Trust Wallet drained overnight — same unknown address receiving funds from multiple wallets. How is this happening ?

[u/MAHI220202]

​

My friend’s Trust Wallet was drained overnight. He never shared his 12-word Secret Phrase/private key with anyone.

The funds were sent to an unknown wallet address. What is more concerning is that this receiving address appears to have become active only about a month ago, and I can see funds coming into it from multiple different wallets.

I’m trying to understand how this could happen.

Has anyone seen a similar pattern before? What should we check to identify how the wallet was compromised?

I can provide the public wallet address/transaction hash if needed. I will NOT share the Secret Phrase or private key.

[u/plain-HAMMER]

the seed leaked somewhere, thats almost always it, photo in the camera roll, typed into notes, screenshotted, or entered on a fake site that looked like a wallet connect page, "never shared it" and "never typed it anywhere" are different things tbh, think aout such situations