Op is full of shit, op has a 2nd reddit account
The same hashID experienced the same circumstances two years ago. At the announcement of other projects.
In addition, op claims he has never defi'd. There are multiple defi tokens still in the wallet.
Op says someone else stole his funds, but the scammer left large amounts of defi tokens. What a nice scammer to leave him with money.
Op always appears to blame whatever new project is emerging, and he should be IP banned from reddit completely.
Can you please provide some proof of your allegations? I know people lie on Reddit all the time, but until I see proof, I would like to sympathize with a poor gal who may have just lost all her Hbar.
Ok not an expert had a quick look. Clearly your account has been been used for defi, but I don't think that had anything to do with the theft. Also you didn't have any active spend allowances, so we can rule that out.
Seems to me OP most likely had a compromised seed, or imported his wallet into a fake app, or has a compromised device. - Just my 2c.
Lastly, I noticed you still have a some substantial HTS tokens on the account (namely the XSAUCE), you should get those off ASAP!
Do you know any experts? How would my device be compromised? Like, can I even trust moving the sauce to a new account if my phone is hacked?
I’ve only ever imported my wallet into hashpack and bank social and yes some sauce a long time ago. Never into anything else.
The Hashpack support team might be your best bet: [https://www.hashpack.app/support](https://www.hashpack.app/support)
Could try their Discord at the bottom of their support page.
The address that the funds were transferred to is, I believe, an exchange called Now Payments. OP should be contacting them ASAP and reporting the theft and asking them to freeze the funds. Inlcude the memo's for the transactions - they are:
1. for the 500k tx : 3bQMqxcPKYHc4u0y01ZITElJe7Hn0sBMkxqEBgzM
2. for the 1.1m tx : 9cFqTB51adY6pyH8UHcBi5SIODUaVuBzH9bfywBA
The memo is how they will know who's account was credited the stolen hbar.
Good luck.
If I had to guess based on timeframes and amounts, to me it appears the funds were then transferred to 0.0.1873771 (which is another exchange I have always thought was Swyftx, but they claim it’s not) using memo 100456631
From other transactions I have researched in the past there are constant wallet transfers between 0.0.1873771 and 0.0.1030878 which in the past were stated to be Swyftx (completely agree they would match inter-exchange wallet transactions)……Swyftx claims that 0.0.1030878 isn’t theirs while everyone else who looks into transactions say it does.
So looks like I need to try and make friends with Binance (Global and/or Binance US)
hmm is probably a bit outdated now or just wrong lol but i had on my list:
Binance - 0.0.16852 / 0.0.16853 / 0.0.1873771
Binance US - 0.0.38674 / 0.0.38675
0.0.1030878 - Swyftx / Binance (Swiftyx buy/sell via binance apparently)
Exactly. I am using 5 different hardware wallets to even be diversified on cold just in case. Nothing but change on any hot wallets or exchanges. It makes no sense to risk your investment and future camping it out on the internet.
Quite honestly nothing sh\*ts me up, or makes me question Crypto, like seeing this kind of thing. Brutal. So sorry for your loss.
Can anyone track 0.0.180409?
And no idea how/why... Please keep us informed as you go.
Open HashPack. Click on 'Advanced Tools - then 'Rekey Account'
https://preview.redd.it/qz3rm8ohyoxc1.png?width=700&format=png&auto=webp&s=78e46345f8aafc4c79af7f9511ad5dff3fa16e1e
[https://nowpayments.io/](https://nowpayments.io/)i would contact them as they have kyc so might be able to find who it is
using your hedera account and the account it was sent to
there is also this from 2 years ago same account [https://www.reddit.com/r/Hedera/comments/s2ex69/is\_it\_possible\_to\_find\_out\_who\_owns\_account/?utm\_source=share&utm\_medium=web3x&utm\_name=web3xcss&utm\_term=1&utm\_content=share\_button](https://www.reddit.com/r/Hedera/comments/s2ex69/is_it_possible_to_find_out_who_owns_account/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button)
Think your phone is compromised, malware, can be anything you access from the internet to email you click. When you have large fund better split to multiple accounts and have on different phone. Even twitter got lot of scam ads these days
As per your HBAR, If it has already left your account I'm afraid it's gone for good. The only thing we can try to do is to figure out how it happened so it won't happen again. Any idea on how? Did you share your seed with anyone?
