Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:00):
So it turns out that I myself had been caught
up with this second fire hack and my wallet had
been compromised. Great, So in this bido, I'm going to
show you what I'm doing to check those processes to
see what assets I've lost, how to actually check if
my other wallets are actually compromised as well, and then
what you can do to start recovering your assets through
(00:22):
their recovery process that the Second five team have put together. Now.
Second five was also formerly known as your roy so
if you had been using your row in the past,
you may be caught up in this. So do check
out all this stuff because it may be applicable to you.
All Right, So my name's Peter. If it's first time here,
hit that thumbs up like subscribe notification bell. Unfortunately you
(00:44):
have to do this video. But you know a lot
of you guys out there have been asking for what
to do next, and there's a lot of questions in
the comments at the moment, So hopefully I can take
you through what you need to do. But before doing
all this, if you don't know what you're doing, as
soon as you sign a transaction in a compromise wallet,
(01:04):
it will expose the keys to the hacker and allow
the hacker to liquid at your wallet. So, if you're
looking at your wallet right now and you are unsure
that if you're being hacked or compromised or whatever, make
sure you use these checkers that I'm about to show
you to see if you're a part of that initial
compromise set. If you're on a hardware wallet, you're safe.
(01:28):
You're fine. You can skip this entire video, but just
watch it for entertainment purposes. I guess so you can
see what I'm doing because I'm hacked. I'd really have
to emphasize if you don't know what you're doing in
this whole process. If you watch this whole video and
you're still a bit confused, just wait for the second
five team to do their next big update in their wallet,
because they'll do the whole migration process within the wallet itself.
(01:52):
The Lace wallet team have also put it out an
announcement about migrating to new wallets. Switching wallets shouldn't feel stressful.
We know where we know many people are feeling extra
cautious about moving their funds right now, So we're building
a wallet migration feature. So if you just wait a
little bit longer. It's totally cool if you do, because
(02:14):
if your wallet hadn't been compromised yet, you haven't moved
or done any transactions, you should be totally fine. Waiting
for the teams here to build a safe wallet migration
tool could save you a lot of stress in the future,
So just hang tight weight. These brand new features will
really help people out. So Lace is putting in a
(02:35):
wallet migration feature, and this brand new update here a
wallet security check to see if your wallet has actually
been compromised or not. So let's get into these details here.
So this is my Lace wallet. This is one that
I know hadn't been compromised. But you can see this
checker here, this brand new thing they put up check
this account's transaction signatures. So here you can just click
(02:58):
on scan, do a quick scan through the wallet itself
and see if there's any anomalies. And see here you
can see no anomally is detected, So this particular wallet
is safe. So I know I can transfer assets to
this wallet here from a compromised one and I'll be okay.
But look at this one here, this one I did
(03:19):
a scan and it detected anomalies and I. That's when
I went, oh great, okay, let's check out see what's
actually happened here. So I'm going to click on my
receiving wallet address here, click on copy, and then I
can take it over to the second five check her website.
So this is checker dot secondfive dot io links down
(03:40):
the show notes for you guys. But all we need
to do is past in your wallet address here. This
is essentially what you have seen in the lace wallet
side of things. But here I can just click on
check and it confirms that this wallet was a part
of the compromise wallet set. So this is not a
good thing, not a good thing at all. So furthermore,
(04:03):
I can take this now over to see Explorer or
Cadano scan. I can put in my dress here, I
can have a look at what actually has happened, then
try and work out where assets have gone. So this
is my address here. That's cool, let's click on that
go down a little bit further. Yes, I did delegate
to Fred, and you know that's probably the transaction that
(04:28):
compromised me. So I was playing around with my DEREP website.
I did a transaction to delegate to Fred Tanaka and
my wallet was exposed, the signing keys were in public,
and then the hacker liquid aid my wallet. In this case,
I hope it was a white hat hacker, and I'll
show you why I think it is. So further down
(04:50):
here I can look at my transactions and this is
a transaction here. So this is twenty two days ago,
on the twenty third of June. So this was around
the date of just before I think the date of
the hacks, or I can't remember exactly. So let's go
into this one here and have a look at what's
going on here. I've got a total output of thirty
(05:11):
five are so just under thirty six eight, just five
dollars US, six dollars US. So it wasn't big. It
wasn't a big hack, but it's just still annoying. So
here I can see what has gone out of my
wallet and where it has gone too. So this is
the address of where all my assets have gone in
this case of thirty six eight. Now here I can
see there's two million eightre in this particular wallet, last
(05:33):
activity five hours ago. I'm really hoping this is a
white hat hacker, because if you have a look at
all the assets here, these are all the NFTs, there's
about three eight hundred and fifty three NFTs there. If
you look at all tokens or tokens in general, we've
got a lot of assets. We've got one thousand and
eighty four various different assets. We've got several one thousand,
(05:55):
eight hundred billion Hosky tokens there, We've got a fifty
three thousand strike tokens. So you can see there's a
lot of assets in this wallet and twenty two million
night tokens. I really do think this is the white
hat hacker, because if it was a hacker, they would
have liquidated all of these by doing swaps and moving
over to USDCX and then exiting the ecosystem that way.
