My Trustwallet hacked, and $43,000 BTC was stolen

[vision_line]

Hello,

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

I installed the trust wallet app in the Samsung Secure folder with only V2ray VPN and no other app (the Samsung Secure folder is a sandbox environment with an additional security layer guaranteed by Samsung Knox); also, Kaspersky and Avast were enabled on my device! I don't understand how I got hacked!! I am sure that no one had my key phrases! I didn't connect my wallet to anything, any airdrop, any NFT ...

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

[Xal0lex]

How much, how much was stolen? 43к?  Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

[Ever-young]

I will also have to agree with the first commenter. We have seen a lot of fabricated stories here on this forum shared by users who want to seek sympathy from community members. 
 
But let's give you the benefit of the doubt. Even if you are sure that you did not expose your phrase to anyone, how sure are you that since you have been using the phone to browse through the internet, you might not have clicked on a phishing link that might have installed malware on your phone? 
 
And secondly, where did you store the backup of that wallet you are talking about? Was it also inside the phone, or did you store the wallet backup somewhere else? Because you can't tell me that you will have a holding of $43k without thinking of backing the wallet up. 
 
Another thing too: can you share with us the wallet that was hacked and the balance emptied? At least have a have a wallet that holds such an amount that was moved out recently, and if that's done, will you also be able to sign in a message if you are asked to in the wallet?

[Ludmilla_rose1995]

I am also a Samsung Series S user and the phone I am currently using is a Samsung Galaxy S22, which is your question, why do you put your Trustwallet application in the Samsung Safe Folder, I myself use that folder for pictures which are quite private, I believe you have too much installing other applications that make you unaware that your smartphone has been compromised. However, you should keep your seed trust wallet phrase in a safe place, regardless of whether your story is fake or not, I'm sorry for your loss

[vision_line]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

I should mention that, as I installed Trust Wallet in the Samsung secure folder and was relieved about its security, I let my four-year-old son play with my phone, and he installed dozens of games on the phone—but in the main area, not in the secure folder!

Yes, I wrote the phrases on a piece of paper in my desk drawer, and no one knew about its existence. Besides, not many people come and go to our house.

I asked every expert, they said that it is not possible to hack Trust Wallet by downloading or installing an app or any similar way. And in my case, there are two basic possibilities:

Someone somehow got access to my phrases, or there was a security hole in the Trust Wallet app (probably on the dark web).

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

[Xal0lex]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

Why moderators, exactly?

[Amphenomenon]

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

In as much as I feel so much sorry for you if this is true, I will still consider you a newbie simply because you're using trust wallet for bitcoin and such about of bitcoin there.
Being in the crypto space for years doesn't makes one stop being a newbie instead what they practice and your actions is an example of one.

You could have gone for an hardware wallet while if it was too expensive for you at least go for good Bitcoin only wallets  like electrum and bluewallet.

What is the point of posting about something that happened 3 months ago? As you already know, there is nothing that anyone here can do to help you.

Based on Op, post and above reply I guessed he posted this because the hacker has not moved the funds which is quite surprising him to him.

Though I'm still wondering like Xal0lex why he chooses not to share the address or is requesting to show it to moderators only

[vision_line]

Thank you very much for everyone's response and sympathy. The past few months have been tough for my family and me; unfortunately it's too late for me to use a hardware wallet.

My purpose in raising this issue is to know how my money was stolen and why the hacker/thief didn't cash out the money after a few months.

Let me also mention this point: I transferred $43K BTC from Bingx to Trustwallet, and the unauthorized withdrawal made from Trustwallet Wallet in about 24 hours later; it was not withdrawn immediately.

If my phone is infected with malware, how did it access the Samsung secure folder? How did it bypass verification by fingerprint?

[Xal0lex]

You could have gone for an hardware wallet while if it was too expensive for you at least go for good Bitcoin only wallets  like electrum and bluewallet.

How expensive are you talking about? The man has over 2.5 (!) billion dollars (allegedly). The cost of a hardware wallet is nothing to him.

Let me also mention this point: I transferred $43K BTC from Bingx to Trustwallet, and the unauthorized withdrawal made from Trustwallet Wallet in about 24 hours later; it was not withdrawn immediately.

Show the ID transaction. But don't say you don't have it. The wallet has all the information.

[HelliumZ]

How much, how much was stolen? 43к?  Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

You are absolutely right, without correct information, there is an attempt to attract users with baseless information. If 43 thousand dollars has been hacked then it must have been hashed and the hash must be shared here to confirm whether it was actually hacked.

[Nothingtodo]

Hello,

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

I installed the trust wallet app in the Samsung Secure folder with only V2ray VPN and no other app (the Samsung Secure folder is a sandbox environment with an additional security layer guaranteed by Samsung Knox); also, Kaspersky and Avast were enabled on my device! I don't understand how I got hacked!! I am sure that no one had my key phrases! I didn't connect my wallet to anything, any airdrop, any NFT ...

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

If your hacking is true then I sympathize with you.  Because it is a matter of financial loss for you. But one thing is very important that why you kept your hard earned bitcoins in a wallet, why you didn't keep them in a hardware wallet. Also why do you choose to have all your bitcoins in one wallet why don't you store your bitcoins in multiple wallets? Lastly, in case you have been hacked, no one can assure you that your hacked bitcoins can be recovered.  If the hacker wants to give you back you can give back but if he doesn't then your bitcoins will be lost forever.

[Xal0lex]

I can't understand, the author of the topic, write normally how much was (allegedly) stolen from you - $43000 in bitcoins or 43000 BTC. Because I personally do not understand this combination "$43,000 BTC".

[logfiles]

I can't understand, the author of the topic, write normally how much was (allegedly) stolen from you - $43000 in bitcoins or 43000 BTC. Because I personally do not understand this combination "$43,000 BTC".

