To Trustwallet users. Vulnerability. Repayment.

[Outhue]

Stop talking about this already, this hack happens because it's a browser extension, I have always warned people about browser extensions, they are more vulnerable to attacks than main crypto wallet.

And since the Trust wallet team is aware of this, they take responsibility and reimburse all those affected, this is another reason why I like everything about Binance, reputation means a lot to them.

It's true that hot wallets are the safer option but I will still keep using trust wallet as my main hot wallet, anytime any day, I still don't see a better hot wallet than trust wallet.

[summonerrk]

But in Trust Wallet code it is open.

No it isn't. Trust Wallet is closed source, and ran by a company (Binance) which makes money from gathering data on its users and selling that data to blockchain analysis. It is one of the worst possible wallets you can use.

I see that iOS version really has a open code

https://github.com/TrustWallet/trust-wallet-ios

Therefore, we can understand how the wallet works. As for. Android copies, that is, information that it was deleted due to the fact that fake versions of the application appeared on Google Play. Although the reason seems far-fetched to me. Also, the information about the audit also confuses me.

It is one of the worst possible wallets you can use.

So tell which one is better, but not a Ledger and Trezor.

[o_e_l_e_o]

I see that iOS version really has a open code

https://github.com/TrustWallet/trust-wallet-ios

Last commit December 10, 2018.

Software which is almost 5 years out of date is meaningless. Trust wallet is closed source.

Therefore, we can understand how the wallet works.

Which is absolutely irrelevant. If there is no up to date source code then you have no idea what the wallet is actually doing, what bugs exist, what vulnerabilities could be exploited, or what malicious code might be there.

So tell which one is better, but not a Ledger and Trezor.

Hardware - Passport
Software - Electrum or Sparrow

[summonerrk]

I see that iOS version really has a open code

https://github.com/TrustWallet/trust-wallet-ios

Last commit December 10, 2018.

Software which is almost 5 years out of date is meaningless. Trust wallet is closed source.

Therefore, we can understand how the wallet works.

Which is absolutely irrelevant. If there is no up to date source code then you have no idea what the wallet is actually doing, what bugs exist, what vulnerabilities could be exploited, or what malicious code might be there.

So tell which one is better, but not a Ledger and Trezor.

Hardware - Passport
Software - Electrum or Sparrow

That's exactly why (unfortunately) cryptocurrencies are not widely distributed: in order to simply save bitcoin, you need to be able to dig for information at the expert level. To know what a github is, how to view a commit and draw conclusions about the relevance of the repository for your bitcoins. Is an ordinary ordinary person going to be able to figure it out? But this is the storage of Money, which is difficult to earn, and easy to settle because of scammers in the world of cryptocurrencies.

[virasog]

If you use Trustwallet browser extension between November 14 and 23, 2022, you need to read this:

https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786
<snip>

If you have not been affected, send your coins to another address, I will suggest you to use an open source wallet instead of Trustwallet or other close source wallets.

Just for double confirmation, only the trust wallet browser extension is affected and those users who are using the trust wallet app in their phone are not affected due to this vulnerability ? I am not saying that the Trust wallet app is safe, but i think it is just the extension in this particular case, otherwise it would have created panic among the people as mostly use the app.

No it isn't. Trust Wallet is closed source, and ran by a company (Binance) which makes money from gathering data on its users and selling that data to blockchain analysis. It is one of the worst possible wallets you can use.

Ever since theymos mentioned the "Unstoppable wallet" in Reminder: do not keep your money in online accounts, i have shifted majority my altcoins from trust wallet to Unstoppable wallet. I hope it is 100% safe now 

[BlackHatCoiner]

That's exactly why (unfortunately) cryptocurrencies are not widely distributed: in order to simply save bitcoin, you need to be able to dig for information at the expert level. To know what a github is, how to view a commit and draw conclusions about the relevance of the repository for your bitcoins. Is an ordinary ordinary person going to be able to figure it out?

You don't need to be an expert. You just need to use common sense. Software which is not maintained likewise, is portrayed as one of the worst choices in wallet reviewing sites, and is quickly revealed to being prone to vulnerabilities, should not be used.

