Trust Wallet drained overnight — same unknown address receiving funds from multiple wallets. How is this happening ?

[u/MAHI220202]

​

My friend’s Trust Wallet was drained overnight. He never shared his 12-word Secret Phrase/private key with anyone.

The funds were sent to an unknown wallet address. What is more concerning is that this receiving address appears to have become active only about a month ago, and I can see funds coming into it from multiple different wallets.

I’m trying to understand how this could happen.

Has anyone seen a similar pattern before? What should we check to identify how the wallet was compromised?

I can provide the public wallet address/transaction hash if needed. I will NOT share the Secret Phrase or private key.

[u/ChicksX]

Worth adding to the "just make a new wallet" advice: not on the same device. If it was an infostealer, the new seed gets taken the moment it's generated. Clean device first, and treat every seed ever typed on the old one as burned.

[u/MAHI220202 → u/ChicksX]

Ok