2UP.io Withholding After TRON Wallet Scam

[Fedupkpc]

I am posting this publicly to document a dispute with 2UP.io (the crypto casino/sportsbook operator) regarding unpaid wages, and to warn the community about a malicious app currently slipping through Apple’s verification filters.

I fully accept that I was the operator of the wallet during the incident and I do not contest termination. However, 2UP is illegally withholding compensation I had already earned for completed work to cover an operational security failure on a personal device.

1. The Incident & The Scam App
On May 11, 2026, while handling operational funds on behalf of 2UP, I downloaded an app from the Apple App Store called “TRON Wallet – TRX & USDT TRC20” / GoTRX, published by “Tron Finance Limited”. The app claimed to be a secure, self-custodial software wallet.

I generated a brand-new, fresh wallet address specifically for work-related USDT-TRC20 funds. Within roughly 2 minutes of receiving approximately 3,000 USDT, the funds were drained automatically without my authorization, manual signing, or dApp connection.

Transaction Hash: 1cd622edc5b31183ad2e2825d88680c1723956cd1bce54671fcf0fa01df3ad9b

Destination Malicious Wallet: TCWeJVev1dUyuLf5f93Ug4G1cmUtfgK7Ty

2. Technical Context: An Automated Honeypot
My subsequent investigation revealed that this app is a known malicious "honeypot." The backend infrastructure is built to harvest newly generated seed phrases or inject hardcoded multi-sig permission traits instantly. The 2-minute sweeping timeline confirms an automated backend drain, not employee negligence or local credential leaking. The developer support email bounces, and app reviews consistently show other users hit by the exact same automated drain.

3. Corporate Infrastructure Failure vs. Wage Theft
2UP expected me to handle corporate treasury operations under the following conditions:

No formal operational procedures or security protocols.

No requirement or provision for multi-signature (multisig) consensus setups.

No company-issued secure devices or hardware wallets.

Complete expectation to operate out of my personal device.

Following the exploit, I immediately disclosed the breach, cooperated fully, provided transaction logs, and extensively tracked the scammer's destination wallet. Instead of handling this as an operational security vulnerability, 2UP terminated my contract and withheld my already earned wages to subsidize their own lack of corporate security infrastructure.

To the Bitcointalk Community:
Security Warning: Do not trust "TRON Wallet - TRX & USDT TRC20" by Tron Finance Limited on the iOS App Store. It is a credential-harvesting trap.

The Question: Does a crypto gambling platform operating for profit have the right to unilaterally seize legally earned worker wages to cover an external exploit especially when they provided zero security guidelines, hardware wallets, or multisig requirements?

To 2UP Management:
Taking an employee's or contractor's earned money without consent to offset business risks is fundamentally wrong. I acted entirely in good faith and took accountability for the operational error. I expect 2UP to act in good faith as a reputable brand and release the compensation owed under our agreement for work already delivered.


https://imgur.com/a/cKDYWbP

[rohang]

Personally i know people working for banks handling cash are 100% responsible for it and if anything happens they are to be paid from salary.

This is very complicated situation especially without any proper terms,guidelines set up.

You did not do anything malicious deliberately, but i also dont see why 2up should be out 3000$ due to your actions

Some companies will bear losses due to employee errors while some will make the employees pay. Its all upto their goodwill IMO

[Fedupkpc]

Thanks for the input, but comparing this to a bank teller is a bit of a false equivalency. Banks operate under highly regulated legal frameworks, have strict standard operating procedures (SOPs), and provide mandatory, specialized security and hardware.



I was scammed by a sophisticated wallet scam that bipassed (and is still bypassing) Apple's App Store.  I wasn't being negligent nor careless. To not pay me for work already preformed is like I am getting scammed all over again.



Operational errors happen in every industry. Legitimate companies absorb those risks as a cost of doing business, especially when they fail to provide their team with basic security infrastructure or guidelines. Withholding employee's pay wasn't company policy and seizing earned wages after the fact is shady.



I was expecting rallied support from 2up in taking down this wallet app (that is still scamming people $1000's as we discuss this) not compound the damage by withholding wages on top of the loss further hurting me financially.