If you're going to put your money where your mouth is, at least take the time to study where you're putting it. Bitcoin.org is one of the best sources to start, and fortunately, is the first result when you google "bitcoin".

[summonerrk]

That's exactly why (unfortunately) cryptocurrencies are not widely distributed: in order to simply save bitcoin, you need to be able to dig for information at the expert level. To know what a github is, how to view a commit and draw conclusions about the relevance of the repository for your bitcoins. Is an ordinary ordinary person going to be able to figure it out?

You don't need to be an expert. You just need to use common sense. Software which is not maintained likewise, is portrayed as one of the worst choices in wallet reviewing sites, and is quickly revealed to being prone to vulnerabilities, should not be used.

If you're going to put your money where your mouth is, at least take the time to study where you're putting it. Bitcoin.org is one of the best sources to start, and fortunately, is the first result when you google "bitcoin".

Everything is so obvious to you because you are Legendary - you have been in the world of cryptocurrencies for a long time, and are active in them.  And I think you already know without me how rarely people really deeply understand the issue . Even I, Hiro, am just now starting to draw the right conclusions. The powerful advertising campaign of this wallet makes you believe in its security. Which is in fact questionable, or rather it is absent compared to, for example, Electrum.
I understand what you mean that information is easy to Google. But the fact is that you need to find arguments that will make you doubt. I did it - but how many people won't stop to say: Trust wallet prety well I will use only it.

[Coyster]

Everything is so obvious to you because you are Legendary - you have been in the world of cryptocurrencies for a long time, and are active in them.  And I think you already know without me how rarely people really deeply understand the issue . Even I, Hiro, am just now starting to draw the right conclusions. The powerful advertising campaign of this wallet makes you believe in its security. Which is in fact questionable, or rather it is absent compared to, for example, Electrum.
I understand what you mean that information is easy to Google. But the fact is that you need to find arguments that will make you doubt. I did it - but how many people won't stop to say: Trust wallet prety well I will use only it.

It is not about forum rank, there are quite a lot of people who aren't registered users on Bitcointalk forum, but they know the right thing to do, that's because these people have done their own due dilligence, i don't think there is an excuse for not doing doing your research. Your crypto funds is your money, so just the way you safeguard your fiat currency is the same way you should do to your crypto.

Having said that, part of the reasons why people do not care about getting the right information is because they came into the network to become rich quick, thus their only goal and focus is how high their funds can pump and not how safe their funds is in the wallet they put it. If one actually believes in Bitcoin and in what it offers, the'll study about it, and they'll make their way to forums such as this one to discuss with individuals of like-minds and in the process exchange knowledge.

[BlackHatCoiner]

Everything is so obvious to you because you are Legendary

If you look in my past self, at around 2020, you will notice that these things weren't as obvious as they are today, but I did use common sense. My first wallet to use was Bitcoin Core. My second was Electrum. And in fact, I was even lenient with security and verified the signature. I have never used a closed-source wallet, and haven't lost a single satoshi. Why? Because I had taken the time to read Internet boards, and even ask some questions myself.

The most obvious thing to do if you acknowledge unawareness of the subject, is to seek for help.

[summonerrk]

Everything is so obvious to you because you are Legendary - you have been in the world of cryptocurrencies for a long time, and are active in them.  And I think you already know without me how rarely people really deeply understand the issue . Even I, Hiro, am just now starting to draw the right conclusions. The powerful advertising campaign of this wallet makes you believe in its security. Which is in fact questionable, or rather it is absent compared to, for example, Electrum.
I understand what you mean that information is easy to Google. But the fact is that you need to find arguments that will make you doubt. I did it - but how many people won't stop to say: Trust wallet prety well I will use only it.

It is not about forum rank, there are quite a lot of people who aren't registered users on Bitcointalk forum, but they know the right thing to do, that's because these people have done their own due dilligence, i don't think there is an excuse for not doing doing your research. Your crypto funds is your money, so just the way you safeguard your fiat currency is the same way you should do to your crypto.

Having said that, part of the reasons why people do not care about getting the right information is because they came into the network to become rich quick, thus their only goal and focus is how high their funds can pump and not how safe their funds is in the wallet they put it. If one actually believes in Bitcoin and in what it offers, the'll study about it, and they'll make their way to forums such as this one to discuss with individuals of like-minds and in the process exchange knowledge.

