Bitcoin Forum

Can trustwallet be hacked. can the owners take money of all the users?
Is it possible scanario that wallets like Trustwallet Blockchain info Exodus etc have control on the users funds?

All the wallets you mentioned are close source and there is no way to know whether they have access to users keys or not.
Since we don't know how the keys are generated, everything is possible. It's possible that there's a vulnerability that help the hackers steal users fund.  

Blue wallet is 100% safe because is opened source and no vulnerability?

What about Trezor or Ledger nano  are they 100% safe or there is cach?

It's as safe as your device. If your phone is infected with malware, you can't expect your wallet to remain safe but yes, the developers of the wallet cannot access everyone's funds.

Blue wallet is open-source and if it's used in the correct way, your fund would be safe.
Note that if you want your wallet to be completely secure, you should generate and use your wallet on an airgapped device. Otherwise, there's always the possibility of being hacked.


They are good.
With using a hardware wallet, you can be sure that your keys are always kept offline and your fund is safe.
I would prefer Trezor over Ledger. Trezor is open-source and ledger is close-soruce.

What if the developer install malware  on their new update.(lets say they make new update on 15 JAN)
Being open sources software wont allow other users to see if its infected i believe.

 what of  millions of people will download their app then they could take the funds of the users?

As an open source software, it is possible to verify the codes behind the platform and vulnerabilities like malwaes would be spotted.
Of course users don't always verify the code or signatures from sources where they download sensitive apps and could fall victim.

Never trust; Verify.

Ledger Live is open source and the hardware wallet can be connected to open source wallets like Electrum, but all Ledger Nano wallet secure elements are close source which is one if the reasons to prefer Trezor. I will also prefer but use passphrase with Trezor. Ledger company also do not care about users privacy.

The website can be compromised by hackers and malware update can be released. But always verify the PGP signature of the wallet before downloading or updating it.

As for the developers, the vulnerability can be noticed and corrected, instead of close source wallets that no one can check their code.

If you want security, then forget all desktop/mobile/online or hardware wallets and focus on cold storage. Of course, the whole thing boils down to the fact that you need a device that is not and will never be connected to the Internet, and a little knowledge about how to make cold storage in the correct way. It's just advice, of course you do everything at your own risk.

I've also heard that it was possible to hack, with physical access to the equipment, a Trezor. But there is no record that anything ever happened to a Ledger.

Therefore, both have their advantages and disadvantages.

Well, that threat always exists, just like with any other software. A software developer might sneak some malware into an upgraded version of their software, but with open source, software will always have a bit more transparency than closed-source, since any user can see the code and check for potential issues. That means other developers and users can check the source code for any potential issues or malicious code and alert the community. That's the benefit of open source software. Not only does it allow any programmer with the ability to improve upon the source code, it also means that there are many people looking at the source code for vulnerabilities and flaws to report. There is strength in numbers, after all, and open source projects are no exception.

Quite difficult to do due to the slightly better privacy features of newer Android and iOS operating systems. But it's definitely possible and definitely a risk.

Of course. Not every user can verify source code. But it only takes one or a few developers to see the bug/malicious code and publicize it to get people to stray away from the software.


They could. Hence why a wallet being open source is very important.

I don't think have scenario about the owner will take fund for their user saving assets in trustwallet, seems impossible thing having developer want to give bad reputation for their platform have building for long term and spent much money, knowledge and actually they have spent their time.

Trustwallet most safety placed for saving assets due has own controlling with seed phrase than alternative way when saving cryptocurrency in exchange market. Don't worry about saving fund in trustwallet due not connected with any dapp exchange market and never give access approving for dusting token.

Trust wallet can be hacked if someone hijack their website and redirect users to download malicious software that can report seed words to scammers.
I don't trust any wallet that is not open source like Trust, Exodus and similar, because code can't be verified, but I don't think anyone reported losing coins like you said.
It's possible that some people who work for them could leak information, but non-custodial can't be hijacked like online wallets.
However, it's better to be safe than sorry, so use only open source wallets like Electrum and verify it before insdtalling.

Owners/founders of most new altcoins for example build 'reputation' for a long time, spend money and time to make people believe them, but they take all the money of their investors when they have garnered enough. Mind you that once it is a centralized service, you can lose money as a result of the direct or indirect actions of the owners, if Binance falls for example, there's a high probablily that trustwallet will go down with'em.
The safest place for storing your funds/asset is offline/an airgapped device, trustwallet is none of that, it is closed source and an online wallet, it is pretty far from being the safest place to store your funds.

Although it's a decentralized wallet it's still a hot wallet so I think it's not 100% correct to trust it. Moreover, there is still a lot of confusion about the privacy of trust wallet backed by persons.  So I think this also leaves the possibility of being hacked.
From this point of view, I think cold wallets are ahead because hackers can't attack in offline, But the main factor here is that the protection of device and the private keys.

You probably mean non-custodial. Trustwallet gives you access to your keys and it's a non-custodial wallet. That's different from decentralization.
I don't think it's true to use the term "decentralization". When you use trustwallet, you connect to their server and you rely on a third party.

This. Just a heads up that probably the only truly "decentralized" wallet we have right now is Bitcoin Core (and probably arguably Electrum?) due to the diverse amounts of developers/contributors. But then again, a wallet doesn't necessarily need to be decentralized to be good.