[Shishir99]

We have had such cases in this forum. There is a campaign manager who got the funds from a company to run their signature campaign. Later, the campaign manager's account was hacked, and the funds were wiped out. That manager had to pay the money because he was responsible to handling the funds himself. If you don't know how to secure the money, you should not take the job. If you lose the money you were responsible to protecting, you need to cover the loss.

It seems you are a beginner in the crypto space. Even average veteran crypto users know which wallet to use and which one to ignore. I never heard of the wallet name that you shared. I wonder how you to started with 2UP and what kinds of work you have done.

[rohang]

We have had such cases in this forum. There is a campaign manager who got the funds from a company to run their signature campaign. Later, the campaign manager's account was hacked, and the funds were wiped out. That manager had to pay the money because he was responsible to handling the funds himself. If you don't know how to secure the money, you should not take the job. If you lose the money you were responsible to protecting, you need to cover the loss.

It seems you are a beginner in the crypto space. Even average veteran crypto users know which wallet to use and which one to ignore. I never heard of the wallet name that you shared. I wonder how you to started with 2UP and what kinds of work you have done.

Yep, he barely has any activity on this forum. Very curious as to how they trusted him with 3000$.

It was his responsibility of safeguarding their funds, like you said if he doesnt even know which wallets are safe to use why is he even working for crypto sites tf?

Regardless 2up has done no wrong here.

[Zwei]

i'm sorry OP, but how is your fuck up 2up.io responsibility? once they sent you the coins it's your responsibility to keep the operational funds safe.
just because a crypto wallet is on the app store or play store, doesn't mean it's safe, you should have looked up reviews or did some basic research to find which wallet is safe, or should have not accepted to hold the coins on their behalf.

Following the exploit

it wasn't an exploit, the wallet didn't get hacked or something like that, you used a fake tron wallet.

The Question: Does a crypto gambling platform operating for profit have the right to unilaterally seize legally earned worker wages to cover an external exploit especially when they provided zero security guidelines, hardware wallets, or multisig requirements?

the answer to that question would come down to what you have in the contract between you and them (if you had one in the first place).

[rat03gopoh]

2UP terminated my contract and withheld my already earned wages to subsidize their own lack of corporate security infrastructure.

$3k isn't the entire casino's operating budget; it could easily be entrusted to someone they consider part of the security "infrastructure".

But how did they even trust you to be their financial operator in the first place? Did you go through a rigorous selection process, such as (atleast) filling out a questionnaire? Or did they just randomly appoint employees even if they weren't security-savvy?
How much is your contract with 2Up worth, and what was the payment structure?

The Question: Does a crypto gambling platform operating for profit have the right to unilaterally seize legally earned worker wages to cover an external exploit especially when they provided zero security guidelines, hardware wallets, or multisig requirements?

It depends on your level of trust from their perspective, so that's understandable. After all, they've lost money because of you.

[Shishir99]

Yep, he barely has any activity on this forum. Very curious as to how they trusted him with 3000$.

It was his responsibility of safeguarding their funds, like you said if he doesnt even know which wallets are safe to use why is he even working for crypto sites tf?

Regardless 2up has done no wrong here.

I don't think it depends on forum activity at all. He might be a digital marketer with an affiliation with the marketing agency or something similar. However, I was surprised because he doesn't even know which wallet to use to receive the TRX. If I am professional and experienced in crypto, why would I need to install a new wallet app to receive the funds? Even average crypto users know some well-known open source crypto wallets. Even though there are some popular closed source wallets like Trust Wallet, which they could use for altcoins. For these mentioned reasons, I am curious how he managed to work for a crypto casino.

[stompix]

I was scammed by a sophisticated wallet scam that bipassed (and is still bypassing) Apple's App Store.  I wasn't being negligent nor careless.

Really?  So...
You as a developer, manager, whatever, had two choices:
- go to the TRON official website and download an official and listed wallet
- go to Apple store, type tron wallet, and download the first result, despite it having no reviews and basically no downloads whatsoever
Which one did you choose?

