<p>If the blockchain shows the money was in your account, then they have fulfilled their requirements. At that point, any transfer of money OUT of your account needs to be signed by your private key. This signed transaction is what is in the blockchain.</p>

<p>The most likely situation is that the application you used to generate the key generated a weak key. If, for example, there is a flaw in your key generation that is likely to generate one of only, say, a billion private keys, then someone could work through each of those billion keys, work out the hash, and store it in a table. They could then monitor the incoming blockchain for payment transactions, and look up the hash in their table. If they find a matching hash, they look up the related private key, and put through a transaction. A billion keys and their hashes would take about about 100GB - and if they get 28 Bitcoins, that makes it all worthwhile.</p>

CC BY-SA 3.0
2016-07-19T03:57:16.077Z
P.S. - BITX would typically only have a few hours head-start on any other hacker - insignificant if your random numbers are cryptographically secure.
AMADANON Inc.
CC BY-SA 3.0
2016-07-14T20:40:11.100Z
2016-07-14T20:40:11.100Z
AMADANON Inc.
<p>Recently i purchased a Bitcoin from BITX, the South African Exchange for bitcoin. I purchased 28 Bitcoins from BITX. When they sent me the 28 Bitcoins to my Blockchain iOS app, the Bitcoins were in my wallet for exactly 1 second before they were sent to another address. My concern is that my private key was generated offline. Im the most paranoid person when it comes to security. i keep everything extremely safe AND clean. A hacker would need more than just 1 second to hack my address AND re-transfer the money. I never received an outgoing funds transfer email from my Blockchain App. who is at fault BITX or Blockchain?</p>

CC BY-SA 3.0
2016-07-15T02:22:48.100Z
@rollo1996: I'm not aware of this being possible.  Can you provide more details as to how that works, or where you heard about it?
Nate Eldredge
CC BY-SA 3.0
2016-07-15T03:02:34.130Z
Are you sure the coins were sent to another address?  Can you tell us the transaction ID?
Jestin
<exchanges><legal><theft><safety>
Who is liable my case or is it a classic hack?
Viron Papadopulo
# Who is liable my case or is it a classic hack?

(Asked by: username_0 on 2016-07-14)

Recently i purchased a Bitcoin from BITX, the South African Exchange for bitcoin. I purchased 28 Bitcoins from BITX. When they sent me the 28 Bitcoins to my Blockchain iOS app, the Bitcoins were in my wallet for exactly 1 second before they were sent to another address. My concern is that my private key was generated offline. Im the most paranoid person when it comes to security. i keep everything extremely safe AND clean. A hacker would need more than just 1 second to hack my address AND re-transfer the money. I never received an outgoing funds transfer email from my Blockchain App. who is at fault BITX or Blockchain?

**Tags:** exchanges, legal, theft, safety

> **Comments:**
> **username_1**: @rollo1996: I'm not aware of this being possible.  Can you provide more details as to how that works, or where you heard about it?  
> **username_2**: Are you sure the coins were sent to another address?  Can you tell us the transaction ID?  

---

## 1 answers

### Answer by username_3 on 2016-07-14. Score: 2

If the blockchain shows the money was in your account, then they have fulfilled their requirements. At that point, any transfer of money OUT of your account needs to be signed by your private key. This signed transaction is what is in the blockchain.

The most likely situation is that the application you used to generate the key generated a weak key. If, for example, there is a flaw in your key generation that is likely to generate one of only, say, a billion private keys, then someone could work through each of those billion keys, work out the hash, and store it in a table. They could then monitor the incoming blockchain for payment transactions, and look up the hash in their table. If they find a matching hash, they look up the related private key, and put through a transaction. A billion keys and their hashes would take about about 100GB - and if they get 28 Bitcoins, that makes it all worthwhile.

> **Comments:**
> **username_3**: P.S. - BITX would typically only have a few hours head-start on any other hacker - insignificant if your random numbers are cryptographically secure.  

---

