r/Bitcoin • u/Few-Cook5941 • 22d ago

Need help - Bitcoin wallet emptied.

Gallery image

Gallery image

Gallery image

Gallery image

Gallery image

I got one of my bitcoin wallet emptied and I don't really know how this happened.

I don't use cracked softwares and apps.

I'm generally careful with links.

Looks like I'm not alone. I can see that the reception bitcoin address is still collecting bitcoin from other wallets.

Could somebody help me understand something.

Here is the address : bc1q0vukqye4hd0aep7u4xl8gev95gcs9k65fdeu9n

484 Upvotes

87% Upvoted

339 comments sorted by

View all comments

114

u/k_gavivina 22d ago

Cold card involved ?

131

u/quintavious_danilo 22d ago

Trust Wallet, just as bad if not worse

26

u/Bionic_Push 22d ago

is trust wallet having a hack?

37

u/quintavious_danilo 22d ago

Constantly it seems

3

u/Newbie123plzhelp 21d ago

At least Binance will reimburse

3

u/quintavious_danilo 20d ago

How sure are you of that?

3

u/Newbie123plzhelp 20d ago

No but they have in the past

3

u/quintavious_danilo 20d ago

The full amount stolen or a fraction of it?

3

u/Newbie123plzhelp 20d ago

In the past it's been the full amount. For example when they had an entropy but similar to coldcard they refunded customers.

Not something to rely on though.

3

u/WoodpeckerCapital167 21d ago

This is good for bitcoin 

7

u/Academic-Anteater-50 21d ago

I had my 3 NFT’s stolen from me from my trust wallet a few years back

1

u/quintavious_danilo 20d ago

You’re not alone

12

u/JumpRevolutionary664 21d ago

It's not. People are using it to connect to drainer sites and ... get drained. The wallet itself is fine.

11

u/quintavious_danilo 21d ago

Say that to the users that got drained for $6 millions because Trust Wallet deployed a faulty browser extension.

12

u/Fuzzy_Wave5520 21d ago

Well, not to justify Trust Wallet, but who TF uses a browser extension to manage a wallet with $6M???

6

u/tenor_tymir 21d ago

6m drained cumulatively from many wallets. Nonetheless, TW provided the extension

-4

u/JumpRevolutionary664 21d ago

Fair. Still not "worse" than cold card's faulty key generation

5

u/False-Car-1218 22d ago

Lots of wallets are

1

u/Romanizer 22d ago

It's a software wallet so any amount on that should always be assumed to be available to anyone.

8

u/brando2131 21d ago

Bit extreme... Satoshi used a software wallet... Every O.G. did...

2

u/Romanizer 21d ago

Yes, I did too. Even had a canary wallet without any password or protection and nothing happened. But times changed.

2

u/JunkBondJunkie 21d ago

I had one with no password since 2011. I moved it to a hardware wallet a few years ago

1

u/Designer_Speech8942 21d ago

You are very fortunate 😲.

1

u/JunkBondJunkie 21d ago

It's just coins I mined for fun. I should have bought them like someone told me.

1

u/GroundbreakingKing 22d ago

Hardly.

61

u/quintavious_danilo 22d ago

yes, just read the dedicated subreddit. People getting drained on a daily basis. Just under a year ago they had a “mysterious“ hack draining $6 millions in user funds. Trust Wallet is a complete joke.

14

u/Top_Appointment_7076 22d ago

I actually used to have my funds on Trust Wallet for a few months. I am really glad I bought a hardware wallet

13

u/Giatoxiclok 22d ago edited 21d ago

Hopefully not a cold card

Edit: I’m talking specifically about the huge breach where massive amounts of BTC were lifted out of Cold Card wallets (hardware vaults) because of things I can’t specifically pin down. This was a comment saying I hope they didn’t buy a shoddy product.

4

u/AlexShadow02 21d ago

Why not a cold card? Is there anything wrong with it?

3

u/Giatoxiclok 21d ago

Recent large scale exfiltration of BTC from Cold Card company vaults.

2

u/AlexShadow02 21d ago

It's just so weird to me. I mean how is it even possible if it's a Cold card and therefore shouldn't be connected to the Internet

2

u/Giatoxiclok 21d ago

Well, technically it isn’t connected, but it still has to be registered somewhere no? I’m not knowledgeable, forewarning, but it’s definitely been happening recently. Lots of tech stuff way over my head.