Everything is so obvious to you because you are Legendary

If you look in my past self, at around 2020, you will notice that these things weren't as obvious as they are today, but I did use common sense. My first wallet to use was Bitcoin Core. My second was Electrum. And in fact, I was even lenient with security and verified the signature. I have never used a closed-source wallet, and haven't lost a single satoshi. Why? Because I had taken the time to read Internet boards, and even ask some questions myself.

The most obvious thing to do if you acknowledge unawareness of the subject, is to seek for help.

I'm not saying that there are no such people, I'm saying that they are a minority. Let's face the facts - do you see a lot of people here besides me who dig to the truth, while not being afraid to show that they didn't know something from the beginning?
The forum is behind this and is needed to carry the truth in disputes. If this happens, everything works correctly, the forum lives.

I hope that now as many people as possible will read this topic and think about what is written here and above.

[Mate2237]

The latest development of Trustwallet is heartbroken. For Binance CEO to repay/refund such big amount to the hack victims. Is it that their security firewall is weakened? How can hackers just penetrate an exchange website just like that. And the company knows that other people funds are inside. They would have used a strong defensive mechanism for this cyberattacks. In some ways I will not also blame the company security team. Because those hackers use different ways to attack sides like that.

[SeriouslyGiveaway]

The latest development of Trustwallet is heartbroken.

What are problems with their wallet development?

For Binance CEO to repay/refund such big amount to the hack victims. Is it that their security firewall is weakened? How can hackers just penetrate an exchange website just like that. And the company knows that other people funds are inside. They would have used a strong defensive mechanism for this cyberattacks. In some ways I will not also blame the company security team. Because those hackers use different ways to attack sides like that.

If Binance could afford to pay compensation for their past hack in 2019 when they were smaller than now. They can afford to do similar for Trust wallet security problems.

They run Binance Hacker Bounty that is $250,000 equivalent to chase hackers.

[Luffygroove]

Hey guys! I just wanted to remind you all that security breaches are unfortunately all too common in the crypto world and can happen to anyone. Stay vigilant and make sure to take all necessary precautions to protect your assets. When it comes to keeping your crypto safe, you can never be too careful. That's why it is preferable to choose a secure wallet that is open-source, non-custodial and free from the internet (maybe hardware is the best one). But, talking about TrustWallet, I think it's good that they have backup plans in place. Trust Wallet is a non-custodial mobile wallet for cryptocurrencies that allows users to store their own private keys and has no access to users' funds. While Trust Wallet is not open source, it has an open-source component called "Wallet Core," which is used in the Trust Wallet Browser Extension.

Although it is not ideal to place our cash in an un-open-source wallet, if we have to, it is necessary to evaluate the company's reputation and history. One of the top cryptocurrency exchanges in the world with a long history of putting security and consumer protection first is the owner of Trust Wallet. Binance, in reality, has a dedicated team and resources committed to investigating and preventing fraud and security breaches. Binance's commitment to client protection and brand trust played a significant role in their response to the Trust Wallet security incident. It's reassuring to work with well-established organizations that have a solid reputation for security and client safety because they're more likely to have procedures in place to deal with unanticipated situations.

[BlackHatCoiner]

Let's face the facts - do you see a lot of people here besides me who dig to the truth, while not being afraid to show that they didn't know something from the beginning?

Tough shit, but this is life. Being so arrogant and lazy that you think bad things won't happen to you due to Google throwing it to your face as "legit", without further research, is the recipe for disaster. If you don't know shit about cryptocurrencies, and you think you can overnight figure out what's the best software, then you're deeply benighted.

The forum is behind this and is needed to carry the truth in disputes.

For what disputes are you talking about?

They can afford to do similar for Trust wallet security problems.

I don't understand the slightest how you can trust them for such compensation. Say you lost $100B worth of bitcoin, due to an exploit found in Trust wallet. How do you expect them to pay you back if they don't own that much in the first place? Your coins don't touch their wallet, supposedly.

[summonerrk]

Let's face the facts - do you see a lot of people here besides me who dig to the truth, while not being afraid to show that they didn't know something from the beginning?

