This is awful but also alarming.
A popular cryptocurrency vlogger has announced that he lost his $2 million worth of cryptocurrency in the middle of a livestream.
Ian Balina, a popular cryptocurrency evangelist, was in the midst of a standard livestream on his YouTube channel on Sunday night when a viewer asked, “Ian, did you know that somebody transferred all your tokens from your account?” With $2 million worth of cryptocurrency gone from his wallet, Balina claims he was hacked.
But the strangeness of the situation has the community questioning his story.
Balina was reviewing an initial coin offering for his 116,000 YouTube subscribers when the comment was posted and he either didn’t notice it or shrugged it off. After about 20 minutes, the livestream cut off.
Further, a couple of hours later, Balina returned to finish his review and blamed a power outage for his sudden disappearance. During the second stream, he said he’d discovered that he was mysteriously signed out of his Google Sheets profile where he tracks his cryptocurrency holdings.
Later, on his Telegram channel, Balina put out a call for help. “Hey Crypto Family, I need you now more than ever,” he wrote. “I had to end today’s live stream abruptly because I am being hacked.” He then listed three Ether wallet addresses that he was trying to track.
It’s not unusual for individuals or exchanges to get their cryptocurrency stolen by a malicious actor, but Balina’s reaction has been odd in this case. “I’m not worried about the money at this point,” he wrote on Telegram, and he insisted that going forward he’s just concerned about catching the hacker.
“This is how I think I got hacked. My college email was listed as a recovery email to my Gmail. I remember getting an email about it being compromised, and tried to follow up with my college security to get it resolved, but wasn’t able to get it handled in fast manner and gave up on it thinking it was just an old email,” Balina explained.
“I kept text versions of my private keys stored in my Evernote, as encrypted text files with passwords. I think they hacked my email using my college email, and then hacked my Evernote,” he added.
As of posting, it’s unclear what he means when he says having his recovery email hacked provided the attacker with access to his encrypted Evernote files. Evernote’s system requires that a user remember their passphrase, and it can’t be reset through a recovery email.
Coindesk, a popular cryptocurrency publication, gave Balina an honorable mention on its list of the top 10 token traders and analysts of 2017.
The entry stipulated that his inclusion was “not because of his holdings or trades per say (though the author and self-promoter is doing well), but because of his habit of sharing a screenshot of his portfolio every day.” And as the alleged hack became apparent, one YouTube commenter wrote, “That is exactly why you don’t brag about your wealth online.”