Is There Some Way To Check Activity In Wallet?

Discussion in 'Balances' started by RegenX, Feb 24, 2016.

  1. 2017/12/15 - Decred v1.1.2 released! → Release Notes  → Downloads
  1. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    #1 RegenX, Feb 24, 2016
    Last edited: Feb 24, 2016
    yesterday with the help of a forum member I created a wallet on my computer using the dcrwallet.exe program,
    when we ran the getbalance command the total came up as 282.63795424 decred

    today I ran the same getbalance command and the total came up as 0.0250424 decred.

    Have I been scammed? Is there some way to check the recent activity on the wallet to see what may
    have happened?

    btw, this is not in suspicion of who helped me yesterday, he is the second person in three days to have helped me via teamview and skype.
     
  2. Xsoldier

    Xsoldier New Member
    Advocate (Twitter)

    Dec 18, 2015
    12
    4
    Male
    Are you stake mining? If so run this:
    -- getbalance default 1 all
     
  3. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    I am not stake mining, to my knowledge anyway

    I am brand new to this , I will try running that command anyway
     
  4. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    tried that and the balance is still coming up as 0.0250424 decred

    is there a way to find out what happened? to find out when the DCR was removed?
     
  5. Xsoldier

    Xsoldier New Member
    Advocate (Twitter)

    Dec 18, 2015
    12
    4
    Male
    --listtransactions will show all input and output transactions on your wallet. Also try running
    dcrctl.exe --wallet getbalance "imported" 0 all
     
  6. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    #6 RegenX, Feb 24, 2016
    Last edited: Feb 24, 2016

    I ran that and the line underneath shows as the number 0

    what does that 0 mean? 0 balance? or 0 transactions?
     
  7. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    OK, I was able to list the transactions on the wallet and here is what came up, can anyone
    sort this out ?

    transactions.JPG
     
  8. Xsoldier

    Xsoldier New Member
    Advocate (Twitter)

    Dec 18, 2015
    12
    4
    Male
    Can you copy and paste the output on here, so we can check it out on the Block Explorer? It looks like your Airdrop was misplaced on the 3rd transaction on this list.
     
  9. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male

    C:\Users\Admin\Desktop\windows-amd64>dcrctl -u regen -P password --wallet listtransactions
    [
    {
    "account": "",
    "address": "DsnnSTm7jcExNksq3Jq1c6zt1fbzYPMZJcV",
    "amount": -0.02505424,
    "blockhash": "00000000000048c46a505f3ceaa039c798c2810d6dcb69f95ee235b629e42d3a",
    "blocktime": 1456241575,
    "category": "send",
    "confirmations": 464,
    "fee": -0.0129,
    "time": 1456260828,
    "timereceived": 1456260828,
    "txid": "d6925d929b25db564d936589497c5faf9f396eeafe2273f5e1b38bc2f4d91042",
    "vout": 0,
    "walletconflicts": []
    },
    {
    "account": "default",
    "address": "DsnnSTm7jcExNksq3Jq1c6zt1fbzYPMZJcV",
    "amount": 0.02505424,
    "blockhash": "00000000000048c46a505f3ceaa039c798c2810d6dcb69f95ee235b629e42d3a",
    "blocktime": 1456241575,
    "category": "receive",
    "confirmations": 464,
    "time": 1456260828,
    "timereceived": 1456260828,
    "txid": "d6925d929b25db564d936589497c5faf9f396eeafe2273f5e1b38bc2f4d91042",
    "vout": 0,
    "walletconflicts": []
    },
    {
    "account": "",
    "address": "Dsh1bmQn22JwwriFPHoXYo791tCHJQoD8JP",
    "amount": -282.6,
    "blockhash": "00000000000048c46a505f3ceaa039c798c2810d6dcb69f95ee235b629e42d3a",
    "blocktime": 1456241575,
    "category": "send",
    "confirmations": 464,
    "fee": -0.0129,
    "time": 1456260828,
    "timereceived": 1456260828,
    "txid": "d6925d929b25db564d936589497c5faf9f396eeafe2273f5e1b38bc2f4d91042",
    "vout": 1,
    "walletconflicts": []
    },
    {
    "account": "",
    "address": "DscJC6UtB9vWVrWviU3oYWNPTo8dReJwCuX",
    "amount": -282.63795424,
    "blockhash": "000000000000437482b6d47f82f374cde539440ddb108b0a76886f0d87d126b9",
    "blocktime": 1454954535,
    "category": "send",
    "confirmations": 4975,
    "fee": 0,
    "generated": true,
    "time": 1456260539,
    "timereceived": 1456260539,
    "txid": "5e29cdb355b3fc7e76c98a9983cd44324b3efdd7815c866e33f6c72292cb8be6",
    "vout": 481,
    "walletconflicts": []
    },
    {
    "account": "default",
    "address": "DscJC6UtB9vWVrWviU3oYWNPTo8dReJwCuX",
    "amount": 282.63795424,
    "blockhash": "000000000000437482b6d47f82f374cde539440ddb108b0a76886f0d87d126b9",
    "blocktime": 1454954535,
    "category": "generate",
    "confirmations": 4975,
    "generated": true,
    "time": 1456260539,
    "timereceived": 1456260539,
    "txid": "5e29cdb355b3fc7e76c98a9983cd44324b3efdd7815c866e33f6c72292cb8be6",
    "vout": 481,
    "walletconflicts": []
    }
    ]

    C:\Users\Admin\Desktop\windows-amd64>
     
  10. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    What level of assistance did you get from this other person? Was there screen-sharing? Did he get to see the 33-word list OR the 64-character hex code?

    https://mainnet.decred.org/address/DscJC6UtB9vWVrWviU3oYWNPTo8dReJwCuX
     
  11. Xsoldier

    Xsoldier New Member
    Advocate (Twitter)

    Dec 18, 2015
    12
    4
    Male
  12. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    yes, the first person who helped me was on screensharing and got the wrong 33 word seed last Friday.
    it came up as 'invalid seed' and he seemed to give up abruptly , after going through the trouble to walk me through
    setting up teamview and skype etc.

    and the second person who helped yesterday. also could have seen the correct 33 word seed yesterday when we created
    the wallet on screensharing. The one who helped me create the wallet
    yesterday seems trustworthy.
     
