGBJBPGGAYNBNKCCYSHIHB9W
2.08 Gi
WVGPQSORGGDIEWORFYSTKHYGRKULRHFPEUPLTFGMMKYJJEWDESTGGBWSVPEMSYYYC9CWAMHFCHPVUAZIAHWJEKJCAW
4.27 Gi
LGGPTEXWGNXQYVELGFKNLCOEPYMUCVVARGIHAYUSFYHAHUPOEF9LLMV9KZLP9HDJXBKVDSCNPVZLPNJRZCOQZOEGXZ
5.359 Gi
JLGAOWMARSEHRGJFMLUXC9A9HATYLHMOAVOALKKYXANRYPKTWKGCDMHWYBRP9VLSNISWGLPZFMBIITUSWIUMSLJXPX
1.75 Gi
VJNG9HNAHGHCPCN9WXLUWXJD9LDNCRRHCOVFMDPJZPIE9OFVNXSRTIIBGCTYSGDHW9OLRIVRLRVIZDFWWAKDYCGXFD
26.31 Gi
QZZGNNFWYVVHLFLLSDDDBOLVUDDXRXLAMJDDUQWAQKRAPO9UCBRYZJXOMNABQYOOCKRZZVXUJKNHARYJYKIHTNQIJA
15.09 Gi
XGRAUZWMXEUEOACWQJVJYEDOWNBMHZPTFUTLHJAOTSOWGHIHIRYKPJZCNALHZUZQSEYUJXQHKXLIADCLDQEGCXEHPW
3.26
JAZDUF9HBORDBRWOTDPZVNJYHFIEANLXAIAZOJTVYCQWNZVHYBOAOPDORXEX9ZGIPNXIYHLTG9KXZLTUWJYPNGITFY
898.55 Mi
FBIZCBGVVMDLPVTXBKYPKYJZHYR99NNODBCQPJBNASLGDZXQFEDUSFGKBOZUISEAKQOCDPPBHZBZ9XAMBZVBMOOXTD
1.1 Gi
ZXUZETEZASYCNGMWOQBU99GKYVFVRIXKRVNGWE9KQMYXOHCH9IMLCBCTVZCBJMZT99Z9VQQXFQLJC9MWDETIX9SPRC
HUIHRYVVDPDAWMCBYUJXMSPYHPP9Z9ICFPKZOJYZRCWAPSAHSKCDQSIEKQEJYLTM9NIRONYFSPNVNQV9DTNLVYAWCZ
25 Mi
UUVTFPXPPGSULRHWFIHQFEVVRXMBPSFUEBHFPQPIFYUVAGANVDSTBGHUFEZ9QB9DQYJPMSYITZCYFBWYBBN9LNLWBC
VT9GRFJQRCZONDDFQPFJCKKAXW9XNLLCJVWRBMEGSYULKYRFGHUBZGYDPYHCLSAQONLPYDI9WYV9PVQI9MEZI9AUR9
2.76 Gi
IICPKFSGDXTBBGETTCIVDOOZQDVRDKYUTBEAIZBFLWKXZGIPHGMNXC9HKXU9EONFSVPMILYPVJFYHBUCWXG9UQUHUX
265.5 Mi
PTTZVFSMATHGRUAGGVUPHGZS9SUSKQCHISMCZCTKRHMOBOEV9JMYGHSYBPFAUGNWTIVPZH9MBQFNSCRZWAVGJEGCJD
5.2 Gi
V9XIXKTCMBNLAXE9AWCIZLWVUXECKEHAJFTFMPLCMBGCCCHFXRBSNHPLXOEEFEKKISKJHGSMHEAN9VJ9YVGNYIZPXX
2.14 Gi
LFIMYHCWXWVKDMIGKJBLJGEZUOUPESJLSJUNGUKTX99ZOFWBWBUCOQJSERJEGNDSQTLIWYVSWBOQKKDXD9LIEEALIA
1.72 Gi
QYWCHKZJU9SHPPEIDZVCXTGHIPP9LBIYRYJIQVVKLPXRUKJKPCLUZQUBAEXFSJRFDVSYV9FV9NOHWZG99NLUFJVKJZ
3.56 Gi
AJEROXILLAOYFWBRUAAWIW9G9OFZVPVCGVKHWLTNNXI9YJCSQVQVDYIKQDJIA9MVOCFDQYPQMNQSQKCFANAL9HRUMC
6.22 Gi
RCMBGJZDXKERJWLYEUEZYPYZQSS9OWESYVMFZTZRRHEFPGLRPDQLS9HQGJKTIEKVTVPFAQTYOOVFLMXR9RXRECDQKB
1.47 Gi
OIWECXNOHDHFTSPRXWHFCDPVTCYHJEMDANKUGHIJNFMERUDASQ9QZLRB9WONTCRRR9X9ZOCJVDXMXFNYCAUODTNJDA
8.87 Gi
PXTBVOQHXYBAJFLE9FPNMUEWZPMRBZQXWLCY9VYURXXCWPGPVEYAXTWCIBVOPAXVKYOCYIMKKRPCUEFJ9ALSLHFV9X
6.22 Gi
RCMBGJZDXKERJWLYEUEZYPYZQSS9OWESYVMFZTZRRHEFPGLRPDQLS9HQGJKTIEKVTVPFAQTYOOVFLMXR9RXRECDQKB
19.19 Gi
ALYRLA9RPAAAEHLFOPSOQMHFHMW9UNIOSNZXSXHLY9VGDGUVCBFCQEZQNBIFPVPQPKCBOFBVUZBZUZKEDXW9DXYEAZ
2.08 Gi
WVGPQSORGGDIEWORFYSTKHYGRKULRHFPEUPLTFGMMKYJJEWDESTGGBWSVPEMSYYYC9CWAMHFCHPVUAZIAHWJEKJCAW
9.43 Gi
LBHUVFYUJWXOYQEGLYAQPJYLNJAFKYINHBACITQVTNTAYHFLEQTBDWUDHSCLVPO9LARHBPN9FFNKHQPXWOBXEFVRRA
3.02 Gi
YUHHXDDIMNDLKDPSTBDYTKNY9PCBVCMSXECYVJTFIMMXEKVTWACDIWGZEOMN9CHDPMCD9AOXZOYAPFRCXGVJAAAAUB
1.88 Gi
SYLBJLPCHQMJPWCNUGRR9PQPJLFSKPTKFXLAF9DCKTJVQPLKEZAXGGLE9VXZWOLSYCCQUPUOCKRHIOKGDK99PTPV9Y
1.75 Gi
ZAYXJCLJVYYGFICBWTKMYCWHGVBLKNEMHOWGOVGXRIWGT9HKYZHWWPPDAKJJFQYPLLSDAZTOAYGEZG9HDQBTMAJSUY

