Quote from: den_penta on January 11, 2018, 11:29:51 AM

So, hope it helps someone. Some details:

1. It was MEW wallet.
2. Nothing special happens last month.
No transactions.
3. WiC was bought on ICO and stored here from this time
4. There was just very little ETH on wallet AND! someone send 0.01 ETH, withdraw WiC and after that withdraw rest of ETH (0.0088)

This thief:
https://etherscan.io/address/0x5e4abe6419650ca839ce5bb7db422b881a6064bb
works right now with tons of transactions every 3~5 minutes!

Don't know what to do to stop it

Just a couple of questions.

-You didn't made any transactions you said last month, but did you log in to MEW with your json file (or any other means)?
-you mention the thief as https://etherscan.io/address/0x5e4abe6419650ca839ce5bb7db422b881a6064bb
but the transaction you showed was:
https://ethplorer.io/tx/0xf991bce92f86e3e890fc1ec0bdf35bf746fc1d6aed24182d07884202a63f4ed2
that has as receiving address:
https://ethplorer.io/address/0x4f00b95c625c6d6ef72748d78c750fd6c84a8b85
Are you sure about that 0x5e4 address?

that 0x4f address just has 2 WiC transfers:
on 2017-11-20:
https://ethplorer.io/tx/0x0dd179d358b194c7cc05bcd6a0455ee0869b693c63030ce17214bdeac5352abc#pageSize=25
and yours 2018-01-05:
https://ethplorer.io/tx/0xf991bce92f86e3e890fc1ec0bdf35bf746fc1d6aed24182d07884202a63f4ed2#pageSize=25

however, address 0x4f00b95c625c6d6ef72748d78c750fd6c84a8b85 contains a lot of different tokens it looks like it is most likely that you are phished and not caused by a fault in a contract as it would give a lot more WiC transactions to that address.

As 0x5e4abe6419650ca839ce5bb7db422b881a6064bb just brings you to the token/contract address that gives an overview

edit: the date of the transactions were wrong by mistake