<center><h1>My Telos account has been hacked</h1></center>
<center><img src="https://cdn.steemitimages.com/DQmbfzxLQcepume7LbSKLLa22EBr2peoR8j3ayBMFBrj7Ea/Cards%20&%20Tokens%20-%20hack-and-wp.png"></center>

How are you guys? This is a slightly different publication. I want to share something that happened to me about a month ago. I've been stolen! :(

# Who am I?
If you don't know about me, I am a regular guy with a regular job and with an (almost) regular familly. But I'm also a [dreamer and an entrepreneur](https://steemit.com/introduceyourself/@viterbo/i-am-an-entrepreneur-and-i-m-going-to-build-a-dapp-over-eos), and I see on TELOS network an anormus potencial !!

So I decided months ago that I will be building my [Cards & Tokens project](http://cardsandtokens.com) completely on TELOS blockchain, taking advantage of the low price so I can buy lots of resources (RAM, CPU & BW) now before price rises.

For that matter, I've been saving all my salary extras to buy TLOS tokens, until I reached the amount of 23926.0107 TLOS (withdrawals [21410.0615 TLOS](https://telostracker.io/trx/8ab8de0c4ac4529256a1a1967b832f2b48cae9bd29369d1106b91eb71a3b075c) and [2515.9492 TLOS](https://telostracker.io/trx/a7401caee17e79ab8e00df8c23e5684f72400b3473e8dcfaac69dd70524bf4ea))


# What happened?
I remember it was saturday. I was very bussy working at home in the new features of the token smart contract and the technical details of the [CNT token airdrop](https://github.com/vapaee/airdrop-on-telos), when I realised **ALL MY TELOS TOKENS WERE GONE** !!! I stopped working in this instant and opened my sqrl to watch the history and I found this:

<center><img src="https://cdn.steemitimages.com/DQmVBeHcgyAXjw8ZHyBaDUWxkrKw6pwwMHMWUWgMmFaxsYx/wallet-crop.jpg"></center>
<center><p>https://t.me/HelloTelos/51825</p></center>

# The shock

I was Shocked !! I couln't beleave my eyes !! someone hacked me and took my private key (I still don't know how) to sign those two transactions to a none blockchain account on EOSex echange identified with the number 13419352.

<center><img src="https://cdn.steemitimages.com/DQmZ1pkSCnt7KXDjhoGzGG8LYS4MVb8P5vcrqG2PkR7rfwY/transactions.jpg"></center>

<a href="https://eosex.com">EOSex</a> it's an excelent BTC/EOSIO based exchange that is growing fast in the eosio community. In EOSex you can login with a blockchain account (in which case every transaction on the exchange is acctually made on the blockchain) or you can create an account with your email and then create a deposit number to send tokens from a valid telos account with that number in the transaction memo.

The thief made this kind of deposit wallet and then took care to send himself or herself **ALL my TLOS tokens**. First made a test with [22.0000 TLOS](https://telostracker.io/trx/dc115283c62b7a76fba5be9275e3ce408f83861af713fca2a3c7a31d4e1bb7a5) and then sent the rest [23904.0107 TLOS](https://telostracker.io/trx/62f961f0317077dcda23c68ef7e52a7b67fb026e600d2e100d96ebc118992a41)).

I reacted by desperately asking for help in the telos chat...
<img src="https://cdn.steemitimages.com/DQmVErbn8jwHS34eZDsiUxkMRfzJFTwtzzza6b5FySWUijT/chat1.jpg">  
https://t.me/HelloTelos/51826
https://t.me/HelloTelos/51827
at that point I didn't know about EOSex and I thought that this thief was hacking everyone sistematically (because there was a lot of similar traffic). Then someone told me about the exchange and I searched the rest.

In the Telos telegram group every body was very worried and kind to me but at the end I had no solution for my lost. Then someone told me about the exchange trades and sent me this picture:

<center><img src="https://cdn.steemitimages.com/DQmVbHzfp3CVUwkByJNgFc7cFRA5xJSAcNVosiWjBkvFBkr/photo_2019-02-03_15-48-20.jpg"></center>
<center><p>https://t.me/HelloTelos/51838</p><center>

The thief sold everything immediately for a few EOS at a terrible low prices!!! I traced those transactions over the blockchain and they sum together 21417.5671 TLOS (which I assume are my savings minus EOSex transaction fees).

| amount | price | eos got |
|-------:|------:|--------:|
| <a href="https://telostracker.io/trx/cd98cb98847604d1c333f9e6252d5feec93e320a01358d17d18fabffc9f6ce4a"> 1246.8643 TLOS </a> | * 0.00250000 | =   3.1171 EOS |
| <a href="https://telostracker.io/trx/ae46736266ddbfdebb814e17d47c0ece391c70fe01d5ee2bbc986edc752ec76e"> 9990.0000 TLOS </a> | * 0.00500000 | =  49.9500 EOS |
| <a href="https://telostracker.io/trx/39c351bd0d6b57729c1469fbc7e02e67136039c3228cdd5533a9ba2317c8fc9b"> 4995.0000 TLOS </a> | * 0.01100000 | =  54.9450 EOS |
| <a href="https://telostracker.io/trx/385dcbbb7ccd58172c7b317074be9f4322b3cb47635b257cdeabbf73fc5793bd"> 1798.2000 TLOS </a> | * 0.02000000 | =  35.9640 EOS |
| <a href="https://telostracker.io/trx/1bceafee2fe8ff14b5adaa76454bf58bdfaad4ff126a24d926317e454dbea65b"> 2378.5128 TLOS </a> | * 0.02100000 | =  49.9487 EOS |
| <a href="https://telostracker.io/trx/989234b4967cbbb1d724ac9dba8137d42692591addc77011e7bc04ddd66ef2db">  149.8500 TLOS </a> | * 0.02121000 | =   3.1783 EOS |
| <a href="https://telostracker.io/trx/3944f5c154a99545ea993b7f46b2a7f725e99290338dccf5633ca4f45f306344">  859.1400 TLOS </a> | * 0.02321000 | =  19.9406 EOS |
|                                                                                                                             |    **TOTAL** | **= 217.0438 EOS** |

I talked to EOSex people, but they told me that everything was normal and they could not do anything about it.

# Depression

That Saturday that I was supposed to work all day on the project I spent the day lying in bed, wondering why. Thinking about life, my efforts and what it takes to me to do this alone. I don't know... I was a long day.

# Recovery

Althought I still was feeling bad about my money, the next day I woke up early to resume my work to [deliver the airdrop in time](https://steemit.com/eos/@viterbo/cards-and-tokens-cnt-token-airdrop). I thought this was a very tough lesson but at least I learn that **you cannot underestimate security !!**. So I got rid of the txt file where I had written all my keys (in plain text without encrypting) and change all my account with a new key pair which I printed on paper and hold in my desk at home.

I'm still working hard to make this project work but now I have a huge financial problem. so I decided to write a worker proposal to tell my story and ask for resources for the project (that was my original goal from the beginning).

# Worker proposal

I will be publishin a worker proposal very soon asking for financial support to buy resources for this Cards & Tokens platform. I will notify everyone on steemit when that happends hopping that you will support me and my work.