# Unsolicited withdrawal from wallet. Is my private key compromised?

**URL:** <https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904>\
**Category:** Support\
**Created:** [August 5, 2018, 12:57pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904 "2018-08-05T12:57:56Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![openoms](https://bisq.community/letter_avatar/openoms/32/5_5575768a8748004e209b776fc1b2916d.png) [@openoms](https://bisq.community/u/openoms)\
**Post date:** [August 5, 2018, 12:57pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/1 "2018-08-05T12:57:56Z")

</div>

Hi! Yesterday night I had 0.01 BTC withdrawn from my Bisq wallet which I did not request myself. Please see the transaction here: [https://oxt.me/transaction/2b2a8f30e89dc727c4ae3b1e0e1c9b6bc3fa7f58e26efda89a7943c33ccc5e21](https://oxt.me/transaction/2b2a8f30e89dc727c4ae3b1e0e1c9b6bc3fa7f58e26efda89a7943c33ccc5e21)  
I have no access to the receiving address: bc1qytdavvx7lfhsc49e68z22cxsvv6zc7wdr3lp50 .  
I am worried that my private key or computer is compromised endangering my future funds as well.  
Can you suggest any other explanation for this? Would like to make sure I avoid further loss.

---

<div class="post-metadata">

**Author:** ![alexej996](https://bisq.community/user_avatar/bisq.community/alexej996/32/491_2.png) [@alexej996](https://bisq.community/u/alexej996)\
**Post date:** [August 5, 2018, 1:28pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/2 "2018-08-05T13:28:23Z")

</div>

It is possible that you were hacked yes.  
If your funds were withdrawn to the address you don’t control, then yes, it certainly looks like it.

I would suggest that you reinstall your OS. If you were using Windows, switch to Linux.

---

<div class="post-metadata">

**Author:** ![ManfredKarrer](https://bisq.community/user_avatar/bisq.community/manfredkarrer/32/26_2.png) [@ManfredKarrer](https://bisq.community/u/ManfredKarrer)\
**Post date:** [August 5, 2018, 2:46pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/3 "2018-08-05T14:46:57Z")

</div>

Did you use a password? Which OS are you using? Windows is very insecure for crypto… Hope it is just a confusion and you did not get hacked. If so take care that the damage is not larger.

---

<div class="post-metadata">

**Author:** ![openoms](https://bisq.community/letter_avatar/openoms/32/5_5575768a8748004e209b776fc1b2916d.png) [@openoms](https://bisq.community/u/openoms)\
**Post date:** [August 5, 2018, 3:23pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/4 "2018-08-05T15:23:04Z")

</div>

Thanks for your response. I am using linux Ubuntu 18.04, behind a firewall and VPN, but did not have a password set up. Changed that straight away to a long,complicated one. It is still difficult to imagine how this has happened. It is certainly a good lesson to take all the extra steps one sometimes lazy to do, we are our own banks after all.

---

<div class="post-metadata">

**Author:** ![alexej996](https://bisq.community/user_avatar/bisq.community/alexej996/32/491_2.png) [@alexej996](https://bisq.community/u/alexej996)\
**Post date:** [August 5, 2018, 4:22pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/5 "2018-08-05T16:22:19Z")

</div>

Perhaps Bisq doesn’t show outgoing transaction from it’s wallet if it didn’t send them itself.  
I don’t know though.

Check if there is anything about it in Funds-\>Transactions  
If you can’t find this transaction you stated above and Bisq doesn’t retrieve outgoing transactions automatically from the Bitcoin network then it would be safe to assume that someone stole your private keys or your seed words.

---

<div class="post-metadata">

**Author:** ![openoms](https://bisq.community/letter_avatar/openoms/32/5_5575768a8748004e209b776fc1b2916d.png) [@openoms](https://bisq.community/u/openoms)\
**Post date:** [August 5, 2018, 5:47pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/6 "2018-08-05T17:47:54Z")

</div>

It does show up amongst the transactions, but it is the only row not displaying the address. I think bisq does not even support bc1… addresses, so it must have been sent with another software. That strongly suggests, that the seed got imported to somewhere else, yikes.

 ![Screenshot%20from%202018-08-05%2018-24-59](https://bisq.community/uploads/default/original/2X/d/d2f356057c59fde5ef2dea878ddadd89255551f9.png)

---

<div class="post-metadata">

**Author:** ![alexej996](https://bisq.community/user_avatar/bisq.community/alexej996/32/491_2.png) [@alexej996](https://bisq.community/u/alexej996)\
**Post date:** [August 5, 2018, 6:20pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/7 "2018-08-05T18:20:54Z")

</div>

Yeah, I think you are right.

---

<div class="post-metadata">

**Author:** ![ManfredKarrer](https://bisq.community/user_avatar/bisq.community/manfredkarrer/32/26_2.png) [@ManfredKarrer](https://bisq.community/u/ManfredKarrer)\
**Post date:** [August 5, 2018, 7:38pm UTC](https://bisq.community/t/unsolicited-withdrawal-from-wallet-is-my-private-key-compromised/5904/8 "2018-08-05T19:38:11Z")

</div>

Thats weird. You can see all addressed and transactions and keys with cmd+j. have a look to see if the receiver address is in your wallet. If not it seems someone managed to get your seed words or key. Backup the application folder and start over new to not use that wallet anymore. And double check if your computer is compromised. If you find out anything please let us know.
