monero icon indicating copy to clipboard operation
monero copied to clipboard

all funds gone through 3.9 XMR in fee

Open kvnkmth opened this issue 2 years ago • 30 comments

Sent a transaction as usual but did realize my funds we all gone through the fee. transaction hash 2d97b227942d46aead4ae7dd788adc2a2e83b8540f9e6a5f70f13dad67724e9a

kvnkmth avatar Jul 20 '22 23:07 kvnkmth

Which version are you using?

selsta avatar Jul 20 '22 23:07 selsta

sadly 0.17.1.9

kvnkmth avatar Jul 20 '22 23:07 kvnkmth

We have added a high fee warning, plus we have scanned all remote nodes multiple times and were not able to find whatever node is behind this.

If you use v0.17.1.9 that fee warning sadly doesn't exist yet. We hoped that people would upgrade due to the auto updater :/

selsta avatar Jul 20 '22 23:07 selsta

How much XMR are still left in your wallet?

selsta avatar Jul 20 '22 23:07 selsta

nothing actually. its zero

kvnkmth avatar Jul 20 '22 23:07 kvnkmth

How much XMR are still left in your wallet?

We have added a high fee warning, plus we have scanned all remote nodes multiple times and were not able to find whatever node is behind this.

If you use v0.17.1.9 that fee warning sadly doesn't exist yet. We hoped that people would upgrade due to the auto updater :/

i wish i upgraded

kvnkmth avatar Jul 20 '22 23:07 kvnkmth

That's.. bizarre. What wallet mode are you using in Settings -> Info?

selsta avatar Jul 20 '22 23:07 selsta

it was in simple mode

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

And that happened a couple weeks ago, right? Can you make a screenshot from the transaction inside the GUI? Do you remember anything that was weird about that transaction? Did it fail at first or something?

selsta avatar Jul 21 '22 00:07 selsta

i remember the transaction took ages to send. and the first confirmation took like 30 mins

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

fee How do i recover the funds?

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

What does it say in the top left corner: XMR :.??

selsta avatar Jul 21 '22 00:07 selsta

thats the balance why bruh

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

Because I have never seen :.?? as a balance. It's either ?.?? or a number. To figure out what's going on a technical level I need to know your exact remaining balance.

Regarding "recovering" funds, this was 2 weeks ago and whatever mining pool has mined this transaction has already paid out the fee to miners.

selsta avatar Jul 21 '22 00:07 selsta

its zero 0.0000 this is version 0.18 am running

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

but the balance is zero. its just that i cropped the screenshot its all i had left which pool mined it?

kvnkmth avatar Jul 21 '22 00:07 kvnkmth

Did you intend to send 0.5 XMR or did you intend to send your whole balance?

selsta avatar Jul 21 '22 02:07 selsta

i sent 0.5 xmr. and it arrived but fee was 3.9 and didnt realize it till yesterday

kvnkmth avatar Jul 21 '22 09:07 kvnkmth

Because I have never seen :.?? as a balance. It's either ?.?? or a number.

This isn't answered by "I cropped the screenshot".

Cactii1 avatar Jul 21 '22 19:07 Cactii1

Let's get the obvious answered first.

Where did you download your wallet from? Do you still have the archive and can you verify the hash on that archive? Can you post the hash of the GUI wallet file that you're running?

Cactii1 avatar Jul 21 '22 19:07 Cactii1

If you sent it 14 days ago you didn't send it with the software you're currently using (v0.18)

Cactii1 avatar Jul 21 '22 19:07 Cactii1

i sent it with v0.17.1.9 got it from getmonero.org sha256sum edc47b1540510640a40e8d52ad4ab3a6220f935e881fd65b02ccce94a28c3fa2

kvnkmth avatar Jul 21 '22 21:07 kvnkmth

i sent it with v0.17.1.9 got it from getmonero.org sha256sum edc47b1540510640a40e8d52ad4ab3a6220f935e881fd65b02ccce94a28c3fa2

its for monero-gui-install-win-x64-v0.17.1.9.exe

kvnkmth avatar Jul 21 '22 21:07 kvnkmth

Alright, that's the correct hash.

Maybe this makes the case to make it so simple mode remembers where it gets its information from when forming a transaction.

