Lost Dcr, How To Find The Reason?

Discussion in 'Questions' started by josser, Feb 8, 2017.

  1. 2017/12/15 - Decred v1.1.2 released! → Release Notes  → Downloads
  1. josser

    josser New Member

    Jan 19, 2016
    38
    4
    Male
    Hello everyone!

    First of all sorry for my bad english.
    Short story: for some reason I lost all my DCR and I can't understand how this is possible.
    I can see transactions:
    dcrctl --wallet listtransactions "*" 100 0

    And there is:
    {

    "account": "",
    "address": "DsmFF3oHK122ejcAtVfjUtKsx1XmztsnRxz",
    "amount": -0.08075017,
    "blockhash": "0000000000000811067b8a9052efd5d25a5424901bec89ee4285311180c2e90b",
    "blocktime": 1469678253,
    "category": "send",
    "confirmations": 53872,
    "fee": 0,
    "time": 1485335359,
    "timereceived": 1485335359,
    "txid": "32ab154c842d4c15a1d0c47b2faaaf45ce782fe367e3ea9316c0a2d6a07ddb82",
    "txtype": "regular",
    "vout": 0,
    "walletconflicts": []
    },

    {
    "account": "",
    "address": "DsmFF3oHK122ejcAtVfjUtKsx1XmztsnRxz",
    "amount": -34.24411628,
    "blockhash": "0000000000000811067b8a9052efd5d25a5424901bec89ee4285311180c2e90b",
    "blocktime": 1469678253,
    "category": "send",
    "confirmations": 53872,
    "fee": 0,
    "time": 1485335359,
    "timereceived": 1485335359,
    "txid": "32ab154c842d4c15a1d0c47b2faaaf45ce782fe367e3ea9316c0a2d6a07ddb82",
    "txtype": "regular",
    "vout": 1,
    "walletconflicts": []
    },

    {
    "account": "",
    "address": "DsdQRik1uxUqsfkpX24YCyX8t6TxSpXTxKd",
    "amount": -196.37489525,
    "blockhash": "0000000000000811067b8a9052efd5d25a5424901bec89ee4285311180c2e90b",
    "blocktime": 1469678253,
    "category": "send",
    "confirmations": 53872,
    "fee": 0,
    "time": 1485335359,
    "timereceived": 1485335359,
    "txid": "32ab154c842d4c15a1d0c47b2faaaf45ce782fe367e3ea9316c0a2d6a07ddb82",
    "txtype": "regular",
    "vout": 2,
    "walletconflicts": []
    },


    The problem with this transactions is that I didn't made them.
    I converted time: from unix to regular date and it is: Wed, 25 Jan 2017 09:09:19 GMT
    And I'm, 100% sure I didn't used wallet 25 jan.
    I understand this the nature of cryptocurrencies - they are all anonymous, so I can't get recipient but can I at least understand why this happened?
     
  2. Shadowlance

    Shadowlance Full Member

    Jan 9, 2016
    220
    155
    Male
    All those transactions occurred in block 49392 on July 28, 2016. You check them yourself at https://mainnet.decred.org. I'm not sure what that time stamp is above, but it's probably not unix, or is using different epoch. Did you transfer them to an exchange last year? Are you sure (and I mean absolutely sure) no one else knows your seed words or has access to your wallet?

    You might want to see if you can remember what you were doing around that time. If you don't recall making those transactions you need to assume someone else has your seed. Create a new wallet with a new seed immediately.
     
  3. jrick

    jrick Member
    Developer

    Jan 4, 2016
    88
    81
    Male
    Sorry you lost your coins.

    It's true that that timestamp is unix time, so if you are positive you did not create those transactions at those times, then please take Shadowlance's advice and assume the worst (that your seed was compromised). If you continue to use Decred, you can create a new one by removing (or moving/renaming) the old wallet.db file and creating a new wallet with dcrwallet --create.

    It is also possible that, if an attacker gained user access to your account, and you left your wallet permanently unlocked or it was encrypted with a weak passphrase, they could very easily move the coins elsewhere. But for your safety, I would still consider the seed compromised and create a new wallet.

    I'd also recommend taking some basic security precautions by reinstalling your operating system in case something like a keylogger was installed (I'm not sure what OS you use) and only install software from reputable sources.
     
  4. josser

    josser New Member

    Jan 19, 2016
    38
    4
    Male
    I'm 100% sure that seeds is not compromised because I stored them in encrypted storage with all other credentials as a simple text file. None of them are compromised and I have my credit cards stored there so if some one can steal seeds it's too silly to not steal credit card and other passwords.
    It worth to say that I'm on mac os and as a computer engineer I'm using really strong passwords.

    What if I'm wrong thinking that dcr are lost?

    I've posted another thread few weeks ago about my unsuccessful tries to use stake pool. What if my dcr's are not lost and just 'invisible' for me? (Locked in terms of stake pool or something else).
    The most strange thing for me about this transactions is that they have 'time' field exactly the same as other transactions with type 'ticket' related to stake pool. And this stake pool still have dead web-ui so I even can't check any details.

    I've attached the output of
    dcrctl --wallet listtransactions "*" 100 0

    Can someone take a look at it and tell me for sure that I can't get my DCR back somehow? Thank you!
     

    Attached Files:

  5. jrick

    jrick Member
    Developer

    Jan 4, 2016
    88
    81
    Male
    If you believe your stake-locked coins should no longer be locked but wallet is reporting them as so, try this:

    Run dcrwallet with the --enablevoting feature

    Unlock the wallet without a timeout: dcrctl --wallet walletpassphrase sekrit 0

    Rebroadcast the stake notifications using dcrctl rebroadcastmissed and dcrctl rebroadcastwinners

    Lock the wallet: dcrctl --wallet walletlock

    If this doesn't work, then try doing a seed restore, since you seem to be completely certain that the seed is not compromised.
     

Share This Page