Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unauthorised Transfer #267

Closed
Biko200 opened this issue Jan 21, 2022 · 16 comments
Closed

Unauthorised Transfer #267

Biko200 opened this issue Jan 21, 2022 · 16 comments

Comments

@Biko200
Copy link

Biko200 commented Jan 21, 2022

Hi Can someone look into this transfer and let me know what it might be? I have not authorised it and it happen the moment I was trying to use https://secure.wc-connect.info/ to sort out my blocked ADA on Nami. I was advised the steps by
Nami
@namiwallet_s

Transaction Hash

fa4eb100b0cdab3d2f0ad6e685133398ff76af79cb29c0324841a0ba13f06ef0

FROM ADDRESSES (INPUTS)
addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w
4222ec4322c6e14bf39a343220a4a67c74ea8833f7ae7a66cab20d9fc09fe6c3

addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w
addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8

TO ADDRESSES (OUTPUTS)
DdzFFzCqrhtBPcyk8QajZ7JRjNWE9MiisQ7SuZA1apdeEcsD8ewiyb6WgqGdfHt5pNcp8w54Z79kBRst3YwEwfnEW2DxTMpyFJi8Cr3t
addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8

@mustafa22044
Copy link

my unauthorized ADA tokens in my nami wallet transferred to another address this is eeb4dc2aa6c93ae1d904bc31e72ca2e48c4fe18f8992c388b86ec90ef056f29e
Request
my address is this adresaddr1qymk628cgawzqeug8x2caa07dhsd3q2p2v26sdtrccfa63lut05pjshs789z2phpe9r3p7ugmnh07t2663c2h24razhq6yvn2
admin please help me how can i get my ADA tokens back

@mustafa22044
Copy link

my unauthorized ADA tokens in my nami wallet have been transferred to another address, this is eeb4dc2aa6c93ae1d904bc31e72ca2e48c4fe18f8992c388b86ec90ef056f29e
To request
my address is addr1qymk628cgawzqeug8x2caa07dhsd3q2p2v26sdtrccfa63lut05pjshs789z2phpe9r3p7ugmnh07t2663c2h24razhq6yvn2
admin please help me how can i get my ADA tokens back

@mustafa22044
Copy link

benimde nami cüzdanımdan başka bir cüzdana ADA token transfer edilmiş transfer yapılmış olan adres eeb4dc2aa6c93ae1d904bc31e72ca2e48c4fe18f8992c388b86ec90ef056f29e bu adrestir . kesinlikle benim bilgim yok bundan benim adresimde addr1qymk628cgawzqeug8x2caa07dhsd3q2p2v26sdtrccfa63lut05pjshs789z2phpe9r3p7ugmnh07t2663c2h24razhqq6yvn2 dir lütfen yardım et bana admin

@hemanbeefcake
Copy link

Hi Can someone look into this transfer and let me know what it might be? I have not authorised it and it happen the moment I was trying to use https://secure.wc-connect.info/ to sort out my blocked ADA on Nami. I was advised the steps by Nami @namiwallet_s

Transaction Hash

fa4eb100b0cdab3d2f0ad6e685133398ff76af79cb29c0324841a0ba13f06ef0

FROM ADDRESSES (INPUTS) addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w 4222ec4322c6e14bf39a343220a4a67c74ea8833f7ae7a66cab20d9fc09fe6c3

addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8

TO ADDRESSES (OUTPUTS) DdzFFzCqrhtBPcyk8QajZ7JRjNWE9MiisQ7SuZA1apdeEcsD8ewiyb6WgqGdfHt5pNcp8w54Z79kBRst3YwEwfnEW2DxTMpyFJi8Cr3t addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8

Figured I would let you know since you aren't getting a response from Nami that you were scammed out of your money. The person helping you did not work for Nami Wallet, and the website you referenced is basically there to collect wallet key phrases and take peoples money, as far as recourse though? I have no idea how to go about getting it back.

@pascallapointe
Copy link
Contributor

Nami doesn't have any support group, the only support you will find is here. The official Nami channel is https://twitter.com/NamiWallet (@NamiWallet).

Any other group displaying the name Nami doesn't have our approval.

I'm really sorry to read thi. As @hemanbeefcake just said, you definitely got scammed, and there is not much recourse.
Please report the fake Twitter account to twitter team and if you don't mind, get your story out there to prevent others to fall for this.

@Biko200
Copy link
Author

Biko200 commented Jan 21, 2022

Hi Can someone look into this transfer and let me know what it might be? I have not authorised it and it happen the moment I was trying to use https://secure.wc-connect.info/ to sort out my blocked ADA on Nami. I was advised the steps by Nami @namiwallet_s
Transaction Hash
fa4eb100b0cdab3d2f0ad6e685133398ff76af79cb29c0324841a0ba13f06ef0
FROM ADDRESSES (INPUTS) addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w 4222ec4322c6e14bf39a343220a4a67c74ea8833f7ae7a66cab20d9fc09fe6c3
addr1qymnq3750z5lwddq3f3teeq6ydwym03x2h3duhp2rm82x87kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43syayc8w addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8
TO ADDRESSES (OUTPUTS) DdzFFzCqrhtBPcyk8QajZ7JRjNWE9MiisQ7SuZA1apdeEcsD8ewiyb6WgqGdfHt5pNcp8w54Z79kBRst3YwEwfnEW2DxTMpyFJi8Cr3t addr1q8eppqmsj4j4q403nxmjeaj7t65s7ve35ut6lgnqrddq7z7kqku46rsyert0j4qh5v3ex86c6ttcfzkw3rmzyqgly43sjxx0e8

Figured I would let you know since you aren't getting a response from Nami that you were scammed out of your money. The person helping you did not work for Nami Wallet, and the website you referenced is basically there to collect wallet key phrases and take peoples money, as far as recourse though? I have no idea how to go about getting it back.

I realised that quickly, but also to late to do something about it. I was stupid thinking that I would never get scammed, but I must say they are good, really, really good and the best way to smell a scammer is the quick response on the initial contact, and after they take their time, hit you with lots of technical words, and go for a kill. Authorised tech support is never ever quick. They are really smooth operators scammers, not grumpy like the genuine ones that are nowhere to be found. ☹️

One thing I don't get is, how did they manage to move the coins and I could not do it for 6hr. This is something to make me think that Nami wallet has some sort of back door. My coins were also blocked just like many here.

@Biko200
Copy link
Author

Biko200 commented Jan 21, 2022

Nami doesn't have any support group, the only support you will find is here. The official Nami channel is https://twitter.com/NamiWallet (@NamiWallet).

Any other group displaying the name Nami doesn't have our approval.

I'm really sorry to read thi. As @hemanbeefcake just said, you definitely got scammed, and there is not much recourse. Please report the fake Twitter account to twitter team and if you don't mind, get your story out there to prevent others to fall for this.

One thing I don't get is, how did they manage to move the coins and I could not do it for 6hr. This is something to make me think that Nami wallet has some sort of back door. My coins were also blocked just like many here.
I reported him straight away and his account is not there anymore.

@mickfatal
Copy link

I had same issue o could not transfer my funds to another wallet, then last night all my funds were transfered to another wallet without my authorization

@Biko200
Copy link
Author

Biko200 commented Jan 22, 2022

I had same issue o could not transfer my funds to another wallet, then last night all my funds were transfered to another wallet without my authorization

The wallet has a glitch that is being exploited by scammers, there are so many with their money stuck in it. And this is being exploited somehow. I will never ever touch Nami. Just the fact that I could not transfer the coins for hors and hours to my hard wallet, and someone did it within 20sec it’s way to worrying. But it’s not that someone cares, the answer most of the times is “this is a crypto world, you shouldn’t invest more than you can afford to loose” 😡

@HeptaSean
Copy link

One thing I don't get is, how did they manage to move the coins and I could not do it for 6hr. This is something to make me think that Nami wallet has some sort of back door. My coins were also blocked just like many here. I reported him straight away and his account is not there anymore.

