Weird day. My ropsten testnet coins were stolen.

Hi!

I am attempting to raise awareness for this post to see if there are others who are affected by the same address and hopefully we can be able to deduce what happened.

So I own a good amount of testnet coins (Ropsten).

I use it for educational purposes and whenever I am invited to do technical demos.

​

This is my account. 287 rETH.

https://ropsten.etherscan.io/address/0xF552C93a66A4AE6f2E45d0b6eF77764aBf5436D2

The only places where the private key is stored:

1. A Facebook private message to myself
2. In Metamask
3. A USB drive with the encrypted JSON file

The last known activity I had with this account is via Metamask - linking it with AxieInfinity.

​

68 days ago, all of the funds got siphoned to another account which seems to be active and has accounts in multiple networks as well.

https://ropsten.etherscan.io/address/0x99e293ac9b0c3541be0bf5f2207e631a7068df78

​

I am so confused with what has transpired here. Thankfully, this account only holds Ropsten ETH. To steal test ethers is just... Insane. Any ideas as to what could have happened?

-

Edit:

(11/08, 5:22pm), there is one redditor who has PM'ed me. He's affected by the same address as well and the culprit was that he connected his account to a "dApps wallet connect interface to get a unique QR code".

​

u/AdvocatusDiabo

These are indeed educational coins. I hope they will educate all of us to keep the main stash on a HW, avoid FB, avoid "dApps wallet connect interface to get a unique QR code" and sure as hell never use other people's devices/do demos with real keys.