Quote from: Freewallet on October 13, 2017, 04:08:32 PM

Quote from: adaseb on June 13, 2017, 12:21:41 AM

Found this on Reddit. No idea if this is the correct category but apparently FreeWallet.org is redirecting everyone's payments to their own personal wallet.

https://etherscan.io/address/0x11b85b4e2fadaebe04a251377aa35b9be3c785f0

So far $8 million stolen.

They also have a Bitcoin, Dash and Monero wallet. Their website seems to be professionally done so it seems many people are affected. If you use this wallet, immediately withdraw any funds.

People love catchy headlines! $8 million stolen... oh wait, it was $7 million... oh wait, but from whom? If you read the original thread on Reddit, you'll see that there's not a single person who actually lost money with Freewallet! The reason our users got worried is because they checked their wallet balances on the blockchain explorer and found out the funds aren't there. However, the address displayed in the app is a so-called "hot wallet" used for receiving transactions. We consider keeping the funds there as well as storing private keys locally a risk because if the access to your device is compromised, it would give a hacker an opportunity to steal your assets.

That is why after our user receives a transaction, the funds are moved to the cold storage. Whenever he/she needs to make a transaction, the funds are transferred from the cold storage as well. Their actual balance is displayed in the app; what people see on a blockchain explorer is most likely an intermediary transfer of funds in/out of the cold storage (and our users aren't charged with any fees for such transactions). That's exactly what it was: rebalancing between different cold storages. Not piping their funds to an outside source.

The's rather obscure then since I've received an email today informing me that I should reset my wallet on your site. Catch is, I don't use online wallets, never have and I am confident that I also never signed up with your site. It also wasn't a phishing email since I looked at the full email header and double checked the link to your site.

http://prntscr.com/hb7gh6

So tell me, where the heck did you get my email address and why did I receive said email?