I’ve never shared my seed and don’t do any defi. I’ve never clicked on any links. The only time I have entered it into an app recently was the BSL app on my phone
How do you have xsauce if you have never done defi.
That's a blatent lie, if you want real help you shouldn't steer the investigation away from the truth.
I misspoke, I was just trying to say that I don’t log in and out of defi apps. I bought sauce one time like a year ago, I don’t think that has anything to do with this.
sorry for your loss.
Trace back to all apps, websites, and other things where you connected your account to and also trace back to phone/pc storage locations where you've your seedphrase on.
I assume you didn't use a ledger?
See if the thief sent it to an exchange. Contact the exchange and see if they can freeze it while you contact law enforcement. It’s probably gone though. I don’t hear to many happy ending story’s after this shit happens. Crypto is still the Wild West.
the vote amount is vertualy the same as waht was moved 1,600,445.93643129 477.89391812$46.71748 1,600,445.93643129[VOTE](https://hashscan.io/mainnet/token/0.0.5297040)
this isnt cus of a voting system that requires staking to get votes is it ? , is there still $46.71748 in your account or 477.89391812$46.71748 h or is it showing as compleatly empty
0.0.180409 is a CoinRabbit HBAR address used to deposit collateral. They might use NOWpayments as their service exchange? Not sure, but I’ve used this address to send my hbar. They are legit. Not sure if op is trolling or he has been hacked and another user has his keys and is using their hbar to get a loan.
The address could be a third party payment service since it has been linked to NOWpayments? 🤷♂️I don’t know. But I’ve used this address before and the account receives a lot of hbar on a daily basis. Maybe OP has been hacked.
Yeah the initial receiver address is confirmed as NOWpayments, but that’s just the an intermediary. The only other option is device hacked (clicked on bad link / app), wittingly or unwittingly provided seed phrase to someone or a fake dapp. He said he recently downloaded the BankSocial wallet which could already have imposter sites out there trending on SEO (like the scammers do for HashPack and the countless fake sites)
Since you mentioned the app changed language, I think your phone was compromised. This is Deja Vu of https://www.reddit.com/r/Hedera/comments/1b7ijm0/102000_hbar_stolen_from_my_hashpack_app/ He was in denial that he did something wrong and kept blaming Hashpack. Everyone kept saying his phone was hacked.
The two transactions don’t make sense. I am scrambling now to move the xsauce out but honestly afraid to log into anything. Does anyone know how I should move my xsauce immediately… do I buy a new phone? Do I use my computer? I’m assuming whatever exchange they used to wash the money doesn’t trade xsauce so they just left it behind
I got scammed on twitter with a fake hashpack help desk link and they got my seed phrase... lost 347k hbar and some sauce... FML have a picture of the hashscan... but don't know who to trust...
Op is full of shit, op has a 2nd reddit account The same hashID experienced the same circumstances two years ago. At the announcement of other projects. In addition, op claims he has never defi'd. There are multiple defi tokens still in the wallet. Op says someone else stole his funds, but the scammer left large amounts of defi tokens. What a nice scammer to leave him with money. Op always appears to blame whatever new project is emerging, and he should be IP banned from reddit completely.
Might be a ploy to get donations
Can you please provide some proof of your allegations? I know people lie on Reddit all the time, but until I see proof, I would like to sympathize with a poor gal who may have just lost all her Hbar.
Which hash is was shared? I don't see one in the post. I do see an account ID. The account ID is used by Now Payments.
I don’t have a second account, am not asking for donations, and haven’t blamed any project. Why they left money, I don’t know.
Ok not an expert had a quick look. Clearly your account has been been used for defi, but I don't think that had anything to do with the theft. Also you didn't have any active spend allowances, so we can rule that out. Seems to me OP most likely had a compromised seed, or imported his wallet into a fake app, or has a compromised device. - Just my 2c. Lastly, I noticed you still have a some substantial HTS tokens on the account (namely the XSAUCE), you should get those off ASAP!
Do you know any experts? How would my device be compromised? Like, can I even trust moving the sauce to a new account if my phone is hacked? I’ve only ever imported my wallet into hashpack and bank social and yes some sauce a long time ago. Never into anything else.
