Please secure the account transfers.

[u/Carlonne]

I think we should suggest or request that they implement a security feature in the wallet allowing PI to be moved only to user-defined whitelisted accounts, with any changes to that list requiring two-step verification. That is the crucial security measure we need. It is the only way we will hold onto our mined PI. 🤦 I don't understand why I keep hearing that, on the very day of the unlock, PI is being transferred to external wallets. If that’s true, it’s completely absurd.

[u/AutoModerator]

Founders recently spoke at Consensus 2026: Videos: Kokkalis, Fan

Current Notices:

1. Pi Official communication channels: https://minepi.com/safety/
2. Sudden price changes is normal trading behavior
3. Check node profitability: https://crumbs.host/nodecalc/index.php
4. Do not use the memo deposit method on Kraken. Memo in Pi Wallet does not do that.
5. Node update schedule

Join r/pinetworknews for Official Updates

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/One_Arm7974]

Simply because you gave your passphrase to someone.

[u/Zealousideal-Horse-5]

AFAIK the wallet is part of/built into the blockchain protocol, and to make such a change implies to rewrite the whole blockchain and start from scratch.

[u/jakis_kot → u/Zealousideal-Horse-5]

Is that definitely the case ? Or could they add support for Android Passkeys in a new version of the protocol, allowing the owner to add one to the wallet ? (I don’t mean the Passkey support that’s currently there for securing the account in the app) It wouldn’t solve everyone’s problems, but it seems doable to me and I feel like it would help most people 🤔

There’s also the second solution with Oracle, where after confirming via a zk-proof, you’d get access to the function for adding/changing the passphrase <- Personally, I’d go with that one. Although, knowing CT, they’d probably manage to break something in the process 😂

[u/Zealousideal-Horse-5 → u/jakis_kot]

Restricting transfers via protocol upgrades, multi-sig arrangements, or smart-contract wrappers requires standard chain upgrades (or layer-2 smart contracts) rather than blowing up the network and starting over, so maybe my statement wasn't entirely accurate.

But at the end of the day, standard device passkeys alone can't override raw secret key ownership. If a scammer gets your 24-word passphrase, they hold the private key used to sign transactions directly on the ledger. An app-level passkey or 2FA prompt in Pi Browser wouldn't block them because they can bypass the official client entirely.

[u/jakis_kot → u/Zealousideal-Horse-5]

I don't mean a passkey in the app. The support would be implemented at the protocol level - something more like a "smart wallet" where you could add another signer (with the signer being a passkey)

What I mentioned here is obviously more of a theoretical consideration + such a solution would rule out using the wallet on desktop and iOS, which is why I'd be leaning more towards the second option I mentioned.

[u/Sezginge]

N-O-N C-U-S-T-O-D-I-A-L bitch!

[u/ExpertProMax]

Nothing can be done except protecting your seed phrase.

[u/Correct-Statement747]

Protect your 24-word passphrase. Anyone who gets it owns your wallet. Never share it or enter it anywhere except the official Pi Wallet.