Ether Transfer – Why Has My Ether Been Automatically Sent to Another Address?

You have hard-coded an amount of 1 (one wei!!!) when calling function transfer:

contract.transfer(fromAddress2, 1, ...

After transferring that amount, the difference will not show up when you view the balances on metamask, because the display-resolution of this application is 1 ether (10^18 wei).

And of course, because you've hard-coded that amount, your program completely ignores whatever amount you input from metamask.

Looks like the owner of the account that took your eth is running scripts to send money to his or her self. Others have also had this problem and commented on etherscan as seen in the image below. An attacker can do this if an accounts is unlocked or has a compromised private keys.

This could also have resulted from your private key being compromised - either from metamask or from wherever you stored your wallet backup (cloud / email) / local computer).

Two items that could have resulted in this if you are coding or working with the geth console would be an unprotected RPC port with unlocked accounts or the use of personal.account.unlock

Initially looking at the transfer - only a small amount of value was transferred to this other account (10% of the initial transaction), but the gas price is set extremely high making the transaction fee take up the other 90% of the initial transaction, clearing out the account balance.