Quote from: 3krb on Today at 04:02:28 PM

Quote from: confusedidiot on August 03, 2020, 11:07:39 AM

Hi all,
just logged into my ledger to see a zero balance. I am not great at reading the blockchain transactions, could someone help?

I have 3 transactions I don't recognise.

First this one with 0.249 btc being transfered to me - https://blockstream.info/tx/a79f7ad72da35ea61731852efe39d3ace74dc7e92323a861581f31f01ddf1578
Second with me transfering 0.01 btc to another address - https://blockstream.info/tx/19af75549cecada158a77614c813361371adbb13e731a9c3ab3dc6ea0ee42fab
Third with me transferring 0.4499 btc to another address - https://blockstream.info/tx/a7cab7007fbee0e06d28e9635d442629ed4f0ec08af00453d56b305d8956387c

does this look like its been stolen? the third one seems to get split into many different addresses? I'm not sure if I'm reading it right. it's either this or I did the transaction and forgot where I sent it (unlikely). It confuses me why if this were being stolen, they would transfer 0.249 btc to me before stealing the balance

thanks for any help

I'm sorry this happened! I hope you've resolved the issue that led to the theft so it never happens again.

Your funds were sent to the mixer Wasabi wallet bc1qh6h8fxnldvm78gtpm00jjun5suwx2mn2jt7qm2 and commingled with 65 UTXOs--likely other victims. The funds were split into even transaction amounts--0.10791 BTC, with the exception of 1 output of 10.45923 BTC which was sent through the mixer again. There are hundreds of victims from what I can see. The funds are split from there; commingled; and sent to other private wallets and exchanges.

I'm not sure which hardware wallet you are using, but there is a clear exploit happening. You stated you made a mistake, saving the info--but I'd still contact the company and let them know what happened. They can't do anything, but you can raise their awareness and perhaps they can write a blog on how to protect private keys when using their wallet.

They don't market themselves as a mixer, but effectively that's what they offer. Their purpose is to obfuscate funds. And true, not ALL of the addresses are vics.

Ok--not an exploit--using this term liberally. Meaning, malware on OPs mobile exploited a flaw in OPs security.

I found this on Ledger's site: https://support.ledger.com/hc/en-us/articles/360005514233-Secure-your-recovery-phrase-PIN-code They do say never to take a photo of the 24-word recovery phrase. They have an "In the News" section where they highlight relevant information. A blog on security pinned to their front page might be a nice addition--Not everyone hops on forums, not every customer understands security. It's a kindness. Getting information out there is useful to the entire crypto community--we want this to succeed, I assume, and the community to grow. So do these companies. The more visibility/education on scams, fraud, security best practices--the better for all.

I hope this info is useful to you, OP. Again, very sorry this happened. Wishing you the best.