(Thanks to Alexa, all addresses up to the bottom of page 12 have been included here. If someone can compile the addresses after that page, that list will be added here)

Now empty
OEELSJPRYTWBKCAUPUSUDPUDCVBSRWFLIQQERDAEBUWKMFJLVHUNAWABRFHCWRIJBKYFQ9FNGGRVEUSUXAJXVSRLZW
KNHKJLETGSDLJSFFDSAAEGTEIHHLMWOGXVEDEPUPXTYMVHEVWLEBAABTNMFBEM9MDPONNJGY9WQCBFVNWFIRVDHRTW
BUEMMMQAGPKCCBSVFYVKOYGCBYHXLDAYTYOFRYYYJSBFVVWHEGPACPTVFOEFXVIDEEWGYZRWXXHHURYEBQPTUEM9OD
KGBJEUNTGKSUTV9QCRDYQTQFGNLKQXVFLJQUERTAPIGKYFVDXQRUHANJNMXLAQQAIMIGVTHKEKQNNN9EXDAVCZFBF9
SWBPUHLCUQYVWPRHMFMCPRYWUBCGK9OO9GPKB9BLQABGSZGKKUDEUJIIJLPQWSSJXGHJYHUHIBZLXROOYJKMKLSOZX
UBLQW9YPXHZ9ZOURWYWKSYFQEWFRYFIBJYXQQAYHOSQYGSLLRUNPNPPKIIAEET9WKF9RNTUIUFJVVV9YDLHKIRICLZ
HNECRND9HUSYPLIWULZKYQWLGZFMOVPTTWTNBOWAXFVXZW9HFPOYWIYIXFRZKDVATZJGJFDOECFSXSVVZZUPDHOPXA
FBA9KYTDEFIERJSYKSIMCBCZM9UKBCL9QKDTAPUHHVVAWMOGTDGNDRHIBDWTRGOWDOJDKYJFJCIPJNJH9SUOIKFBRA
RSWLBA9LDJH9FWFPTBRHDBAQAAH9DDWCVF9CVJIWNBYXMRYQPXZ9TIZOUEHLKRBJEYDAWSHMYBHL9AQZANBDKEQMOX
MKPMJQSEURTQMCFXBEIXAUXZRHYQCWTVOTROAUAZWPNZYJRSXGZHMHZIWWAEVHJVGV9TWLCOZUXBMETKXODAAODZVD
NPZKLK9UWWHXIYWFSSGZQKITTVST9EU9JRLZWRUFUOLGGELCFPN9BHKRVDIIQEYWGHMHCAVSRXQGHGOZZOFTHKLKEX
AVVTHJXO9BWDEGODGPQOWIQXCAIOZLGCIWNJVIDHWICRICIXQSJUBMZZGLREELE9U9KMMVPRBBHAKJIR9QQICHZCPX
ECEWVRSHLKRNZCROHBDUWPUKYJMIBTJBKWNYMIHHWFUHDLDCV9HNM9XOSUEBFDNDFQSC9TIOQCQKTJPFCTLLAPFSPD
ZPXFSDGOOWBWCNKAONOUZEEEZFPKCPMZZOZWWJLPHQKGRLBOAG9KMJLKXILSGTWZ9CNPMGWHTIDTFYQXYXOOVQFSOA

