<p>Generally, this should not happen. The situations this can happen should be limited to:</p>

<ol>
<li>bugs in the software</li>
<li>malicious acts by the software</li>
</ol>

<p>to resolve this you will need to look up the transaction on a block explorer and document all relevant information, including the block height, transaction id, inputs spent, target address, change address and possibly the miner that relayed the block.</p>

<p>armed with this information you then reconfirm in you wallet and doublecheck for deviations, and if necessary contact the developers of the wallet.</p>

<p>if they cannot help, you should at least be able to ask new and more precise questions here afterwards.</p>

CC BY-SA 3.0
2017-10-28T09:16:14.633Z
It now appears that the wallet code that was meant to create a change address using my seed, was hacked or hard-coded to substitute another address instead and my unspent output was moved to that address. That address was created in 2014 and my seed was created in 2016. I'm told that I am SOL. But I think this is theft and will likely proceed along those lines. Here is the transaction: https://blockchain.info/tx/d4914fa646f07f0b211eda96ab629650e1f7e33c1fb0cabbdf77458407d1a647
JimTW
CC BY-SA 3.0
2017-10-29T06:21:28.823Z
I also define that as theft, could you share your story with others to help avoid further thefts? In particular, it would be good to know which wallet software, and what source you downloaded it from.
Jonathan Silverblood
CC BY-SA 3.0
2018-01-03T12:56:36.270Z
The wallet is mSigna and somehow unspent coins are sent to a change address not created by your private key. Apparently this has caught others out and they have upgraded the code. But I am SOL.
JimTW
CC BY-SA 3.0
2017-10-27T12:42:19.877Z
2017-10-27T12:42:19.877Z
Jonathan Silverblood
<p>I have a situation where I sent 1 coin to and address I own and my wallet sent the unspent output to a change address but due to a glitch in the wallet software, that change address doesn't show up in my wallet. I did see that change address in my wallet at some point in the past but when I upgraded the wallet, the address was gone. When I look at the unspent transaction, I see that it immediately flushed the entire address to another address that I think I do not own. I do not have my private key and cannot seem to reproduce it from my 24 word BIP32 mnemonic.</p>

<p>Questions:</p>

<ol>
<li>If I own the private key to the change address, then how could the change address spend my coin without my private key?</li>
<li>If the wallet doesn't identify the change address as being owned by me, does the miner take the balance? </li>
</ol>

<p>I'm stumped by how and why this happened.</p>

<p>Thanks</p>

CC BY-SA 3.0
2017-10-27T07:16:30.803Z
What software are you using?
Pieter Wuille
CC BY-SA 3.0
2017-10-27T10:00:25.147Z
If you look up the receiving addresses involved in blockchain.info, it may help shed some light on what's happened.
Highly Irregular
<wallet><change><output>
Under what conditions could a change address immediately send the entire balance to a third-party address?
JimTW
# Under what conditions could a change address immediately send the entire balance to a third-party address?

(Asked by: username_0 on 2017-10-27)

I have a situation where I sent 1 coin to and address I own and my wallet sent the unspent output to a change address but due to a glitch in the wallet software, that change address doesn't show up in my wallet. I did see that change address in my wallet at some point in the past but when I upgraded the wallet, the address was gone. When I look at the unspent transaction, I see that it immediately flushed the entire address to another address that I think I do not own. I do not have my private key and cannot seem to reproduce it from my 24 word BIP32 mnemonic.

Questions:

1. If I own the private key to the change address, then how could the change address spend my coin without my private key?
2. If the wallet doesn't identify the change address as being owned by me, does the miner take the balance?

I'm stumped by how and why this happened.

Thanks

**Tags:** wallet, change, output

> **Comments:**
> **username_1**: What software are you using?  
> **username_2**: If you look up the receiving addresses involved in blockchain.info, it may help shed some light on what's happened.  

---

## 1 answers

### Answer by username_3 on 2017-10-27. Score: 1

Generally, this should not happen. The situations this can happen should be limited to:

1. bugs in the software
2. malicious acts by the software

to resolve this you will need to look up the transaction on a block explorer and document all relevant information, including the block height, transaction id, inputs spent, target address, change address and possibly the miner that relayed the block.

armed with this information you then reconfirm in you wallet and doublecheck for deviations, and if necessary contact the developers of the wallet.

if they cannot help, you should at least be able to ask new and more precise questions here afterwards.

> **Comments:**
> **username_0**: It now appears that the wallet code that was meant to create a change address using my seed, was hacked or hard-coded to substitute another address instead and my unspent output was moved to that address. That address was created in 2014 and my seed was created in 2016. I'm told that I am SOL. But I think this is theft and will likely proceed along those lines. Here is the transaction: https://blockchain.info/tx/d4914fa646f07f0b211eda96ab629650e1f7e33c1fb0cabbdf77458407d1a647  
> **username_3**: I also define that as theft, could you share your story with others to help avoid further thefts? In particular, it would be good to know which wallet software, and what source you downloaded it from.  
> **username_0**: The wallet is mSigna and somehow unspent coins are sent to a change address not created by your private key. Apparently this has caught others out and they have upgraded the code. But I am SOL.  

---

