Fact of hacking wallet


#1

I already wrote a post on the forum, but nobody answered there … https://burstforum.net/topic/8252/fact-of-hacking-wallet

Lord there is a fact of hacking!
It was possible to track the chain of addresses through which the stolen BURST coins are transferred. Stolen coins accumulate on one purse. Then they go to the purse of the Bittrex exchange with a message attached to the transfer.
The message corresponds to the user account and internal BURST account
I need to contact the representatives of the project! Admins respond in a personal report. Or by e-mail ge_kar@mail.ru
All available evidence is provided!

My hacked wallet
rmemvm
BURST-WYMS-EJ42-CP5G-87YZX
https://explore.burst.cryptoguru.org/account/7998328496588749432

My incoming transactions Poloniex exchange, coins which the hacker then stole
2160690215891856766 27,081.09 Burst R8SQ-TUEM-DTHQ-7ATA3 2017-12-22 19:05:12
My incoming transactions Bittrex exchange (tracking additional hacker addresses)
12884320397360374500 13 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:08:17
14621552150762740618 8 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:32:47
5689422026043718062 6 Burst HK9D-P74Q-XDEJ-D6PGM 2017-12-23 02:36:53

Hacker automatic transactions, when using the program code, within a few seconds, as soon as the transaction to replenish the purse is confirmed …
1886513737393212757 27,080.09 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-22 19:07:03
17342565350432990299 12 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-23 02:13:01
17699675847721158962 7 Burst E8G2-Y9HA-BVK4-GHRY9 2017-12-23 02:34:02
14450149109174783689 5 Burst 5BGX-C7EA-A6ET-BAQCD 2017-12-23 02:39:10

next step:
https://explore.burst.cryptoguru.org/account/16427706412886792640
BURST-WYMS-EJ42-CP5G-87YZX => BURST-E8G2-Y9HA-BVK4-GHRY9
coins lie, without movement, storage, it is not clear what will happen to the coins …

https://explore.burst.cryptoguru.org/account/10784652509394871773
BURST-WYMS-EJ42-CP5G-87YZX => BURST-5BGX-C7EA-A6ET-BAQCD
accumulate coins from other hacked wallet
Accumulated coins, at least … with purses of pools, miners, and ordinary users

next step:
https://explore.burst.cryptoguru.org/account/10784652509394871773
BURST-5BGX-C7EA-A6ET-BAQCD => BURST-ULSM-3ZTQ-6KXX-FJMYP
send to another purse, an attempt to hide multiple transactions from other hacked wallets

next step:
https://explore.burst.cryptoguru.org/account/15779047458256800531
BURST-ULSM-3ZTQ-6KXX-FJMYP => Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM message: bdb36669c0294c0393d8977c79107645a186349445e647df9353f4797847648e
send coins to the Bittrex exchange

What do I need from the representatives of the BURST project team:

Get access to the wallets of hackers:
BURST-E8G2-Y9HA-BVK4-GHRY9
BURST-5BGX-C7EA-A6ET-BAQCD
and return the stolen coins to their owners.

Contact with those Bittrex exchange support, three sides:
-Passenger owners, hacked, stolen coins
-BURST project team
-Support Bittrex exchange
Block a hacker account:
Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM message: bdb36669c0294c0393d8977c79107645a186349445e647df9353f4797847648e
Return the stolen coins to their owners …


#2

I’m very sorry to hear that your wallet was hacked, but there is nothing anyone can do to get access to the wallets of the hackers. I see daWallet has replied to your post here as well:

https://burstforum.net/topic/8252/fact-of-hacking-wallet/6


#3

The hacker https://explore.burst.cryptoguru.org/account/16427706412886792640 sent coins from the purse to the Bittrex exchange,
BURST-R8SQ-TUEM-DTHQ-7ATA3 => Bittrex account BURST-HK9D-P74Q-XDEJ-D6PGM used the encryption message:
encryptedMessage.data 36556cbbc14420df716292e65b2dffaaa0a307508cbc42654d902d93c87a21e40833ab8f2da0e1a73f5d62be427f07e2897e6e1e0378062586fc9677cc83217e6f8444eb738b1092f4b04a8c8cf9323a0d7548f12178c5ad4be46d9af02c9bc1
encryptedMessage.nonce: c39166172cfa527a4140911b9d81727f7347c35cac92bba08efd94d8dd8b19ff
Transaction: https://explore.burst.cryptoguru.org/transaction/1793377363719754714