When you write it like that, it looks like it's a rumor, but the truth is that it's a proven fact and that any Trezor HW that is not protected with a passphrase or SD card can be hacked in 5 minutes with equipment worth $100. Of course, it is a physical attack, which means that the HW should be stolen/lost.

Ledger had its vulnerabilities, but as far as is known, they have all been patched, although the Ledger Leak is something that definitely seriously damaged the company's credibility. Someone who is in such a serious business should not allow such situations.

Sorry but is Trust wallet really open source?

Their website states that they are an open source wallet that make me confusing. I knew Binance took over Trust wallet two years ago and believe it is a close source wallet but their description is open source.

Trust wallet for Developers (https://trustwallet.com/developer/)

I knew about android phones since version 1.0 but till this day I have never seen a n android phone getting infected with malware, I don't think it's possible but correct me if I am wrong.

Who says that is so? It is a well-known fact that this wallet is not open source, and even that is clearly stated in the second post of this topic.

---

It is quite possible, Android is not immune to malware and viruses. I have personally seen some smartphones infected with very vicious malware that at that moment could not be removed in any way, not even a factory reset. I can't remember what that malware was called, although we mentioned it on the forum.

If you are interested in more, there are good articles that describe in detail some of the most dangerous malware that attack the Android OS, and how to prevent them - use the search engine and keywords.

They are lying. Trustwallet used to be open-source, but it became close-source after being purchased by binance.
If you check their github (https://github.com/trustwallet/trust-wallet-android-source), you see that the code hasn't been updated in the last 4 years.


Binance acquired trustwallet in 2018, not two years ago.

Yes they can if they want to, closed source means we don't know what and how the wallet is designed so you have to go with reputation/trust or simply choose the open source so you can verify the signatures on your own and its impossible to steal your money without your mistake like using infected device, getting phished or something similar.

I believe so but I don't know how to check codes and I did not believe it is open source because the wallet belongs to Binance.

Weird that they can lie on their website because it is easy for developers to check a wallet is open source or close source.

Thank you. My memory called me to their TWT distribution on Binance (https://www.binance.com/en-ZA/support/announcement/binance-completes-distribution-of-trust-wallet-twt-airdrop-62c921cc0b4d4f3e91e16156ae768540) and listing a few weeks later in 2020, not when Binance took over Trust wallet.

I don't know about other wallets you listed in the OP but I can say a thing for Trust Wallet. Yes, I've read about it being a closed source type of wallet and many have pointed to that as its major vulnerability. However, I know I've been using TW for two years now or so and I haven't had any issues with it. My funds have remained intact. While I don't want anyone misquoting me on this, I'm just sharing my experience without mincing words

Unfortunately, most people don't do that and they easily believe everything they read over the internet without validating the information.
Trustwallet has probably deceived many people in this way. Just google "Is trustwallet open-source?" and see the result.

No one has been swindled yet. Your funds may be intact now but we can’t predict the future. FTX victims were once dedicated users who believed in the false security they were given by the company. Trust wallet imo has been compromised since Binance took over, if one day Binance comes under investigation and shuts down like FTX. What do you think will happen to Trust wallet? Is that a risk you’re willing to take?

Do you have any evidence to that effect? Please, don't bad mouth another person's business on the ground of suspicion. You don't know how far reaching some of these comments can be on business owners. According to the principle of law, everyone is adjudged innocent until proven guilty. I don't own any share in Binance or TW but I'm simply stating my experience using either of them. I won't say something is bad just because others are saying so when I haven't had an unpleasant encounter with it. While I ain't vouching for TW, I also won't bad mouth it either.

I have not seen anyone complaining about lose of funds using Trust wallet though I believe they are not fully open source like many think, instead the max amount of money or assets I keep on Trust wallet is limited, I still believe that Trust wallet is far safer than many crypto mobile wallets out there.

Trust wallet being closed source doesn't mean it's bad, it works better and it's been years since I installed on my smartphone.

Not just you, TW has 10 million users, and so far no one has had a problem with it. The only downside of TW is that it is a closed source, and because of this people are afraid, they are afraid because if one fine day the parent company Binance collapses, that could happen to TW, and our assets are also at risk. That is also the downside of all closed source wallets on the market today, other than this everything else is perfect.
I also like using TW because it's easy to use but I only use it for shitcoins, say no to bitcoin and big assets.

Since you're talking about a closed source wallet then it is likely that they can get hack or perhaps the dev can add some malicious code to steal users funds who knows?
But in cases where your wallet it open source and has been inspected thoroughly to make sure there's no suspicious code that code lead to the users losing their funds. If such wallet is use them it will be almost impossible to get hack if the user is extremely careful about how s/he uses their system.

But if your are not sure of which wallet to go for you can just buy hardware wallet to increase the security of your funds.

I’m not badmouthing Trust wallet or Binance. I have nothing to gain from it, I don’t know the evidence you’re looking for it’s not a secret that CZ took over Trust wallet. It’s only fair to say a problem with one will affect the other. Besides I’m just stating a big “if”, I’m not calling either companies a scam, I’m only stating the issues I have namely the fact that Trust Wallet is close sourced and that centralized exchanges are not safe to store one’s coins.