BNB Reddit Mentions | ChartExchange

It's understandable that you're feeling frustrated and confused by this situation. Losing access to your crypto assets is a serious matter. Let's break down the information you've provided and explore potential explanations for how your wallets might have been compromised.
Analyzing the Transactions:
* METAMASK: The rapid swapping to ETH and subsequent transfer using Mimic:Swapper suggests an automated process likely initiated by a malicious actor who had already gained access to your wallet. The similar timestamps for the ETH and BNB transactions to the same address point to a coordinated action.
* TRUST WALLET: The dormant nature of this wallet for over a year with no recent connections makes this particularly concerning. The near-instantaneous activation and draining of XRP to a newly created account ("register") strongly suggests a direct compromise rather than interaction with a malicious dApp in the recent past.
* PHANTOM: The swapping to Solana and the Bitcoin transfer to a separate address indicate the attacker had broad control over your wallet. The mention of "arbitrage bots" in relation to the Bitcoin transfer might be a red herring or a detail the attacker left behind, but it doesn't directly explain the initial access.
* KEPLR: The ability to transfer Akash and initiate un-staking actions shows the attacker had full control over your account within the Keplr wallet. The fact that you could cancel some un-staking but not the Akash suggests the attacker acted quickly.
Potential Attack Vectors:
Given your precautions, the most likely scenarios involve a compromise that bypassed your recent interactions:
* Compromised Seed Phrase (Past Exposure): Even though you haven't shared it recently, your seed phrase might have been compromised in the past. This could have happened through:
* Phishing Attack (Past): You might have unknowingly entered your seed phrase on a fake website sometime ago.
* Malware: Malware on your computer or phone in the past could have logged your keystrokes or clipboard data when you entered your seed phrase.
* Compromised Backup: If you stored your seed phrase digitally in an unencrypted or poorly secured location (e.g., notes app, email), it could have been accessed.
* Compromised Device: It's possible that your computer or phone was compromised by malware that allowed the attacker to gain persistent access to your device and monitor your wallet activities, even without you actively connecting to websites. This malware could have:
* Keylogger: Recorded your keystrokes when you unlocked your wallets.
* Clipboard Hijacker: Swapped the intended recipient address with the attacker's address when you tried to make a legitimate transaction in the past.
* Remote Access Trojan (RAT): Allowed the attacker to remotely control your device and initiate transactions.
* Vulnerability in Software: While less likely given the simultaneous compromise across different wallets, a zero-day vulnerability in the wallet software itself or a core dependency could theoretically be exploited. However, such widespread exploits are usually quickly identified and patched.
* SIM Swapping: In a SIM swap attack, the attacker convinces your mobile carrier to transfer your phone number to their SIM card. This allows them to intercept SMS-based two-factor authentication codes, potentially granting access to accounts linked to your phone number. While this wouldn't directly give access to your wallet seed phrases, it could be used in conjunction with other compromised information.
Addressing Your Hypothesis:
Your hypothesis about importing a compromised wallet into another wallet and gaining access to pre-existing accounts is incorrect. Each wallet within Metamask, Trust Wallet, Phantom, and Keplr is independent and secured by its own private keys derived from the seed phrase used to create or import that specific wallet. Importing one compromised account into a wallet application would not automatically grant access to other unrelated accounts within the same application.
Deleting the compromised account from the wallet application would prevent you from accessing that specific account through that application, but it would not revoke the attacker's access if they have the private keys or seed phrase for that account. They could simply import it into another wallet elsewhere.
Regarding the Trust Wallet XRP Transaction:
Yes, the timestamps strongly suggest that the attacker created the "register" account and drained your XRP within approximately 19 seconds (4:10:50 UTC - 4:10:31 UTC). This rapid action further supports the idea of a pre-existing compromise (like a known seed phrase) that allowed for immediate exploitation upon the new account's creation.
Recommendations:
* Secure Your Devices:
* Run a full malware scan on all devices you've used to access your crypto wallets. Consider a clean OS install for maximum security.
* Ensure your operating system and all software are up to date with the latest security patches.
* Be extremely cautious about clicking links or downloading files from untrusted sources.
* Revoke All Permissions (If Possible): Although your funds are drained, it's still good practice to revoke any website permissions connected to your wallets (if you can still access the interfaces).
* Generate New Seed Phrases on a Clean Device: For your new Ledger hardware wallet and any software wallets you decide to use, generate entirely new seed phrases on a clean and trusted device.
* Use a Hardware Wallet (Ledger or similar): This is the most crucial step moving forward. Hardware wallets store your private keys offline, making them significantly more resistant to online attacks.
* Be Vigilant: Continue to be extremely cautious about phishing attempts and only interact with trusted websites. Double-check URLs carefully.
* Consider Reporting: Depending on your jurisdiction and the amounts involved, you might consider reporting the incident to local law enforcement and potentially the cryptocurrency exchanges involved (although fund recovery is often difficult).
It's important not to blame yourself excessively, as these attacks can be sophisticated. However, learning from this experience and implementing strong security measures is crucial for protecting your assets in the future. Investing in a Ledger is definitely a wise step.

.dark-mode .dHT15L{ color: white; background-color: #333333; border: 2px solid white; }.light-mode .dHT15L{ color: #333333; background-color: white; border: 2px solid #333333; }BNBUSDT20240714P530Binance Coin / Tether USD Jul 14 2024 530.00 Putcrypto

BNBUSDT20240714P530
Binance Coin / Tether USD Jul 14 2024 530.00 Put
crypto