Pages:
Author

Topic: My Trustwallet hacked, and $43,000 BTC was stolen - page 2. (Read 619 times)

sr. member
Activity: 490
Merit: 325
Hello,

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

You said you used trust wallet on your iPhone but the paragraph after this, you said Samsung. Nevertheless, wallet hacked doesn't have anything to do Witt whether you are expert or you are a newbie, sometimes the things we don't expect are the ones that happen to us without us even noticing the mistake occurring. I just want you to know that I have experience similar experience on my wallet I created from metamask and export to my Trust wallet too before, that was the day I stopped using the wallet because it's an open source software.

Quote
I installed the trust wallet app in the Samsung Secure folder with only V2ray VPN and no other app (the Samsung Secure folder is a sandbox environment with an additional security layer guaranteed by Samsung Knox); also, Kaspersky and Avast were enabled on my device! I don't understand how I got hacked!! I am sure that no one had my key phrases! I didn't connect my wallet to anything, any airdrop, any NFT ...

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

Sorry for your loss but what chain exactly were you holding your coins even though it doesn't matter, in just skeptical how vulnerable your seed phrase was easy to guess or copied by another person. What I can say about this your possible things that happen is that first and foremost, Trust wallet is open source and is the reason why many developers don't recommend it as wallet and your android phone is open source but android security is very short, you may have a malware of your phone but trust me, you will never know about it. Something most have happened somewhere in your phone.
legendary
Activity: 2240
Merit: 1993
A Bitcoiner chooses. A slave obeys.
Ironically you trusted an untrustworthy wallet. Always go for open source and non-custodial. There are so many threads here on this forum that could have helped you pick out a better wallet.

Also, what was your BTC address?
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.
I don't want to raise any false hopes, but there's a small chance the third-party platforms that I've listed in "this post" could help with intercepting the hacker's next move [it's a long shot, but it's better than nothing].

why the hacker doesn't cash out the stolen BTC.
If I were to guess, I'd say the hacker in question is trying to stay under the radar for the time being [he/she wouldn't be the first one to do such a thing (e.g. movements can happen even after a year or two)].
hero member
Activity: 3024
Merit: 745
Top Crypto Casino
While OP is claiming that he's not a newbie, it's possible that he got hacked based on how his activities were, what he downloaded, and in this case the wallet, trust wallet. Let's say that you've downloaded the real trust wallet and it wasn't the issue, I think that no one will blame themselves at the same time when they've already lost their funds a long time ago. There are already some questions on your story and asking for proof that you can't provide like your address.

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.
The sentiment is within you if this has happened for real and we're sorry about it but if you can add more details much better. It's tough when you've lost an amount that is lifesaving. You'll not get any malware if you didn't do anything.
hero member
Activity: 882
Merit: 1873
Crypto Swap Exchange
If this story is true, I want to go into the middle of a forest and scream.

You installed TRUST WALLET, which is partially Closed Source, in the Samsung Secure folder, which is a proprietary Application.  You used this partially Closed Source Wallet in conjunction with Avast AND Kaspersky, which are also both Closed Source Applications that can scan your files and send information about them to Third Party Servers.  Besides, many many years ago when I last ever used an Antivirus at least, the golden rule was NOT using two simultaneously if you wanted the best Security from them.  I am not sure how valid that rule is today.  But anyway.

Are you sure the Trust Wallet version you are using is legitimate?  I would be very skeptical about a partially Closed Source Wallet, but at least Trust Wallet has a reputation built and I do not think there are any valid accusations of them doing theft so far.

Are you using the legitimate, original Android ROM of your phone or did you flash a Custom one?

Where did you store your Seed Phrase?  Does any body else have access to that location or around it besides yourself?

As for how did the thief bypass the Secure Folder, I do not know of any real proof of how actually Secure the Secure Folder is.  But I imagine you are not the only one using it for storing your Cryptocurrency Wallet and if it was a Malware that penetrated even the Knox Sandbox then it would be expected that many more Wallets were affected, not just yours.

Unfortunately, it is not rare that the problem is either the way the victim stored the Seed Phrase or even some body close to the victim stealing it.  Think about it very carefully, let emotions to the side and start from your own house to the external World.  As much as you think the people you are living with or coming to your house are innocent, it is important to rule out every potential thief one by one.
hero member
Activity: 2268
Merit: 588
You own the pen
Sounds too unrealistic. Yeah, software wallet may have weaker security but if not sure that they can really be hacked

That's exactly what I think but if he's telling the truth there are ways to prove it and all we want to know is the BTC address of the OP and the Thief as well because based on his story, he found out that the stolen funds haven't been moved out yet and with that, there still chance to track it if he wants to and ask cybercrime management in their country to help him.

