I sent 0.04 Ether to my metamask address and within minutes the Ether was resent to another address automatically without my knowledge. this is my address 0x627306090abab3a6e1400e9345bc60c78a8bef57 and that the address my ether was sent to without my notice is 0xe3a894890459bb8d23418c8b288c225eb4b13a52. Can anyone tell me whats going.

  • I just had the exact same problem. I sent 1 eth from coinbase to my wallet. As soon as it got there, it transferred .2 eth to the same wallet id you mentioned with a .78 transaction cost!
    – user335488
    Jan 2, 2018 at 15:54
  • I had same problem today, anyway to get my ethers back. May 31, 2020 at 14:50
  • and another question is, if I create account other than metamask and import it, is it secure? May 31, 2020 at 16:15

5 Answers 5


Unfortunately the address you are using was generated by truffle develop and the seed used to generate it is know. So anybody can access to any funds send to that account.

You have to stop using this address and generate a new one.

See this article post on reddit [WARNING] I sent ETH to my metamask account generated with truffle and the ETH disappeared.


My guess is that your account has been compromised (meaning that someone else knows your private key). From the account's transaction history, it looks like this sort of thing has been going on for over a month. Every transfer in is followed shortly be a transfer out. Were those previous transactions also unknown to you?

My recommendation: think about how you created the account in the first place and whether you may have used any malicious software/websites to access it. And until you understand what's going on and are sure it's okay, do not use this account anymore.

  • Thank you, yes those transactions are also unknown to me Dec 23, 2017 at 11:19

As mentioned here, metamask accounts are hierarchically deterministic wallets, which essentially means that although there is only one wallet in which you hold your funds, there may be more than one underlying Ethereum account in which your funds are held. I suspect this may be the reason some funds were sent to another account when you transferred the ether.

  • It seems unlikely to me that MetaMask would create a new transaction without the user's authorization to move ether between two addresses.
    – user19510
    Dec 22, 2017 at 14:34
  • So is it possible for me to get my ether Dec 22, 2017 at 15:01

Seconding @smarx - to my knowledge, MetaMask would not do this. We've had an identical problem to that of the OP, and I believe it's likely because our mnemonic (and therefore our private key) was hacked, and I think a script is then run to automatically transfer those funds from our wallet. Highly suggest abandoning your wallet altogether, and uninstalling any malicious software than could've enabled phishing, if you can.


You are probably the victim of a malicious smart contract linked in your metamask, try revoke permissions from these smart contracts.


Not the answer you're looking for? Browse other questions tagged or ask your own question.