Bisq wallet Haked

[Danidern]

Description

I opened Bisq (version v1.8.0, MacOs Monterey on M1) to check the status of a btc buy offer I accepted two days before and I found a TX who spent all my UTXO from my Bisq wallet to an unknow legacy address.

I only know my passworld and I never see the seed of the Bisq wallet. I open this issue on suggestion of the mediator.

[boring-cyborg]

Thanks for opening your first issue here!

Be sure to follow the issue template. Your issue will be reviewed by a maintainer and labeled for further action.

[ripcurlx]

How did you install Bisq? Did you verify the downloaded binary before installation?

[Danidern]

No. I installed opening .dmg direct.

[ripcurlx]

No. I installed opening .dmg direct.

Where did you download it from? Do you still have the dmg file in your download folder? If yes, can you try to verify the binary?

[Danidern]

I downloaded it from the form appears when you open the app and a new version is available. I verified the binary and it was ok. Now I erased the hd because I had some problem with internet connection and the vpn doesn't run

[pazza83]

I was the mediator that recommended @Danidern should open a ticket here.

The trade in mediation completed successfully, presumably as the funds were locked and unable to be withdrawn.

@Danidern please can you post the transaction ID of the withdrawal?

Did anyone else have access to your computer or Bisq (either locally or remotely)?

Was there any issues with the funds your received when you accepted the mediation proposal?

Did you use the emergency wallet tool at any point?

[DMTMarge]

I actually have something very similar happened to me as well, I wrote about it on the Bisq Community https://bisq.community/t/my-btc-was-stolen-from-bisq/11348/1
I as well use Mac M1.

[pazza83]

Hi @Danidern and @DMTMarge

Please can you contact me in Keybase or Matrix to send me your logs to investigate how this happened.

Keybase username: pazza
Matrix username: @pazza83:matrix.org

[DMTMarge]

I won't be much help, sorry @pazza83 I just had no idea what is going on and I have removed everything Bisq related from my computer just to be on the safe side. I believe it was a mistake but I was afraid for all my other passwords and cold storage being compromised. Maybe @Danidern will be more help. Behaviour of a noob I know but this situation is so unreal...

[Danidern]

Probably something instinctive, but I did the same, like DMTMarge. I erased everything, buckups included. I have only the seed of the bisqwallet if can help. I understood the mistake when I read the pazza83 comment.

[pazza83]

Probably something instinctive, but I did the same, like DMTMarge. I erased everything, buckups included. I have only the seed of the bisqwallet if can help. I understood the mistake when I read the pazza83 comment.

Thanks for letting me know.

Do you have the tx ID of the withdrawal used to steal your funds?

[DMTMarge]

I gave mine on the Bisq Community but here it is again
https://mempool.space/tx/e97b15850aafa71e21b765c9e151760911c6d49dc809144c743fc2de3199c8d7

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[alejandrogarcia83]

This issue has been automatically closed because of inactivity. Feel free to reopen it if you think it is still relevant.