EIFSFHQYZEVKOJZOHFZHWKE9EXMREBVVPWMCKYMLPTQLGPO9AEKSACRO9AJTBXCUYTIVZOQATXLNDGBDBATGUTZRLB
JJW9VRRCSOCHQWPWDYHMHUXZCZQQQEPZCFOWJCHQAFGSMGVSMWLSCAKZTGSNUIAWBEGGMZXFWDFHBLIAWTHLHPDGGA
AZWBUGCURMQKZJYGZITN9QKKIGWHJA9GPVTYJC9CDUNWOCVJSOCSBILB9EAGUGXFCLOZKUSUJSVWHUZTWNJYGCOLKB
ERYQTLNVFFOGEHMALQJMRFISFUUIJPYIWKWFY9EQCUOAUZSGZP9THDRHFLCNFBEUITGLDQICHBVHELZXXETLKQSNBB
GWB9FZUHPEPCRAMZJUTGPKRA9IRNIBPMYGFDEYEGXZGI9FZRDOQKZODXPRGEEKYZWYYWRBTHZUNLOIIR9RXDYBZGNW
UCWBAYEGH9FBAQKKBVXKNGYSEFUBRGHKUNRWRSWT9AGMKVSBJKONZRTDQKPBIGEMCXVAZ9QBU9VEKUAPXKTYQHYOCC
GWB9FZUHPEPCRAMZJUTGPKRA9IRNIBPMYGFDEYEGXZGI9FZRDOQKZODXPRGEEKYZWYYWRBTHZUNLOIIR9RXDYBZGNW
EETIM9SRXXKPOV9NZEOFSBTILTSVIZPLBILGHGJAVLIPLCORBYFFBVLXVIJFDV9ODLRWVSFBSKWJSIBCALHXKJFYVB
KHGEDPRIPVPZC9WCCATFXGAALCHSPHCRXIAGXDTYAVREUYGCR9SCKFZXP9SVCWNNSTTVRYCVQAQRJCWJWSPCZLLUNB
KHGEDPRIPVPZC9WCCATFXGAALCHSPHCRXIAGXDTYAVREUYGCR9SCKFZXP9SVCWNNSTTVRYCVQAQRJCWJWSPCZLLUNB
ZSDGSDXOIICJNTGLMFUIQLIBEEGVBOGMA9DNLQDTA9RGJHFPDAPADGUPUDL9VHFVACUWUGEVTCKPVUPI9SFWNFHXCW
ECEWVRSHLKRNZCROHBDUWPUKYJMIBTJBKWNYMIHHWFUHDLDCV9HNM9XOSUEBFDNDFQSC9TIOQCQKTJPFCTLLAPFSPD
YXRCTAVQTU9OSQBI9NYARSLBMATKROHJHCRX9IIPTMXXGFLDCOR9PIWDPCGTAGXZBYUPXUXRWZIK9GEBWIUHATXWMZ
BUEMMMQAGPKCCBSVFYVKOYGCBYHXLDAYTYOFRYYYJSBFVVWHEGPACPTVFOEFXVIDEEWGYZRWXXHHURYEBQPTUEM9OD

