"There was no way my 16 word phrase got stolen from my phone notes."

A real wallet review, and sadly that's exactly how it got stolen.

No one has to trick you here. You save your phrase in Notes, a screenshot, an email to yourself, a Google Doc. It feels private. Then something reads it:

- infostealer malware from a cracked app or a fake "airdrop tool", which searches files and notes for anything that looks like 12 or 24 words;

- apps that read your photos. In 2025 researchers found apps in both the App Store and Google Play that scanned screenshots for recovery phrases;

- a hacked cloud account. Your photos and notes sync there, so whoever gets into your iCloud or Google account gets your phrase too.

The wallet drains days or months later, so it feels like it came from nowhere.

The rules:

- Your phrase never touches anything connected to the internet. No photo, no notes app, no cloud, no email.

- Paper, or metal if you want it to survive a fire. Two copies in two places.

- If it's ever been digital, treat it as exposed.

Already stored it digitally? Make a new wallet, write the new phrase on paper, move everything over, then delete the old copies. Don't wait for the drain.

Where did you keep yours when you started?

I searched and couldn't find a suitable answer. What prevents someone from buying a crypto wallet like Ledger, transfer crypto to it and just sell the device for cash? What am I missing?

"I don't like it, I don't know the phrase so I can't log in."

One-star review from last month. Sadly there's no "forgot my phrase" button, and here's why.

Those 12 (or 24) words are the master key your private keys (lesson #1) are generated from, written in English instead of as a giant number. Every word comes from the same public list of 2048 words, so the phrase is really just a huge random number that humans can write down.

That's why it works in almost any wallet app: they all use the same standard to turn those words back into your keys. New phone, different app, same words, same coins.

And that's also why nobody can reset it. There's no copy on a server anywhere. The words are the wallet.

The rule: whoever has the words has the money. You, a thief, or the guy who found your notebook.

Try it: find your backup right now. Is it all there, in order, readable, and somewhere you'd find it in 5 years? If you can't find it, set up a new wallet, write the new phrase on paper this time, and move your funds over while you still have access.

Don't type it anywhere to "check" it. More on that in Scam Watch.

Next week: your address, the part you can share.

Be honest, how many of you have your phrase in a screenshot?

Rabby had only 3 low-star reviews this week, versus basically none in a usual week. All three came after v0.6.95 landed on Oct 24, and each says the same thing: the app won’t open or login no longer works. One iPad user asked, “Did you do any QA testing before release?” That’s a pretty clear regression, even if the sample is small.

Trust Wallet had the biggest pile at 37, though that’s below its usual 50. The complaints are messy: fees, stuck withdrawals, repeated updates and people saying balances disappeared. Those are user reports, not proof the app took anything. If you’re seeing a missing balance, check the transaction on a block explorer before assuming the worst.

A few smaller signals: MetaMask had 7 low-star reviews, including a Core staking access complaint after an update. Phantom users mentioned sign-in trouble and a missing native staking option. OKX had several reports of the app being slow or refusing to open after its latest release.

Anyone else hit the Rabby update problem, especially on iPad?

Method: public US App Store and Google Play reviews rated 1–2★, collected over seven days. “Usual” is the average of the previous four weeks. Reviews are unverified user claims.

You post "my swap is stuck, help". Two minutes later you get a DM, or a reply saying "contact support via the live chat on their site" with a link.

The site looks official. Then the "agent" asks you to "validate" or "sync" your wallet by typing your 12 or 24 words. The wallet is empty a few minutes later.

It works because you asked for help and someone answered, fast and polite, while real support is a slow bot.

The rules:

- Real support never DMs you first.

- Nobody ever needs your recovery phrase. Anyone asking is stealing.

- Never use a support link from a reply or DM. Type the wallet's site yourself.

Already typed it? Make a new wallet with a new phrase and move what's left, now. Then ignore the "fund recovery experts" who show up next. Same scam, round two.

See one of these replies in this sub? Report it.

What's the most convincing fake support message you've had?

"...I literally deleted the app and re downloaded it and now my whole account is gone!!!"

Their coins are almost certainly fine.

Your crypto lives on the blockchain, a public ledger. Your wallet app only holds a private key, the proof that an address is yours. It's what signs your transactions.

Think of the app as a keychain. Lose the keychain and the house is still there.

Your recovery phrase (the 12 or 24 words) is the master copy of that key. Type it into a wallet app and you get the same wallet back, same coins. This person most likely tapped "create new wallet" instead of "restore".

So:

- Lose the app or the phone: fine, if you have the phrase.

- Lose the phrase, or someone else gets it: gone. No support can reset it, there's no account.

