Show Posts
Coinomi is awful. It is closed source, and sends seed phrases in plain text to third party Google servers to be spell checked. Your coins could have been stolen this way.
Windscribe is awful. It is a free VPN, which means it is probably spying on you. They are also very amateurish, going as far as failing to actually encrypt any of their servers meaning that all data could be intercept and read, as well as running long outdated software which had been deprecated because of critical security risks. For example: https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-authorities-werent-encrypted/
You have unfortunately used a terrible wallet and a terrible VPN on a long outdated phone (which will also be vulnerable to security flaws), and it is also not a cold wallet as you state. Doesn't matter if you only go online once a week, once a month, once a year - as soon as you go online once, it is no longer a cold wallet.
There are lots of potential ways your coins could have been stolen here, and it is unlikely we will ever know the exact method.
Windscribe is awful. It is a free VPN, which means it is probably spying on you. They are also very amateurish, going as far as failing to actually encrypt any of their servers meaning that all data could be intercept and read, as well as running long outdated software which had been deprecated because of critical security risks. For example: https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-authorities-werent-encrypted/
You have unfortunately used a terrible wallet and a terrible VPN on a long outdated phone (which will also be vulnerable to security flaws), and it is also not a cold wallet as you state. Doesn't matter if you only go online once a week, once a month, once a year - as soon as you go online once, it is no longer a cold wallet.
There are lots of potential ways your coins could have been stolen here, and it is unlikely we will ever know the exact method.
Registered just to correct something here. That statement about Windscribe isn't correct and is dated. Windscribe disclosed voluntarily that they had servers seized and a potential vulnerability. It's a misconception due to poor reporting that "no servers were encrypted" as no data was stolen or left unencrypted. The comment by Yegor explains it in detail in that article you linked. Windscribe is a paid VPN service with free plan option.
Either way that sucks for OP. You must be going through a lot of emotional distress right now. You need to clean those devices and move services. If you don't trust Windscribe then look at these they recommended: https://blog.windscribe.com/how-to-pick-a-good-vpn/
All of them in that list are top-tier.