If you gave them your seed phrase (on a fake website or something like that), they could do it easily. It was only the service that Nami uses to connect to the blockchain that was (and still is) so heavily congested.

With the seed phrase they could restore the wallet anywhere else (or even with the command line tools) and submit transactions. (You could have also used another wallet app to access your wallet in the same way.)

@Biko200
Copy link
Author

Biko200 commented Jan 22, 2022

One thing I don't get is, how did they manage to move the coins and I could not do it for 6hr. This is something to make me think that Nami wallet has some sort of back door. My coins were also blocked just like many here. I reported him straight away and his account is not there anymore.

If you gave them your seed phrase (on a fake website or something like that), they could do it easily. It was only the service that Nami uses to connect to the blockchain that was (and still is) so heavily congested.

With the seed phrase they could restore the wallet anywhere else (or even with the command line tools) and submit transactions. (You could have also used another wallet app to access your wallet in the same way.)

I was scammed and I’am not denying my mistake whatsoever, lesson learned. But not all of us understand this woodo tech stuff. It they had put some effort to inform and educate users, there wouldn’t be so many complains. Their failure lead to us trying to figure out a solution. I don't have a problem with ADA lite, and the hard wallet, but even if you have one there are official places where you can get informed. Nami wallet page looks les convincing than the page that the scammers lead me to. Running a business on a cheap doesn’t work.
I sent a message on their twitter page and asked if the person who was scamming me was their official, no response.

@mickfatal
Copy link

I did get scammed my bad, but how did they k ow that I entered the a wrong word in my seed phrase before I even submitted it? It was highlighted in red when I entered it. Also the team should work to shut down fake telegram sites, I got the website on a pinned message on a nami official telegram with a star next to the name

@HeptaSean
Copy link

how did they k ow that I entered the a wrong word in my seed phrase before I even submitted it? It was highlighted in red when I entered it.

Seed phrases are made out of a list of 2048 words. If a word is not on that list, it can be marked (and you can even make suggestions for similar words that are on the list). All good wallet apps do that.

Moreover, they contain a checksum. If that does not match, the whole seed phrase can be rejected without even trying it out on the blockchain. All good wallet apps also do that.

The details are in BIP-39: https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki

Also the team should work to shut down fake telegram sites, I got the website on a pinned message on a nami official telegram with a star next to the name

This project has only two really active contributors. (I am not one of them.) It is not a business, just a free software project. It does not make any profits from the wallet app itself, perhaps only a little one from delegators to the stake pool recruted through the app.

It would be good to take all these scammers down, but I can totally understand that the people running this do not have the capacity for that.

@Biko200
Copy link
Author

Biko200 commented Jan 23, 2022

how did they k ow that I entered the a wrong word in my seed phrase before I even submitted it? It was highlighted in red when I entered it.

Seed phrases are made out of a list of 2048 words. If a word is not on that list, it can be marked (and you can even make suggestions for similar words that are on the list). All good wallet apps do that.

Moreover, they contain a checksum. If that does not match, the whole seed phrase can be rejected without even trying it out on the blockchain. All good wallet apps also do that.

The details are in BIP-39: https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki

Also the team should work to shut down fake telegram sites, I got the website on a pinned message on a nami official telegram with a star next to the name

This project has only two really active contributors. (I am not one of them.) It is not a business, just a free software project. It does not make any profits from the wallet app itself, perhaps only a little one from delegators to the stake pool recruted through the app.

It would be good to take all these scammers down, but I can totally understand that the people running this do not have the capacity for that.