Complete transaction data for the hacker wallet BURST-R8SQ-TUEM-DTHQ-7ATA3
request: getAccountTransactions accountID 16427706412886792640, DateTime: 2018.01.09,14:10(UTC+5)
Response:
{
“requestProcessingTime”: 2,
“transactions”: [
{
“senderPublicKey”: “a29df339c2de3b848e97d3760301fe20c3f02e7f3870345815605986be87941e”,
“signature”: “a9f10b59a6949a6b901c86740f0745460c7a4fde902f997c4c0bb60b3387410ac2ccaff6492c46082d34867e8ae50e78ee9f2bafb184ea4d37ff90b408f45283”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 299,
“fullHash”: “b8fa707757ff271cee4cb71005952241a099a0a3448866362f1fa374b8874fdd”,
“version”: 1,
“ecBlockId”: “2737398438562090976”,
“signatureHash”: “d9217beff4eabf723ac71741bb7186275a15fa24993e2690191830a93cda9dc9”,
“attachment”: {
“version.Message”: 1,
“messageIsText”: true,
“message”: “Burst garbage colector. Thank you!”
},
“senderRS”: “BURST-TEXC-LLLU-ZDM3-HD3XT”,
“subtype”: 0,
“amountNQT”: “1100000000”,
“sender”: “18227241509309952938”,
“recipientRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“recipient”: “16427706412886792640”,
“ecBlockHeight”: 445185,
“block”: “17553106663318309950”,
“blockTimestamp”: 107693991,
“deadline”: 24,
“transaction”: “2028870908284828344”,
“timestamp”: 107693942,
“height”: 445199
},
{
“senderPublicKey”: “d6048621c2c4f691ad2ab2dd157eff6d2ae55efdbc96b166d36456281bdcaf03”,
“signature”: “e60df9094ca29b1e155260462a2387afacdf286f57b3d03dbb5770c9c6e30a055cf8c5db8bb3a178ed1892fc6200654b04a2639fe112586115a9831f86fe3dd2”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 530,
“fullHash”: “da13bee8355be318751c581ba0291a0cd13de68a008b379aa7e6a513d5173282”,
“version”: 1,
“ecBlockId”: “8079339445333194534”,
“signatureHash”: “1a2ca2487cd2b3a2c4db56073bbf2d600acde40ecb774ccee605c4424829caff”,
“attachment”: {
“encryptedMessage”: {
“data”: “36556cbbc14420df716292e65b2dffaaa0a307508cbc42654d902d93c87a21e40833ab8f2da0e1a73f5d62be427f07e2897e6e1e0378062586fc9677cc83217e6f8444eb738b1092f4b04a8c8cf9323a0d7548f12178c5ad4be46d9af02c9bc1”,
“nonce”: “c39166172cfa527a4140911b9d81727f7347c35cac92bba08efd94d8dd8b19ff”,
“isText”: true
},
“version.EncryptedMessage”: 1
},
“senderRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“subtype”: 0,
“amountNQT”: “2709800000000”,
“sender”: “16427706412886792640”,
“recipientRS”: “BURST-HK9D-P74Q-XDEJ-D6PGM”,
“recipient”: “13383190289605706987”,
“ecBlockHeight”: 444959,
“block”: “5641679786710781814”,
“blockTimestamp”: 107637884,
“deadline”: 1440,
“transaction”: “1793377363719754714”,
“timestamp”: 107637574,
“height”: 444968
},
{
“senderPublicKey”: “e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77”,
“signature”: “cf6b65b873a389b67c9470601e40e382437f6685968c4bf3b4aa7b7683aebd02c52897268f47c25cf0eece53110dac75b13901a3621a9eaa4de11261ec08aad2”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 6186,
“fullHash”: “3209fb1668e1a1f505014a4a4f64923f53d5f76350c273e82ecc086c84c6bb1e”,
“version”: 1,
“ecBlockId”: “17586052456251008972”,
“signatureHash”: “6b6ce1e5de85adaeafaf1c3e01ed13de4b238435723ade99cf994ce9f229e6ff”,
“attachment”: {
“version.Message”: 1,
“messageIsText”: true,
“message”: “Burst garbage colector. Thank you!”
},
“senderRS”: “BURST-WYMS-EJ42-CP5G-87YZX”,
“subtype”: 0,
“amountNQT”: “700000000”,
“sender”: “7998328496588749432”,
“recipientRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“recipient”: “16427706412886792640”,
“ecBlockHeight”: 439297,
“block”: “6263896498203183703”,
“blockTimestamp”: 106270719,
“deadline”: 24,
“transaction”: “17699675847721158962”,
“timestamp”: 106270442,
“height”: 439312
},
{
“senderPublicKey”: “e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77”,
“signature”: “22e7dee24a552f3785f43e97c22d9ba0774aca4b8f40961b40b5c958a4888904b7d7950af4d2afe02c99d1c58429f62ce7f1f9684fd3560c93ace646d495f8d4”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 6194,
