Missing 1 XCH in cold storage address by checking chiaexplorer.com

[chenus1]

Describe the bug

In the morning of 22 August 2021, I just checked the https://www.chiaexplorer.com/ for my cold storage address and find that 1 xch was spent and missing (see the snapshot of screen) and it is not show in the net balance. I did transfer this XCH on August 19, 2021 from my farmer address to this cold storage address. My screen also shows that threat secured and we have successfully aborted connection tcp://125.68.143.131:8444

here is the snapshot of the coin

I traced that spend block index is 734446, which is linked to some pool address as below

Questions:

Is there any possible way to solve this problem / get my coins back?

Desktop

OS: Windows 8.1 Pro

CPU: AMD FX 8150 Ram 16GB

[loppefaaret]

xch16dh6v6kg0t7d36gkkwmcxeqtaf77yagy7w828mugrkh8vjha8ujq8q4fqn
First off, the fact that an outgoing transaction has taken place, this is no longer a cold wallet!
If you are 100% sure that you have not created a transaction from this wallet, imidiately transfer the balance out of the wallet!

[loppefaaret]

https://xchscan.com/address/xch16dh6v6kg0t7d36gkkwmcxeqtaf77yagy7w828mugrkh8vjha8ujq8q4fqn
This shows a initial 0.01 XCH going in 3~ months ago, and then activity in the last week...
are you absolutely sure that you have not by mistake imported this key on an online client, and started syncing the wallet ?
perhaps even mistakenly created the transaction itself ? it has taken the 1.00 XCH and split it into 0.01 & 0.989 as you can see on the above link
the 0.01 went to https://xchscan.com/address/xch1rg97f3dvk7wjlsjdcvrtxujv606swa42hpplfwlakuhqfaz0j4fs5x2p8y which is a very active address, and the 0.989 went to a unique address, which might be belonging to your "not so cold wallet any more" ?

[loppefaaret]

https://xchscan.com/address/xch1rg97f3dvk7wjlsjdcvrtxujv606swa42hpplfwlakuhqfaz0j4fs5x2p8y is also the same address that initially seeded the "not so cold wallet address" 3 months ago i see now.
i guess you synced the "not so cold wallet" and sent back the 0.01 XCH from where it came ?

[loppefaaret]

it is now under the address https://xchscan.com/address/xch16n3kejm7t8en5022xe9mq96y7ynfha9g9una2hd85a35jep7accsf9tk6l - the "missing" coins are there - your "not so cold wallet anymore" used a new address in the wallet to split the 1.00 XCH... you can try and sync the "not so cold wallet" again, and you will see it...

[loppefaaret]

you can keep using xch16dh6v6kg0t7d36gkkwmcxeqtaf77yagy7w828mugrkh8vjha8ujq8q4fqn - the transactions will lead to the "not so cold wallet"
or you can also use this xch16n3kejm7t8en5022xe9mq96y7ynfha9g9una2hd85a35jep7accsf9tk6l address - these will also land in the "not so cold wallet"

[chenus1]

Not sure what it is the difference between "not so cold wallet" and "cold wallet". Do you mean once the "cold wallet" is synced once, it is not "cold wallet" but "no so cold wallet"? Can I create new wallet with different private key in any other computer, and just change the "farming reward address" and "pool reward address" in "manage reward address" menu of farming machine to the new created wallet address. So if I do not synce the new created wallet, will the wallet be called "cold" and is it will be more safe?

[loppefaaret]

thats was exactly my intentions to to make clear - it is not cold hte moment the key was able to have internet access!
yes, you can create a new key, and set farmer reward target address, and have rewards go to it directly

[chenus1]

Thank you!

[BrandtH22]

@chenus1 , based on your previous message it seems this issue has been resolved.
We will be closing this ticket but if we have closed this ticket in error do not hesitate to reach out to us again with any followup questions or comments.

The best place to reach our support team is on Discord (https://discord.gg/chia) or by reopening this ticket.