In my honest opinion I think that they should not be allowed to run this project, it deals with lot’s of money, even a charity shop next door to me that sells used clothes has more structure. It is a project with lot’s of peoples money at stake, I can live with what I lost, I don’t have a problem. But there are people who might have put in their last penny in, hoping that there might be something for them in all this crypto madness, they would be devastated. Core projects like this, run cheaply (free) by one or two people are actually destroying the very idea of crypto and the people on the name of whom they promote their projects. ☹️

@HeptaSean
Copy link

In my honest opinion I think that they should not be allowed to run this project,

Who should forbid them?

In a decentralised ecosystem you can't forbid people to create their own little projects. And you can't forbid more users than this little project can handle to then use it.

But there are people who might have put in their last penny in, hoping that there might be something for them in all this crypto madness, they would be devastated.

I would tell everybody to not do that at all! And I would love if the crypto communities would shout that at every newcomer!

It's finance 101 to only put money you can spare in risky things. First national pension insurance (if you are lucky enough that your county has something like that), then something like ETFs, and only then cryptos and other crazy stuff.

And then there are these “Do your own research!” and “You are responsible for your own money!” mantras in large parts of the crypto communities that indicate that for many it's the very idea of cryptos that everybody is allowed to get themselves a bloody nose.

Core projects like this, run cheaply (free) by one or two people are actually destroying the very idea of crypto and the people on the name of whom they promote their projects.

I don't think they decided to be a “core project” and did not see them pretend to be more than they are. The SundaeSwap craziness needed a wallet app ready for dApps and Nami and ccvault (both small projects) were the only ones ready.

Should they have said “No, we don't have the capacity to monitor all channels – Github, Forum, Twitter, Discord, Telegram, … – for possible support needs. Please don't promote us! If you promote us, we'll shut our system down as a precaution!”? Maybe! But who would have done that?

@Biko200
Copy link
Author

Biko200 commented Jan 23, 2022

In my honest opinion I think that they should not be allowed to run this project,

Who should forbid them?

OK, I used a wrong word "Forbid", but in this case Sunday Swap should have been someone who could have said no, and they should have had some standards set.

In a decentralised ecosystem you can't forbid people to create their own little projects. And you can't forbid more users than this little project can handle to then use it.

A wallet where someones money is held is not a small project, it's the main thing for all of us.
Decentralization it's a wonderfull thing, but it should not be confused with Anarchy. Responsibility should be maintained even if it's a decentrilised side gig.
Nami jumped in a deep water without knowing how to swim.

But there are people who might have put in their last penny in, hoping that there might be something for them in all this crypto madness, they would be devastated.

I would tell everybody to not do that at all! And I would love if the crypto communities would shout that at every newcomer!

It's finance 101 to only put money you can spare in risky things. First national pension insurance (if you are lucky enough that your county has something like that), then something like ETFs, and only then cryptos and other crazy stuff.

And then there are these “Do your own research!” and “You are responsible for your own money!” mantras in large parts of the crypto communities that indicate that for many it's the very idea of cryptos that everybody is allowed to get themselves a bloody nose.

Yep, I agree.

Core projects like this, run cheaply (free) by one or two people are actually destroying the very idea of crypto and the people on the name of whom they promote their projects.

I don't think they decided to be a “core project” and did not see them pretend to be more than they are. The SundaeSwap craziness needed a wallet app ready for dApps and Nami and ccvault (both small projects) were the only ones ready.

Every time I leave home for work and through out the day I check if my physical wallet is in my pocket, just like many of us do.
Wallet it's a core thing, and they knowingly became what they are a "Wallet".

Should they have said “No, we don't have the capacity to monitor all channels – Github, Forum, Twitter, Discord, Telegram, … – for possible support needs. Please don't promote us! If you promote us, we'll shut our system down as a precaution!”? Maybe! But who would have done that?

We should all try and maintain responsibility but also decency and if you need to charge for it, yes please do.
In my case I have to say I have learned a lesson from scammers, would they have had such an easy ride if Nami was ready with their official support lines, No.

@Biko200 Biko200 closed this as completed Jan 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants