Digital Wallet Security Help

Hi all I’ve now had crypto stolen from my MetaMask wallet twice now, out of different wallet addresses. I can’t figure out where the leak is, is there any chats or forums I can get some live help from??

You would have shared the pass phrase or private keys with someone and / or with some malicious type of website(s) and / or you have some malware in your device which steals through malicious copy/paste of addresses. (Also note there is a Cryptocurrency section in BHW where you can get information about cryptocurrencies and also post your crypto related question there).

You mentioned that you had different addresses. When this happened, did all of your crypto assets get stolen all of a sudden, or did particular transactions get stolen?

Juhku said:

You mentioned that you had different addresses. When this happened, did all of your crypto assets get stolen all of a sudden, or did particular transactions get stolen?

Click to expand...

All of it got stolen at once. I really don’t understand. I haven’t shared any passwords or phrases with anybody, the first time this happened, I created a new MetaMask wallet on my device in a new account. I also installed ExpressVPN and installed TotalAV software. Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone. I don’t understand how they have access. It’s almost like someone is mirroring my device. Is that possible? How do I know?

Blackfeather9999 said:

All of it got stolen at once. I really don’t understand. I haven’t shared any passwords or phrases with anybody, the first time this happened, I created a new MetaMask wallet on my device in a new account. I also installed ExpressVPN and installed TotalAV software. Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone. I don’t understand how they have access. It’s almost like someone is mirroring my device. Is that possible? How do I know?

Click to expand...

I'm afraid I'll need a bit more information before I can suggest any solutions to your problem.

Were you using any sort of VPN at the time you created your MetaMask wallet?
Do you have any unrecognizable or refurbished devices connected to your computer?
What operating system are you using?

This gives me nightmares sometimes. Crypto can be brutal. That's why it doesn't hurt to spread your money a bit around gold and Jack Bogle's VTSX. Silver bars and resource rich land are good too if you can afford the latter. Even the most evil fucker Billy Gates has bought farm land.

But whatever you do, don't put your money in the banks. That's retarded and just asking for trouble.

Juhku said:

I'm afraid I'll need a bit more information before I can suggest any solutions to your problem.

Were you using any sort of VPN at the time you created your MetaMask wallet?
Do you have any unrecognizable or refurbished devices connected to your computer?
What operating system are you using?

Click to expand...

I don’t think I had the VPN on when I first created the wallet not sure really, but I definitely had it on today. No unrecognized devices. And I was using it through the app on iOS

Blackfeather9999 said:

I don’t think I had the VPN on when I first created the wallet not sure really, but I definitely had it on today. No unrecognized devices. And I was using it through the app on iOS

Click to expand...

I see.
Do you remember how you were connected to internet at the time?
Where did you download MetaMask to your iOS device, and is your iOS device jailbroken/rooted?
Have you installed any configuration profiles to your iOS?

Juhku said:

I see.
Do you remember how you were connected to internet at the time?
Where did you download MetaMask to your iOS device, and is your iOS device jailbroken/rooted?
Have you installed any configuration profiles to your iOS?

Click to expand...

I was connected via internet Wi-Fi. I’m not sure if my phone is jailbroken I believe it is and no configuration profiles have been added.

I see.

If your phone is not jailbroken,
I'm suspecting that you were a target of packet sniffing. To solve that issue, don't connect to unknown unsecure Wifis, and use a VPN at all times.

However, if your phone is jailbroken. It is far more likely that, that is the issue.

Juhku said:

I see.

If your phone is not jailbroken,
I'm suspecting that you were a target of packet sniffing. To solve that issue, don't connect to unknown unsecure Wifis, and use a VPN at all times.

However, if your phone is jailbroken. It is far more likely that, that is the issue.

Click to expand...

Interesting. How would the issue be if my phone is jailbroken?

Blackfeather9999 said:

Interesting. How would the issue be if my phone is jailbroken?

Click to expand...

With a jailbroken iOS, you have the access to grant 'bad guys' full access to your phone via sketchy repos.

I may be too focused on the semantics or minor details here but you mentioned how ...

the first time this happened, I created a new MetaMask wallet on my device in a new account.

Click to expand...

For the sake of clarity, I assume "new account" was either you referring to an a)* a new Apple ID "account" while on the same device or, you meant b)* a new MetaMask account was created where you signed out of your original MetaMask wallet+account which previously had funds stolen while signed into the iOS device and went about to create a new Metamask account and New Wallet within but from the same iOS device, and/or more importantly, with the same AppleID account signed in. This may or may not be relevant but I'm supposing it's more likely b?

*1. Defining the reference for making a "new account" refers to the reason prescribed as part of a) a MetaMask Account or b) an Applee ID account?

Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone.

Click to expand...

For all the precautions you took, this does seem to be out of the ordinary, so bear with me if I ask you some very 'obvious' questions while listening for very specific answers, as a problem that is unique will have unique characteristics that may sometimes be assumed and/or taken for granted and presumed, so I only ask for the sake of clarity and to rule out other possibilities so that it may serve the purpose of helping you realize what it is or how to prevent it.

2. When you say you "put in some funds" do you mean you sent funds from another wallet you own, such as the 'wallet' holding your funds on an exchange or perhaps another "cold" wallet of som of some sort where you sent yourself? And type offunds did you send? Were they Ethereum (ETH), ETC20 tokens (i.e. Tether, BNB, LUNA, Pokedot, etc.), or was it some other blockchain asset such as Bitcoin?

3. When you say, "later all of it was gone" is it safe to assume you mean the funds were all transferred out? All transactions on the blockchain are inherently public and traceable. Granted you won't be able to identify them, looking up the address might help provide clues in either helping determine where your funds went, why it's not appearing, or might help find the malicious code that is stealing your funds. So if it is, could you provide the transaction IDs or the addresses to provide you with more insight on the matter?

Blackfeather9999 said:

Hi all I’ve now had crypto stolen from my MetaMask wallet twice now, out of different wallet addresses. I can’t figure out where the leak is, is there any chats or forums I can get some live help from??

Click to expand...

Hello, there may be a leak in your browser cookies. I recommend that you review it.

Many possible reasons can be there. Like your system is hacked. Someone is able to hack your emails regularly.

Ok, if my email is hacked how are they able to see my secret phrases for Meta? I ran a virus scan and didn’t find anything.

Buy some hardware wallet ASAP!