How to stop a hacker stealing my bitcoins?

-1

I purchased a game script from a guy. I think the same guy is stealing my bitcoins. I need help in stopping him.

The guy also installed the script on my server and set up the bitcoind wallet too. The rpc username and password are set by him himself. I have changed the passwords of my server but not of wallet. Is there a chance that he could have remote access to my wallet on the server? If yes how can I disallow connections to wallet from remote IPs?

Zaaid

Posted 2014-04-22T06:00:35.330

Reputation: 1

Question was closed 2014-04-25T07:17:20.440

He isn't hacking if he configured the username and password to something he knows. Maybe this should be your first step?John T 2014-04-25T07:16:58.240

Yes I already did thatZaaid 2014-04-28T06:35:55.213

Answers

1

For maximum security, use maximum paranoia. Assume that any script or wallet he gives you is invasive malware that's intent on stealing your bitcoins.

Create a brand new wallet (on a different machine, that's never had his stuff installed) using the standard client and configuration (not anything that he set up for you), and send any remaining bitcoins from your old wallet to your new one.

Then delete both the bitcoind wallet and game script, and if in doubt, wipe the computer(s) that had them installed and only reinstall trusted things.

For a lower, but still reasonable, level of security/paranoia, create a new wallet with a new password and transfer the old wallet's bitcoins to it. It's important to not reuse a possibly-compromised wallet, even with a new password and new addresses, because of the key pool. This pool basically means that he's (possibly) already downloaded your private keys, not just for your past addresses, but for your next 100, too.

And if possible, inspect the game script for anything suspicious, or simply stop using it. Or use it only on a computer that cannot access the bitcoins, and in which you never type your wallet password.

In any case, do not use any passwords (RPC, wallet, etc.) or wallets that he gave you, since they could be compromised.

Tim S.

Posted 2014-04-22T06:00:35.330

Reputation: 4 159

What if I shift to a wallet that is not on my server? Like wallets provided by https://blockchain.info/

Zaaid 2014-04-28T06:33:26.017