XRP FUND STOLEN FROM LEDGER NANO S!

[weex123]

Hi all!

So after having over 18 000 XRP and investing £10 000, somehow my funds were stolen.

My address : rKXsnFbTvL79DrmLE4zPcpN4LkmXYJLKwg .

Hackers address: rUF5TKP4JNyXsHWjHYVWH7ugCB6FTabM8U.

I have bought my ledger of ebay, it came sealed and unopened.

I have the persons name, is there anything i can do to recover my xrp?

 

It were my life savings....

[30k1m]

34 minutes ago, weex123 said:

I have bought my ledger of ebay, it came sealed and unopened.

Sorry to hear that.. Did you buy it through an official reseller (probably not as you talk about his name)?
I hope you had to configure it yourself?
It should come without PIN configured
 

Edited December 18, 2018 by 30k1m

[DucPeter]

4 minutes ago, 30k1m said:

Sorry to hear that.. Did you buy it through an official reseller (probably not as you talk about his name)?
I hope you had to configure it yourself?
It should come without PIN configured
 

While I don't have a direct solution to the OP's problem, there's one thing that grasps me:

Why trying to save a few bucks on a second hand Nano S from ebay, while the security of your investment (over $ 10,000 k) could be at risk...??? 

[XRP-JAG]

Who was the eBay seller?

Maybe try to speak to Gatehub (seems to be where the funds went to), before transferring to BTC.

The wallet transferred to is from 2013, and has received very little apart from small payment from ComputingForGood program. It's odd, and not what you'd expect to see from a Hacker.

I presume you've attempted nothing else except move funds to Nano when rec'd?

 

Edited December 18, 2018 by XRP-JAG

[Pablo]

I'm really sorry to hear this - it makes me sick to my guts when I hear these stories.

Did you wipe the device first by putting an incorrect pin 3 times? That will wipe the nano and reset it to default. You can then safely create your own pin and new 24 word private key. This latter step is critical.

If you didn't do this (I do it even with Nanos I bought directly from Ledger in France), there is a risk that the scammers have the 24 word key and you only have a pin. They don't need your pin to recreate the nano wallet containing your funds as the 24 word key is theirs, as is the wallet you inadvertently used.

The wallet you pointed to was Activated on 2018-06-12 16:35 UTC. Was that you? If not, it's not your wallet - it belongs to someone else, presumably a scammer who now has your funds.

If the only steps you took were to take it out of the box, punch in a pin, connect it to your PC and transfer funds into the wallet address then someone else created the 24 word keys and owns "your" wallet. It's actually their wallet that you are using and very simple to siphon the funds. Sometimes scammers will helpfully provide you a pin and instructions to change it. Remember, they don't need the pin. They already have the 24 word key.

That 24 word key should never be shared with anyone else. Even if you lose your nano, you can re-create your wallets with the 24 word key. The 24 word key should be placed somewhere very safe - bank vault or other secure location. Not on your phone, PC or other internet enabled device.

If you created a new set of 24 word keys (a new wallet) and a new pin, then it's hard to see how funds could have been stolen.

[Guest]

you should not buy your hardware wallet on eBay, your money is gone

[weex123]

42 minutes ago, Pablo said:

I'm really sorry to hear this - it makes me sick to my guts when I hear these stories.

Did you wipe the device first by putting an incorrect pin 3 times? That will wipe the nano and reset it to default. You can then safely create your own pin and new 24 word private key. This latter step is critical.

If you didn't do this (I do it even with Nanos I bought directly from Ledger in France), there is a risk that the scammers have the 24 word key and you only have a pin. They don't need your pin to recreate the nano wallet containing your funds as the 24 word key is theirs, as is the wallet you inadvertently used.

The wallet you pointed to was Activated on 2018-06-12 16:35 UTC. Was that you? If not, it's not your wallet - it belongs to someone else, presumably a scammer who now has your funds.

If the only steps you took were to take it out of the box, punch in a pin, connect it to your PC and transfer funds into the wallet address then someone else created the 24 word keys and owns "your" wallet. It's actually their wallet that you are using and very simple to siphon the funds. Sometimes scammers will helpfully provide you a pin and instructions to change it. Remember, they don't need the pin. They already have the 24 word key.

That 24 word key should never be shared with anyone else. Even if you lose your nano, you can re-create your wallets with the 24 word key. The 24 word key should be placed somewhere very safe - bank vault or other secure location. Not on your phone, PC or other internet enabled device.

If you created a new set of 24 word keys (a new wallet) and a new pin, then it's hard to see how funds could have been stolen.

 

Yes, as soon as I received it, I have setup a new PIN and recovery words which I have written down on  a piece of paper and hidden. I already read about buying Ledger from resellers before buying mine, so I have resetted it before acctually creating new pin and recovery words. I am baffled as to how would this be possible.

 

Will be writing email to Gatehub now, thanks for that

 

eBay username I bought it off- mudasseaja0 

Edited December 18, 2018 by weex123

[Benchmark]

1 hour ago, lucky said:

you should not buy your hardware wallet on eBay, your money is gone

Unfortunately this is true, on both accounts.

[XRP-JAG]

This person: https://www.ebay.co.uk/usr/mudasseaja0 ?

[weex123]

9 minutes ago, XRP-JAG said:

This person: https://www.ebay.co.uk/usr/mudasseaja0 ?

Yep. 

I do now believe that ledger is definitely not 100% "secure and tamper-proof" like they claim. Just a marketing term to sell more.

[XRP-JAG]

Recently? Not showing on their completed items list.

Both the eBay and Wallet are old established accounts. Think all you can do is report it as a theft to police and companies, and hope contact details can be made for the person.

[Rey]

4 minutes ago, weex123 said:

Yep. 

I do now believe that ledger is definitely not 100% "secure and tamper-proof" like they claim. Just a marketing term to sell more.

Hey @weex123 I'm sorry to hear that you have this very bad experience and I really hope that things work out for you, even while there doesn't seem much hope.

That being said I really don't think it's fair to make a statement like you just did, while it's YOU who bought a device from an untrusted source.

[weex123]

8 minutes ago, XRP-JAG said:

Recently? Not showing on their completed items list.

Both the eBay and Wallet are old established accounts. Think all you can do is report it as a theft to police and companies, and hope contact details can be made for the person.

It was a while ago that I bought it, wish police would even respond! 15 minutes on phone and no one picking up on 101,

[ixarepe]

1 hour ago, weex123 said:

so I have resetted it before acctually creating new pin and recovery words. I am baffled as to how would this be possible.

This is indeed baffling. Sorry to hear about your loss. 

Curious. Did your nano pass the Ledger Live genuine test? If so than I really would like to hear an explanation from Ledger

[weex123]

Just now, ixarepe said:

This is indeed baffling. Sorry to hear about your loss. 

Curious. Did your nano pass the Ledger Live genuine test? If so than I really would like to hear an explanation from Ledger

It did pass indeed, it did not flag up or anything.