All my money stolen from TW

Binance Support: Case ID #73424267

****** FINAL EDIT & MY PLAN MOVING FORWARD IN ATTEMPTS TO SHAKE UP THESE HACKERS AND SCAMMERS ON THE BSC AND ETH NETWORK AS CLEARLY BINANCE AND TRUSTWALLET ARE NOT WILLING TO: Got a response from Binance and it was as expected and similar to TrustWallet, simply don't care, to summarise. They have basically said, it is not a Binance address, even though they are a CEX, the address is on BSC and the funds cannot be frozen (This recent thread may contradict this statement unfortunately: https://www.reddit.com/r/binance/comments/nvlkk6/stolen_funds_sitting_in_binance_wallets_and_no/?utm_medium=android_app&utm_source=share).

They didn't even bother to trace the hacker/scammer and the transactions nor provide any insight on what may have happened from the issues I have raised in terms of security of their entity TrustWallet.

Didn't even mention they will keep track of the address(es) and if the BNB/funds end up in Binance itself, they will take further action. They did state, the initial address I provided has been blacklisted even though by the time they responded, the funds were transferred elsewhere. To me, they are complicit to these hacks/scams in many indirect ways and for the way they treat these matters of their customers that use their platforms.

Their response was 30 to 36 hours late if not more, the words stolen, scammed, hacked, should have triggered their support algorithm and respond faster than the timeframe they did due to the sensitive nature of the subject at hand.

The initial support estimated response time the ticket was created stood at 6 hours or less.

I am going to move all my vast amounts of mainstream coins from Binance such as BTC, ETH (staked but will take the BETH), ADA, XRP, XMR, Polkadot, VET etc. etc. And move it to another of my Trezors ordered and on the way, will not hurt them one bit but for me, will feel safer (They did refund everyone the last time they got hacked but don't want the hassle after what's happened with TW, and yes I did know when I first signed up. Most of the assets are in cold storage, same as Coinbase etc).

Am not a Trustwallet customer, never again and will try to avoid the temptation of using Binance and/or its several umbrella entities no matter a leader or not in the space. ETH 2.0 coming up and fees will be dealt with, not sure what will happen to Binance then and whether they will fork it further.

iOS also announced that the TrustWallet dApp browser will no longer be supported on their devices as it does not meet their guidelines, what a surprise! Good for them as I have come to the conclusion after all the OPSEC I carried out to protect myself as per their suggested guidelines and my own, was not and will never be enough. YOU ARE ON YOUR OWN NO MATTER WHAT!

Metamask has never given me such issues, to point out and neither all the other wallets I have had this far, only TW. Not saying they are more secure or otherwise, just haven't experienced the scenario I have with TW.

I felt better today, since morning, thanks to all of you kind people on Reddit, specifically those that have helped to upvote this for visibility (Even though at the top and Binance clearly saw it but decided to respond many hours later though chat) and the kind comments. Including an acquaintance who is an Ethereum security risk analyst who after I spoke to dawned a few ideas in my mind.

I have decided that as these providers won't do nothing, such as Binance and TrustWallet and help people like myself and others then we as a community should do something ourselves.

*This really devastated me via emotions, left me literally numb at some point where the mind acted in self-defense mode and felt nothing in the end. Am fed up with the way these major platforms act and treat and not protect the same people that make them billions year after year! All welcoming when you bring your money in and will take it instantly but want nothing to do with you when you are in the dark and need help and desperate for assistance!

Well, now I have a plan which is at its infancy as of today but intricate nonetheless. Will use my remaining disposable income and knowledge to produce a sophisticated platform to protect myself and others from these scams/hackers as much as possible on the BSC and ETH network and do the job that Binance and TrustWallet should be doing themselves to protect us before and after we end up in this position.

If you would like to be part or contribute via knowledge or expertise somehow at your free time, let me know, open to all information, am funding it all. Further details to come.*

---

Edit 20:57 GMT (thread tidy up): Some comments are very difficult to read, would have really liked to reply to everyone, but can't deal with seeing certain assumptions made and things being said right now, too hurtful after what has happened to me, I feel numb, don't wish this on anyone. Am mentally drained today and not in the right thought process, I apologise if I haven't replied to all of you.

Thanks for the support all, also for the comforting words from most of you, and upvotes for visibility, Binance still haven't got back to me and whether the wallet in question has been frozen for investigation.

Will update soon, just need to unwind somehow right now. No, am not karma farming, you will never see this account comment elsewhere again to prove so. Really sorry for the long thread, some very important information though, especially if you are new. Please try to read it for knowledge please.

--- Original thread ---

Don't know how much roughly, but possibly £150,000 taken from my TrustWallet which had max wallets totaling 15 wallets. This seems to started happening 4 hours ago whilst I was asleep. (As I had so many wallets in one TrustWallet and some tokens have no pricing updated, the money possibly less) Just one one of my TrustWallet wallets tokens had reached nearly £500,000 previously and had a lot of potential as you can see).