ARRHJ9V9ISMVZMTXCOBRKUEJZEIVRIZ9CWAR9TVROC9HRGLIQXWGEFSHDPTTPHGNDDPUATNIEAYLTSQACPHJFBHQTC
9OEXHTYHPEVBDTPBUZILWEUPIXIUIXKQRYNECJKBJFLAIDRWZNVQRBICQTVTVROUDEQQFQOVQMSUZUIPXUC9NMT9PW
E9MKOUWCYBWADYXGXDCGSGXRMWQIFVFBAWEZYJGEZOWSMUVAYCRD9ABDNJNYLASFAJKM9TIJFZAYLNQO9MRYCQ9KAD
AMIJVUGZDWDHKQRTIODEOGIRWOVWRXYVOQFK9TLETOMUQZVPQZKLEPHMRNKRBNHAMDUOUIURXPGLEJOIBNGPOMWYJX
BJFVIGKFWNJWSWSNZERCXAOGWDAKZGHLSATKVCMKPOO9ZOPQKRASJDBTNZEZGTWHLBFNPAWMKUD9CKTZ9ANXNISMRC
JMFSOIUAZHLQXSFNEQGDHRSSNTTHOXFRCUWU9ZNMUHCFGDLZQSGNEXGWNKXQKUCCOIIOHR9WJXDRBFSCCO9RMGJCUD
ZTSEF9HERSDQJIKGUL9HKRHJJTTAUBRGUZF9MCRJWAKAVPPQODSKXYUHUYYX9R9QEHPAOLIYCNTWONCIBIZKBJTBM9
OQRJJB9MJFOLGALRYNAUNZCRQOZGRQPHTRNGNWLPPNGETIU9JVQNRSOEICJOGLQVPLCMHEBZSHNI9UJQWQXVFENLBB
LDTTG9WKOACCGCPFZRPYAOYTRBVVOKC9QUKK9PVHCPKLQOVPSTJJZ9CPKETNCXDANPMQQPIKQTDJTDJY9VFCNZRVAB
ZRSUEFIEJJVMLGTLHWQ9JNXDIAGSESRMBJWWUD9UHBUOUI9BWDNTOZYUTYQHIWFNXXNUGEWWMCOFHRPKDAREL9RXAD
AEYTTPPXPKVREJ9LGR9NU9KXCOFYDTJKWMNIWJTJBSRFFKDDSELFRAYKDHJIPWHUUYHWSQAEDUAJAQPTDZNARLX9TB

=============================
Please post the address to which your stolen balance was sent.
We can contact the exchanges and attempt to have these addresses blacklisted before the thief is able to move from IOTA into another currency. Time is of the essence.
(Thanks to Alexa, all addresses up to the bottom of page 12 have been included here. If someone can compile the addresses after that page, that list will be added here)


Also, let's try to look into the details of this situation as much as possible. If you decide to take legal action, please also post with advice for others who are considering doing the same. Let's all help each other out. The thief will get away with this if nobody decides to take action.

Edited Last Year by Winston
Rajiv Shah
R
Attached to Tangle (327 reputation)
Group: Moderators
Posts: 14, Visits: 0
I sent an email to namecheap (the registrar), let’s see if we can get them to take the site down
Alexa
Alexa
True IOTAn (8.9K reputation)
Group: Moderators
Posts: 687, Visits: 1.3K
Here's another address he sent funds to (not mine): GAHJVAHMGEGOES9XECPGBUCYHETYGCPZX9EIHERQGXIHTFFWHY9FMUZCEGBZOBQRNJUEJOLKRPAZENDBDVKRXUUFRD  

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
Winston
Winston
Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)
Group: Administrators
Posts: 3.5K, Visits: 6.6K
Alexa - 21 Jan 2018
Here's another address he sent funds to (not mine): GAHJVAHMGEGOES9XECPGBUCYHETYGCPZX9EIHERQGXIHTFFWHY9FMUZCEGBZOBQRNJUEJOLKRPAZENDBDVKRXUUFRD  

@Alexa
Thank you, Alexa. This address has been added to the list.
proto
proto
Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)Attached to Tangle (260 reputation)
Group: Forum Members
Posts: 5, Visits: 3
SWBPUHLCUQYVWPRHMFMCPRYWUBCGK9OO9GPKB9BLQABGSZGKKUDEUJIIJLPQWSSJXGHJYHUHIBZLXROOYJKMKLSOZX
This was reported as a thief address on Telegram January 18th around 8-9 pm PST

KGBJEUNTGKSUTV9QCRDYQTQFGNLKQXVFLJQUERTAPIGKYFVDXQRUHANJNMXLAQQAIMIGVTHKEKQNNN9EXDAVCZFBF9
This one was reported on Telegram shortly after the first one


