1. 01-14-20 08:22 AM #1
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    Was my BitPay hacked?

    Had a withdrawal from Bovada hit the wallet at 12:50am. At 1:07am the entire balance was sent to an address. Now reading BitPay had a security issue and I never updated the app. Had just been using it to transfer into the book. Think I may have made a withdrawal within the last year.

    Am I screwed?
    Reply With Quote Reply With Quote
  2. 01-14-20 08:25 AM #2
    Sam Odom
    Sam Odom's Avatar Become A Pro!
    Join Date: 10-30-05
    Posts: 58,063
    Betpoints: 37

    Not sure...

    Sounds bad tho
    Reply With Quote Reply With Quote
  3. 01-14-20 08:32 AM #3
    stevenash
    stevenash's Avatar Moderator
    Join Date: 01-17-11
    Posts: 62,634
    Betpoints: 32231

    I’ve never trusted Bitcoin
    Reply With Quote Reply With Quote
  4. 01-14-20 08:57 AM #4
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    Never had an issue - this sucks.
    Reply With Quote Reply With Quote
  5. 01-14-20 09:05 AM #5
    gauchojake
    Have Some Asthma
    gauchojake's Avatar SBR PRO
    Join Date: 09-17-10
    Posts: 33,724
    Betpoints: 13164

    Thanks for the payout pal!
    Reply With Quote Reply With Quote
  6. 01-14-20 10:38 AM #6
    Sam Odom
    Sam Odom's Avatar Become A Pro!
    Join Date: 10-30-05
    Posts: 58,063
    Betpoints: 37

    Just checked BP wallet & DC

    all is good

    Not a widespread 'problem'
    Reply With Quote Reply With Quote
  7. 01-14-20 10:53 AM #7
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    Wherever it was sent has used the same address since November 2018. Guessing they would have needed to hack my phone to get the key then install the app and use my key on another device? Even so, how would they suddenly realize there is money in the BP account?
    Reply With Quote Reply With Quote
  8. 01-14-20 10:55 AM #8
    Sam Odom
    Sam Odom's Avatar Become A Pro!
    Join Date: 10-30-05
    Posts: 58,063
    Betpoints: 37

    If they have control of that addy (Nov '18 one) they do not need your Key or PW
    Reply With Quote Reply With Quote
  9. 01-14-20 10:58 AM #9
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    Not sure what you mean. I looked up the address where the funds were sent, which has received transactions dating back to November 18.

    I created a new address in BP, withdrawal from Bovada, received by the address I created.

    Then 10 minutes later, there is a sent transaction to the Nov 18' address....controlled by someone else.

    How would they access my BP wallet without Key or PW?
    Reply With Quote Reply With Quote
  10. 01-14-20 11:05 AM #10
    Sam Odom
    Sam Odom's Avatar Become A Pro!
    Join Date: 10-30-05
    Posts: 58,063
    Betpoints: 37

    Dont know about your last question...

    But what Sammy said post #8 still stands true

    Assuming everything you have stated is true... 'They' have control of the addy your BTC went to. They now can do with the btc as they want. They need nothing from you
    Reply With Quote Reply With Quote
  11. 01-14-20 11:18 AM #11
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    Bitcoin not a perfect science

    Easily can be hacked unless strict security on your account

    This is not a bank like Wells Fargo, no regulation
    Reply With Quote Reply With Quote
  12. 01-14-20 11:20 AM #12
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    Of course....once they have it, they have it. My question is: how did they get it? I remember being told to write down some key when I first installed BitPay. Yet, it seems available on the app, even though I seem to remember BP saying to write it down or store it as it can never be recovered for security purposes. Trying to figure out where I was vulnerable. A couple years back Bovada claims that SOMEONE was attempting to use my card on their site. They locked my account for a bit stating another account (on Bovada) was trying to use the same card to deposit. There were no other fraud attempts on the card, so I found it strange that whoever had my card info would ONLY try and use it to deposit at Bovada.

    I like the BP card as its easy and convenient. Obviously can't use them after this but just wondering if anyone with more crypto knowledge can make sense of any of it. There was no e-mail or notification that I signed in from another device. Its as if my phone was used to send a transaction by a ghost.
    Reply With Quote Reply With Quote
  13. 01-14-20 11:24 AM #13
    Sam Odom
    Sam Odom's Avatar Become A Pro!
    Join Date: 10-30-05
    Posts: 58,063
    Betpoints: 37

    Quote Originally Posted by jjgold View Post

    Easily can be hacked unless strict security on your account

    Not "easily"

    Not "strict security" just common sense ones

    Sammy has had BTC in a Core wallet since the beginning. Which is a long time.

    Never had a hack problem... Update regularly
    Reply With Quote Reply With Quote
  14. 01-14-20 12:15 PM #14
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    BitPay gave me the generic response that I either sent it accidentally (in my sleep) or someone used my device and I should protect my device (which is already protected by fingerprint scanner).

    Have scanned phone with multiple programs nothing detected. The funds are gone just wish I had some sort of explanation.
    Reply With Quote Reply With Quote
  15. 01-14-20 01:37 PM #15
    byronbb
    byronbb's Avatar Become A Pro!
    Join Date: 11-13-08
    Posts: 3,067
    Betpoints: 2284

    Seems weird. I mean from what I can discern they would need to have access to your phone with pin for BitPay app and everything. Truly terrifying. Dump bitpay forever and even consider getting a new SIM. Check google account access logs etc. Googling around I see other people claiming the same issue. Funds moved as if people had access to their phone etc.
    Reply With Quote Reply With Quote
  16. 01-14-20 02:42 PM #16
    JonnySavage
    JonnySavage's Avatar Become A Pro!
    Join Date: 09-03-19
    Posts: 71
    Betpoints: 257

    I changed my Google password before checking for devices logged-in. When going to "Details" in GMAIL and checking the recent activity log, many are an 'Authorized Application' with an IP in Netherlands. Not sure if that is a mail app or something legit, or not. Even if my Google account was compromised, how does that translate into access to my BitPay wallet which, supposedly, is only accessible on my phone?

    The address it was sent to is: 13k4rgQ6b9LdBt6pvgLR5MSV6wAhujFpgq

    The step-by-step would have to be: Access Google accounts, wait for incoming Bitpay payment notification (Gmail), log in to that BitPay remotely, transfer the funds out to the address above. Is that logical?
    Reply With Quote Reply With Quote
Top
« Previous Thread | Players Talk | Next Thread »