Sweeping problem - BTCs magically move to another address

Hi Counterparty-Community,


i have a serious problem to sweep my xcp amount, thats the reason i registered here.


So i want to transfer the 134.44 xcp from my old wallet (1LWDzisQtETsxk6N8QNa1KuUSiYtmmfa5A) to my new one (1DysqGcaAd31reviDkVCm6m2WnKHayagnV).


The problem is, that in my old wallet (1LW…) there are no BTCs left. So i tried the following things:


1. Logged in to my new wallet -> sweep -> private key of a other addrees of me (1NZF31NZ1C5sNu9qBJ7J9WTbj7ADCu3ZkA) to transfer some BTCs for sweep (Sweeping not started -> UI Loading animation not seen -> XCP not arrived


2. Transfered some BTCs to my new wallet (1Dys…) -> sweep -> saw the UI Loading, but stop then -> XCP not arrived


3. Sent some BTCs directly from my new wallet to my old one -> logged into my old one to send the XCPs -> BTCs already gone


THE PROBLEM:
https://blockchain.info/de/address/1LWDzisQtETsxk6N8QNa1KuUSiYtmmfa5A
https://blockchain.info/de/address/1DysqGcaAd31reviDkVCm6m2WnKHayagnV


Always if there is a transfer to 1LWDz…the transfered amount is automatically sent to this address:
https://blockchain.info/de/address/1ENnzep2ivWYqXjAodTueiZscT6kunAyYs


I don't own this address!? Who is automatically transfering the BTCs to this address?
I can't sweep my XCPs, because the BTCs i need for it are already gone within seconds.


Can you please help me?


Thanks

I did a Google search for the address your btc keep going to and I get a result for a stack exchange user. I'm just learning about Counterparty but wasn't there a hack of counterwallet at one point? Is it possible that your private key is compromised. If that were the case, it seems like there would be no way to TX your xcp unless you can publish both a btc funding and xcp moving transaction at the same time.

When did you make this 'old' wallet? When Counterwallet updated, it was recommended to create a new one due to changes to the RNG.

Also a while ago there was a Counterwallet XSS exploit which resulted in some users having their BTCs taken. Have you used the chat feature in Counterwallet? If not, then your PC may be compromised.

Sorry to hear that.

[quote author=deliciousowl link=topic=487.msg3024#msg3024 date=1407818727]
When did you make this 'old' wallet? When Counterwallet updated, it was recommended to create a new one due to changes to the RNG.
[/quote]


http://blockscan.com/address.aspx?q=1LWDzisQtETsxk6N8QNa1KuUSiYtmmfa5A
It seems first transactions happened on April 21.


This one looks weird:
https://blockchain.info/tx/271545cf4c00cfc332aa0889388380033877ed40881272ff5ffc3f98c82521bd

Thank you for helping me!


I created my account on the 21. April and changed some BTC into XCP.
On the 24. Mai  i was trying to sweep my XCP to the ne account the first time.


Im pretty sure, that my PC is not compromised. Am i a viticm of some counterparty exploit and someone got my private key? Why is the one not getting the XCP out of my account if he has my private key?


Have done a second google search and  found this one:
https://hn.cxhristian.com/comments/8099996/


Damn it. How is this possible?

hmm…nononono
https://bitcointalk.org/index.php?topic=581411.0

[quote author=schomaut link=topic=487.msg3028#msg3028 date=1407832706]
hmm…nononono
https://bitcointalk.org/index.php?topic=581411.0
[/quote]

PhantomPhreak:

There was a tx signing bug in BitcoinJs which Counterwallet (a Counterparty web wallet) triggered. Counterwallet has been patched, and all users of Counterwallet should indeed generate new accounts and sweep all of their funds there.

See the original announcement.      https://bitcointalk.org/index.php?topic=395761.msg6354587#msg6354587             

I know, that's why i tried to sweep into my new wallet.
But it seems that im a victim of the bug?


Anybody has some recommendations?


Thanks

[quote author=schomaut link=topic=487.msg3036#msg3036 date=1407920074]
I know, that's why i tried to sweep into my new wallet.
But it seems that im a victim of the bug?

Anybody has some recommendations?


Thanks
[/quote]


Did you read the notice at that link above?
It tells you what to do.

[quote author=schomaut link=topic=487.msg3036#msg3036 date=1407920074]
I know, that's why i tried to sweep into my new wallet.
But it seems that im a victim of the bug?


Anybody has some recommendations?


Thanks
[/quote]
It's interesting that the attacker did not steal your XCP but I believe the solution would be to create one transaction to pay the holding address some BTC (0.0005 for the fee) and another transactions sending the 139 xcp to you. These transactions want to be sent within seconds of one another because you need to make sure that your xcp sending transaction is seen by the miners before the attacker's btc spending one.

Hello were you ever able to get a resolution to your missing BTC