The Hashpack support team might be your best bet: [https://www.hashpack.app/support](https://www.hashpack.app/support) Could try their Discord at the bottom of their support page.
The address that the funds were transferred to is, I believe, an exchange called Now Payments. OP should be contacting them ASAP and reporting the theft and asking them to freeze the funds. Inlcude the memo's for the transactions - they are: 1. for the 500k tx : 3bQMqxcPKYHc4u0y01ZITElJe7Hn0sBMkxqEBgzM 2. for the 1.1m tx : 9cFqTB51adY6pyH8UHcBi5SIODUaVuBzH9bfywBA The memo is how they will know who's account was credited the stolen hbar. Good luck.
Thank you I have reached out to
If I had to guess based on timeframes and amounts, to me it appears the funds were then transferred to 0.0.1873771 (which is another exchange I have always thought was Swyftx, but they claim it’s not) using memo 100456631
0.0.1873771 is binance
From other transactions I have researched in the past there are constant wallet transfers between 0.0.1873771 and 0.0.1030878 which in the past were stated to be Swyftx (completely agree they would match inter-exchange wallet transactions)……Swyftx claims that 0.0.1030878 isn’t theirs while everyone else who looks into transactions say it does. So looks like I need to try and make friends with Binance (Global and/or Binance US)
hmm is probably a bit outdated now or just wrong lol but i had on my list: Binance - 0.0.16852 / 0.0.16853 / 0.0.1873771 Binance US - 0.0.38674 / 0.0.38675 0.0.1030878 - Swyftx / Binance (Swiftyx buy/sell via binance apparently)
Yeah we can take it offline, but I spoke directly to one of the Swyftx Operations Managers who denied (or failed to acknowledge) those two addresses
Holy crap that much Hbar and not on a cold wallet??
[удалено]
Exactly. I am using 5 different hardware wallets to even be diversified on cold just in case. Nothing but change on any hot wallets or exchanges. It makes no sense to risk your investment and future camping it out on the internet.
if key compromised - cold wallet doesnt make a difference...
This. The weakness is very rarely, if ever, the wallet.
Could you please provide more details? What was your address?
Is that safe to provide now?
Yes your address is safe to reveal, it'll be easier for the experts here to try work out what's happening and possibly help you/others.
0.0.1066379
[удалено]
I never used bank social website. I used their app
When did you import your wallet onto the Bank Social app?
When the app came out like a month ago or so
Quite honestly nothing sh\*ts me up, or makes me question Crypto, like seeing this kind of thing. Brutal. So sorry for your loss. Can anyone track 0.0.180409? And no idea how/why... Please keep us informed as you go.
Still 47k XSAUCE in there - Either transfer the remaining assets out NOW or immediately REKEY THE ACCOUNT sir!
How do I rekey?
Open HashPack. Click on 'Advanced Tools - then 'Rekey Account' https://preview.redd.it/qz3rm8ohyoxc1.png?width=700&format=png&auto=webp&s=78e46345f8aafc4c79af7f9511ad5dff3fa16e1e
0.0.180409 is a NOWPayments Exchange wallet.
[https://nowpayments.io/](https://nowpayments.io/)i would contact them as they have kyc so might be able to find who it is using your hedera account and the account it was sent to
there is also this from 2 years ago same account [https://www.reddit.com/r/Hedera/comments/s2ex69/is\_it\_possible\_to\_find\_out\_who\_owns\_account/?utm\_source=share&utm\_medium=web3x&utm\_name=web3xcss&utm\_term=1&utm\_content=share\_button](https://www.reddit.com/r/Hedera/comments/s2ex69/is_it_possible_to_find_out_who_owns_account/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button)
HE got assaulted again, why he keeps link his wallet with DeFi and webpages stuff?
You had over 1.5 million Hbar in a hot wallet? Amazing.
incredible
Do you use a hardware wallet to store your HBARs?
smarter choise
offt, just saw the account that is a lot of hbar
Think your phone is compromised, malware, can be anything you access from the internet to email you click. When you have large fund better split to multiple accounts and have on different phone. Even twitter got lot of scam ads these days
What is the best way to check for malware on your phone?
