My Trustwallet hacked, and $43,000 BTC was stolen

[tabas]

While OP is claiming that he's not a newbie, it's possible that he got hacked based on how his activities were, what he downloaded, and in this case the wallet, trust wallet. Let's say that you've downloaded the real trust wallet and it wasn't the issue, I think that no one will blame themselves at the same time when they've already lost their funds a long time ago. There are already some questions on your story and asking for proof that you can't provide like your address.

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money! However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

I raised this issue here so that maybe someone has more detailed information, but apparently, no one knows how hacking happens or why the hacker doesn't cash out the stolen BTC.

I know that my money is lost for ever, I can only wish everyone good luck and hope no one loses an amount like this; it's tough.

The sentiment is within you if this has happened for real and we're sorry about it but if you can add more details much better. It's tough when you've lost an amount that is lifesaving. You'll not get any malware if you didn't do anything.

[SFR10]

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

I don't want to raise any false hopes, but there's a small chance the third-party platforms that I've listed in "this post" could help with intercepting the hacker's next move ^{[it's a long shot, but it's better than nothing]}.

why the hacker doesn't cash out the stolen BTC.

If I were to guess, I'd say the hacker in question is trying to stay under the radar for the time being ^{[he/she wouldn't be the first one to do such a thing (e.g. movements can happen even after a year or two)]}.

[goldkingcoiner]

Ironically you trusted an untrustworthy wallet. Always go for open source and non-custodial. There are so many threads here on this forum that could have helped you pick out a better wallet.

Also, what was your BTC address?

[Antotena]

Hello,

About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

You said you used trust wallet on your iPhone but the paragraph after this, you said Samsung. Nevertheless, wallet hacked doesn't have anything to do Witt whether you are expert or you are a newbie, sometimes the things we don't expect are the ones that happen to us without us even noticing the mistake occurring. I just want you to know that I have experience similar experience on my wallet I created from metamask and export to my Trust wallet too before, that was the day I stopped using the wallet because it's an open source software.

I installed the trust wallet app in the Samsung Secure folder with only V2ray VPN and no other app (the Samsung Secure folder is a sandbox environment with an additional security layer guaranteed by Samsung Knox); also, Kaspersky and Avast were enabled on my device! I don't understand how I got hacked!! I am sure that no one had my key phrases! I didn't connect my wallet to anything, any airdrop, any NFT ...

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

Sorry for your loss but what chain exactly were you holding your coins even though it doesn't matter, in just skeptical how vulnerable your seed phrase was easy to guess or copied by another person. What I can say about this your possible things that happen is that first and foremost, Trust wallet is open source and is the reason why many developers don't recommend it as wallet and your android phone is open source but android security is very short, you may have a malware of your phone but trust me, you will never know about it. Something most have happened somewhere in your phone.

[Stalker22]

Someone using Trustwallet to store bitcoins does not mean that they are a newbie, even though I said goodbye to the cryptocurrency market and actually don't have any other money!

Right. This does not mean that they are a newbie but it means that they did not take the security of their coins seriously. Trust wallet, or any other type of hot wallet on your mobile phone, has never been a recommended method of keeping any significant amount of money. If youve really been at this for four years, you should know that.

However, this incident was not caused by my mistake and is clearly due to Samsung's lack of security on the Samsung security folder.

Honestly, you have not provided any evidence for this.

[2Pizza410000BTC]

Hello,
About three months ago, at the same time as the bad news about the security issue of Trust Wallet on iPhone, I got hacked on my Android phone, and all the money I had was stolen! I am not newbie, and I have been using Trust Wallet for more than four years, even with more significant amounts without any problem, a topic that confused me:

I installed the trust wallet app in the Samsung Secure folder with only V2ray VPN and no other app (the Samsung Secure folder is a sandbox environment with an additional security layer guaranteed by Samsung Knox); also, Kaspersky and Avast were enabled on my device! I don't understand how I got hacked!! I am sure that no one had my key phrases! I didn't connect my wallet to anything, any airdrop, any NFT ...

The strange point is that the hacker or thief still hasn't cashed out after three months. Even if he/she does, I can't do anything, but it's strange to me why he/she doesn't.

Sadly, All the wealth I had built up over the years is gone, and I don't know what to do.

Why didn't you take out security when you had $43k? Here you should have used hardware wallet because 43k dollars is a lot. You used a wallet like trust wallet which is not very secure. There will be no regrets as lost money will never come back. You can try again and again to see how much you can earn later in life. However, it is always important to exercise caution. Also you can add your hacked wallet address here for everyone to see.

[Maus0728]

OP doesn't have any kind of evidence provided but still keeps on replying and trying to explain to everyone that it's real and all that he's said before is true and honestly it's a good call for @Xal0lex to call OP out and now OP is trying to do something but keeps on fumbling on the attempt. It's as simple as posting the address because that has the record of the money that was stolen but it seems that OP can't do it and I don't see how that can be a problem or anything like that, it's not like anything changes for the better if you withhold such information.

[Sandra_hakeem]

Op, as much as your story doesn't sound like the truth, I'd like to give my own little contribution...
One of the lamest things I've heard ever since my crypto journey began is that someone kept an amount as high as that on a hot software wallet, but claims to have atleast 4 years experience in crypto... Secondly, why are you refusing to put up your Txid for confirmation? That looks fishy to me too.
This is what I have to advice you; let's assume this is true, I'd say you were wrong in the first place. How could you not decide to purchase a hardware wallet? It's too expensive? Oh, is better to have lost everything like you did? C'monnn..You need to be careful with your earnings...

OP doesn't have any kind of evidence provided but still keeps on replying and trying to explain to everyone that it's real and all that he's said before is true and honestly it's a good call for @Xal0lex to call OP out and now OP is trying to do something but keeps on fumbling on the attempt.

Ahhhaa ...Are you surprised? That's another clown from the off topic section as usual.. I'm not surprised he's jumping in his bedroom for getting so much attention over a story he just made up.

[_BlackStar]

-snip-

Honestly, you have not provided any evidence for this.

This is why I'm not sure where the truth lies in the story. He just trusts the moderator and is willing to tell him ^{[wallet address and transaction id]} - but some moderators have asked questions, while he has not sent any evidence justify his story.

The OP asked about how he was hacked - the answer can be found based on clues to how he used his phone. As for why the hacker didn't move those bitcoin - it's not in our capacity to know what the reason behind it is. Only the hacker knows why he hasn't sold or moved the bitcoin to another wallet - it could be that the hacker hasn't found a safe way to do it or maybe he's waiting for new ATH. If all of these stories are true - then sorry for your loss, OP.

[Maus0728]

OP doesn't have any kind of evidence provided but still keeps on replying and trying to explain to everyone that it's real and all that he's said before is true and honestly it's a good call for @Xal0lex to call OP out and now OP is trying to do something but keeps on fumbling on the attempt.

Ahhhaa ...Are you surprised? That's another clown from the off topic section as usual.. I'm not surprised he's jumping in his bedroom for getting so much attention over a story he just made up.

It's not surprised that I'm feeling right now, I feel more on the pity and shame for this kind of action, I mean there's a lot of things that you can do in the forum and on the Internet in general but you've chosen to be a pathetic and sad troll that only gets off the reaction of other people, that's just sad to me and it feels like people are really into having this kind of arrangement in life, to be a troll and get people's attention the wrong way.

[Alone055]

Who keeps $43,000 worth of assets in a custodial wallet that doesn't even give you access to your private keys? Just having your Trust Wallet seed phrases doesn't guarantee that your funds are safe and that you are the only one having access to them. As they say, not your keys, not your bitcoins, which means that if you don't have the private key to your Bitcoin wallet then those coins and assets aren't completely yours even if you have bought them but you aren't keeping them only to yourself.

Your statements that you are not a newbie and that you have been using Trust Wallet for 4 years for storing amounts larger than this contradict each other because someone who isn't a newbie should know and understand that they are not supposed to use custodial wallets for large amounts. If you think they are convenient for use and easy to connect with websites and services, you can keep a small amount in them and keep the rest somewhere safe, in a non-custodial wallet, preferably a hardware one.

If your story is true, I don't know if you have any hope for getting your funds back because I don't have much knowledge about Trust Wallet, but I would suggest that you start studying about wallets and their security, compare custodial and non-custodial wallets, and choose one that you think is the best for the future.

[Silberman]

Once an investment such as BTC is hitting a point of $500, you need to be very more careful about the storage... choose a cold storage means for storing your coins. I don't really know why OP choose Trust wallet actually,  it is a self claimed open sourced but they still shield some stuffs to the public which still makes them  close sourced to public no matter how they seem to  claim open sourced.
For such amount, you should have an HD wallet /watch only wallet, get a device that will always stay cold to sign your transaction every time you need to , still don't know why you didn't learn those because  it really  sucks  to get hacked using Trust walet

I agree, I can understand that someone that has a low amount of money invested on this market could be apprehensive about buying a hardware wallet, as there are good open source alternatives that are free, but once the money invested hits a sizable amount, getting a hardware wallet should become a priority, especially if the person is not really knowledgeable about computers and how to secure them, otherwise losing their coins is just a matter of time.

[SickDayIn]

How much, how much was stolen? 43к?  Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

To be honest it's unreasonable for you to say this member is lying. He even offered to show forum moderators and you questioned that. There is no reason someone needs to send any other forum member a link to their cryptocurrency wallet address, especially on a public forum like this. There is no doubt that bots index this forums addresses, and any address posted here will be linked in some Bitcoin big database, that the address belongs to a specific BitcoinTalk user. I completely empathise with OP not wanting to share his address here for his own personal privacy. Also whether or not it's $43k or $40 in BTC stolen, the advice he is seeking is based on the scenario he mentioned.

@ OP, regarding your post, it may be possible that a supply chain attack has occurred where a malicious update has been pushed to the application itself and funds exfiltrated that way. In general this is an expensive lesson on the importance of having a hardware wallet like Ledger or Trezor, where funds can't be sent without a physical token.

[Xal0lex]

How much, how much was stolen? 43к?   Can I see your wallet address to confirm what you're saying? In general, you are telling a completely untrue story, IMHO.

To be honest it's unreasonable for you to say this member is lying. He even offered to show forum moderators and you questioned that. There is no reason someone needs to send any other forum member a link to their cryptocurrency wallet address, especially on a public forum like this. There is no doubt that bots index this forums addresses, and any address posted here will be linked in some Bitcoin big database, that the address belongs to a specific BitcoinTalk user.

What kind of privacy are you talking about? His wallet was hacked (if he's not lying). His address no longer belongs to him and it would be the greatest folly on his part to continue using that address. So if he posts his former address here, it will not affect his anonymity and privacy in any way. Of course, if the author of the topic wants to lose more by using that address, then please let them not publish it.

[OrangeII]

It would be better if this story was accompanied by screenshots or hacked addresses. Even though it is almost impossible to return it, I think some people here have a detective spirit and can trace the hacked money.
If this is a genuine story, then I am also concerned about it. This could be a lesson that with that much money, it's best to save it in several places, and not keep it all in one basket. However, we will never know what will happen, it could be that someone else accesses your smartphone without your knowledge, or there are many factors. That $43k is a lot of money, personally I would probably put it in the bank, and use some of it for investments.

[crwth]

I'm curious as to how and what Samsung should do for this kind of thing happening with them. It's as if they managed to bypass the security with the biometrics and stuff, would they be responsible? 

I don't think this is a common hacking incident if there should be protection with the Samsung app. If it has the phrases there, it's only with the app.

As much as possible, I think the best approach when this is happening is to have a manual or offline way of security measures.