Trust Wallet 5 May Update

[virasog]

I Checked my trust wallet and found this update. Can anyone tell if this is the legit update, and did you update your trust wallet?

Although i believe that it will be an official update, but due to so many scams these days, it's better to ask from the community before updating the trust wallet.



Once getting the go-ahead from members here, I will update my trust wallet.

[1715601534]

1715601534

[1715601534]

1715601534

[PX-Z]

If it's from google play store and has "Update" button that means it is a legit update from developers, which also means that it is the app you have previously installed. The difference i saw is the date, unlike what have you posted ^{(May 5),} it's May 6 here. Maybe they made an update after you made a screenshot or just because of timezone difference.

[_act_]

I Checked my trust wallet and found this update. Can anyone tell if this is the legit update, and did you update your trust wallet?

It is a legit update.

Know that trust wallet is a close source. You can try an alternative which is unstoppable wallet.

If it's from google play store and has "Update" button that means it is a legit update from developers, which also means that it is the app you have previously installed. The difference i saw is the date, unlike what have you posted ^{(May 5),} it's May 6 here. Maybe they made an update after you made a screenshot or just because of timezone difference.

The best way you can know a legit update is to verify the PGP signature but which I do not think trust wallet has.

[PX-Z]

Know that trust wallet is a close source. You can try an alternative which is unstoppable wallet..

They are already, check their github repo^[1] both android and ios, well,other platforms too. They have guides on how to build the app for different platform which is the most recommended way to install or update a software just like what people usually recommend on electrum. Build it on your own from pre-built binary package ^{(github packages)}.


[1] https://github.com/trustwallet/wallet-core

[vv181]

Know that trust wallet is a close source. You can try an alternative which is unstoppable wallet..

They are already, check their github repo^[1] both android and ios, well,other platforms too. They have guides on how to build the app for different platform which is the most recommended way to install or update a software just like what people usually recommend on electrum. Build it on your own from pre-built binary package ^{(github packages)}.


[1] https://github.com/trustwallet/wallet-core

That is not the codebase. Trust Wallet was once an open source software, but not today. You can check their reason why they go that way: https://trustwallet.medium.com/why-open-sourcing-android-app-could-be-a-harm-to-the-crypto-community-fb3ae1707dc6.

Both Android and iOS source codes are archived here:
https://github.com/trustwallet/trust-wallet-android-source
https://github.com/trustwallet/trust-wallet-ios

What you mentioned is the core functionality of the underlying system of the wallet. Software that is built with partial codebase visibility is not an open source software. Even if you try to build it by yourself, the application will be incomplete.

[joniboini]

That is not the codebase. Trust Wallet was once an open source software, but not today. You can check their reason why they go that way: https://trustwallet.medium.com/why-open-sourcing-android-app-could-be-a-harm-to-the-crypto-community-fb3ae1707dc6.

Do you know what "blockchain library" means? I don't get their wallet core product at all. Is it part of their multi-blockchain support capability? Which other codes are missing from this (apart from the UI for example)?

Kinda unfortunate that it happens. It is understandable though since they got bought by Binance in the end.
Slightly off-topic but OP's images are not showing on my end. I guess it is because he's using imgur. OP, you might want to use other providers if you want to show some images in the future since I'm seeing similar things on other threads (as reported by other users).

[vv181]

That is not the codebase. Trust Wallet was once an open source software, but not today. You can check their reason why they go that way: https://trustwallet.medium.com/why-open-sourcing-android-app-could-be-a-harm-to-the-crypto-community-fb3ae1707dc6.

Do you know what "blockchain library" means? I don't get their wallet core product at all.

Suppose Trust Wallet is a car, the Wallet Core library is only an engine. Without chassis, tires, etc. In order to drive it you need to implement and integrate it on your own. In the same way, you can't do anything with only an engine.

Electrum wallet, on the other hand, already gives all of the parts so the user only needs to build and then use it. The thing about Trust Wallet, their tires, chassis, and any other parts are unknown besides the engine. So that is why I did not categorize it as open-source software.

Is it part of their multi-blockchain support capability? Which other codes are missing from this (apart from the UI for example)?

Yes.

What the library mainly does are:

Wallet management
-Creating a new multi-coin wallet
-Importing a multi-coin wallet

Address derivation (receiving)
-Generating the default address for a coin
-Generating an address using a custom derivation path (expert)

Transaction signing (e.g. for sending)

Everything other than that is a closed source.

[rby]

Know that trust wallet is a close source. You can try an alternative which is unstoppable wallet..

Xxx

That is not the codebase. Trust Wallet was once an open source software, but not today. You can check their reason why they go that way: https://trustwallet.medium.com/why-open-sourcing-android-app-could-be-a-harm-to-the-crypto-community-fb3ae1707dc6.

Both Android and iOS source codes are archived here:
https://github.com/trustwallet/trust-wallet-android-source
https://github.com/trustwallet/trust-wallet-ios

What you mentioned is the core functionality of the underlying system of the wallet. Software that is built with partial codebase visibility is not an open source software. Even if you try to build it by yourself, the application will be incomplete.

Thank you very much vv181 for this link of why Trust wallet moved from an Open source code to a closed source code. Trust wallet has been criticised several times by many people but this 1min read had made me see some reasons with them to go closed. I will research on this more and see if there is a way to vindicate Trust Wallet.
It can be closed and still trustworthy

[yhiaali3]

Slightly off-topic but OP's images are not showing on my end. I guess it is because he's using imgur. OP, you might want to use other providers if you want to show some images in the future since I'm seeing similar things on other threads (as reported by other users).

Yes, the images do not appear on my side either. There is a problem with Imgur. Most of the images do not appear or are blocked, so it is useful for all members to review this topic here to solve the problem:

https://bitcointalk.org/index.php?topic=5452662.0

TryNinja did a good script to solve the problem, I think everyone needs to see it.

[Accardo]

Often a times trust wallet update pops up when you login to the app, when clicked on, it refers back to google playstore. Although, I can't see the photo due to the imgur issue, but if it's a popup message that links to the playstore, then you just have to verify the authenticity of the app by looking at the reviews and new features added to it. However, if you're not comfortable with the new update, and the current version is compatible no need to update yet, unless the new update has a warning or new security features, then do the needful and update the app, also, remember to back up your private keys.

[joniboini]

-snip-

Thanks for the info. So basically just the logic for wallet address management. Not sure how close it is with their published app either since we can't verify it. Would be better if they also open up the security part if they really want to improve their security to avoid zero-day bugs being exploited imo.

It can be closed and still trustworthy

I'd not put them as trustworthy as others. Heck, I'd not call them trustworthy, just usable but not recommended. Especially with the recent launch of other open-source wallet apps. No reason to go with a closed-source one if other options are competitive enough.

[rby]

Often a times trust wallet update pops up when you login to the app, when clicked on, it refers back to google playstore.

After reading the update documentation, that is another way I verify the authenticity of the update. Since, the developers prefer OTA software update. If I were the developers, I would implement it such that the updates are automatic.
Reading reviews will give you clue of the update. I have seen so many times where an update is less preferred to the former version.

It can be closed and still trustworthy

I'd not put them as trustworthy as others. Heck, I'd not call them trustworthy, just usable but not recommended. Especially with the recent launch of other open-source wallet apps. No reason to go with a closed-source one if other options are competitive enough.

You are correct!
Trustworthiness should go with transparency, where everyone would verify what is happening. I will also not chose a closed source wallet over an open source any day.