Cactii1 avatar Jul 21 '22 21:07 Cactii1

how do i recover the funds

kvnkmth avatar Jul 22 '22 07:07 kvnkmth

how do i recover the funds

Your funds are not recoverable.

Cactii1 avatar Jul 22 '22 15:07 Cactii1

great

kvnkmth avatar Jul 22 '22 15:07 kvnkmth

Just to clarify.

  • using a custom gui wallet which shows balance as ":".?? instead of "?":??
  • fee of 3.954
  • sent 0.5
  • total = 0.5 + 3.954 = 4.454
  • if your balance before sending this transaction was exactly 4.454 then your wallet balance is now zero

can you confirm?

plowsof avatar Jul 28 '22 19:07 plowsof

That would be very strange that the fee would be exactly enough to empty the wallet of all funds.

Cactii1 avatar Jul 28 '22 19:07 Cactii1

That would be very strange that the fee would be exactly enough to empty the wallet of all funds.

its for monero-gui-install-win-x64-v0.17.1.9.exe

1.could it be a pointer usage which leads malware to get the value 2.blocks all other than the malicious node 3. manipulates the memory of the monero gui fee when creating the transaction to steal funds ?

could the node operator somehow obtain the fees?

@selsta

good counter to show the high fees warning but it is not noob safe enough. maybe adding a won't proceed when the xmr fee is above a certain unreasonable amount like 0.1+ depending on how serious this issue could be / become

fugbixer avatar Aug 10 '22 02:08 fugbixer

Just to clarify.

  • using a custom gui wallet which shows balance as ":".?? instead of "?":??
  • fee of 3.954
  • sent 0.5
  • total = 0.5 + 3.954 = 4.454
  • if your balance before sending this transaction was exactly 4.454 then your wallet balance is now zero

can you confirm?

no the fee did not wipe the whole wallet. it left around 0.5xmr so the gui wallet is compromised?

kvnkmth avatar Aug 10 '22 12:08 kvnkmth

"exactly".... "around" .. posting the wrong txid initially, and you're using a modified version of the gui .. please close this issue nothing can be done for you.

To me this looks like a bad attempt to try and 'get a refund' for something that didn't happen to you OR you really did download a compromised version of the Monero GUI and there is still nothing we can do, and i apologise for the accusation.

plowsof avatar Aug 10 '22 14:08 plowsof

"exactly".... "around" .. posting the wrong txid initially, and you're using a modified version of the gui .. please close this issue nothing can be done for you.

To me this looks like a bad attempt to try and 'get a refund' for something that didn't happen to you OR you really did download a compromised version of the Monero GUI and there is still nothing we can do, and i apologise for the accusation.

Which transaction are you talking about. My funds are gone through the fee and you just speculate am lying? you don't even try to check with me properly. the hashes for gui wallet all checked out check well this is my transaction 2d97b227942d46aead4ae7dd788adc2a2e83b8540f9e6a5f70f13dad67724e9a you are sitting on the edge of an attack may be @fugbixer is right

kvnkmth avatar Aug 10 '22 15:08 kvnkmth

@kvnkmth please calm down, losing money sucks for everyone. since its crypto you cant get a refund. so @plowsof ur the first who brought this up. he was asking if there is a way to recover the funds, we told him no there is not. end of story.

@selsta made a solution which is good, but i think can be improved.

good counter to show the high fees warning but it is not noob safe enough. maybe adding a won't proceed when the xmr fee is above a certain unreasonable amount like 0.1+

so the thread can be closed and we can hope the fix will be in the next wallet release so that this does not happen anymore. no one is responsible for devices security beside the owner, for the wallet issue we are thankful that it got reported so in case some is trying to manipulate the wallet / or its somehow caused by a bug, it will not happen in the future.

fugbixer avatar Aug 11 '22 07:08 fugbixer

@fugbixer cool i hope no one else will fall for this bug

kvnkmth avatar Aug 11 '22 10:08 kvnkmth

@fugbixer we will likely hardcode a couple community run nodes so that this issue doesn't even happen in the first place.

selsta avatar Aug 11 '22 15:08 selsta

please make it fail safe with a fallback mode in case that none of the community nodes can be reached since they could become a primary target of ddos attacks / censorship.

introducing a trust factor in terms of up time and reliability could create a stable ranking of nodes to choose.

fugbixer avatar Aug 11 '22 18:08 fugbixer