I'm asking you dead serious, you were going to receive money from a company and the best thing your mind was capable of producing during these times where hacks and exploits are all over the news was "let me just download this thing and stuff all the money in it" ?

[Shishir99]

Really?  So...
You as a developer, manager, whatever, had two choices:
- go to the TRON official website and download an official and listed wallet
- go to Apple store, type tron wallet, and download the first result, despite it having no reviews and basically no downloads whatsoever
Which one did you choose?

I'm asking you dead serious, you were going to receive money from a company and the best thing your mind was capable of producing during these times where hacks and exploits are all over the news was "let me just download this thing and stuff all the money in it" ?

Of course, we chose the 2nd one.
He even mentioned that the ratings for these apps were already bad, and the comments/feedback there explained what this app was doing to other users. Basically, other victims reported being scammed by this app. However, OP read those reviews only after he had already been scammed. So, how does he say that he wasn't careless?

Of course, he was careless. Even an average crypto user knows which wallet to pick for their altcoins. OP is not near an average crypto user. He seems to be a crypto newbie with no knowledge of wallets. Also, he is not professional at all. The professionals do their research before they pick anything.

[holydarkness]

I umm... think I missed one or two details. Correct me if I am wrong, but you were handling 2UP's operational fund, for a project, to be distributed to people after that project finished, and you lost the fund? Why are you the one raising scam accusation against 2UP instead of 2UP against you? You made them lose their money.

[Fedupkpc]

Yes, in hindsight I should have used a more established wallet. I have already acknowledged that. But some of you are acting like downloading a wallet directly from Apple’s App Store with functioning reviews, branding, updates, and active listings is the equivalent of downloading a random executable from a sketchy Telegram DM. It isn’t.

This was not a situation where I gave away seed phrases, approved random drain contracts, or intentionally ignored obvious red flags. The app was publicly available through Apple’s App Store and is still actively available despite scam reports dating back months.

More importantly, people keep conflating two separate issues:

1. Losing funds in a wallet scam.
2. An employer withholding already-earned wages after work had already been completed.

Those are not automatically the same thing.

Operational losses happen in every business sector, especially in crypto. Legitimate companies normally establish policies, controls, approved-wallet procedures, hardware requirements, multisig setups, or security onboarding if employees are expected to manage operational funds.

None of that existed here.

No SOPs.
No approved wallet list.
No hardware wallet requirement.
No segregated infrastructure.
No corporate custody process.
No training.
No security standards whatsoever.

I was simply told to receive and manage funds.

Some people here are acting like a company can retroactively convert an operational loss into unpaid labor and call it resolved. That is the part I dispute.

And for the people implying I am some “crypto newbie” because I was targeted by a sophisticated wallet scam, scams evolve specifically because they successfully bypass normal trust assumptions. If Apple’s App Store placement, manipulated reviews, fake legitimacy, and cloned branding were irrelevant, these scams would not continue succeeding against users.

People can criticize my wallet choice all they want. Fair enough. But that still does not automatically justify withholding earned compensation after the fact.

[holydarkness]

[...]
More importantly, people keep conflating two separate issues:

1. Losing funds in a wallet scam.
2. An employer withholding already-earned wages after work had already been completed.

Those are not automatically the same thing.
[...]

I was simply told to receive and manage funds.
[...]

Ok, let's focus on this, then. You're asked to keep and manage fund for their project, amounted 3,000 USD. Is the project finished and has the fund being managed here successfully distributed as intended? A simple yes or no, please.

[Fedupkpc]

I umm... think I missed one or two details. Correct me if I am wrong, but you were handling 2UP's operational fund, for a project, to be distributed to people after that project finished, and you lost the fund? Why are you the one raising scam accusation against 2UP instead of 2UP against you? You made them lose their money.

No.  I was given funds with no quantified expectations. Results were to be evaluated at the end of the month and based on overall performance.  If things went well and it made sense, we would further contract.

[holydarkness]

I umm... think I missed one or two details. Correct me if I am wrong, but you were handling 2UP's operational fund, for a project, to be distributed to people after that project finished, and you lost the fund? Why are you the one raising scam accusation against 2UP instead of 2UP against you? You made them lose their money.