(06:18):
So I really do think this is a white hat hacker.
I will confirm that and put a link down below
for you guys, So read the description to see if
I've confirmed it or not. But you can see where
and what has happened. So my course of action right now,
I've got one thing that went against me, and that
is because I've deleted the second five app. If I
(06:40):
still had that and my wallet was still within the
EUROI second five app ecosystem I'll be able to go
through their interface and then submit submit a support ticket,
and then go through the wallet features in the future
to reclaim all my assets. So that is the pathway
for a lot of people, and if you're watching this,
(07:02):
that's probably what you're going to do. So if I
now go to this website here, this is support dot
Second five do io. I need to just create an account,
sign in, verify myself and then put in the support
request saying that this wallet was drained of X amount
of assets is a transaction? What do I do next?
(07:24):
So that's the process here in regards to reclaiming assets
from this compromise wallet here. So if you have deleted
your wallet, this is what you need to do. If
you haven't deleted your wallet, you most likely will go
through that migration process once the second five app has
been updated, which it hasn't yet checking the Second five
(07:46):
X account, we're still in quarantine mode at the moment.
So quarantine mode if you haven't checked it out, it's
basically just showing what's in your wallets, your wallet address,
and your balance. If there is anything or not anything
in there, I won't let you do any transactions or whatsoever.
Now what you can do if you know what you're
doing here, you can restore your seed phrase into Lace wallet.
(08:12):
So let's imagine. Now I've had my EUROI wallet there
and it's been compromised. Oh, second five wallet, it's been compromised.
I've got that seed phrase and now I've just restored
it into Lace wallet here, and this is what you're seeing.
This is now the compromised wallet from second five. Then
I can see yeap, yep, it's been compromised. And if
(08:35):
I do have some assets left in here, I can
still move them out, and I do have a chance
and choice here to move things out. So here, now
I can go to the non compromised one, which was
this one here, click on my receiving your address, great,
and then I can go back to it. Let's go
back to it. There we go. Then I can use
(08:57):
this particular tool here. This is the wallet exposure checker
tool that Feel put together early on during this compromised
our wallet phase. I don't know what to call it,
this second five era, yeah, but Phil put this together
to be able to move assets out all in one transaction.
(09:19):
So there's a lot of edge cases when it comes
to moving all your assets out because if you look
at your wallet, you've got several things happening all at
the same time. You've got staking delegation, you've got your
de rep delegation. You may have liquidity within a not
a state pool, but a defy liquidity position. So you
(09:41):
might have liquidity pool assets locked into mintwap for example,
or you might have assets staked to strike Finance. So
your wallet could have a lot of things attached to it.
And because of all those things, one of those transactions,
such as unstaking your Strike Finance tokens, would be a
(10:02):
transaction in your wallet, and then compromise your wallet. The
next transaction that will come through will be an automated
one from the hacker liquidating all your assets. So there
you are trying to unlock your strike tokens from strike Finance.
You've done that transaction, your strike tokens come back, the
hacker sees it all happens, and then just liquidates the
rest of your wallet. So it's really important if you're
(10:23):
moving your assets away from your compromise wallet that you
do all in one single transaction. That's de registering yourself
from a stateboard, de registering from your de rep unstaking
all of your liquidity positions are getting that all back
and then transferring that all over to your brand new wallet,
(10:43):
all of one transactions. If you do not know how
to do that, don't continue with this video. Just watch
it for entertainment and education purposes, but don't action anything
because one transaction will compromise the rest of your wallet.
I can't stress that enough. So now that we are
(11:03):
fully aware of those risks, we can go back to
this wallet exposure checker here and then run through this
and see what options we have. So first off, I'm
going to run the wallet checker. Now I've already connected
this wallet to my Lace Sorry, I've already connected this
(11:24):
wallet exposer checker to the Lace wallet. So there will
be a pop up that appears you have to sign
it and say, yeah, I want this website to have
access to my Lace wallet to be able to read
this data. So I've done that, and yes, it's verified
that the wallet has been exposed. So what I can
do now here is the get me out of here process.
(11:46):
So this will allow you to do a migration over
to a brand new wallet. So what feel here is
suggesting is create a brand new wallet within Lace. That's
fairly easy to do. So you can go back to
your Lace here, click on accounts, click on add wallet,
create new Lace wallet, then Cadano give this a test name,
(12:08):
test whatever, tamp migration wallet, and then you have to
go through your seed phrase, create brand new seed phrase,
write that down saw we're safe to secure. Then you
can use that wallet address to migrate too. The better
alternative to migrate your wallet and assets is to a
hardware wallet. Now at the moment, Lace only supports Ledger
(12:29):
and Traser, So if you have a brand new Ledger
that you can purchase, and I really highly recommend that
you do, I've got links down below in the show
notes there to affiliate links where you can buy a
Traser or a Keystone hardware wallet. They're both fantastic hardware wallets.