PickleNick
P
Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)Attaching to Tangle (9 reputation)
Group: Forum Members
Posts: 3, Visits: 0
Lazyrudi
L
Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)
Group: Forum Members
Posts: 51, Visits: 1
Hi everybody, my 10GI have been sent to:
KNHKJLETGSDLJSFFDSAAEGTEIHHLMWOGXVEDEPUPXTYMVHEVWLEBAABTNMFBEM9MDPONNJGY9WQCBFVNWFIRVDHRTW
It is ok to put the reception-address on a blacklist, but I am more interested in the action IOTA is going to take to get the money back in my wallet. I have used the IOTA Seed-Generator (not a third party product) assuming that it is a internal and save system like the PIN / TAN generator from my Bank I have to rely on. 
Regard Rudi
Alexa
Alexa
True IOTAn (8.9K reputation)
Group: Moderators
Posts: 687, Visits: 1.3K
Winston - 21 Jan 2018
Alexa - 21 Jan 2018
Here's another address he sent funds to (not mine): GAHJVAHMGEGOES9XECPGBUCYHETYGCPZX9EIHERQGXIHTFFWHY9FMUZCEGBZOBQRNJUEJOLKRPAZENDBDVKRXUUFRD  

@Alexa
Thank you, Alexa. This address has been added to the list.

Thanks Winston!
Here's three more (picked from this thread: https://forum.helloiota.com/9019/HELP-my-IOTA-is-just-about-being-stolen) 
1. ZPXFSDGOOWBWCNKAONOUZEEEZFPKCPMZZOZWWJLPHQKGRLBOAG9KMJLKXILSGTWZ9CNPMGWHTIDTFYQXYXOOVQFSOA

2. BUEMMMQAGPKCCBSVFYVKOYGCBYHXLDAYTYOFRYYYJSBFVVWHEGPACPTVFOEFXVIDEEWGYZRWXXHHURYEBQPTUEM9OD

3. UBLQW9YPXHZ9ZOURWYWKSYFQEWFRYFIBJYXQQAYHOSQYGSLLRUNPNPPKIIAEET9WKF9RNTUIUFJVVV9YDLHKIRICLZ

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
RFID
R
Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)Attaching to Tangle (7 reputation)
Group: Forum Members
Posts: 1, Visits: 2
Thanks Winston,

I had 1.1Gi stolen that ended up at this address
MYFQ9GTCQFLFAQEOXEVYNJSHYFQHGKE9HGWMZVR99BUZJWHYALUYMWYJEBTWGF99RCYZCBUVYMSCJEYWW

Here is the TX if that is of any help
HWEPSMUGIOBBDKQ9YRQDNSLAFJELV9MIZRROEZTXYWEXBIPDAQGCGGO9CEECIULDDWNREGKVPAPI99999

Max
M
Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)Attaching to Tangle (186 reputation)
Group: Forum Members
Posts: 2, Visits: 65
My 1.89Gi have been sent to

RGAWHCLYZFLPHTALTVQAJDYPULAGVCNKNTJY9DQTSVHNYEHNGJLTLBNOWASQRYEGYOLWFBZSLGGVPWFBBRIOJKCNW9

and

HYIYQMPOZSQT9WBGANFMCAQUEMBA9VOYLLG9HXZIHBDRJRFWANEFWULW9PKHMONLUCMWYTLRQARZMKQZDPCADNUVKC

Thanks Winston
fvantom
f
Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)Attached to Tangle (925 reputation)
Group: Forum Members
Posts: 57, Visits: 1
This should be automated. Via the tangle it should be possible to automatically tag and follow the progress of the stolen funds. Thus creating a list of addresses they are currently on based on a list of initial addresses they were taken from.

If I find the time in the next few days I will try to cook something up I can put online.

I encourage other developers to also implement this idea. Is there anyone interested in teaming up for this?
FrankB
F
Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)
Group: Forum Members
Posts: 6, Visits: 60
4.7 Gi
https://thetangle.org/bundle/9LKIEFANWKNDJFJIHVZHRZBJRQHIQGGBXJJHFEPHGHDEKKNT9GXKLQIJBXKGBRXQUVUHGPQFPDJYLHJSA
I tried to post but got a Spam notification. I tried to mention that I am on Reddit as HowAboutFrank
Lazyrudi
L
Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)
Group: Forum Members
Posts: 51, Visits: 1
Sorry when I disagree with @Ralf, but when opening an IOTA Wallet the IOTA-System (not a third party) is offering the opportunity, instead of typing 81 character in a specific order by yourself, to use an (from my point of view) approved, save and not traced random Seed-Generator. Therefore it is my responsibility to keep the generated seed in a save place, but it is also IOTAs responsibility to avoid misuse the generated seed.

