My Trustwallet hacked, and $43,000 BTC was stolen

[CryptoHeadlineNews]

I let my four-year-old son play with my phone, and he installed dozens of games on the phone—but in the main area, not in the secure folder!

If only this story is true, then I guess with what you said above by allowing your 4yrs old kid to play with your mobile device, to the extent of installing dozens of games, must have been the reason why you got hacked, because who knows if your kid might have downloaded a game virus into your device which could have given the hacker access to your wallet? And as such decided to transfer your funds to a dormant account for a certain period of time when you might have forgotten about it to avoid possible tracking. Who knows?

.
If my phone is infected with malware, how did it access the Samsung secure folder? How did it bypass verification by fingerprint?

Just like I earlier said above, who knows if your kid might have authorized the hackers access to all nocks and cranny of your device by simply clicking "Yes" while downloading these dozens of games to an unknown commend? Because I think this should be a lesson to you not to ever give kids to play with your phone whose got asset worth more than $1000 and above. Because it would have been better you had bought your kid a smaller phone to play with, rather than giving him or her to play with phone whose asset inside worth $43,000.

[promise444c5]

I personally put a password on my app and it even has fingerprint enabled for extra security so yeah I don't know how you got hacked.

The password and Fingerprint  will only work incase of an attempt from your phone but if your seed phrase got leaked It can be accessed through another phone without any password or Fingerprint, it's a non custodial wallet.. nevertheless, it's still good to use some extra layer security  to prevent a random person or stranger from laying hands on your funds in access to your phone but that doesn't still guarantee the safety of the wallet

[Lucius]

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:
~snip~

Let me guess, you are one of those who lived in the belief that you should trust a wallet just because it has "Trust" in its name? There is no such hot wallet that I would trust with such (and a much smaller amount), but you learned it the hard way.

Let me also mention this point: I transferred $43K BTC from Bingx to Trustwallet, and the unauthorized withdrawal made from Trustwallet Wallet in about 24 hours later; it was not withdrawn immediately.
If my phone is infected with malware, how did it access the Samsung secure folder? How did it bypass verification by fingerprint?

There is another possibility, and it is about the fact that you actually saw an incoming transaction that was not confirmed, and then someone in that exchange performed a double-spend attack and redirected the coins to another address. I'm not saying that it really happened, but that CEX doesn't have a very good reputation judging by the client reviews.

[vision_line]

I apologize if there is any misunderstanding. Of course, I meant $43,000 and not 43,000 bitcoins. I didn't think this clear issue would cause a wrong impression. It's funny someone who keeps 43,000 BTC coins in a Trust wallet and then comes here to discuss!

There is another possibility, and it is about the fact that you actually saw an incoming transaction that was not confirmed, and then someone in that exchange performed a double-spend attack and redirected the coins to another address. I'm not saying that it really happened, but that CEX doesn't have a very good reputation judging by the client reviews.

What do you mean exactly? I transferred $43,000 from Bingx to my Trust wallet on Monday at 6 pm, and it was withdrawn without my permission on Tuesday at 2 pm.

My main question is: How can malware unlock the secure folder and then bypass the trust wallet fingerprint?

[pakhitheboss]

My main question is: How can malware unlock the secure folder and then bypass the trust wallet fingerprint?

In times now everything is possible if you are always connected to the internet. A malware does have the ability to sit in your device and record everything without getting detected. The reason being those antivirus have to first get updated with such malwares before they are able to detect it.

I do not understand why you even used a close source wallet such as Trust wallet. If you were planning to accumulate Bitcoin or hold it for long term gain then it is imperative that you opt for a hardware wallet. Some software wallets like Electrum are highly recommend in the forum.

I am sorry for your loss and I can only sympathize with your current situation. I would say only one thing that you still can learn from your mistake and work on to gain the lost fortune.

[Cryptomultiplier]

How much, how much was stolen? 43к?   Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

43k USD to BTC is clearly about 0.689 in BTC and having such in a hot wallet like Trust wallet for too long, is a firstly a wrong move and it's only what a newbie would do.

Being a newbie means that despite our OP having had such an amount of coins (if ever) in a wallet and neither grew in his trading or investment abilities and knowledge as well as didn't grow in knowledge as regards safety upgrades for wallets and the best wallet type to use for BTC or cryptocurrency holdings in the form of savings or DCA. It means he is still a newbie in the crypto market and am certain he is a newbie here too and may have made up this story, else, am sorry such had to happen.

Perhaps he should contact Samsung and iPhone customers support with well detailed analysis on what happened with good pics and links if needed.
Also check if you whitelisted any address in the exchange you used as well as on your wallet.

[vision_line]

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

[yudi09]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

-snip-

Provide the address containing the BTC that you mentioned to be able to find out whether the address is actually filled with as many assets as you mentioned.
If stolen, we can trace the transaction by providing a transaction ID.

Don't put forward bad feelings when someone asks you to show your address and transaction ID.
In my opinion, Trust Wallet is not a good wallet for storing that much Bitcoin.

[lovesmayfamilis]

It's funny someone who keeps 43,000 BTC coins in a Trust wallet and then comes here to discuss!

Another funny thing. It’s funny to talk about yourself as an experienced user, but you're still storing a rather large (in the opinion of most) amount on your phone. Store in an app that once had a bad history but does not have a hardware wallet that costs pennies compared to that amount.
Moreover, it is very funny to trust a child to install a bunch of toys on this phone and not realize that these toys are not always as safe as many people think. Entrust your child with your phone and hope that he doesn’t press some unnecessary button. You just need to give birth to a genius child. 
For comparison, those people who teach how to have a wallet that does not have access to the Internet at all, in the OP’s understanding, are simply stupid and cowardly. 
Why wasn't your amount withdrawn immediately? Simply because it takes time to transfer to hackers and verify all the important and necessary amounts for the hacker.
Probably for the OP, this amount is not large, since such careless storage is possible only for those for whom the amount in the tens of thousands is not very large.

[Raflesia]

The first thing I would like to ask is why store so many bitcoins in a trust wallet if you are right besides that you also do not provide further information such as your addres or anything else to convince yourself that it is true

Also, it would be pretty reckless if you kept all that big money without a phrase and not secured because as far as I know trust wallet or any wallet can be opened on another device when there is a phrase and of course there must be a password that you have prepared beforehand unless you forget the password too.
Your words seem to be made up because you said the amount was large and happened months ago but you are only talking about it now so it is quite natural that many people will doubt your story.

[fuguebtc]

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

You're not the only one using a Samsung phone, and your device isn't unique either. You should ask why are no other users experiencing this problem and you are the only one experiencing it.

It's not too difficult to understand when you lose money and don't want to admit it was your fault. You like many others are always confident that you have turned on all security modes and are very careful in every detail, so it is definitely not your fault. But you forgot that you made a fundamental mistake: you should never store bitcoins with an internet-connected wallet because risks in the internet space are unpredictable. Even if you're confident that you've been very careful, that doesn't mean your phone is very safe. New viruses are created every hour and fighting it is not as easy as we think and that is why hardware wallets are always top recommended.

What guarantees that before you install trusted wallet and transfer bitcoins to the wallet, your phone is always safe and virus-free?

[Zlantann]

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

There is no need to play the blame game, you made a mistake storing such an amount on a closed-sourced wallet with a history of security breaches. You shouldn't also depend on third-party securities from phone makers. Such an amount should be in a hardware wallet.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

The simple explanation is that your phone security was compromised and the hacker had access to your funds. It is only the hacker that can explain why he has not cashed out.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

If the hacker sends the money to an exchange, there is a slight possibility that he can be tracked especially if he went through KYC. Sorry for the loss, but the moral lesson is never to keep such an amount in Trust Wallet.

[marlo1001]

Sounds too unrealistic. Yeah, software wallet may have weaker security but if not sure that they can really be hacked

[bitbollo]

@OP
maybe I have missed it... but did you have verified with local police to fill an official claim?
If I remember correctly, you can try to track these coins and if these arrive in a wallet knowon of an exchange, you can ask to lock this account and get more details on it. I think you need to do both actions. Of course you need in most cases an official complaint.

Personally I can't trust or distrust your story (meanwhile I hope isn't true due the high amount... I am pretty sure you're not wasting precious time ...)

