The Hive Grove campfire is usually filled with jokes, greetings, and conversations covering a wide range of topics—from the trivial to the serious and highly technical. One comment from a few weeks ago has stayed on my mind ever since:
“My account got hacked.”
The user explained that she had lost all the assets in her wallet. Every bit of liquid HIVE and all her tokens had been transferred to another wallet. Their entire Hive Power balance had been "powered down," and even the Hive Power she had delegated to community accounts had been undelegated.
She was panicking. Her wallet was inaccessible; the hacker had changed all her keys. The account was beyond recovery. Strangely, she was still able to post comments via the Ecency frontend—likely because her session was still cached.
Then, they simply vanished. No longer responding to any comments at the Hive Grove campfire.
What I Found
Back then, I decided to look into that Hive Grove member’s account. Upon checking their wallet, I discovered the destination addresses for all their stolen assets: the accounts bemybaby and sintayoung. I investigated these destination wallets and found something shocking.
I examined the transactions one by one and discovered that dozens of other accounts had also sent their funds there. I suspect that all of these users fell victim to clicking a malicious link—a theory supported by the fact that most of these accounts have shown no activity for over a week. Based on my investigation into the two destination accounts for these transfers (bemybaby and sintayoung), it appears they have received over 10,000 HIVE, all of which has since been transferred to an exchange account.
Suspicious Links
Yesterday, I came across another suspicious comment on a post I was reading: "Get a FREE HIVE AIRDROP!!!" I was curious and tempted to click the link provided in the comment.
But then, it suddenly hit me:
"Could this be the same link that our friend from Hive Grove clicked before losing access to her account?"
The Lesson
What should you do if you have already clicked on a suspicious link—especially if you went as far as entering your private key?
Phishing websites often ask for your wallet key under the guise of letting you claim a reward. These sites can look very convincing, which might cause you to lower your guard.
Change your wallet keys immediately by going to the menu: Profile -- Settings -- Keys & Permissions.
This is exactly what 
https://ecency.com/waves/ekads/wave-20261031t191718192z
Final Words
Let this serve as a reminder to us all.
On the blockchain, there is no such thing as an "undo" or a refund. Furthermore, there is no customer support service to handle complaints or grievances. The security of your account and wallet is entirely your own responsibility.
Always remain vigilant regarding suspicious links or promotions—whether they come from unknown accounts or even long-standing accounts on Hive; it is possible that such accounts have been compromised by an attacker.
Anyone can become a victim—you, me, or anyone else. Let’s look out for one another.