Lost 70k USD (0.85BTC) due to Electrum RBF security breach. I'm devastated and don't know how to move forward

Lost 70k USD (0.85BTC) due to Electrum RBF security breach. I'm devastated and don't know how to move forward

I'm a 10+year BTC enthusiat and user, with deep knowledge of the value propositiona and functionalities.

Despite that, since I started accumalating BTC rather yound (over 10 year ago), I have always used a Electrum wallet that is considered "hot". Regardless, I have never had any security issues since I had every other precation to keep my keys etc. So the keys were mine, therefore the coins were also mine.

On Oct 28, the first day of my vacation, I had a goal to myself to setup and Tails + Electrum cold wallet to keep on holding my BTCs - I never sell, only buy.

Everything went smoothly, I made several tests before commiting to send the whole amount of BTC I had to the cold wallet - I tested sending funds to the watch wallet and then sending it back to the hot one, etc. No problems at all and it was fairly easy to do it myself.

I was finally ready to sending the remaning BTC and move forward to enjoy my vacation. It was 0.85, roughtly 90% of what I had.

I had both my watch wallet and the hot opened, expecting the moment I finished the transaction, it would be accounted in the watch wallet - I did not happen.

I checked the adress multiple times, the watch address supposed to receive the BTC was:

bc1qnjtc6qwqshq7s8swfh8ww0lv63pt4t6mku6537

https://preview.redd.it/xf6obt2kulyh1.png?width=1092&format=png&auto=webp&s=a10d9a083633cf420a0c0b0bdfb0af2240bcc319

I checked it multiple times and it was the correct one assinged in the hot wallet, as per the "failed" transaction:

https://preview.redd.it/110nj33pulyh1.png?width=1903&format=png&auto=webp&s=2f0239119f82c58cc49a24b7aae97118b1e24acf

For some reason I can't explain, when I tried to execute the transaction, I reamined as "local" in the history. Trying to figure it out, I opened the transaction details, checked the address again (all correct), and got a message that the fee was too low and the network was not pushing it through.

Therefore, since we were talking about my life long savings, I bumped the fee through Electrum RBF, clicked ok again and then....the receiving address changed it self without me realizing it (how could I after checking it multiple times???). It changed to one that ends exactly the same as the one I inteded to send.

https://preview.redd.it/g16yrl05vlyh1.png?width=795&format=png&auto=webp&s=cab733831e08dc80d7b485b4c1f14c976e49b3e4

It took me a while to understand what had happened. I then went online and realized that this is a recent hack that was discovered.

HOW COULD ELECTRUM NOT PUT DOWN HIS OLD VERSION AND LET THIS UNACCEPTABLE BREACH KEEP GOING?

I lost over 10 years of diligent savings to a scammer, and electrum allowed that, even though they knew this could happen.

THis shouldn't happen to a over 10 year user... but yet it did.

After that, I still understand that FIAT is not viable, but how can BTC be if in a matter of seconds I lost my family's retirement plan?

I don't know what to do... to be honest that is nothing I can do...

Just wanted to share this sad sad story of a person that believed BTC and lost everything for that.

EDIT 1:

I am really touched and feeling better after all the supporting comments, thank you with all of my heart! I know 99% of the community is made out of good people trying to make a good and honest life for them and their family.

Adressing some comments:

  • Electrum technical fail: This article really summarizes everything Electrum's Fee-Bump Bug: What Broke, Step by Step. I was using Electrum's 4.8.2 version - make sure you update yours to the 4.8.3 version where they fix the issue
  • 0.87 is a low amount after 10 years: well.. some people find it weird but I am from Brazil, and for the most part of my life my wage has been something around 200-300 dolars, so I didn't have much purchasing power to build up my BTC. Regardless.. I reached the 1BTC mark, which was outstanding for me
  • Donations:
  • Here I feel very touched. Thank you for everyone that asked how they could help:
  • I tried to set up a link, but I really don't know how to make an internation one, especially in BTC. So if that's what your heart asks you to do, you can send BTC to my wallet address - the same one I refer to in the post, here:
  • bc1qnjtc6qwqshq7s8swfh8ww0lv63pt4t6mku6537
  • Since this address has 0 balance, we can follow closely what goes in there, and I promise that every penny that goes over the 0,87BTC I lost will be donated to a higher and more noble cause here in Brazil, in my local community. I will keep everything documented and updated.
  • Here is the mempool link to monitor! Endereço: bc1qnjtc6qwqshq7s8swfh8ww0lv63pt4t6mku6537 - mempool - Bitcoin Explorer
  • I will also be looking into better solutions for the donation link (share you have any suggestions)!
submitted by /u/Rortherina to r/Bitcoin
[link] [comments]
Quelle: bitcoin-en