[Z390]

This sounds like a fake story but I will like to clear the part where you throw in the kapersky and other antivirus, the truth is real time protection from anti viruses works best on the PC not on mobile, remember that we have to always run the antivirus in the background of the PC, that's real time, you can't do that on smartphones.

One way or the other, a virus can easily sleep well during the day and night on your phone without been detected than on PC.

[DiMarxist]

How much, how much was stolen? 43к?  Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

The story is not really clear because at first he the Op used iphone and the iphone he was using and the coins were in the iphone but the hacker hacked the coins from Samsung phone. Lolz this is strange story to rank up. From the reading of the Op story it is clear that the story is not true. Before someone hacked a wallet the seed phrase must have leaked. Like a thread I have read here. The guy mixed up his seed phrase and sent it to a hacker and the hacker rearranged the seed phrase and transfer everything has in the wallet, that story is somehow believable because the mistake was made by the owner.
But this Op is confused in the forum so he is trying to frame up any story to write and thinking that people would pity him and give him merits.

[Xal0lex]

How much, how much was stolen? 43к?  Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

The story is not really clear because at first he the Op used iphone and the iphone he was using and the coins were in the iphone but the hacker hacked the coins from Samsung phone.

You must not have read OP's post very well. He mentions that there were problems with TrustWallet on the iPhone, but he doesn't say he was using an iPhone. He says that after this news with the TrustWallet hack on the iPhone, his Android smartphone was hacked.

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone...

[noormcs5]

There is no reason to lie; I can send all detailed information and proof to any forum moderators.

-snip-

Provide the address containing the BTC that you mentioned to be able to find out whether the address is actually filled with as many assets as you mentioned.
If stolen, we can trace the transaction by providing a transaction ID.

Don't put forward bad feelings when someone asks you to show your address and transaction ID.
In my opinion, Trust Wallet is not a good wallet for storing that much Bitcoin.

He has not provided the BTC address that contain that much amount. I do not know what is the reason to hide it as we are not asking any private keys but the public bitcoin address 

I really doubt OP story and will only believe to some extent if he share the bitcoin address that had this amount stored on it. If this is a false story, i also do not get what could be the purpose of it 

[yazher]

Sounds too unrealistic. Yeah, software wallet may have weaker security but if not sure that they can really be hacked

That's exactly what I think but if he's telling the truth there are ways to prove it and all we want to know is the BTC address of the OP and the Thief as well because based on his story, he found out that the stolen funds haven't been moved out yet and with that, there still chance to track it if he wants to and ask cybercrime management in their country to help him.

But recently, people have been narrating fabricated stories to get some attention and some help from users but they are already fed up with these lies and they won't fall into the same trap again unless you show them proofs to support your stories and claims.

[PrivacyG]

If this story is true, I want to go into the middle of a forest and scream.

You installed TRUST WALLET, which is partially Closed Source, in the Samsung Secure folder, which is a proprietary Application.  You used this partially Closed Source Wallet in conjunction with Avast AND Kaspersky, which are also both Closed Source Applications that can scan your files and send information about them to Third Party Servers.  Besides, many many years ago when I last ever used an Antivirus at least, the golden rule was NOT using two simultaneously if you wanted the best Security from them.  I am not sure how valid that rule is today.  But anyway.

Are you sure the Trust Wallet version you are using is legitimate?  I would be very skeptical about a partially Closed Source Wallet, but at least Trust Wallet has a reputation built and I do not think there are any valid accusations of them doing theft so far.

Are you using the legitimate, original Android ROM of your phone or did you flash a Custom one?

Where did you store your Seed Phrase?  Does any body else have access to that location or around it besides yourself?

As for how did the thief bypass the Secure Folder, I do not know of any real proof of how actually Secure the Secure Folder is.  But I imagine you are not the only one using it for storing your Cryptocurrency Wallet and if it was a Malware that penetrated even the Knox Sandbox then it would be expected that many more Wallets were affected, not just yours.

Unfortunately, it is not rare that the problem is either the way the victim stored the Seed Phrase or even some body close to the victim stealing it.  Think about it very carefully, let emotions to the side and start from your own house to the external World.  As much as you think the people you are living with or coming to your house are innocent, it is important to rule out every potential thief one by one.