Ethereum Security – Unauthorized Ether Transfer Issue

ethermetamask

My ethereum account is 0xfAd956B56be1298ee8ec1950cc305B46268d926f (generated by metamask) and the moment friend of mine sent me an ether, it was automatically directed to another account. This is the transaction hash

0xd451bee48418fff2e728d321e2c62a1bd2f38dd21788621395f72a7ad371de0f

What is the issue here? I am just utterly confused.

Best Answer

Looks like the owner of the account that took your eth is running scripts to send money to his or her self. Others have also had this problem and commented on etherscan as seen in the image below. An attacker can do this if an accounts is unlocked or has a compromised private keys.

This could also have resulted from your private key being compromised - either from metamask or from wherever you stored your wallet backup (cloud / email) / local computer).

Two items that could have resulted in this if you are coding or working with the geth console would be an unprotected RPC port with unlocked accounts or the use of personal.account.unlock

Initially looking at the transfer - only a small amount of value was transferred to this other account (10% of the initial transaction), but the gas price is set extremely high making the transaction fee take up the other 90% of the initial transaction, clearing out the account balance.

enter image description here

enter image description here

Related Topic