Coinomi wallet hacked, all funds stolen

[DaveF]

It's sad that there has been theft of assets from other communities here in the crypto space. Both of you are retired and then the same thing happened.

        As far as I know, this coinomi does not provide the latest updates on their social media platforms. Their last announcement on twitter was in April 2022, after these times they have not given any latest plan and development for the community of coinomi and there are many users complaining about it.

IMO Coinomi has gone from an active project to a 'side hobby' of whoever is maintains it.
Their social media is just about dead. XMR and other coins are having issues and a few other minor things come to mind.

This is not to say it's any less safe then it was or worse then any other closed source hot wallet, just that it's not as actively supported as it once was.
The flip side is that there are some actively supported wallets that do suck so there is that......

Just as people have issues it looks like it's going to fall more on the community to support them then Coinomi.

-Dave

[1714282724]

1714282724

[1714282724]

1714282724

[1714282724]

1714282724

[pooya87]

IMO Coinomi has gone from an active project to a 'side hobby' of whoever is maintains it.
Their social media is just about dead. XMR and other coins are having issues and a few other minor things come to mind.

Fading activity and interest of the owners of the project could be seen as a negative sign since they could have reached the conclusion that this project is not going to make them the money they were hoping for. The risky part is that they could decide to "run away" but not before stealing some money from their users.

[Artytom]

I thought the same thing had happened to my eth in my coinomi wallet but resetting the app cache and restarting then loading the eth coin restored it.

[Pmalek]

I thought the same thing had happened to my eth in my coinomi wallet but resetting the app cache and restarting then loading the eth coin restored it.

Whenever there is a discrepancy, the first thing you do is to check the transaction history. Look for outgoing transactions you didn't make. If the software reports that it's up-to-date and the transaction history is ok, then check your address/addresses on blockchain explorers. Again, if there is nothing unusual there and it doesn't show unknown transactions, you can safely say there is something wrong with your wallet.

[rat03gopoh]

I thought the same thing had happened to my eth in my coinomi wallet but resetting the app cache and restarting then loading the eth coin restored it.

It is impossible to recover crypto sent to an address other than yours, or you actually wanna say that the balance is just not reflected correctly so your case is different from the OP's.
But in essence, you're not recommended to keep using the Coinomi wallet if you read some of the facts above.

[rby]

The wallet was drained on Feb 14th. 

What a poor coincidence? A day meant for love turned to grief. Take heart.

The password was in my head not on paper.  The seed phrase was on paper in a safe which only I have access to.

I have a couple of passwords in my head, very strong and I cannot forget unless I have a brain issue in the future  (not anticipating though). But the disadvantage is that I tend to repeat  same password for different purposes which is bad. If it leaks in one platform, you'll become a 360deg victim. A password manager is cool.

Coinomi denies all responsibility and basically says too bad so sad. 

I do not think that it's from the end of Coinomi. You didn't mention how you access your wallet, maybe from an insecure device, using public network, et

Whenever there is a discrepancy, the first thing you do is to check the transaction history. Look for outgoing transactions you didn't make. If the software reports that it's up-to-date and the transaction history is ok, then check your address/addresses on blockchain explorers. Again, if there is nothing unusual there and it doesn't show unknown transactions, you can safely say there is something wrong with your wallet.

Very good way to trace a discrepancy in your wallet. But I have a concern, if the allegations that the developers behind a closed source wallets manipulate is real. Will it not be easy for them to wipe the transaction history from the wallet. Then, the victim won't have any link to the blockchain immutable ledger to verify.

[Pmalek]

Very good way to trace a discrepancy in your wallet. But I have a concern, if the allegations that the developers behind a closed source wallets manipulate is real. Will it not be easy for them to wipe the transaction history from the wallet. Then, the victim won't have any link to the blockchain immutable ledger to verify.

