Post
Topic
Board Bitcoin Technical Support
Merits 7 from 3 users
Re: Sending amounts > in wallet empties wallet
by
TheArchaeologist
on 24/11/2021, 14:14:58 UTC
⭐ Merited by o_e_l_e_o (4) ,ETFbitcoin (2) ,RickDeckard (1)
Based on the cryptic topic and answers I think this is what the OP means:

Code:
He/she is the one who did the funding of the address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d in these two transactions:
a2bfe07be82c1899ffc5a6c5893a11f8e1437d6a580ed23381fa2e2cfea2bbba -> 0.00066895 BTC
9866a78cf47602b2dd5eeaf0c3803e871bcf9cf45d133d54ecc9eaf29f9d0cd3 -> 0.00185822 BTC

Then shortly after (next day) the output of these addresses were sweeped:

Code:
327f06e4cf65a83207c466f50ecb079c2c546e3e589da6423cb764dfe15b5e4e -> 0.00055000 BTC to 39brUscpDr5WZCCpVDPePBov8iYf1kdeux
bc1963fdc3ef014177325c13a617ed73fac842f49405e89a50e18338f2c3710d  -> 0.00175432 BTC to 132TRb6k6P689LKToerukdBEwperP6bBdx

My analysis is also based on the fact these sweeping transaction are having a really high fee because the attacker wanted to be sure the transaction is included in the next block. So yes I think OP means he funded his/her address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d twice and  both times the funds got sweeped the next day. In that case it does indeed seem the wallet used is compromised.