I do not agree with you. For me, as you can see, he literally stole 0.5xch. So we’re not talking about a big loss here, maybe the value today is $17 However, it happened and I don’t think I made a mistake somewhere in securing the coins.Fortunately, a few days earlier I transferred funds to exchange …
Also note what transfers are made to the hacker’s address.
0.0000000001 xch!
This is some scripted attack… Take what you can get hold of
Could it be version related as well. 1.7? Has it affected solo farmers or those who used to be in pool sometime ago?
1 Like
Therefore, I warn everyone and recommend that you generate a new xch address
No one can feel safe in this situation.
Unfortunately, I don’t know where I can report or go with this problem to analyze the whole situation.
I’m not talking about recovering those ridiculous 0.5 xch …
Maybe think about using Linux for the machine running active farming process? Linux OS is not invincible but the biosphere for malware and stuff is significantly smaller than windows …
can’t delete 20 characters
2 Likes
Generating another XCH address is definitely false security… An attacker might later sync through all the wallets and drain what it finds on the other adresses…
Only fresh wallet seeds created on clean machines, for example using any Live Linux booted from USB, will provide safe location for XCH to be rescued to.
1 Like
Agreed, if it was a Chia exploit, they most likely would have gone only after high value targets.
amounts ranging from 0.5 to a couple of thousand seems to me like a collection of keys. Either collected by the hacker themselves over a longer period, or recently purchased on the dark web somewhere from another collector.
That said, nothing can be ruled out at this moment, too little information as of yet.
Router, or Windows exploits are also an option.
At this point I decided to format the laptop where wallet B is located.
Unfortunately, deleting wallet A means losing my plots…
After installing fresh win 10, I will install a completely new wallet and change the withdrawal of funds from the farm to the new wallet address.
This is probably the only way out of this situation…
What wallet do you recommend me to install on win 10
Some of my posts are being marked as spam by “the community” for some reason, despite them being serious replies.
I can’t be bothered to waste time posting legitimate responses if they’re going to be flagged and blocked, so I’ll delete my account here, as many of my posts as I can, and edit the rest to be nothing if this is how I can expect serious replies to be treated.
Goodbye 
Never ever anything else than the original chia-blockchain client
This is what I use all the time and as you can see it’s not 100%
Running 1.7.0 on Ubuntu 22.04 for a while now and farming with an official pool. No issues so far for me.
correlation does not imply causation…
It’s not a true cold wallet if you connect the device to the internet every 3 months…. With the wallet used to create the cold wallet still on the device. This is where your wallet was compromised!
So for those that have a true cold wallet, your XCH is safe. The allegations that any wallet is “not safe” is false. As the ops version of a “cold wallet” was a laptop that he would connect to the internet roughly every 3 months to make a transfer. This connection to the internet, although short and brief was the connection that allowed the breach of his seed phrase to the hacker…
When creating a new cold wallet, make sure to totally delete the wallet afterwards before connecting the device again to the internet!
Seriously, this is the purest panic of 1-2 people here.
the “small” amount of 4800 Xch which were captured here already practically excluded a compromise by HPOOL, as we would have to assume much larger amounts if this were the case. the same applies to an alleged wallet hack.
i can understand that the affected people are angry but in my opinion it boils down to a user mistake and not to some evil hacker who found a vulnerability in the chia system.
as far as i can see the primary chinese and russian farmers are affected. i think they should just think about what 3 party tools/scripts they have used that are not used in the western countries because of the language barrier so that this doesn’t happen to them again instead of spreading unnecessary panic here.
4 Likes
If you want to interact with your cold wallet, the only wallet that allows this is Pawket…
Otherwise you cannot use your cold wallet once created without compromising it to the internet…
Hoping Chia gets Ledger support sooner than later, as the paper cold wallet is not ideal for most people.
I like Pawket! They are the only wallet that supports using a created cold wallet and never having to connect that device to the internet.
and how many of those are just 1 mojo transfers, 95% or 99%?
Thanks for the support guys… There’s nothing to worry about if the problem isn’t with you yet.
I wonder if this situation happens to you, you will also speak / write the same.
There is only so much some strangers can do in some Internet forum. If you need some suggestions on how to improve your setup or maybe trying to analyze what happened find me here: xchpool