My Ether has been automatically sent to another address

Question

I sent 0.04 Ether to my metamask address and within minutes the Ether was resent to another address automatically without my knowledge. this is my address 0x627306090abab3a6e1400e9345bc60c78a8bef57 and that the address my ether was sent to without my notice is 0xe3a894890459bb8d23418c8b288c225eb4b13a52. Can anyone tell me whats going.

I just had the exact same problem. I sent 1 eth from coinbase to my wallet. As soon as it got there, it transferred .2 eth to the same wallet id you mentioned with a .78 transaction cost! — user335488, Jan 02 '18 at 15:54
and another question is, if I create account other than metamask and import it, is it secure? — murtza gondal, May 31 '20 at 16:15

score 2 · Answer 1 · answered Dec 22 '17 at 14:42

My guess is that your account has been compromised (meaning that someone else knows your private key). From the account's transaction history, it looks like this sort of thing has been going on for over a month. Every transfer in is followed shortly be a transfer out. Were those previous transactions also unknown to you?

My recommendation: think about how you created the account in the first place and whether you may have used any malicious software/websites to access it. And until you understand what's going on and are sure it's okay, do not use this account anymore.

Thank you, yes those transactions are also unknown to me – Andrew Chamamme Dec 23 '17 at 11:19 — Andrew Chamamme, Dec 23 '17 at 11:19

score 1 · Accepted Answer · answered Jan 14 '18 at 16:25

Unfortunately the address you are using was generated by truffle develop and the seed used to generate it is know. So anybody can access to any funds send to that account.

You have to stop using this address and generate a new one.

See this article post on reddit [WARNING] I sent ETH to my metamask account generated with truffle and the ETH disappeared.

score 0 · Answer 3 · answered Nov 10 '21 at 14:19

0

You are probably the victim of a malicious smart contract linked in your metamask, try revoke permissions from these smart contracts.

https://wiki.rugdoc.io/docs/how-to-revoke-permissions/

answered Nov 10 '21 at 14:19

Butzke

1

score 0 · Answer 4 · answered Dec 22 '17 at 12:03

0

As mentioned here, metamask accounts are hierarchically deterministic wallets, which essentially means that although there is only one wallet in which you hold your funds, there may be more than one underlying Ethereum account in which your funds are held. I suspect this may be the reason some funds were sent to another account when you transferred the ether.

answered Dec 22 '17 at 12:03

Harry Wright

1,171
9
19

It seems unlikely to me that MetaMask would create a new transaction without the user's authorization to move ether between two addresses. – user19510 Dec 22 '17 at 14:34
So is it possible for me to get my ether – Andrew Chamamme Dec 22 '17 at 15:01

score 0 · Answer 5 · answered Jan 02 '18 at 21:06

Seconding @smarx - to my knowledge, MetaMask would not do this. We've had an identical problem to that of the OP, and I believe it's likely because our mnemonic (and therefore our private key) was hacked, and I think a script is then run to automatically transfer those funds from our wallet. Highly suggest abandoning your wallet altogether, and uninstalling any malicious software than could've enabled phishing, if you can.

My Ether has been automatically sent to another address

5 Answers5