By nickvdg - 28 Jun 2020
Back in early 2018 I bought some Iota and transferred it from Binance to my Iota Lite wallet. I've looked in the Iota Lite wallet a couple of times over the years but haven't moved any funds in or out since then. When I went to log in today I could connect with Iota Lite and downloaded Trinity, set it up and triple checked my seed and check sum. My account showed a zero balance. After a bit of searching around I performed a manual synch and several snapshot transitions. It still showed a zero balance. I found the 2018 transfer confirmation email from Binance and the receiving address matches the address that now shows up in my Trinity account (in red with a line through it) the only other address is one in white above that. I searched the Binance to Iota address on Tangle.org but nothing is found. Trinity is still showing a zero balance. Does anyone have any suggestions as to what's happened or what I can do to fix this? I'm pretty sure the balance would be quite small, but I'd still like to have my Iota! Thanks for any help you can give.
By CryptoHamster - 28 Jun 2020
thanks for your post and welcome to Hello IOTA!
It’s impossible to tell you what might have happened with so little information.
What we can say is that if your address is red and crossed out in the „View Addresses“-list that means that the seed you’re using is correct, but your funds have been sent away from this address. Can you please post this red address so I can copy it (no screenshot)?
To see where the funds went, we'd need to have a look at the outgoing transaction.
You might not be able to see the this transaction in your history though, because most nodes don’t keep the entire history as the database just gets too large over time. In order to see rather old transactions in Trinity you’ll have to be connected to a node that kept old transactions.
Please try this „Trinity Settings“ -> „Nodes“:
If this one doesn’t work, try some other nodes. After you changed the node do Manual sync again, wait for 2 minutes and see if something pops up in your transaction history. If so, please post the bundle hash here so we can have a look.
Do not ever post your seed anywhere!
By nickvdg - 29 Jun 2020
Hi @CryptoHamster - thanks very much for the quick reply. I connected to all the working primary nodes on the list as you suggested and the only change was that the address that was in red and crossed out is now white. That address was the one that was in the original 2018 confirmation email from Binance confirming the withdrawal from Binance to that address. I haven't touched the funds since. When it was red I tried searching for info on it on Tangle but couldn't find anything and can't understand why it's now turned white from red after the Manual sync. The balance is still zero. Here's the address:
Thanks again for your reply and help!
By CryptoHamster - 29 Jun 2020
thanks for posting your address, that helps clear things up.
The address being white in Trinity now indicates that the node you’re connected to now doesn’t seem to know that your address has been used.
Your account was synched when the address showed red and crossed out and is not synched when it's white. Depends on the node it seems.
It doesn’t matter much though, because you and me know that you've used the address.
Unfortunately it’s become quite hard to track down funds lately.
thetangle.org doesn’t use a permanode anymore and therefore events that happened too long ago sometimes won't be found on thetangle.org.
However, with a different tangle explorer we can find your address:
We can see that your 115 MIOTA arrived at this address on January 7th 2018 and left the address shortly after on January 19th 2018.
Here’s the transaction that shows where your funds went:
They ended up on this address: HURWQIBSAEVZSBCK9LSYCVR9ZGOCSHHQIENAZURGCVCKXEMYIGHTYQQDRHJNUNPEIKIDKQTABQNFOWUMADSCRBWLXW, which unfortunately also isn't found on either tangle explorer. But this address does have a known connection (more about this later) to this incident:
So. I’m sorry to say it, but your funds have been stolen from you because you’ve used a phishing website to generate your seed.
The good news is that the thief got caught last year:
The malicious website has since been turned into an educational website and you can read the details about how the scam worked here:
https://iotaseed.io/iota-seed-generator-scam/. There's also got a pretty cool video showing the suspect’s arrest.
Now, please try to understand why your funds could get stolen like this so you can make sure that such a thing can never happen to you again.
If you want to know what you need to do to get your funds back, please scroll down a little bit to read my post in this thread and follow my advice (the green post, marked as „Answer“):
Down at the bottom on the same page someone also posted an update about the ongoing investigation recently.
On page 1 of that thread we've listed the HURWQIB... address where your funds went, which means that at least one other victim had their funds sent to the same address. That's how we can connect the address to the scam, even if we can't find it on the explorers anymore.
I’m sorry that you’ve lost your funds, I really wish I could have delivered better news.
By nickvdg - 29 Jun 2020
@CryptoHamster - Thank you so much for all the detective work. I figured they'd been stolen as all my other cryptos have been parked up safely (so far) in a couple of wallets. I'll read your post thoroughly as I was obviously completely unaware that the seed was generated on a phishing site. I'm glad this was a small amount to lose compared with some I've heard of, but it's still annoying. Thank you for the information - I'm off to learn more!
By CryptoHamster - 30 Jun 2020
Yeah, I’m also glad that you’ve not lost as much as some other victims.
Still sucks, but I guess seeing this as an opportunity to learn is the best you can make of it.
You’re very welcome.