Tough shit, but this is life. Being so arrogant and lazy that you think bad things won't happen to you due to Google throwing it to your face as "legit", without further research, is the recipe for disaster. If you don't know shit about cryptocurrencies, and you think you can overnight figure out what's the best software, then you're deeply ben.

What does laziness have to do with it? Anyone can rest on the result found - in our case, a wallet - and consider it satisfactory. This does not mean that he is lazy, it means that to the best of his intellectual abilities, he decided that this is enough and there is no better result.

For what disputes are you talking about?

Disputes about the wallet of course.

[BlackHatCoiner]

What does laziness have to do with it?

It discourages you from doing research. You google "bitcoin wallet", bitcoin.com, Coinbase and blockchain.com show up, you don't take the time to even figure out how bitcoin works, and you use their closed-source, not private and neither secure wallet software. That can happen to someone who's lazy.

This does not mean that he is lazy, it means that to the best of his intellectual abilities, he decided that this is enough and there is no better result.

When you have absolutely no competence in the subject, it's utterly obtuse and arrogant to consider what's "enough".

[o_e_l_e_o]

You would not open a bank account by Googling "bank account" and clicking on a random result.
You would not buy a car by Googling "car for sale" and clicking on a random result.
You would not choose a stock or ETF to invest in by Googling "buy a stock" and clicking on a random result.

Why then would you pick a bitcoin wallet by Googling "bitcoin wallet" and clicking on a random result?

A simple search of this forum would quickly reveal many topics about Trust wallet where people point out it is closed source and a poor choice of wallet.

While Trust Wallet is not open source, it has an open-source component called "Wallet Core," which is used in the Trust Wallet Browser Extension.

Meaningless. You have no idea what is happening in the closed source portions of the code. Perhaps they are sending your seed phrase in plain text to Google, as other closed source wallets have done in the past.

Binance, in reality, has a dedicated team and resources committed to investigating and preventing fraud and security breaches.

So dedicated that Binance have been hacked multiple times and now Trust wallet has a critical vulnerability as well.

[BlackHatCoiner]

You would not

And yet, people do google likewise. Maybe googling "bank account" is very uncommon, but that's because the banks give you everything necessary to access during registration. Googling cars and stocks randomly is common, according to Google Trends. "Best stocks to invest" and "cars and bids" are pretty much frequently searched.

[o_e_l_e_o]

"Best stocks to invest" and "cars and bids" are pretty much frequently searched.

Absolutely, but my point is you might Google "Which stock to buy" and then read a few articles about a bunch of different stocks. You don't just Google "stocks" and see $WTF pop up and immediately put all your money in to it.

But for some reason people Google "bitcoin wallet", click on the first thing they see, and end up with some trash like blockchain.com or Trust wallet, and do no further research until they run in to problems.

[_act_]

"Best stocks to invest" and "cars and bids" are pretty much frequently searched.

Absolutely, but my point is you might Google "Which stock to buy" and then read a few articles about a bunch of different stocks. You don't just Google "stocks" and see $WTF pop up and immediately put all your money in to it.

But for some reason people Google "bitcoin wallet", click on the first thing they see, and end up with some trash like blockchain.com or Trust wallet, and do no further research until they run in to problems.

I have noticed this about Google search engine since long time ago and I know they will not disappoint to list bitcoin wallets that are not recommended along which can even be the first on the list.

Another thing I noticed about google are the suggestions they bring up, the title can be different while the answers in the suggestions are different. Example is if you ask about watermelon seeds, the suggestion can give you answer of a watermelon and labelling it as watermelon seeds.

As usual, google will not disappoint of wrong information, see what I searched just now.

I searched for best bitcoin wallet, see what I saw:

   

I searched for best bitcoin wallet, not most popular bitcoin wallet. Coinbase that was referred to is Coinbase.com which is a custodial wallet. Most of the wallets like Exodus, Trustwallet and Coinomi are close source. Is bitpay even a wallet? It is a payment processor. Metamask and Myetherwallet are not even bitcoin wallets.


See google suggestions below when I scroll down, just below that image that is above:



See another one:




I am tired of google suggestions, I have to stop it right now before the wrong information from google search engine will kill me. There are still many of them but I have to stop seeing rubbish.