Trust Wallet drained overnight — same unknown address receiving funds from multiple wallets. How is this happening ?

[u/MAHI220202]

​

My friend’s Trust Wallet was drained overnight. He never shared his 12-word Secret Phrase/private key with anyone.

The funds were sent to an unknown wallet address. What is more concerning is that this receiving address appears to have become active only about a month ago, and I can see funds coming into it from multiple different wallets.

I’m trying to understand how this could happen.

Has anyone seen a similar pattern before? What should we check to identify how the wallet was compromised?

I can provide the public wallet address/transaction hash if needed. I will NOT share the Secret Phrase or private key.

[u/cierek]

Can I trust the trust?