05-27-2020, 08:13 AM
I lost $1,200 in 100 seconds
<!-- SC_OFF --><div class="md"><p>A few days ago, a hacker got my mnemonic and stole $1,200 in ethereum from my Metamask wallet in under 100 seconds. The hackers were using a bot to scan for the mnemonic phrases across GitHub, and I accidentally left it in my code on a GitHub repo while I was sending to a Hack Money hack-at-hon. Although there are some coins and tokens left, the bot will siphon any ethereum I have to prevent me from moving my coins, and/or outmatch my attempts by supplying more gas.</p> <p>I just want you all to be aware to NEVER have a digital copy of your mnemonic or private key . Especially not online.</p> <p>If you are using metamask, randomly generate private keys for new accounts not associated with any mnemonics, and imported onto metamask</p> <pre><code> web3.eth.createAccount() </code></pre> <p>My compromised address: <a href="https://etherscan.io/address/0x1b3e1786c3f8524ca0f3175b0b37bcc1bee5a6d5">https://etherscan.io/address/0x1b3e1786c3f8524ca0f3175b0b37bcc1bee5a6d5</a></p> <p>There is still $600 supposedly that's locked in Compound DeFi protocol and if anyone is interested in helping solve this, here is a suggestion someone made for me who we are seeking ways to solve this:</p> <p><a href="https://ethereum.stackexchange.com/questions/83718/how-to-retrieve-erc20-from-a-hacked-address-monitored-by-a-bot">https://ethereum.stackexchange.com/questions/83718/how-to-retrieve-erc20-from-a-hacked-address-monitored-by-a-bot</a></p> <p>I was foolish and this mistake was costly, but I know how to be extra secure when dealing in crypto. I was very upset and scared at first, but I can't dwell on it and I'll move on. No need to stress over thousands when I can focus on making millions.</p> </div><!-- SC_ON --> Kind Regards R
<!-- SC_OFF --><div class="md"><p>A few days ago, a hacker got my mnemonic and stole $1,200 in ethereum from my Metamask wallet in under 100 seconds. The hackers were using a bot to scan for the mnemonic phrases across GitHub, and I accidentally left it in my code on a GitHub repo while I was sending to a Hack Money hack-at-hon. Although there are some coins and tokens left, the bot will siphon any ethereum I have to prevent me from moving my coins, and/or outmatch my attempts by supplying more gas.</p> <p>I just want you all to be aware to NEVER have a digital copy of your mnemonic or private key . Especially not online.</p> <p>If you are using metamask, randomly generate private keys for new accounts not associated with any mnemonics, and imported onto metamask</p> <pre><code> web3.eth.createAccount() </code></pre> <p>My compromised address: <a href="https://etherscan.io/address/0x1b3e1786c3f8524ca0f3175b0b37bcc1bee5a6d5">https://etherscan.io/address/0x1b3e1786c3f8524ca0f3175b0b37bcc1bee5a6d5</a></p> <p>There is still $600 supposedly that's locked in Compound DeFi protocol and if anyone is interested in helping solve this, here is a suggestion someone made for me who we are seeking ways to solve this:</p> <p><a href="https://ethereum.stackexchange.com/questions/83718/how-to-retrieve-erc20-from-a-hacked-address-monitored-by-a-bot">https://ethereum.stackexchange.com/questions/83718/how-to-retrieve-erc20-from-a-hacked-address-monitored-by-a-bot</a></p> <p>I was foolish and this mistake was costly, but I know how to be extra secure when dealing in crypto. I was very upset and scared at first, but I can't dwell on it and I'll move on. No need to stress over thousands when I can focus on making millions.</p> </div><!-- SC_ON --> Kind Regards R