“fullHash”: “5b648e264d2badf0729e0e52ce40aca24a043dd274103aaa4ef98367229562c8”,
“version”: 1,
“ecBlockId”: “13592879364904277585”,
“signatureHash”: “82196fcd91b15164eac014cd2e56123fed6fee678d5efdd4ee8ebdf7830251ef”,
“attachment”: {
“version.Message”: 1,
“messageIsText”: true,
“message”: “Burst garbage colector. Thank you!”
},
“senderRS”: “BURST-WYMS-EJ42-CP5G-87YZX”,
“subtype”: 0,
“amountNQT”: “1200000000”,
“sender”: “7998328496588749432”,
“recipientRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“recipient”: “16427706412886792640”,
“ecBlockHeight”: 439292,
“block”: “4723828056141522326”,
“blockTimestamp”: 106269206,
“deadline”: 24,
“transaction”: “17342565350432990299”,
“timestamp”: 106269181,
“height”: 439304
},
{
“senderPublicKey”: “e7850a8aa345d2e2ead234306eb4cde748092979e10789417a3ecf9d0dd16e77”,
“signature”: “d2dae599a8adbdade70aa9bdd55eed86e77ae87659f7ceb05505f14b23375c0851280b5ef417c6eea4f077606046554e22529ef593bc97844077e46e10d8995c”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 6305,
“fullHash”: “558d37bd3f3e2e1a162db88edd648a89b5cf6121c38469fc00b89586baf6a852”,
“version”: 1,
“ecBlockId”: “269160470584012533”,
“signatureHash”: “a57f36462ee3c15fbef8c8be62d4d90c7380ce45f4ece284dc9ae397680cdac6”,
“attachment”: {
“version.Message”: 1,
“messageIsText”: true,
“message”: “Burst garbage colector. Thank you!”
},
“senderRS”: “BURST-WYMS-EJ42-CP5G-87YZX”,
“subtype”: 0,
“amountNQT”: “2708009464394”,
“sender”: “7998328496588749432”,
“recipientRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“recipient”: “16427706412886792640”,
“ecBlockHeight”: 439187,
“block”: “9194698906594389627”,
“blockTimestamp”: 106243852,
“deadline”: 24,
“transaction”: “1886513737393212757”,
“timestamp”: 106243623,
“height”: 439193
},
{
“senderPublicKey”: “d6048621c2c4f691ad2ab2dd157eff6d2ae55efdbc96b166d36456281bdcaf03”,
“signature”: “cd2bdb6befca5d9768c4070c073031ed7bc2ec104508f0e207ee9794a2386a0a63621c66522d7d00d39aeca181ee88a6fd51a150ac10921ed86fe8a8e506cdf7”,
“feeNQT”: “100000000”,
“type”: 1,
“confirmations”: 23455,
“fullHash”: “2b2565120d3534f642980b0910f36e997a24454ac71d8ba3286e30f7e5f68344”,
“version”: 1,
“ecBlockId”: “8619616524310094491”,
“signatureHash”: “8f119e1e92574a882017e439a3924bbab4db7d414d0be2cf3fe6e467d379bc0a”,
“attachment”: {
“name”: “Burst Garbage colector”,
“description”: “Burst Garbage colector”,
“version.AccountInfo”: 1
},
“senderRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“subtype”: 5,
“amountNQT”: “0”,
“sender”: “16427706412886792640”,
“ecBlockHeight”: 422032,
“block”: “17672494150714116459”,
“blockTimestamp”: 102100757,
“deadline”: 1440,
“transaction”: “17740863162378691883”,
“timestamp”: 102100755,
“height”: 422043
},
{
“senderPublicKey”: “0f0828c37809e66b5303c220f1fc1408ab2a3c19aadaedb93c956a828e65c96b”,
“signature”: “bb48e995df155f2d7e3ef92987c04df566904f6967cb3fa30b7a44c0f9076406d5f0640490a2bb49771a2dc482c63f3eee65022b440170c228abf11624d4854e”,
“feeNQT”: “100000000”,
“type”: 0,
“confirmations”: 23456,
“fullHash”: “23eed7b46f993a9e95948c7bf91490f5384138be337d389abe089f4cb9ebe3ba”,
“version”: 1,
“ecBlockId”: “9654019728410129026”,
“signatureHash”: “a046a6dca27ad68cdf177e1ed0b1450e803146dff0010fad922b52d8880f802c”,
“attachment”: {
“version.Message”: 1,
“messageIsText”: true,
“message”: “BurstCoin.RO faucet November 04, 2017 09:12 PM . Thank you!”
},
“senderRS”: “BURST-FREE-BA6E-BYYG-DZJXN”,
“subtype”: 0,
“amountNQT”: “100000000”,
“sender”: “13435960941141745036”,
“recipientRS”: “BURST-E8G2-Y9HA-BVK4-GHRY9”,
“recipient”: “16427706412886792640”,
“ecBlockHeight”: 422030,
“block”: “11844733450791202327”,
“blockTimestamp”: 102100731,
“deadline”: 24,
“transaction”: “11401594111696301603”,
“timestamp”: 102100110,
“height”: 422042
}
]
}


#4

How many characters does your passphrase have?