But recently, people have been narrating fabricated stories to get some attention and some help from users but they are already fed up with these lies and they won't fall into the same trap again unless you show them proofs to support your stories and claims.
hero member
Activity: 2814
Merit: 618
Leading Crypto Sports Betting & Casino Platform
There is no reason to lie; I can send all detailed information and proof to any forum moderators.

-snip-
Provide the address containing the BTC that you mentioned to be able to find out whether the address is actually filled with as many assets as you mentioned.
If stolen, we can trace the transaction by providing a transaction ID.

Don't put forward bad feelings when someone asks you to show your address and transaction ID.
In my opinion, Trust Wallet is not a good wallet for storing that much Bitcoin.

He has not provided the BTC address that contain that much amount. I do not know what is the reason to hide it as we are not asking any private keys but the public bitcoin address  Cool

I really doubt OP story and will only believe to some extent if he share the bitcoin address that had this amount stored on it. If this is a false story, i also do not get what could be the purpose of it  Huh
staff
Activity: 2436
Merit: 2347
How much, how much was stolen? 43к?  Shocked Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.
The story is not really clear because at first he the Op used iphone and the iphone he was using and the coins were in the iphone but the hacker hacked the coins from Samsung phone.

You must not have read OP's post very well. He mentions that there were problems with TrustWallet on the iPhone, but he doesn't say he was using an iPhone. He says that after this news with the TrustWallet hack on the iPhone, his Android smartphone was hacked.

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone...
sr. member
Activity: 448
Merit: 264
How much, how much was stolen? 43к?  Shocked Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.
The story is not really clear because at first he the Op used iphone and the iphone he was using and the coins were in the iphone but the hacker hacked the coins from Samsung phone. Lolz this is strange story to rank up. From the reading of the Op story it is clear that the story is not true. Before someone hacked a wallet the seed phrase must have leaked. Like a thread I have read here. The guy mixed up his seed phrase and sent it to a hacker and the hacker rearranged the seed phrase and transfer everything has in the wallet, that story is somehow believable because the mistake was made by the owner.
But this Op is confused in the forum so he is trying to frame up any story to write and thinking that people would pity him and give him merits.
sr. member
Activity: 812
Merit: 315
Vave.com - Crypto Casino
This sounds like a fake story but I will like to clear the part where you throw in the kapersky and other antivirus, the truth is real time protection from anti viruses works best on the PC not on mobile, remember that we have to always run the antivirus in the background of the PC, that's real time, you can't do that on smartphones.

One way or the other, a virus can easily sleep well during the day and night on your phone without been detected than on PC.
legendary
Activity: 3276
Merit: 3537
Nec Recisa Recedit
@OP
maybe I have missed it... but did you have verified with local police to fill an official claim?
If I remember correctly, you can try to track these coins and if these arrive in a wallet knowon of an exchange, you can ask to lock this account and get more details on it. I think you need to do both actions. Of course you need in most cases an official complaint.

Personally I can't trust or distrust your story (meanwhile I hope isn't true due the high amount... I am pretty sure you're not wasting precious time ...)
full member
Activity: 365
Merit: 101
Sounds too unrealistic. Yeah, software wallet may have weaker security but if not sure that they can really be hacked
legendary
Activity: 1050
Merit: 1100
Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

There is no need to play the blame game, you made a mistake storing such an amount on a closed-sourced wallet with a history of security breaches. You shouldn't also depend on third-party securities from phone makers. Such an amount should be in a hardware wallet.

Quote
I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

The simple explanation is that your phone security was compromised and the hacker had access to your funds. It is only the hacker that can explain why he has not cashed out.

Quote
I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

If the hacker sends the money to an exchange, there is a slight possibility that he can be tracked especially if he went through KYC. Sorry for the loss, but the moral lesson is never to keep such an amount in Trust Wallet.
hero member
Activity: 1960
Merit: 537
Leading Crypto Sports Betting & Casino Platform
Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

You're not the only one using a Samsung phone, and your device isn't unique either. You should ask why are no other users experiencing this problem and you are the only one experiencing it.