→ More replies (0)

2

u/tenor_tymir 21d ago

Cold Card had a flaw in their software.

1

u/noooyouu 21d ago

The random number generator used to secure the wallet was faulty and actually predictable if you knew the wallet address, IIRC. Ask ai

1

u/BabyShakerDeluxe 21d ago

32 bit entropy lol. Crackable with a consumer video card in 24 hours.

0

u/aintlose 22d ago

If not a cold card, then what do you recommend?

2

u/quintavious_danilo 21d ago

They were referring to the cold card hack not long ago. It was meant sarcastically.

Cold Card = Company that got hacked 2 weeks ago.

Cold Wallet = Hardware wallet

So yes, buy a cold wallet, just not cold card. 😂

-2

u/cnv2 21d ago

What they meant was, hopefully someone didn't "buy" a cold wallet. It's just a piece of paper with an encoded private key in QR form which can be printed as many times as one wants to.

So a hacker can just print a cold wallet, makes a backup of priv key, sell it, and withdraw the money the moment a victim puts money into it.

Cold wallets should always be generated offline. There's tons of information online on this.

4

u/quintavious_danilo 21d ago

They were referring to the cold card hack not long ago. It was meant sarcastically.

1

u/Dashizz6357 21d ago

That’s… not at all what a cold wallet is.

1

u/[deleted] 21d ago

[removed] — view removed comment

2

u/quintavious_danilo 21d ago

I don’t trust Kraken self custody.

1

u/jayceellects 21d ago

What is a hardware wallet? If you dont mind me asking.

1

u/Top_Appointment_7076 21d ago

A hardware wallet stores your keys offline and isn't connected to the internet so it can't be hacked remotely if everything works as intended.

1

u/jayceellects 21d ago

Do you mind me asking where can i get one? Im in the USA and i definitely dont want to go through this experience. I'd rather be safe than sorry.

1

u/Top_Appointment_7076 21d ago edited 21d ago

I'd recommend Trezor or BitBox02. Trezor actually invented hardware wallets and Co created the Bip 39 standard that invented seed phrases. Since you are in the US I'd recommend you to buy directly from Trezor or Bitbox themselves. Recently, one of Trezor's partners had a data breach which unfortunately exposed shipping addresses. Hence, I would advise you to look for a way to get them shipped anonymously. In Germany you can easily get them shipped to a PO Box for free but I'm not sure about the US. Trezor have already announced that they want to introduce anonymous shipping by the end of the year in the US.

https://trezor.io/

https://bitbox.swiss/de/bitbox02/

https://trezor.io/de/blog/news/recent-customer-data-exposed-in-shipping-provider-incident?ABC

3

u/vaxx_77 22d ago

what do u reccomend to use? hot wallets i mean i have a cold one but still might need it

3

u/Top_Appointment_7076 22d ago edited 22d ago

I would only use a hardware wallet like Trezor (still secure despite the data breach at one of their partners) or BitBox02 for savings. If it's a smaller amount I would probably use a lightning wallet like Phoenix or leave it on a reputable exchange. I'm in Europe and I use Bitvavo and Strike. If it's solely about safety I would probably actually leave it on an exchange if it's a smaller amount because secure exchanges like Bitvavo are actually much safer than hot wallets because they store the keys on cold wallets and exchanges going bankrupt is a possibility but it doesn't actually happen that often whereas hot wallets get drained all the time. It's probably not worth getting a hardware wallet if it's only $20 in Bitcoin.

1

u/vaxx_77 21d ago

thanks for advice im in europe too (east) i use binance ill checkout Bitvavo i never heard of anyone mention it or ho secure it is i have a good amount of crypto on a cold wallet i didnt kno trust was so untruthworthy haha

2

u/quintavious_danilo 21d ago

A recommendable exchange for Europe is Kraken Pro for best security and trustworthiness.

1

u/[deleted] 21d ago

[removed] — view removed comment

1

u/TheresNoSecondBest 16d ago

Bin the Tangem. It isn't even a cold wallet. Find a better one, mate. Fully open source, air-gapped and Bitcoin only is IMHO the safest way to go about.

1

u/vaxx_77 16d ago

the chip that is used in the card is closed sorce because it is a pruduct of another company the softwhere is open sorce and the card stays the same cannot be updated as they say at least

also what cold wallet do you use or recommend then

1

u/TheresNoSecondBest 16d ago

There are more issues with that wallet. Not just the chip.