One wallet fine but all wallets (Seedphrases needed for every wallet setup in Trustwallet)? How?? I need answers please!

I had the max number of wallets, 15 wallets on my Trustwallet! How can someone obtain all 15 wallet seedphrases? Makes no sense to me whatsoever!

I had a pin, fingerprint lock, signed transactions activated! How can someone take my money? Never shared my seedphrases! Trustwallet email response was not appropriate. All my funds transferred to a BSC address, my assets sold for BNB! Please help me, please!

Already sent messages to Binance to freeze the wallet that sold my assets for BNB, and also transferred all the BNB from my wallets from the main TrustWallet. They transferred all the BNB to their wallet.

Very confused when I had max security on the Trustwallet, just so confused.

I really need urgent help!

Please!

--- Original thread end ---

Edit (Wallets information): ***As people are saying this is fake, which am a little hurt by but I understand, this is Crypto, and everything needs to be transparent and public. My wallets are included at the bottom and also the address that took my money and assets from me. If this Solidifies the case then so be it. All this information has already been given to Binance, still waiting for a response. Wanted to release the info after the response from Binance but will do so now, please spread it as much as you can, would really appreciate it.

EDIT 1: Please, please upvote for visibility so Binance can respond.

TrustWallet is owned by Binance and was acquired a while ago.

They should be able to freeze the wallet/wallets of person that stole my money and an investigation to take place. If it happened to me then it may happen to you, God forbid. With max security setup, one wallet I understand ok but all maxed wallets on Trustwallet?

Makes no sense to me, and need answers... Please upvote, thank you! I will provide anything to prove I own the TrustWallet in question.

Edit 2: As per a comment from another redditor, this should concern all of us, security is very important.

I had maxed security setup for this TrustWallet. Biometrics/PIN to view seedphrase/nowhere else stored to be accessed, and biometrics/PIN for any transactions made.

I am left bewildered on how the aforementioned can be breached. Had max wallets on the Trustwallet, so one wallet to be wiped, fair enough but all wallets??

I have many other wallets and this is the only one that got wiped, even cold wallets, 3 Trezors, not ledgers as we all know of the data leak. I am clued on security, not a novice. Thanks for the upvotes thus far!

Edit 3: TrustWallet needs a whitelist addresses/devices options within the app too for any transactions that take place, just like Binance which I have activated when I opened the account with them and just like some other well known wallets I have, this can avoid so many issues such as these.

Also 2 factor authentication such as Google authentication is lacking.

No such options within the TrustWallet app currently.

If this gets enough visibility, we can push for the above security measures to be implemented. Trustwallet should not be an exception to these security measures!

Edit 4: Never used PC for this wallet, only a phone especially for TrustWallet due to the amount in question. Biometrics setup on the phone etc.

Any URLs, such as PanCakeSwap I access to make purchases or sales, always log out from after and clear cache through preferences and history. This is standard procedures.

Edit 5: As per a comment, whether there was a random airdrop that I interacted with. No!

That is a form of a possible "Dusting" attack, please do not interact with Airdrops that randomly appear in your wallets, usually worth peanuts or nothing at all, I know it's tempting! Please just disable or never activate them! Do not not interact in any way with those tokens.

I am aware of this, like I said, not a novice.

Edit 6: No I have not interacted with a phishing website! I have had so many messages and forms to fill in to share my seed phrase since I have posted this and links to visit which obviously haven't. Block is the only option when someone randomly messages you! Even Binance support users have been setup to scam me.

ETH network has various reference codes where it even provides an insight to contracts that contain malicious code (BSC is a fork of ETH). This information is publicly available to be used in order to check said contracts for malicious code to avoid being scammed.

This also includes due diligence from our part and knowledge of solidity code sometimes, even checking the contract and seeing what the owner can and cannot do.

Due diligence/research such as, the team, the background, is there DeFi KYC (Private doxxing), what are they attempting to solve and bring new in the space, what is their roadmap, do they have a finished product to be viewed, checked and tested by the community, what are the flaws, do they have backing from a solidified third-party, is it a charity project meaning "this what want we to do, pay for it and we will get it done".

The CEO and owner reputation, their way of speaking and language used, immature? Stay away! Legit non copied Whitepaper with essential information. This is what I can think of right now and that is just the tip of the iceberg as there is so much more.

Is it audited by an official source? Remember that the large percentage of people just want to know that the audit was done but never usually check it. Audits are an ongoing process, not a once off, as bugs and issues need to be fixed and it keeps being audited until it is completely free of issues, please remember this.

