Bitcoins Stolen from Luno Wallet.

Status
Not open for further replies.
R

RossCo_

Active Member
Joined
Sep 27, 2011
Messages
68
Reaction score
0
Location
Durban
Hi All,

I am just trying to find out if anyone else was a victim last night,

Two of my friends had a substantial amount of Bitcoin "sent" from there Bitcoin wallets on Luno at midnight last night to another wallet.

They've sent the Luno an email as we can't find there number, but as its the weekend we might not hear back until monday.


Any advice would be appreciated
 
Ouch. Definitely no 2FA. Luno is not responsible. I hope it was not too much.
 
Luno has already indicated in another thread that stolen bitcoin is your problem not theirs.
 
Hi RossCo_

Very sorry to hear about this unfortunate event. There are no overall security issues from our end, or system wide breaches. I'd like to have our team take a look at this - please send me a private message with a relevant ticket ref#.

In the mean time, please update your email password affiliated to your Luno account as well as your actual Luno password. I'd also strongly recommend enabling two factor authentication immediately.
 
Even if there was no 2fa enabled the account should still be very secure, they can't run a brute force attack on the Luno web log-in.

What 2fa does prevent is your account being compromised after people steal your password/user credentials using keyloggers/malware or social engineering etc. It is rather shortsighted not to have 2fa enabled for an account that holds money because that's the kind of honey that really attracts the bees..

So how did the guys in the op have their user credentials stolen?
 
Oh no. Not nice! :(

Glad I took the advice on mybb and not keep coins on Luno. Do your transaction and then transfer to offline wallet.

Out of curiosity, is there any benefit to Luno if you keep your money, coins with them? They only make money via transactions not so?
 
Ockie said:
Oh no. Not nice! :(

Glad I took the advice on mybb and not keep coins on Luno. Do your transaction and then transfer to offline wallet.

Out of curiosity, is there any benefit to Luno if you keep your money, coins with them? They only make money via transactions not so?
Click to expand...

What offline wallet do you use ?
 
Hi

I am one of the guys whose BTC were stolen out of my Luno wallet on Friday 13th October 2017.

4.1 BTC were sent out of my wallet at 11:56pm last night. Nice of them to do it on a Friday night (and Friday the 13th as well). They probably do it knowing that Luno (and the victim) will be slow to react - especially over a weekend.

Although I don't have 2FA enabled the other person who also got hacked has 2FA enable so I don't think they came through the "front door" so to speak. In other words, I don't think they logged into Luno using my login credentials and did the wallet transfer in the Luno program itself because whenever I do a wallet transfer through the Luno website I have to authorise it first via an email sent to me by Luno. I got no email last night except to confirm that the 4 BTC had been sent out of my wallet (which alerted me).

We have both reported the fraud to Luno, but have had no response yet. You would think they would be a bit more pro-active when a an email is sent to their fraud hotline, but they seem to be quite an inaccessible company and only communicate via a support desk email system.

Does anyone have a phone number or know how I can escalate it?

I will keep you posted on developments.
 
Last edited:
Furburger said:
Hi

I am one of the guys whose BTC were stolen out of my Luno wallet on Friday 13th October 2017.

4.1 BTC were sent out of my wallet out 11:56pm last night. Nice of them to do it on a Friday night (and Friday the 13th as well). They probably do it knowing that Luno (and the victim) will be slow to react - especially over a weekend.

I have 2FA enabled. I don't think they came through the "front door" so to speak. In other words, I don't think they logged into Luno using my login credentials and did the wallet transfer in the Luno program itself because whenever I do a wallet transfer through the Luno website I have to authorise it first via an email sent to me by Luno. I got no email last night except to confirm that the 4 BTC had been sent out of my wallet (which alerted me).

My friend had 5.95 BTC stolen at 00:03 am (a few minutes after mine). What we both have in common is we have API keys which allows 3rd party programs to do trades and wallet transfers on our behalf - automatically. I think that the hacker may somehow have got hold of these API keys and did the wallet transfers that way, but I am not sure.

That is why I am interested to see if anyone else has been hacked, so if you hear of anyone else, please let me know.

We have both reported the fraud to Luno, but have had no response yet. You would think they would be a bit more pro-active when a an email is sent to their fraud hotline, but they seem to be quite an inaccessible company and only communicate via a support desk email system.

Does anyone have a phone number or know how I can escalate it?

I will keep you posted on developments.
Click to expand...

No I also have an API key enabled for 22seven and nothing taken.
 
Sorry about your misfortune. I suspect if it happened to both you and your friend there might be more factors in play (what would the odds be!? )

I know you don't want to hear this, but it sound like an inside job to me. Someone you know maybe?

Keep us posted!
 
Status
Not open for further replies.
Back
Top
Sign up to the MyBroadband newsletter
X