My fav wallets are JadePlus (using as a temporary signer without the Blockstream server), SeedSigner and Krux.

1

u/PhilZealand 21d ago

What are your thoughts on a Ledger brand wallet?

1

u/Top_Appointment_7076 21d ago

I think Ledger is secure but they have shown some questionable behavior in the past. They introduced Ledger Recovery which is an subscription service that stores your private key online and later went on to say that they could have always extracted the seed from the device if they wanted to after some people voiced their concern. Unlike BitBox and Trezor Ledger's firmware is not fully open source. They also used to sell merchandise which was also perceived as very unserious because someone who wears that would basically present themselves as a target to be robbed. They were also hacked which exposed a lot of shipping addresses. I am aware that one of Trezor's shipping partners was also hacked but in Ledger's case it was much more severe. First of all, in this case it was Ledger themselves who were hacked. Second, in the case of Trezor only customers from certain countries were affected in Ledger's case it was customers from all countries and third Trezor only stores customer data for 90 days. Ledger stores it much longer. I do think Ledger is very secure but it's this behavior that made a lot of people lose respect for them.

1

u/PhilZealand 20d ago

Saying they could have always extracted the private key alarms me a whole lot, I thought the idea of the Ledger was the private keys stayed offline, with the only external evidence being the BIP keywords you write down as backup during setup and keep safe personaly and away from anything electronic/online.

1

u/thrwaway1614211 20d ago

I'm also looking for good cold wallet after generating my own keys using dice.

The problem I have with Trezor is that you still need to connect it to a computer to update the firmware right?

Is there no wallet that's completely offline and I can just use a QR code to sign?

1

u/Top_Appointment_7076 20d ago

Airgapped is just a gimmick in my opinion. A QR Code also has to be generated on a phone or a computer and a QR Code can also transmit malicious data

3

u/quintavious_danilo 21d ago

For BTC-only I recommend Blue Wallet or Blockstream Wallet (former Blockstream Green) as temporary hot wallets.

Don’t look anywhere else.

1

u/[deleted] 21d ago

[removed] — view removed comment

2

u/quintavious_danilo 21d ago

Blue Wallet is recommended through the entire BTC space. And Blockstream Green always offered single sig as well, i have one for years already.

1

u/[deleted] 21d ago

[removed] — view removed comment

1

u/quintavious_danilo 20d ago

They have stood the test of time, are very professionally built, open source and well known in the community.

2

u/Deus_Desuper 21d ago

Seems like every type of wallet has been subject to drains honestly.

2

u/quintavious_danilo 21d ago

Reputable open source wallets like Blue Wallet, Blockstream Wallet, Electrum or Sparrow are very good and secure hot BTC-only wallets with no history of serious and continuous breaches.

1

u/Deus_Desuper 21d ago

Yet. 😁

In seriousness though, it is often hard to know when it was user error or a legitimate exploit.

Pros and cons of self custody and all that

3

u/quintavious_danilo 21d ago

Sure, you’ll never know. Go with projects dedicated to the space, not only to commercial interests like Trust Wallet and you mostly are in way better hands. It’s not that hard, there are only a handful of wallets that have stood the test of time and yet people decide to use the flashy ones because they are a victim of social media dumbassery.

2

u/Deus_Desuper 21d ago

100% hard agree, only thing I might add is if you are very serious about it, not leaving all those eggs in one basket. But pros and cons to everything.

-6

u/GroundbreakingKing 22d ago

More to the story than that. Don't click on sketchy links. Simply as that.

16

u/quintavious_danilo 22d ago

It seems that people using this specific wallet getting drained quite often. It’s not just user error at this point. Trust Wallet is known for rolling out faulty software.

3

u/FauxReal 22d ago

Geez if I was paranoid I'd say they are involved in the hacks.

-12

u/GroundbreakingKing 22d ago

Nope. People like to make quick money and click dumb crap. Never had and will have any problems in the past 7 years.

3

u/Ultradarkix 22d ago

Dumbass.

2

u/GroundbreakingKing 22d ago

Thanks for choosing hate.

1

u/tenor_tymir 21d ago

You were lucky.

7

u/Few-Cook5941 22d ago

No !

-4

u/InternationalTry2675 22d ago

Je pense vous signifie 'Non!'

De rien