There are also sites such as rugscreener, tokensniffer, bsccbeck (if it decides to work) etc. to make standard checks at a glance for those not knowledgeable in solidity code for various scams such as honeypots, wallets unlocked, LP locked or not, rugs etc. USE THEM BEFORE INVESTING! Like I said, am aware of security, when you are parting with your money, all checks have to be made.

Am not one to be scammed so easily and this has left me literally so confused, and want to know how this happened as cannot figure it out but guess what? Binance can and want details so they fix this issue and strengthen their security for all of us!

Edit 7: Any access required to a wallet such as from PanCakeSwap and DAPPs only should require read only access and transactions to be authorised prior to being fully connected. No other exclusive permissions were granted and neither should be requested by any dApp.

I have provided Binance all the details needed already. I will update this once I hear back from them for the community and for the sake of transparency and what their reply was.

Trustwallets reply was essentially "Sorry for your loss, please take these security measures in future", but the measures in question were already taken, maximum there is but it is lacking as mentioned in "Edit 3" which have to implemented.

Am not using any other TrustWallet right now, personally, moved most of my assets elsewhere from my other TrustWallets, can't risk it.

Please be very careful with your assets! If they can bypass this then surely there is a serious security flaw for someone to obtain 15 wallet seed phrases from one TrustWallet in some way.

Edit 8: Some information from comments on this thread that popped up to me, which may be further useful to you guys.

Don't ever purchase anything or ever go to transfer tokens randomly from a site given or found anywhere. Check the contract address and obtain it from official sources and creators of the contract if you are to invest, see an opportunity and have done all your checks, even then it is a risk.

Always know the ticker of the token you're trading and always obtain the "CONTRACT" from the original official source.

Never trust random Telegrams groups/posts, or CMS posts (r/CryptoMoonShots), r/MarsShots etc. in fact I would say 99.9% are scams from the 200 to 300 tokens released a day!

Near instantly, all tokens are copied and cloned once they are launched, especially all the popular ones, to dupe people. Telegram groups are easily replicated, logos and names changed without any barriers.

Always double check the usernames and compare them to the official social channels and URLs in browsers if you navigate to projects sites and ensure a valid SSL certificate is installed (green padlock) etc.

You will surprised, how many social channels are replicated too and slight change of one character is added to the usernames to scam People.

And no, unfortunately Doxxing means nothing for some projects!

Go look up "SliceOfThePie", for a recent "Doxxed" project that scammed people. Be very, very, careful!

I have fallen for rugpulls myself in the past, never can be too safe in terms of investing and no matter how much research you do, you can be a victim but precautions can be taken, some as shared above.

Edit 9: No matter what I provide, it seems people will always ask for more and am sure whatever I say or details I provide, more answers will be asked for which is fine.

I don't want anyone else to end up in the same boat, so here are some other responses people are seeking. Will try to update and answer any other questions.

It is an Android phone, not an old brick, I wouldn't buy a £300 phone for assets large as these or small for any of my wallets or not take appropriate procedures to secure my assets such as not using third party browsers, only for trading, usually PCS/inbuilt but check my OPSEC for that in my other edits.

All my phone's for crypto wallets which have substantial amounts have their own phones. No other apps apart from the wallets themselves.

Not rooted, nor do I have jailbroken iPhones or modded APK'S. I do not use public networks, the packets sent over those, can be infiltrated and information stolen/seen by hackers.

My networks are private and the setup is such that no public network is allowed to access the phones network and interact with it, airplane mode has to be switched on when not in use regardless, for extra OPSEC measures which I have forgotten about some times overnight if an using that particular phone but that is not a big issue as failing on other important parts is more detrimental.

The phone has never been connected to any laptop or PC ever, no need. Please, if you read my thread and comments, am not a noob when it comes to OPSEC. All I want is visibility and answer from Binance and to recover my funds. Thank you!

Some of my addresses stolen from:

0x147893D7709C886f0A01bEfDEB42529C9082A502

0x1e35Db6C0E6C760CE2DA91Be42a584a89eFc6056

0x8F932e3a9768d773bb01Ea0B8158163d1f55f9B3

0x386497E8f37C8f380c0d5482a876244BF05dfDC9

0xef1b9c3283Ecc17e3b3264c9FFca07994f164136

bnb1dap36n88xmgkkpu5js6qqpev3ecjnpnckj9pfe

bnb16vds03l0prprvssv8rpanduvm65afd0ejkp800

0x276baB3F9b5Fc7f32b3A8dAaB0dAc0878F893118

bnb1ug4ra998vcehql8yrfrpeqccljhfh8pwe6tpv4

bnb1k4hzhthap0v2xn42ddtgqpaeu2hx97zydem4we

0xef2a6036A09a3B633E6c7f27961cF825e41502E6

Scammers/hackers address: https://bscscan.com/address/0xd607c019c71b6dc5daae2071fe73629a3c5d90e7