No.  I was given funds with no quantified expectations. Results were to be evaluated at the end of the month and based on overall performance.  If things went well and it made sense, we would further contract.

So, to answer my question on post #14, in a bit longer "yes or no" version: No, you're trusted with fund on trial basis for a project, and the project is yet to be concluded, evaluation made, and further step made, and you're already losing the fund.

Then the question persist: why is it you the one who raise scam accusation against 2UP and not the other way around? You're the one that made them suffer financial loss.

Edit: it seems you're in "thirty minutes" buffer or something, where questions are already asked, answered by itself in advance of your post. I'll keep myself from commenting for the next one hour, to be sure you catch up with everything.

[Fedupkpc]

[...]
More importantly, people keep conflating two separate issues:

1. Losing funds in a wallet scam.
2. An employer withholding already-earned wages after work had already been completed.

Those are not automatically the same thing.
[...]

I was simply told to receive and manage funds.
[...]

Ok, let's focus on this, then. You're asked to keep and manage fund for their project, amounted 3,000 USD. Is the project finished and has the fund being managed here successfully distributed as intended? A simple yes or no, please.

I didn't have a chance, as soon as the funds hit and were instantly drained I went and told 2up. I could have still driven results needed to make everyone happy by the end of the month but i was terminated immediately after reporting the scam. Again, I understand that decision from a business pov and am not contesting it but to withhold pay i already earned for speculated future loss.....

[rat03gopoh]

None of that existed here.

No SOPs.
No approved wallet list.
No hardware wallet requirement.
No segregated infrastructure.
No corporate custody process.
No training.
No security standards whatsoever.

I was simply told to receive and manage funds.

Some people here are acting like a company can retroactively convert an operational loss into unpaid labor and call it resolved. That is the part I dispute.

So what kind of responsibility can 2up expect from you? I assumed you've made other arrangements outside of the contract regarding this incident, which ultimately led to their decision to withhold your salary. Furthermore, you didn't answer my question: how much of your salary was withheld.

And for the people implying I am some “crypto newbie”

Then why do you need "training?" Are you simply new to managing third-party funds? This post clearly shows that you simply agreed without questioning at least some of points above.

[Fedupkpc]

You are assuming there were predefined liability terms or other arrangements in place. There were not.

There was no agreement stating:
- I personally insure operational losses,
- I absorb fraud losses,
- wages become forfeitable,
- or that compensation becomes conditional

That is exactly why I keep separating:
1. the scam incident itself,
2. the termination,
3. and the withholding of already earned pay.

Those are not automatically interchangeable.


I am intentionally not discussing every internal compensation detail publicly because this is still an active dispute and I am trying to keep some professionalism around it.

[Zwei]

hello? do you even hear yourself OP? you are crazy if you think 2up owe any money when your fuck up lost them money.
you caused damages to them, they recovered said damages from previous promised compensation, but here you are trying to twist words to make it sound like it's their fault, and that they still should pay you.

here is my opinion on this, if you can refund them the money you lost, then they should give you your salary or whatever that you should have got, if you can't refund them, then walk away.

[holydarkness]

You are assuming there were predefined liability terms or other arrangements in place. There were not.

There was no agreement stating:
- I personally insure operational losses,
- I absorb fraud losses,
- wages become forfeitable,
- or that compensation becomes conditional

That is exactly why I keep separating:
1. the scam incident itself,
2. the termination,
3. and the withholding of already earned pay.

Those are not automatically interchangeable.


I am intentionally not discussing every internal compensation detail publicly because this is still an active dispute and I am trying to keep some professionalism around it.

There ARE. Given your explanation so far, my stance persist: why do the thread is you against 2UP and not 2UP against you for "scamming" them out of 3,000 USD? You're failed to deliver the final product, whatever that was. You lost the fund, regardless you gambled it away or you use for personal use or it was hacked away from you. The problem persist: you failed to perform in a way that 2UP required you to, and the fund trusted in you, to be distributed amongst others upon completion, was failed to be distributed.

You "scammed" them by "taking" their money away, resulting in financial loss and [probably] reputational damage.

End of story, unless you have other details that put the weights more to your scale.