### When you noticed your borrowed funds were suddenly "burnt", you should have known something was wrong.

 https://i.imgur.com/xP62O2x.jpg 

When I saw this sale this morning I was happily telling @elizacheng and @khimgoh about the good news. 

 https://i.imgur.com/n6WAOMF.png 
I usually do not use credit card to purchase any new property tokens but use its borrowing service to get some xDAI over because bridging is kind of troublesome especially the multichain compromise of late.

I never had that problem before to be honest, until this week when I did something stupid to try to revoke some contract out of a support's advice on a site. 

 https://i.imgur.com/3VZDSRD.jpg 

When the site was having unusual hanging I should have known something was up. But somehow my mind was foggy and I went to load my private keys on my Trust wallet to try and use the dapp browser to do so.

It was hanging still.

And because it was on the trust wallet unlike metamask I can just disconnect my wallet to the site, I left the site and totally forgotten about it as work was piling up during the day.

### Little did I know when the site was hanging, my wallet was already being hacked.

 https://i.imgur.com/sRqXSe0.png 

Exactly during that time it was hanging, a few hours later my ETH was drained from it.

---

https://i.imgur.com/qSv5npV.png 
And to make it worse, I thought it was a Real T problem so I decided to bridge the amount over from another account in order to just pay up the invoice that is hanging there at the moment. 

Lo and behold, 90% of the arrived wallet was **GONE**

It feels very painful because this is the first Ethereum wallet I ever had for years and I hardly use it except for RealT as I wanted to split my wallet in different usage. 

Now all my RealT assets are stuck there including a hacked borrowed approximately 49 DAI.

#### Scammers are everywhere! No where is safe! 

https://i.imgur.com/O7sUszJ.png 
Ironically, over the official discord group when I was inquiring this issue at the support, this community moderator told me to message him to see the details

The conversation started normal but then when he kept saying "your account is just out of sync, just go to the website for _Rectification_" something triggered my trauma memory of a few days ago.

https://i.imgur.com/ihcTX27.png 

It felt like Déjà vu all over again when this happened and insisted me to key in the seed words...

#### And that's where all my 😨 🚨❌⛔️ senses all fired up!

This is exactly how the scammers did on the other protocol that I was inquiring to remove some contracts

https://i.imgur.com/3HedsJC.png 

Immediately I went to check from https://www.scamvoid.net/ recommended by search engine to find out, and when I showed this user this image , the scammer seems to be reading from the script

 https://i.imgur.com/aCY4BnE.png 

If I do as it is instructed, I WILL LOSE ALL MY FUNDS.

 https://i.imgur.com/JwEqzPu.png 

Immediately I just reply this kindly and **learn to be patient and wait for official assistance** because it is Thanksgiving holiday after all.

I have reached out to @bitrocker2020 for help to triple confirm that my account is compromised and I will not be engaging anymore of this current wallet until I can get RealT support team to officially move my assents out manually from their end.

##### A hard lesson learned. I have lost 0.05 ETH from this account and $100 over DAI from any transactions, with 50% of the DAI is stuck as borrowed and I have to pay them back later.

In a way, if I have never taken this trade today, I wouldn't have noticed that my account was compromised at all. 

It is a super painful and expensive lesson to learn, but I hope those who read this will know how to detect any scammers who are getting better impersonating the real mods and admins with their way of talking now.

Somehow they the first scam in Telegram group that scammer managed to "hack as admin status" and that is why I didn't detect it; so in some ways, Telegram itself is greatly compromised too. 

I guess that is part of the consequence of "open source". There are just **way more scoundrels than honest integrity people in the cyberspace.

###### Trust the people you know personally seems to be the way? 
Or compromise and have KYC tied to it.  

https://i.imgur.com/K2WPHg7.png 
But the **one thing I will NEVER DO** right now is to consolidate everything into a single hardware wallet.

The Hardware wallet should be used as a wallet that is never going to be used for any contracts. 

I personally remembered that the WalletConnect itself was also once compromised, that is why I ported this first wallet to metamask. 

#### Another thing is IF EVER A SITE ASK YOU TO KEY IN YOUR SEED WORDS when it cannot connect to your hot wallet, know that IT IS A SCAM SITE

Now the scammers are very smart they will never ask your seed words directly anymore.

---

### If you find this experience useful, please feel free to **share it to your friends** as much as possible to avoid horror. 

---

# Until Then
Stay healthy, stay curious and learn new things, and stay happy!

![](https://images.ecency.com/p/GLhDmHx9sqz2PfsVn8wmBCwMuAjSEj5N9rRH9KxQYTWLtELcDRXZtVdjbN2AibXohZTX8B3xfvGWjtzGDkgEE8a3iAFobu3fDp84Hi8Teia5j7Q3QebpP3iBXwoiux2rDd2ALKGSdmxF5xfCp25jXZswvbNo7FF6cpm5iNH3qcPafYq7u8UDsRd3ecUXNMvoQFNKnGh94Zn7LkEVgKFEa8t35DvqrEGAx66S1mDshn5.webp?format=webp&mode=fit)

Posted Using [InLeo Alpha](https://inleo.io/@littlenewthings/my-10-year-wallet-hacked)