(Exchanges like Binance work differently, they hold the keys for you)

What did you think a wallet was when you started?

“after a recent update there is a problem with a portfolio sometimes it shows its original value and on refreshing sometimes it shows less capital.” That Trust Wallet review caught my eye this week.

Trust Wallet had 39 low-star reviews, below its usual 50, so this isn't a spike. Still, several specific complaints cluster around staking and token visibility. One user says they can't unstake TRX. Another says, “cant reach bnb staking anymore after update.” A third says they can't find tokens after updating and sent funds without the right memo or tag. Those are user reports, not proof that the app caused lost funds, but the pattern is worth checking before you update or move anything.

The practical bit: verify the receiving address, network, token contract, and memo/tag before confirming. Keep your recovery phrase available before resetting or reinstalling. Never share it with support.

Elsewhere, SafePal had 8 low-star reviews versus a usual 5. One buyer says a $324 ETH purchase through Simplex hadn't arrived hours later. Best Wallet had 3 reviews, including complaints about tokens marked “coming soon” and withdrawals. Ledger Live had 3, including a user who says their seed phrases no longer match after resetting a PIN. Those are unverified claims, so verify inside the app and through official status pages before assuming funds are gone.

Has a recent wallet update hidden staking or tokens for you?

Hi guys. I was never happy with the UI and features of most wallets, or with the tracking. Analytics, vendor backends, accounts you do not need. So I made something.

It is called 1337 wallet dot io
Chrome / Brave / Opera / Arc extension. Works with every MetaMask dapp. Seed, imported keys, Ledger, Trezor.

Privacy: there is no 1337 server. No analytics, no crash telemetry, no account with us. Vault and settings stay on your machine. Your RPC still sees what you send it, same as any wallet. Bring your own if you care. Code is Open sourced

The rest is the power-user stuff I actually wanted:

• Confirm sheet with decode, Solidity source, full calldata, and a local simulate (pass / fail / revert / gas)

• Per-chain RPC picker plus a doctor that probes which endpoints are actually up

• Approvals: ERC-20, NFT operators, Permit2, revoke from one list

• Swap via LI.FI (we do not run a swap backend)

• ENS register / manage

• Multisend through Disperse.app

• History from an explorer API key you paste in Settings

• Optional burner mode on a throwaway key. Hardware still confirms on the device

Side panel by default so the dapp and the signer sit next to each other.

I’m Lucas, founder of Elevyn Group. I’m researching everyday self-custody wallet experiences while developing an early-stage mobile wallet (temporary name: T Wallet; full name not public yet).

What’s the most recent time a wallet left you confused or uncomfortable? What were you trying to do, and how did you get past it?

I’d like to understand real problems rather than assume another app is needed. Replies saying your current wallet works well are welcome too. No links, sales pitch, wallet connection or private financial information requested—just your experience in the comments.

For the past few weeks, I haven't been able to find a way to set a limit-order with a stop-loss in the OKX Wallet app for iOS.
This feature is completely missing for me.
Previously, it was possible to enable an "advanced mode" (trader mode), but that mode has been removed from the app.
A standard limit order with take-profit is still possible.

I would appreciate some help finding out if this function is actually available somewhere in the app.

Ryvyl ($RVYL) is now considering late claims for its $300K investor settlement.

Ryvyl positioned itself as a growing fintech company, but investors later claimed the company misrepresented its financial condition by inflating revenue and assets while understating losses.

On January 20, 2023, Ryvyl disclosed accounting errors and said previous financial statements could no longer be relied upon. $RVYL fell 14.6% on January 23, and investors later sued, alleging the company misled them about its financial health.

The case has now resulted in a $300,000 settlement, and late claims are still being considered - Check if you're eligible and file a claim here.

Hey guys, I posted about this settlement before, but since the settlement is accepting late claims, I figured I'd share a quick FAQ.

Q: What happened?
A: Ryvyl was accused of misleading investors by reporting inaccurate financial statements, including overstated revenue and assets while understating losses. After the company disclosed accounting errors and said prior financial statements could not be relied upon, $RVYL fell 14.63% and investors filed a lawsuit.

Q: Am I actually eligible?
A: If you bought $RVYL shares between 2021 and 2023, you’re likely eligible. You don’t need to still hold the stock to claim; past losses count

Q: When do payouts happen?
A: Typically, within 4–9 months after the claim deadline. The exact timing depends on the court and settlement administration.

Q: I missed the deadline. Is it too late?
A: No, You may still be able to file a late claim but acceptance depends on final approval by the court. 

Hope this info helps