From what I can see (using IOTAsear.ch) is that a lot of stolen coins are still at the thiefs-addresses, giving IOTA a chance to get the money back on an official way but I also expect that IOTA is bringing/giving back the money which the thiefs already transferred out of the IOTA environment.
ezeee
e
Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)Attached to Tangle (519 reputation)
Group: Forum Members
Posts: 14, Visits: 1
Absolutely agree with Lazyrudi. Sure, i lost 56.7 gIOTA two days ago.. :-(

Here's the transaction:
https://thetangle.org/transaction/ZVPEVADAUMVFLENBFKKPMC9QPFXGJMLVMHQCQCS9UNS9ILQ9PWMLCQIOHCRIFMISEAIDNXQSESJNZ9999

The address my IOTAs sent to:
HNECRND9HUSYPLIWULZKYQWLGZFMOVPTTWTNBOWAXFVXZW9HFPOYWIYIXFRZKDVATZJGJFDOECFSXSVVZZUPDHOPXA

Does anybody have another ideo how to get back my IOTAS??

Thanks, Thorsten
Lazyrudi
L
Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)Attached to Tangle (602 reputation)
Group: Forum Members
Posts: 51, Visits: 1
OpenMedia
O
Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)Attached to Tangle (302 reputation)
Group: Forum Members
Posts: 16, Visits: 0
Thanks for the heads up and your effort!
My 5 Gi were stolen and sent to FBA9KYTDEFIERJSYKSIMCBCZM9UKBCL9QKDTAPUHHVVAWMOGTDGNDRHIBDWTRGOWDOJDKYJFJCIPJNJH9SUOIKFBRA


Alexa
Alexa
True IOTAn (8.9K reputation)
Group: Moderators
Posts: 687, Visits: 1.3K
proto - 21 Jan 2018
SWBPUHLCUQYVWPRHMFMCPRYWUBCGK9OO9GPKB9BLQABGSZGKKUDEUJIIJLPQWSSJXGHJYHUHIBZLXROOYJKMKLSOZX
This was reported as a thief address on Telegram January 18th around 8-9 pm PST

KGBJEUNTGKSUTV9QCRDYQTQFGNLKQXVFLJQUERTAPIGKYFVDXQRUHANJNMXLAQQAIMIGVTHKEKQNNN9EXDAVCZFBF9
This one was reported on Telegram shortly after the first one


@Winston @rajivshah
This second address' balance has been emptied and funds have been moved a few times. Everything ends up as the only Input in this bundle with 22 Outputs: 
https://thetangle.org/bundle/ULSVTFCLCK9IZOBJJIZQBUXUCFLF99RHBOLPWEEQZWFJWVTUGEEF9QBVORPKADJG9BLSKWFHAJYCQEFNW
From here, the last Output address always leads to a new bundle with again 22 Outputs...
To me it looks like what exchanges usually do, this guy is trying to move fast. Can we somehow tell which exchange it is and who can we contact to get at least those addresses blacklisted, that still do hold stolen funds (all of the four in your first post still do!)? 


I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
CocoPhoenix
C
Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Thanks for all the help!!
My 3.7 Gi was stolen and sent to this address

RSWLBA9LDJH9FWFPTBRHDBAQAAH9DDWCVF9CVJIWNBYXMRYQPXZ9TIZOUEHLKRBJEYDAWSHMYBHL9AQZANBDKEQMOX

Frank
F
Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)
Group: Forum Members
Posts: 8, Visits: 3
Mine was sent to:
MKPMJQSEURTQMCFXBEIXAUXZRHYQCWTVOTROAUAZWPNZYJRSXGZHMHZIWWAEVHJVGV9TWLCOZUXBMETKXODAAODZVD
4.512742493 Gi
There are not so many exchanges who have IOTA listed.


FrankB
F
Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)Attaching to Tangle (153 reputation)
Group: Forum Members
Posts: 6, Visits: 60
4.7 Gi
(3rd attempt to post). Earlier got messages of spam. I will remove URL''s
9LKIEFANWKNDJFJIHVZHRZBJRQHIQGGBXJJHFEPHGHDEKKNT9GXKLQIJBXKGBRXQUVUHGPQFPDJYLHJSA
Thanks for this initiative!
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...




Reading This Topic

Login

Explore
Messages
Mentions
Search