Yoroi Wallet Hacked?

I only have a screen shot of the ada I bought of coinmama that’s why I know the date but it has the address I think I sent them too, Address

Ae2tdPwUPEZ67QmHbpxnSku8odn6dhZj5×5A

APREPCVAnduJCgmT312JV2W

I didn’t set Ledger till after, is this the wallet address I believe it is.

That is not a Shelley, but a Byron address!

If you restore/import now in any wallet app, it will open the Shelley wallet for that seed phrase, since Byron is outdated for years.

In Yoroi, you can claim/transfer funds from your old Byron wallet with the third button on the left, “Byron-era wallet”, “Icarus/Yoroi Wallet”, “15-word recovery phrase”.

That will hopefully find your old funds and transfer them to the new Shelley wallet.

1 Like

Oh I see probably this is my mistake I’m new to Cardano so have little idea and the wallets confuse me.

So in Yoroi it say add wallet Byron era Deprecated is that where I need to input my seeds?

You are on the mobile app? Then, yes.

Ok thanks I’ll do it now and see.

Hi I have done it but they haven’t shown up yet maybe I should wait a while but in the wallet it says deposit locked I don’t understand what that means either?

Plus I have checked for other master seeds and no more exist so I’m 100% these are the ones for my ada, now I am really confused.

I really don’t know what “Locked deposits” might mean.

If you click on “Receive”, does it show the address that you were sending to from Coinmama back then?

Are there any transactions in the history?

Used addresses shows nothing but it has an address that says unused.

Mystifying isn’t it, I don’t believe they’re lost but there is a big issue why I can access them even with the correct seed phrase.

If it did not load any history, it cannot know if addresses were used.

And is that the address you were sending to?
If not, you can generate a few more and see if the one you were sending to appears.

Since I bought them I have only sent from coinmama I have not sent any ada anywhere else, I was linking my wallet to Ledger but I never sent them there either, they just resided in the Yoroi wallet since back then.

You sent from Coinmama to:
https://cardanoscan.io/address/Ae2tdPwUPEZ67QmHbpxnSku8odn6dhZj5x5AAPREPCVAnduJCgmT312JV2W

We are trying to find the wallet that contains that address.

Does Yoroi show that address on its receive tab in used or unused addresses is the question?

1 Like

No used address and unused addresses are different from the one I sent you, but there are no used addresses in the receive bit.

Okay, if that address also does not appear after you click “Generate New Address” a few times, then we are still not looking at the right wallet.

You could just try to connect your Ledger (also with “Byron Era – Deprecated”!) and see if they are there. (I hope you did not reset your Ledger since then?)

1 Like

I have done the generate new address 5 times and an address matching the one sent from coinmama doesn’t come up so I think we can rule this out as the wallet.

I haven’t got time tonight to link the wallet to Ledger, but I did have to restore my Ledger recently :yawning_face:, I had problems and had to reinstall windows.

I’m presuming this isn’t looking good?

That was Ledger Live though not my actual Ledger device.

Did you restore it with the same seed phrase? Then it’s fine.

If you changed seed phrases, we would want to try the one you were using two years ago, obviously.

Then, it’s not what I meant with “resetting the Ledger”. It’s just that it will only work if it is still using the same keys as back then.

1 Like

Seed phrase are the same as they’ve always been never been changed, I didn’t send the ada to my Ledger though so there won’t be any history on it, if they were in my Ledger wouldn’t they show now.

I mean I know I paired my nano with Yoroi but I’m sure I never transferred them.

If you pair a Ledger with a wallet app, there is just another wallet showing up. It looks exactly like the ones you are creating with seed phrases. The only difference is that the keys are derived from the seed phrase on the Ledger (and the seed phrase should never be given anywhere else), while with software seed phrase wallets, a quite similar derivation is done in the wallet app itself.

So, if the Ledger-connected wallet app was already there when you sent from Coinmama, it is quite possible that you gave the receive address of that Ledger-connected wallet and not the one of the software wallet. I’d at least try that.

And, no, if they are on a Byron wallet derived on the Ledger, Ledger Live will not show them, since it has no idea what a Byron wallet even is.

1 Like

I bet you’re right about this sounds very possible, I will do it tomorrow when I get home from work and let you know, I must go now but thank you so much for helping and for sharing your wealth of knowledge as I know it can be taxing explaining to a noob.

Hey everyone!
I’m facing the same issue—someone stole my ADA, and I find it extremely strange. I’ve only ever used Yoroi, kept my recovery phrase secure, and never shared it. In fact, I rarely even use Yoroi; I just stake ADA and that’s it.

I can’t figure out what went wrong. I consider myself well-versed in security: I have 2FA enabled everywhere, use random, strong passwords, and store them in KeePass with passwords that are 50 characters long.

Does anyone have advice on how I can figure out what happened? Could this be my fault, or is it possible that Yoroi was hacked?

Most likely is, that your seedphrase (15 or 24 words in most cases) were compromised. With that seedphrase, you can restore your funds without any further information like spending password or similar.