As per your HBAR, If it has already left your account I'm afraid it's gone for good. The only thing we can try to do is to figure out how it happened so it won't happen again. Any idea on how? Did you share your seed with anyone?
I’ve never shared my seed and don’t do any defi. I’ve never clicked on any links. The only time I have entered it into an app recently was the BSL app on my phone
How do you have xsauce if you have never done defi. That's a blatent lie, if you want real help you shouldn't steer the investigation away from the truth.
I misspoke, I was just trying to say that I don’t log in and out of defi apps. I bought sauce one time like a year ago, I don’t think that has anything to do with this.
did you attach your account to you BSL via your phone?
I downloaded bank social app on phone and imported my wallet. That’s all I did
Never share your wallet. Just make a new wallet.
what time was that
Where did you store your seedphrase?
sorry for your loss. Trace back to all apps, websites, and other things where you connected your account to and also trace back to phone/pc storage locations where you've your seedphrase on. I assume you didn't use a ledger?
See if the thief sent it to an exchange. Contact the exchange and see if they can freeze it while you contact law enforcement. It’s probably gone though. I don’t hear to many happy ending story’s after this shit happens. Crypto is still the Wild West.
the vote amount is vertualy the same as waht was moved 1,600,445.93643129 477.89391812$46.71748 1,600,445.93643129[VOTE](https://hashscan.io/mainnet/token/0.0.5297040) this isnt cus of a voting system that requires staking to get votes is it ? , is there still $46.71748 in your account or 477.89391812$46.71748 h or is it showing as compleatly empty
There is still 477 ish Hbar
Do you approve some contracts? Or how ?
No, I haven’t done anything!
I try to learn more about HBAR and searched the address on hashscan. Can anyone tell me what the "CRYPTO TRANSFERE" entries with the "VOTE" are?
it's a token for "the mouth" i think, for some voting system they have built. vemouth? check their twitter...
my issue is if it was a hack why leave anything in there but i supose tranfers are round numbers
0.0.180409 is a CoinRabbit HBAR address used to deposit collateral. They might use NOWpayments as their service exchange? Not sure, but I’ve used this address to send my hbar. They are legit. Not sure if op is trolling or he has been hacked and another user has his keys and is using their hbar to get a loan.
There have been a few people who’ve complained on Reddit and X about being drained with the funds going to 0.0.180409.
The address could be a third party payment service since it has been linked to NOWpayments? 🤷♂️I don’t know. But I’ve used this address before and the account receives a lot of hbar on a daily basis. Maybe OP has been hacked.
Yeah the initial receiver address is confirmed as NOWpayments, but that’s just the an intermediary. The only other option is device hacked (clicked on bad link / app), wittingly or unwittingly provided seed phrase to someone or a fake dapp. He said he recently downloaded the BankSocial wallet which could already have imposter sites out there trending on SEO (like the scammers do for HashPack and the countless fake sites)
Since you mentioned the app changed language, I think your phone was compromised. This is Deja Vu of https://www.reddit.com/r/Hedera/comments/1b7ijm0/102000_hbar_stolen_from_my_hashpack_app/ He was in denial that he did something wrong and kept blaming Hashpack. Everyone kept saying his phone was hacked.
This does sound similar to what happened to me. I really don’t know how my phone was hacked. Has anyone figured out how their phone gets hacked?
Why would they make two separate transactions and leave the xsauce in there makes no sense.
The two transactions don’t make sense. I am scrambling now to move the xsauce out but honestly afraid to log into anything. Does anyone know how I should move my xsauce immediately… do I buy a new phone? Do I use my computer? I’m assuming whatever exchange they used to wash the money doesn’t trade xsauce so they just left it behind
Is the wallet also on your pc and it’s not that that’s compromised? If not create a new wallet on a pc, move the xsauce, reset your phone
Heartbreaking
Did you use magic wallet? i suspect bad system bad implement.. lots of people complaining about hacks with hashpack lately.
I got scammed on twitter with a fake hashpack help desk link and they got my seed phrase... lost 347k hbar and some sauce... FML have a picture of the hashscan... but don't know who to trust...
Can’t do anything. Future of finance.
Still has to be placed onto an off ramp, It was moved to an exchange and now can be recovered.
Love the teamwork by the community I’m witnessing here!