ADA Sent from exchange shows transferred back out only hours later

Be sure not to save keys, passwords etc, to Dropbox, Google drive, iCloud or any place on your computer that is backed up offsite. Best just to write them on a piece of paper.

2 Likes

Well, technically we don’t know until I hear back from Binance. I know everyone says this but I am absolutely text book when it comes to my crypto wallets. My words are in a cryptosteel and no where else. I also feel like the timing is too perfect to be a random hack. I mean 5 minutes after my deposit. It’s like I was being watched. But again, not possible with my setup. So frustrating anyway.

How do I view my seed anyway? Can’t seem to find it in the wallet again.

Afaik the seed is only displayed when you access the wallet for the first time, when you confirm that you have recorded it it will not display again on the screen, this would be the time that it could be compromised,
after this point of confirming it is recorded it will not come on screen.
Small window for a hacker to learn what your seed is, but it can be done if your ip address is a known crypto ip address, this is why a hack is very possible, every coin on exchange could be target of hackers - just so your aware.

Hi, jsut curious how did you store your 12 words? Is it in cloud or just local computer or just in paper?

Cryptosteel for all my wallet recovery phrases. Most of them are hardware wallets too.

It could be some more sophisticated attack, such as simply using the backend API while Deadalus was running, and if the spendingpassword was not set then it could’ve been done somehow.

But, to tel lthe truth, I have not checked the sending API and I do not know how tdoes it work, so I will check it when I get home.

Wow, thought Daedalus is the safest place to store, unless theres something in your computer that can control Daedalus which should not happen at all.

If somebody can access to your computer, then there is no safe wallet. For some wallets you just need to scan the wallet’s memory for some privatekey like strings and that’s all.

What does it mean that the address does not exist? Then where does the ADA end up? Just outer space somewhere?

I finally heard back from Binance. All they said in broken english is your Binance address is send address not receive address. What does that mean?

I’m starting to see a lot of these posts about dissapearing ADA. I’m beginning to wonder if there is some security issue. This is the only wallet I’m having problems with. Perhaps it is a repercussion of not having alternative wallets to use. Now I’m afraid to use the wallet again, while at the same time I don’t want to keep it in a exchange. I still think it’s fishy that it happened the same night as a major wallet software update. And the developers in tech support never said anything about the logs I sent in. I would love to know what they showed.

Properly secured secret key along with a secure spending password gives you the security. There’s no issue in the Daedalus.

Majority of people use Daedalus with zero problems whatsoever.

Correlation is not causation.

Send logs here. Pack the whole %appdata%\Daedalus\Logs directory and upload it here, and we’re gonna take a look. We all would be really interested if there’s really something bad in there.

You suggest pretty horrible stuff there. And I never attribute to developer’s malice something that can be explained by someone else’s negligence.

1 Like

I don’t mean to rip on any developers. I work in development myself. I’m sure they’re very busy but a response would be nice. All I got was a thanks for your email, if we find an answer it’ll be posted in the FAQ. That just seems pretty haphazard to me.

I’ll dig up the logs. And no need to get defensive. I mean can you blame me? I’m looking at my own practices and trying to see where I messed up as well. But I’m certainly not just going to take someone’s word for it that the ONLY way something got stolen was my negligence. It may be or maybe not. That’s the whole point of me posting for help.

1 Like