  13. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    #13 ClokworkGremlin, Feb 24, 2016
    Last edited: Feb 24, 2016
    [edit]misread, the first person got a WRONG seed.

    If the seed appeared on your screen at any time while screen sharing was up, there's a chance that someone has it. It doesn't really matter if they seem trustworthy or not*. Blizzy seemed trustworthy, and he not only made off with coins the first chance he got, but tried to deny having done so. If there was a chance that your wallet may have been compromised, the correct course of action (and what I would have told you to do had I been assisting you) would have been to generate a fresh wallet and move all of the coins there immediately. Which is probably what your second person did.

    I'd like to think I'm trustworthy, but even I'm going to tell you that you shouldn't trust me with your seed. When I sell people things on this forum, you'll note that I set the offers up in such a way that neither party has anything to gain by cheating the other: Cheap for me to produce, (so I don't really lose anything if the other person chooses not to pay), but I won't even let the customer pay until I have submitted proof that their order is ready, at which point there's nothing for me to gain by not shipping the product as soon as I can.

    *Actually, even if the person you're on screenshare with *is* trustworthy, there's still a possibility that someone who isn't trustworthy was able to get their hands on it. See also: why secure facilities don't use Skype for in-facility communication. (we had proprietary software on a proprietary server, and weren't even a particularly secure facility. I was allowed to bring in my own MP3 player and plug it into my work machine.)
     
    Xsoldier likes this.
  14. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    the guy who helped yesterday is super adept, I think he can be trusted, maybe he can figure this out, he's been away all day unfortunately,

    I will update this thread when and if we figure out what happened or what I am doing wrong with this wallet, I have no idea.
    the timeline which you posted seems off , you say the DCR from my first DCR address was probably removed yesterday morning at 10:30 AM EST, but that would probably rule out the second guy because we worked together yesterday afternoon, not yesterday morning, unless you got
    the time zone off. He we would probably not have had the seed until yesterday afternoon.
    I am holding out hope that he can sort this out and figure out where the DCR is now and how to access it.
     
  15. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    Well according to the block explorer, that transfer took place at 8:32:55 AM, Mountain time (it should have the appropriate local time zone for you when you click the link)

    This is, by the way, why I haven't been particularly forthcoming about my addresses and stake tickets. I'd like to hold onto a bit of privacy, at least.

    Granted, PoS mining is probably doing almost as good a job of shuffling them as a coin mixer would right now.
     
  16. Kandiru

    Kandiru Member

    Feb 21, 2016
    206
    87
    #16 Kandiru, Feb 24, 2016
    Last edited: Feb 24, 2016
    That person transferred your coins into the address that their own airdrop went to. The decred organisers should be able to trace it to the online presence URL that was given for the airdrop. It sounds like the person stole it from you, *never* let a random internet stranger use teamviewer on your computer, they could install trojans or whatever. Better to just share edited screenshots. Your seed is your key, with that 33 word phrase the coins are up for grabs!

    DscJC6UtB9vWVrWviU3oYWNPTo8dReJwCuX was your airdrop, it then went to:
    Dsh1bmQn22JwwriFPHoXYo791tCHJQoD8JP which is someone else's airdrop! That's your thief. Hopefully we can trace who it is and prosecute. They will have submitted some identifying data for the airdrop.

    It looks like the 40 DCR was sold on an exchange. But there is the thief's airdrop, and most of yours still there.
     
    ClokworkGremlin and RegenX like this.
  17. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    Monday afternoon was when I finally found the paper with the right seed words written down on it, and that was when I started trying
    to create an online wallet at decred.org, with the correct seed, verified word for word on the PGP word list , and kept getting 'could not create, invalid seed' etc. The original airdrop address was still showing 282 DCR at mainnet as of Monday afternoon.

    Tuesday afternoon David helped me create a new wallet on my computer instead, using the downloadable binary and using the proper written down seed, and when he created it
    it showed the balance as 282 DCR that afternoon , which should have been impossible according to your check, which shows that the DCR would have been removed from the original airdrop address earlier that day, Tuesday morning at 10:30 am.
    Then when I ran get balance, it showed the DCR gone this morning.

    ?????????????

    So the only thing I can think of is to try to ask David what happened and if there is any way to figure this out.
     
  18. RegenX

    RegenX Jr. Member

    Jan 2, 2016
    127
    35
    Male
    I hope it was just someone trying to help out and maybe some error made in the process, I don't know. thanks so much for your help,
    all of you, we will get to the bottom of this. thanks again
     
    Xsoldier likes this.
  19. Kandiru

    Kandiru Member

    Feb 21, 2016
    206
    87
    What timezone are you in? The Funds were removed from your account in a block mined at Tuesday Feb 23, 2016 3:32:55 PM (UTC).

    The transaction it self will have been submitted before that, but the fee was high, so it should have been submitted no earlier than the previous block, Feb 23, 2016 3:23:24 PM
     
  20. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    Oh, the guy with the astronaut avatar? OK yeah, he seems like a pretty decent guy. Until other information shows up, I'm willing to assume he would have also told you to move your coins to a safe place if he had accidentally seen your key.
    (Don't prove me wrong here, David!)
     
    David likes this.

Share This Page