Manipulating the native software is possible, but they can't manipulate a decentralized database and a 3rd-party blockchain explorer. If you know your addresses, you have ways to check your balances. If your wallet shows you have X of BTC on address A, you can always confirm that on the blockchain. The native software can lie about what you have, but the blockchain data tells the truth.

[Agbe]

The wallet was drained on Feb 14th.  The password was in my head not on paper.  The seed phrase was on paper in a safe which only I have access to.  Coinomi denies all responsibility and basically says too bad so sad.  My wife and I are retired, the wallet held our "safe" retirement cash savings.  Stay away from this wallet. 

W normally tell people to use Open Source wallets preferable Electrum, Wasabi others. Well sorry for your lost, since the owners of the wallet app said, they can't do anything then your coins are gone. Coinomi supposed know how the coins move from the wallet to another wallet. Something phishing is here. Op. Said he has the keys with him and the password is in head so how come the wallet was hacked? Is it that the hackers used software to hacked the wallet. And if it is like that then Coinomi wallet is not secure to use and recommend to others. This is very sad news because your old age with your wife savings were there and have been hacked by the negligent of Coinomi company because their app or website is not well secured.

[Z-tight]

W normally tell people to use Open Source wallets preferable Electrum, Wasabi others. Well sorry for your lost, since the owners of the wallet app said, they can't do anything then your coins are gone. Coinomi supposed know how the coins move from the wallet to another wallet. Something phishing is here.

Open source wallets are the most recommended because we can verify their codes, but you can surely lose your funds in open source wallets if you have bad operational security, they are not safe in and of themselves. If your funds is stolen and moved to another address, everyone can see the address the funds moved to, including you, not just only your wallet software developers, but BTC transactions are irreversible, identifying the address the funds moved to cannot help you recover it.

Op. Said he has the keys with him and the password is in head so how come the wallet was hacked? Is it that the hackers used software to hacked the wallet. And if it is like that then Coinomi wallet is not secure to use and recommend to others. This is very sad news because your old age with your wife savings were there and have been hacked by the negligent of Coinomi company because their app or website is not well secured.

Even if your funds is in an open or closed source wallet and you have your keys, you funds can be stolen if you do these things and many more:
- Download or run a fake wallet file
- Expose your private key or seed phrase
- Run your wallet file in an online device
- If you have bad operational security
- Click on dangerous and scam links
- Save your private keys and seed phrase online, in your email or in cloud.

[Pmalek]

- Save your private keys and seed phrase online, in your email or in cloud.

There are no problems with that as long as you pay a monthly fee for that pleasure. Just ask Ledger and Safepal. It's very safe sending and storing your seed in clouds and on the servers of 3rd-party companies. You also enjoy the added benefit of possibly getting your crypto possessed, stolen, or the data leaked. I hope everyone recognizes the sarcasm.

I think this gem is fitting:

[Z-tight]

Just ask Ledger and Safepal. It's very safe sending and storing your seed in clouds and on the servers of 3rd-party companies. You also enjoy the added benefit of possibly getting your crypto possessed, stolen, or the data leaked. I hope everyone recognizes the sarcasm.

Ledger is no longer a recommended hardware wallet, i don't know if they can even be called a hardware wallet anymore, they are now more like a custodial or an exchange wallet. The crazy thing is many people with bad operational security will opt into this thinking it is an extra layer of security for their funds, when they no longer own their keys.

[pooya87]

The recent shitshow with Ledger is the reason why I have always called hardware wallets in general "semi-cold storage" not "cold storage". The only true cold storage is a device that has absolutely not connection to the outside world.

[DaveF]

The recent shitshow with Ledger is the reason why I have always called hardware wallets in general "semi-cold storage" not "cold storage". The only true cold storage is a device that has absolutely not connection to the outside world.

Drifting away from the original topic but..

You can do that with the ColdCard it supports PSBT   https://coldcard.com/docs/faq
There are others that may too. The device never has to see the internet you are just moving an SD card between an online machine and the device.

Personally I think it's more time consuming then it's worth but it does work well.

-Dave