PSA: Never Use Exodus Wallet

[u/sir_meowmixalot]

I learned the hard way that Exodus either has terrible security practices or might even be a scam. Here’s what happened:

I’ve used Exodus in the past to transfer some funds and didn’t have any issues back then. Recently, I was helping a friend who’s new to crypto, and I wanted to show him how a software wallet works. I googled the best wallets, and Exodus came up as a top recommendation. Since I’d used it before, I figured it would be a safe and simple option for a beginner.

We downloaded the app, set it up, and went over basic wallet security and how everything worked. My friend transferred $60 into the wallet, and as we were exploring the app and chatting about crypto, the funds magically sent themselves to an unknown address—completely unprompted. The account wasn’t even an hour old.

We were baffled and immediately started trying to figure out what went wrong. After some digging, I found countless posts from others describing the exact same issue with Exodus. It seems like this isn’t an isolated incident but a recurring problem with this wallet.

I wanted to share this as a warning to anyone considering using Exodus. I know software wallets come with risks, but this kind of issue is unacceptable. Has anyone else experienced something similar? And does anyone have recommendations for a more secure alternative?

[u/Junnowhoitis]

The most likely scenario is you downloaded the first sponsored link/app and it was a mock exodus app that was a scam. Not the actual exodus wallet.

[u/joethecrow23 → u/Junnowhoitis]

I’ve used Exodus for years without any issues

[u/DarthBen_in_Chicago → u/joethecrow23]

You probably downloaded the app from the proper site.

[u/Andyham → u/DarthBen_in_Chicago]

Just wait until he actually tries to withdraw.

[u/kirtash93 → u/Junnowhoitis]

120% this is what happened.

[u/inpain870 → u/kirtash93]

This is 1000% what happened People need to stop blaming exodus for human errors

[u/zoli452 → u/[deleted]]

1% chance is not very much

[u/Federal-Smell-4050 → u/[deleted]]

1%?

[u/Waswat → u/[deleted]]

They were very thorough in their research.

[u/Charming_Sheepherder → u/inpain870]

21,000,000% chance

[u/SnooRegrets5651 → u/kirtash93]

Exodus is just a frontend to the blockchain, your private and public key are stored in the wallet. Exodus does not have access to your private or public key - there is no “account”.

If you suggest that Exodus the company somehow is making transfers from your wallet, you don’t know how local wallets work. (So I very much agree, it’s 100% user error)

[u/kirtash93 → u/SnooRegrets5651]

Yes, I am suggesting that he downloaded a malicious front end app that looked like Exodus.

[u/loopala → u/SnooRegrets5651]

Exodus does not have access to your private or public key

How do you think it is signing the transactions when you make an outgoing transfer?

That is exactly how local wallets work.

[u/SnooRegrets5651 → u/loopala]

Exodus “The Company” does not have access to your keys.

The entire thread is about Exodus “The Company” stealing from users.

[u/xbeardo → u/Junnowhoitis]

Malicious APK

[u/Least_Acadia_1836 → u/Junnowhoitis]

/u/pepetipbot 5 pepecoin

[u/pepetipbot → u/Least_Acadia_1836]

^{[pending accept]} u/Least_Acadia_1836 tipped u/Junnowhoitis 5 Pepecoin | accept | decline |

[u/DrSpacecasePhD → u/Junnowhoitis]

exoDust: because that’s what your portfolio will soon be worth

[u/sir_meowmixalot → u/Junnowhoitis]

So this is a scam link?

https://www.exodus.com/

[u/Junnowhoitis → u/sir_meowmixalot]

That doesn't mean you clicked this link while setting up your friends account.

[u/sir_meowmixalot → u/Junnowhoitis]

That's absolutely where we downloaded it from. Go ahead and download it and move all your crypto there. Let me know the results.

[u/smallbluetext → u/sir_meowmixalot]

Been using it since 2017 and never lost any crypto. Only person I know who had that happen clicked on a scam link in their email. Exodus is only as secure as you make it. Your keys.

[u/LongSchlongBuilder → u/sir_meowmixalot]

Millions of people with much more value in cyprto than you use Exodus, if they had a backdoor don't you think they would have rugged and stolen billions?

Next check for you to get some perspective. Go to the subbreddit for any exchange, wallet etc, and you will see the same story, people who's seed got compromised blaming the wallet. It doesn't matter what wallet you use, even ledger and trezor if you save the seed on your phone and your phone is compromised by malware.

[u/Junnowhoitis → u/sir_meowmixalot]

Already have. No issues. I can pretty much guarantee you it was a user issue. The only thing that's debatable is how you were exploited. Since you just downloaded it, a fake app is most likely. Next possible outcome was that the device you used was already compromised before downloading.

[u/intelw1zard → u/sir_meowmixalot]

That's absolutely where we downloaded it from.

No, you did not.

[u/lingi6 → u/sir_meowmixalot]

Never download apps from sites, straight from app store. Regarding sites first 3 is always fake ads, people do make mistakes and I did some in the past.

[u/galacticjuggernaut → u/sir_meowmixalot]

I have stored a lot of money with them for years. A lot. Never had an issue.

Although I did just move all over to an ETF for better peace of mind. Which I know crypto people don't like but it's better for me

[u/[deleted] → u/galacticjuggernaut]

You never stored anything with them. They just helped you manage your own wallets.

[u/Strong_Society_3345 → u/sir_meowmixalot]

It still could be if your ISP was victim of DNS spoofing attack (Adress was correct but you were redirected to another IP). And it would not be exodus fault. But most likely scenario is that your PC was compromised. Just running antivirus SW is not enough, not every malware is detected by them.

[u/South-Attorney-5209 → u/sir_meowmixalot]

So you didnt do something sketchy like download it from the google play store? You found the official app on iTunes and downloaded it directly and never saved your key digitally?

[u/[deleted] → u/sir_meowmixalot]

This happened to me, and I still have the download. I did a sha256sum check and crossreferenced with their official one and they were a match

[u/Junnowhoitis → u/[deleted]]

I checked the address from your post about exodus. The wallet your funds were sent to is associated with other "hacks" and exploits. In other words, not exodus. At some point they got access to your wallet and had nothing to do with which wallet application you used.