It's not too difficult to understand when you lose money and don't want to admit it was your fault. You like many others are always confident that you have turned on all security modes and are very careful in every detail, so it is definitely not your fault. But you forgot that you made a fundamental mistake: you should never store bitcoins with an internet-connected wallet because risks in the internet space are unpredictable. Even if you're confident that you've been very careful, that doesn't mean your phone is very safe. New viruses are created every hour and fighting it is not as easy as we think and that is why hardware wallets are always top recommended.

What guarantees that before you install trusted wallet and transfer bitcoins to the wallet, your phone is always safe and virus-free?
hero member
Activity: 2282
Merit: 560
_""""Duelbits""""_
The first thing I would like to ask is why store so many bitcoins in a trust wallet if you are right besides that you also do not provide further information such as your addres or anything else to convince yourself that it is true Cheesy

Also, it would be pretty reckless if you kept all that big money without a phrase and not secured because as far as I know trust wallet or any wallet can be opened on another device when there is a phrase and of course there must be a password that you have prepared beforehand unless you forget the password too.
Your words seem to be made up because you said the amount was large and happened months ago but you are only talking about it now so it is quite natural that many people will doubt your story.
legendary
Activity: 2072
Merit: 4265
✿♥‿♥✿
It's funny someone who keeps 43,000 BTC coins in a Trust wallet and then comes here to discuss!


Another funny thing. It’s funny to talk about yourself as an experienced user, but you're still storing a rather large (in the opinion of most) amount on your phone. Store in an app that once had a bad history but does not have a hardware wallet that costs pennies compared to that amount.
Moreover, it is very funny to trust a child to install a bunch of toys on this phone and not realize that these toys are not always as safe as many people think. Entrust your child with your phone and hope that he doesn’t press some unnecessary button. You just need to give birth to a genius child.  Grin
For comparison, those people who teach how to have a wallet that does not have access to the Internet at all, in the OP’s understanding, are simply stupid and cowardly.  Angry
Why wasn't your amount withdrawn immediately? Simply because it takes time to transfer to hackers and verify all the important and necessary amounts for the hacker.
Probably for the OP, this amount is not large, since such careless storage is possible only for those for whom the amount in the tens of thousands is not very large.
hero member
Activity: 1316
Merit: 787
Rollbit - The #1 Solana Casino
There is no reason to lie; I can send all detailed information and proof to any forum moderators.

-snip-
Provide the address containing the BTC that you mentioned to be able to find out whether the address is actually filled with as many assets as you mentioned.
If stolen, we can trace the transaction by providing a transaction ID.

Don't put forward bad feelings when someone asks you to show your address and transaction ID.
In my opinion, Trust Wallet is not a good wallet for storing that much Bitcoin.
newbie
Activity: 5
Merit: 0
Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.
full member
Activity: 952
Merit: 232
How much, how much was stolen? 43к?  Shocked Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.
43k USD to BTC is clearly about 0.689 in BTC and having such in a hot wallet like Trust wallet for too long, is a firstly a wrong move and it's only what a newbie would do.

Being a newbie means that despite our OP having had such an amount of coins (if ever) in a wallet and neither grew in his trading or investment abilities and knowledge as well as didn't grow in knowledge as regards safety upgrades for wallets and the best wallet type to use for BTC or cryptocurrency holdings in the form of savings or DCA. It means he is still a newbie in the crypto market and am certain he is a newbie here too and may have made up this story, else, am sorry such had to happen.

Perhaps he should contact Samsung and iPhone customers support with well detailed analysis on what happened with good pics and links if needed.
Also check if you whitelisted any address in the exchange you used as well as on your wallet.
hero member
Activity: 2156
Merit: 803
Top Crypto Casino
My main question is: How can malware unlock the secure folder and then bypass the trust wallet fingerprint?

In times now everything is possible if you are always connected to the internet. A malware does have the ability to sit in your device and record everything without getting detected. The reason being those antivirus have to first get updated with such malwares before they are able to detect it.

I do not understand why you even used a close source wallet such as Trust wallet. If you were planning to accumulate Bitcoin or hold it for long term gain then it is imperative that you opt for a hardware wallet. Some software wallets like Electrum are highly recommend in the forum.

I am sorry for your loss and I can only sympathize with your current situation. I would say only one thing that you still can learn from your mistake and work on to gain the lost fortune.
Pages:
Jump to: