a few user reported their gatehub wallet been hacked and XRP sent to r9do2Ar8k64NxgLD6oJoywaxQhUS57Ck8k

[Flintstone 7,411]

This thread is tough reading. Hope you all get something back.

[richxrp 421]

1 hour ago, mrenne said:

You can't take the last 40 XRP out of your wallet as they are blocked.

(You could release the 4 trustlines in Gatehub though)

Found out that in addition to the 20XRP wallet reserve, each trust line requires 5XRP reserve as well..

https://gatehub.net/blog/xrp-reserve/

[JLCali 12]

Another victim here. They made four transfers to three different addresses totaling 190,000 XRP on June 4th. In other words, they took all I had. Never considered myself rich but now I think my net worth is negative - thanks mortgage. My original account was SnapSwap and this Gatehub account is old and where I was instructed by Ripple to go back in the day. I'm not very tech savvy so never did the Ledger Nano that my friends did - wish I had a time machine. I did have 2FA, never stored my key anywhere, had a dedicated password - I did everything I could do to have it secure at Gatehub.

What's highly off is on Gatehub you can see where and by what type of device you logged in from. Every IPN, every single time you logged in. NOBODY logged into my account to transfer out the funds which leads my to believe Gatehub is responsible - I wasn't hacked, Gatehub was hacked. Sad for them but very sad for all of us that trusted Gatehub.

Went to my local police department (Southern California) and filed a report of theft. They proceeded to tell me they will not do anything (don't blame them) but to obtain the report for any class action or civil lawsuit. Hopefully Gatehub remedies this ASAP and completes indemnity to all that have suffered. 

[Silkjaer 542]

2 hours ago, JLCali said:

Another victim here. They made four transfers to three different addresses totaling 190,000 XRP on June 4th. In other words, they took all I had. Never considered myself rich but now I think my net worth is negative - thanks mortgage. My original account was SnapSwap and this Gatehub account is old and where I was instructed by Ripple to go back in the day. I'm not very tech savvy so never did the Ledger Nano that my friends did - wish I had a time machine. I did have 2FA, never stored my key anywhere, had a dedicated password - I did everything I could do to have it secure at Gatehub.

What's highly off is on Gatehub you can see where and by what type of device you logged in from. Every IPN, every single time you logged in. NOBODY logged into my account to transfer out the funds which leads my to believe Gatehub is responsible - I wasn't hacked, Gatehub was hacked. Sad for them but very sad for all of us that trusted Gatehub.

Went to my local police department (Southern California) and filed a report of theft. They proceeded to tell me they will not do anything (don't blame them) but to obtain the report for any class action or civil lawsuit. Hopefully Gatehub remedies this ASAP and completes indemnity to all that have suffered. 

I have invited you to the victim club. If you are willing to share your addresses and police report reference number in a DM i would like to add you to our internal overview so we can keep taps on how many victims we have united here. 

[WhentheBoat_ComesIn 1,307]

I sent Gatehub the following message in a PM. Their reply is below. I am posting it as it seems to imply that they have a handle on the situation. Hope i'm right!!!!!!!!!!!!!!!!!

"My account hasn't been affected (yet!). I have not received an email from Gatehub. Should I be worried? Are my funds now safe?"

gatehub 306

Replied: 2 hours ago

Hey, thank you for reaching out. If you have not received an email from us, then we have no reason to believe your account was compromised or will be compromised

[JLCali 12]

30 minutes ago, Silkjaer said:

I have invited you to the victim club. If you are willing to share your addresses and police report reference number in a DM i would like to add you to our internal overview so we can keep taps on how many victims we have united here. 

Police report will be tangible soon, I filed yesterday so they gave me a case number and asked me to come back when they finish the report.

 

Here are the addresses that took my XRP:

1) rpfcbzdZZSWdB5EWDGcQvD5ycFhM6jdhpZ received 62,000 then a second transfer of 4,000

2) rHvWywQiexNeCLWTa9dBjHTMAtt6tPN7Z1 received 62,000

3) rMcqiWXMJEAEMXaFFgnjeuASwAMmef8B8c received 62,000

[Wookie 8]

Has anyone vetted the harbor xrp wallet for cold storage: https://www.secureblockchains.com/harbor-xrp-wallet/

[Xrylite 113]

27 minutes ago, WhentheBoat_ComesIn said:

I sent Gatehub the following message in a PM. Their reply is below. I am posting it as it seems to imply that they have a handle on the situation. Hope i'm right!!!!!!!!!!!!!!!!!

I don't want to incite fear if they do actually have a handle on things, but I wouldn't assume that everything is safe until we have an official statement from GateHub on what they definitely know. It's still pretty advised to move the funds off if they're anything significant (honestly, probably anything over a few hundred is worth safeguarding). The peace of mind alone should be worth it.

 

31 minutes ago, WhentheBoat_ComesIn said:

Hey, thank you for reaching out. If you have not received an email from us, then we have no reason to believe your account was compromised or will be compromised

My concern with this kind of statement is that it isn't a "we can guarantee you're not at risk". We've seen the list of people expanding beyond what was initially thought, so it seems like there may be more at risk that haven't been affected just yet.

[Bitrookie007 31]

For all victims that have not filed a complaint with a LEA yet => make sure you do so ! Legal action is a very important signal and might be a precedent for the future or rules that are being made !!!
Everyone who already filed a complaint => make sure you have added all relevant information to your case for a complete report ! Please also share the number and jurisdiction of your complaint for other victims.

Please also send a message to @Silkjaer or @alloyxrp to be added to a specific group to share your information !

 

What I would suggest:

1. Make sure you have a very thorough statement/declaration. This is the most important part since it is the first thing that is read by magistrates of the court. It might also help the police officer that files your complaint to better understand what happend/is happening. Not everybody knows blockchain or xrp.

2. Normally you always have the right to add additional information/self written declaration/documents/anything usefull/... to your case. I would suggest you make sure to include a list of the main adresses that were used by the 'hacker' to flush xrp out of all the accounts. Most important the one that was used to flush out YOUR xrp (signaling in the system/criminal database)

3. If you have received any relevant information from Gatehub, add it.

4. Define the exact amount of your loss in your local currency. (at the exact time the xrp were stolen). Just 'a number' of xrp doesn't say a lot about the monetary value you have actually lost. You can also add a print from Bithomp or your wallet that can prove wich amount of xrp was drained from your adress. Normally people need to add a bank statement to prove their loss but this will do for this case.

5. In Belgium we have a document called 'verklaring benadeelde persoon'. This is added  as an attachment to the complaint and is signed by the victim. This means you want to receive updates from the court what happens with your case. I don't know if such thing exists in other countries? If it exists, make sure to ask about it.

6. Print the following article from Silkjaer and add it (https://medium.com/xrp-forensics/overview-of-the-gatehub-hack-f88a441c9203) might help the court and officers to understand the size of the case. Other press related articles might also be relevant but make sure the information is correct. I would also suggest that you add the most recent visual graph that Silkjaer has made. It's always better to have a visual representation to see how the paterns work.

It's also nice to know wich exchanges/services were used to launder the xrp. If the exchange or service is based in your country, the court might be able to send a claim. They are then obliged to provide personal information about accounts,identity, bankaccounts, ... that were used to launder the xrp. All this information is logged so you always have a digital footprint !

7. Add all case numbers you know from complaints filed by other victims. CLEARLY STATE THEIR COUNTRY/JURISDICTION !!!

8. If @Silkjaer or the people from Xrpforensics can and are willing to share relevant information with LEA, give them their e-mail (info@xrpforensics.org). Please do ask them first if they are willing and are able to do that.

9. If you lost a significant amount of money,  go speak to a lawyer and see if you have other available options in your country. There are options to urge that the court does something with your case (might cost you some money). In Belgium there are services where you can go for a free (basic) legal advice. Maybe such things exist in other countries. Make sure to check it out.

10. Ask the police officer if there is anything else from information that you are able to provide that might help your case. Might be specific for certain countries since I don't know the exact way they work.

11. If the officer doesn't know about xrp, explain him/her that all addresses are public and can be found with the right 'tools'. (Bithomp etc.)

12. If you need to speak to someone about what happened, please do so ! Your wellbeing and health are important. Speak with friends, family, someone you trust or specialized services. Some people lost life changing money and this will affect you one way or another.

 

footnote:

I hope my English is good enough for everyone to understand what I mean. I apologize in advance for any mistakes or words used in a wrong context since my mother tongue is Dutch.

Please also note that my suggestions might be biased since I work for a LEA in Belgium ! Things might be totally different in other countries.

Edited June 6, 2019 by Bitrookie007
additional info

[raulnavarro 6]

5 hours ago, Hero_Member said:

Yeah, just leave it like that. Do not enter the new key in Gatehub. Your transactions will still be visible, you just cannot trade anymore with the old key that is stored there

HI @Hero_Member

 

Sorry for my ignorance about this... but now how can I send XRP to another wallet? 

I mean, imagine that I have the enormous luck that HitBTC send my XRP back because they really see there was no destination tag in the transfers of my XRP to their wallet.

Then I would have my balance back in GateHub wallet but I can not send it to a Toast wallet or similar from GateHub because I rekeyed it and in GateHub appears the old secret key, and don't let me send XRP to any wallet.

Is there any place where I can import the wallet and make a transaction using the new Regular Key?

Thanks a lot.

[Xrylite 113]

10 minutes ago, Bitrookie007 said:

4. Define the exact amount of your loss in your local currency. (at the exact time the xrp were stolen).

This is also important because in some countries (I can only speak on behalf of the US) you can write off those thefts as losses on your taxes. It certainly wouldn't make you whole again, but getting a slight tax break (likely over multiple years depending on the quantity lost) is better than absolutely nothing.

 

13 minutes ago, Bitrookie007 said:

I hope my English is good enough for everyone to understand what I mean. I apologize in advance for any mistakes or words used in a wrong context since my mother tongue is Dutch.

Everything was actually very clear throughout the entire list. I wouldn't have guessed English wasn't your first language. So, very good =).

[FlyingFox 38]

8 minutes ago, raulnavarro said:

 

Is there any place where I can import the wallet and make a transaction using the new Regular Key?

 

 

Refer to Warbler’s post towards end of page 36 - you can use his Bithomp Tools to do exactly that. Online at: https://bithomp.github.io/bithomp-tools/

but even better if you can download this (link to download is on page above too), put on USB stick and perform required signing actions on an offline computer.  You can then submit the signed transaction by taking the signed transaction it gives you to an online computer and submitting it to Bithomp.com as well (select the submit transaction option)

 

[Jillian 52]

Unfortunately I have also had my account hacked.  Words can not describe how painful this is. I am sick to my stomach over this.   I changed my email, use 2fa and changed my password. this wallet had been created in 2016.  I am wondering if Gatehub is trying to push the blame on the wallet holders?

[Pablo 6,470]

26 minutes ago, Jillian said:

Unfortunately I have also had my account hacked.

@JillianIf you are comfortable sharing more information, there is a private club set up on XRPChat for victims of this hack. @Silkjaer or @alloyxrp can arrange invites for you.

[Jillian 52]

2 minutes ago, Pablo said:

@JillianIf you are comfortable sharing more information, there is a private club set up on XRPChat for victims of this hack. @Silkjaer or @alloyxrp can arrange invites for you.

Thank you so much. I just sent a request to him.  I am so upset I can't even think straight.