But these wallet options will keep that seed phrase off
(12:51):
of your computer, off of your device, so you don't
ever have this type of compromise ever. Again, so if
you can, if you do have the means, if you
have the money to buy hardware wallet, I highly recommend
that you do. Links in the show notes down below
for my affiliate links if you do decide to buy one,
does help support the channel, my content and everything else
out there. But if you don't, that's totally fine. You
(13:12):
can bypass it. You know, it doesn't bother me anyway.
Hardware device highly recommend. So now let's pretend that I
have done that. I've created a brand new wallet, and
my brand new wallet is this one here zero zero
three Nami zero zero three, okay, So that's this one here,
that's number two zero three. Okay. So this is my
(13:33):
brand new wallet, and this is where I'm going to
send my assets to. So now this is my receiving address,
So back to the wallet Exposure app destination address. Get
me out of here. Let me just see that I
am on my exposed wallet. That's the one that's my
exposed wallet, So this is connected to the Exposure wallet app.
This is where my assets are going. Then get me
(13:56):
out of here. Now this will create a full trans
action of everything that can be done. So it's getting
the unspent transactions, withdrawa or rewards, register state credentials. We're
not found, okay. So in this particular, well, I can't
do anything because my wallet's been completely liquidated. But for
(14:18):
your situation, you probably will see the assets still available
and you can move things out and you can use
that while exposure get Me out of Here feature to
move all your assets off all in one transaction. Now.
Feel here also mentioned to me. If you do have
liquidity positions that are stuck within your wallet, do reach
(14:43):
out to him because he has a way, in a
method to get all those things out. And you may
be a certain case where if you're just staking, if
you've just got some tokens and you've been trading, you
could probably move your assets out quite easily. But there
may be some particular cases in DeFi where you need
to take some extra precautions to not lose those particular positions.
(15:07):
I've seen a lot of people online complain that their
liquidity positions have been compromised as well, and all of
that has been swept. So do reach out to feel
and talk to him about those particular things. I'll put
a link down below to his ex account so you
can talk to him directly. Do be aware their are
(15:27):
scammers out there trying to impersonate people. I just managed
to shut down another impersonator account yesterday of my own.
Someone try to impersonate me anyway. Phil here is a
de rap as well. You can see his de rep
id down here, So if you found this tool useful
and saved you or but you can consider delegating to him.
(15:50):
He has quite a bit of delegation to him already.
But you know it's it's doing good stuff anyway. So
that's where where at at the moment. There is no
new updates so far this week from Second five talking
about what to do next, so they're still in the
quarantine mode. So you can check to see within the
(16:11):
app itself if you have been compromised. Of course, now
we do have the Checker website where you can check
if your wallet has been compromised. We do have that
feature within lace wallet itself now to see if you've
been compromised. And then soon soon, guys, just wait, just
be patient. We will have the migration tools here from
(16:32):
Lace Wallet themselves and migration tools from the Second five
team themselves to get you out there. Highly recommend that
you do get a hardware wallet if you can. If
you haven't gotten one yet, please check out the links
down below for the hardware wallets. Ledger and Nanos are fantastic,
but the Keystone is my wallet of choice at the moment.
(16:54):
My hardware wallet of choice. I pair that up personally
with Eternal eternals great in terms of all of its features,
and it's one of the ones that support the Keystone wallet.
Of course, you can do all of this on mobile
as well. I know a lot of you out there
will probably be using mobile apps for all of this
recovery process. I think it's a little bit more clunky
(17:17):
in regards to its connections and what you can do,
so hence I'm using everything on the desktop anyway. Guys,
Unfortunately that one of my wallets was compromised, it wasn't
that much of a compromise, thankfully, unlike a lot of
you guys out there that I know have been complaining
in the comments down below. So hopefully everyone does get
(17:38):
their assets restored as soon as possible. I've seen Amergo
pass on the torch in regards to Token twenty forty
nine to the Cadano Foundation, so they won't be running
the event anymore. Their pure focus right now is recovery
and getting everyone's assets back, so that's a really good
thing to happen at the moment. Everything else is being
(18:01):
palmed off to the rest of the ecosystem, to the
other founders Anyway, guys, if you found this video useful,
hit that thumbs up like subscribe notification bell YouTube memberships
down below. I've got to buy me a coffee. Links
there too, great way to support the channel. Affiliate links
to the hardware wallets as well, and I don't know, guys,
try and stay positive. It's a shitty, shitty market at
(18:23):
the moment. But I'll see you guys in the next video.