No way, it's 43,000 BTC  . I think he meant BTC worth $43,000
43,000 BTC is now worth , No way someone can keep such an amount in a closed source software wallet especially given that he has been doing crypto for a while.

Also, I don't think Bingx and most exchanges can let you withdraw 43,000 BTC at once. Max daily limit at Bingx is $5M for an account with advanced verification.


OP, I have a feeling your seed phrase somehow leaked somewhere. The other loophole was using trust wallet, which is not an open source wallet. I think they even had a bug that was exploited sometime back involving their app.

Trust Wallet to reimburse users after $170,000 security incident

[bitmover]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

I should mention that, as I installed Trust Wallet in the Samsung secure folder and was relieved about its security, I let my four-year-old son play with my phone, and he installed dozens of games on the phone—but in the main area, not in the secure folder!

Secure folder means nothing...

If you don't understand about cyber security , you should have paid for a software which guarantees safety, i.e. a hardware wallet.

Trezor is the best nowadays imo.

[Amphenomenon]

You could have gone for an hardware wallet while if it was too expensive for you at least go for good Bitcoin only wallets  like electrum and bluewallet.

How expensive are you talking about? The man has over 2.5 (!) billion dollars (allegedly). The cost of a hardware wallet is nothing to him.

I thought it was $43k worth of BTC not 43k BTC, didn't notice what Op wrote earlier, I just believed it was $43k earlier because it was not even possible that someone would be able to still 43k BTC Currently and the entire crypto space won't be aware of it now.

I just couldn't believe that someone will be having $43k worth of BTC and be using Trustwallet, while I would have gotten an hardware wallet for such amount there's still others who will just find an alternative to use but least use wallet like Electrum, Bluewallet or any other really good Bitcoin only wallets that are open source.

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

I should mention that, as I installed Trust Wallet in the Samsung secure folder and was relieved about its security, I let my four-year-old son play with my phone, and he installed dozens of games on the phone—but in the main area, not in the secure folder!

Secure folder means nothing...

If you don't understand about cyber security , you should have paid for a software which guarantees safety, i.e. a hardware wallet.

Trezor is the best nowadays imo.

Another reason why I will consider you a newbie because device were coins are stored ain't ought to be used others with and not especially putting games.

I wonder if your son or anyone else as anyway to access the Samsung secure folder whereby giving an application access to it, if they possibly ask i guessed only malware could request this.

[EarnOnVictor]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

I should mention that, as I installed Trust Wallet in the Samsung secure folder and was relieved about its security, I let my four-year-old son play with my phone, and he installed dozens of games on the phone—but in the main area, not in the secure folder!

Yes, I wrote the phrases on a piece of paper in my desk drawer, and no one knew about its existence. Besides, not many people come and go to our house.

I asked every expert, they said that it is not possible to hack Trust Wallet by downloading or installing an app or any similar way.

I show empathy on this matter but until you at least show us some transaction proof, I can't believe this. I've read all you had to say in the subsequent replies but you have always dodged the proof, so how do we believe you even if we want to?

However, for educational and preventive purposes, giving your child the phone you have the crypto wallet is not a matter, but if you are not the only one having access to the child while he/she holds the phone unlocked, then it is an issue. You might not know when someone will be monitoring you due to what they see in it, and if the person is experienced with cryptocurrency, such might find a way to search you better and eventually locate the seed phrase in your drawer, trust nobody about it.

At times too, it may not be an internal job, your phone could be hacked. This is why it is dangerous to download games and many others that could be dangerous on our phones, especially phones with financial assets. What if malicious files are attached? Malware may be included depending on the source of the download.

[promise444c5]

Once an investment such as BTC is hitting a point of $500, you need to be very more careful about the storage... choose a cold storage means for storing your coins. I don't really know why OP choose Trust wallet actually,  it is a self claimed open sourced but they still shield some stuffs to the public which still makes them  close sourced to public no matter how they seem to  claim open sourced.
For such amount, you should have an HD wallet /watch only wallet, get a device that will always stay cold to sign your transaction every time you need to , still don't know why you didn't learn those because  it really  sucks  to get hacked using Trust walet

[0t3p0t]

I am not new to TrustWallet because for some years of using it on my Android phone I have never experienced such a problem wherein a single transaction that I am not aware of was succesfully initiated. I just don't understand what was happening to your wallet OP but I am sure that you have done an error. I personally put a password on my app and it even has fingerprint enabled for extra security so yeah I don't know how you got hacked.

[Davidvictorson]

The OP story sounds like some very poorly low budget series. It is not because the story is not true but because of the confusion in the use of words and numbers in the write up. Anyways from the little I was able to pick up from it, it is obvious that he/she made some mistakes.

- You allowed your four-year-old play with you phone which could have lead to unintentional security breaches
- You relied on the Samsung Secure Folder for security
- You believed that having Kaspersky and Avast enabled guarantees complete security
- You lacked a complete understanding of security risks. If you didn't you would have opted for a hardware wallet over Trustwallet, a closed sourced wallet after all these years.

Well, sorry about this but, I hope you have learned a very valuable lesson.

[m2017]

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

If this story is true and OP’s wallet was indeed hacked, then initially it was reckless to store all the savings in one wallet, especially a mobile application wallet.

Having $43,000 and not being able to buy a hardware wallet (~$70-100) looks strange and reckless.

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Well, maybe the hacker is waiting for the bull run to start to multiply his profits.

You have already been asked for the public address of your wallet to verify what was said. I would also be curious to see an address that would confirm that the hacker didn't move the stolen funds. Without proof, the story looks unfounded.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

This is the price of "being your own bank". It was necessary to take a more careful approach to the issue of safe storage of savings.

What to do? Recognize and accept losses, and then start over.