Quote from: TheArchaeologist on November 24, 2021, 02:14:58 PM

Based on the cryptic topic and answers I think this is what the OP means:

He/she is the one who did the funding of the address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d in these two transactions:

Code:

a2bfe07be82c1899ffc5a6c5893a11f8e1437d6a580ed23381fa2e2cfea2bbba -> 0.00066895 BTC
9866a78cf47602b2dd5eeaf0c3803e871bcf9cf45d133d54ecc9eaf29f9d0cd3 -> 0.00185822 BTC

Then shortly after (next day) the output of these transactions were sweeped:

Code:

327f06e4cf65a83207c466f50ecb079c2c546e3e589da6423cb764dfe15b5e4e -> 0.00055000 BTC to 39brUscpDr5WZCCpVDPePBov8iYf1kdeux
bc1963fdc3ef014177325c13a617ed73fac842f49405e89a50e18338f2c3710d -> 0.00175432 BTC to 132TRb6k6P689LKToerukdBEwperP6bBdx

My analysis is also based on the fact these sweeping transaction are having a really high fee because the attacker wanted to be sure the transaction is included in the next block. So yes I think OP means he funded his/her address 1E6EcVz1eXAaafV3U4hJNvAYqGKQ1pdW2d twice and both times the funds got sweeped the next day. In that case it does indeed seem the wallet used is compromised.

The point of being swept is a great point I'm going to look into some details in the source and how it has changed over the last couple updates and its vulnerabilities in some of this point brought forward

Thanks TheArchaelogist you on the target here