0

I need help, and every time I unlock an account. my account will be transferred to someone else's accoun. at 0x957cd4ff9b3894fc78b5134a8dc72b032ffbc464this address trading records I found that the account was so much eth that I was not alone. I need some way to solve this problem

I found that it was safe to unlock an account when rpcaddr was 127.0.0.1, but if my system and wallet system were no longer together, would I have to set the rpcaddr to 0.0.0.0? What's the solution

  • Do you have RPC address set to 0.0.0.0? If yes, look at there. – Distic Aug 5 '17 at 9:00
  • I'd consider the private key is compromised and generate a new one. From the comments etherscan.io/address/… it appears to belong to someone exploiting unprotected geth nodes, or an scam wallet. – Ismael Aug 6 '17 at 9:26
3

It sounds like either there's malware on your computer, or your node is exposing its RPC API to other computers on your LAN or on the internet, and one of those is spending your money.

If you've got any ETH left worth protecting, I'd suggest setting up on a clean computer (preferably freshly installed) and copying the wallet files over to it, then moving any funds in the old wallet to new addresses.

As for money that's already gone, unfortunately it's unlikely that you'll be able to get it back, unless the police somewhere catch the thief and make them restore the funds, which doesn't seem to happen very often.

  • I have installed in the different system geth (a ubunto, a window), but the problem is not solved, when I unlock the account, all will be lost money in my account, and no tips, I think it is very dangerous – ali Aug 5 '17 at 7:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.