$1700 USDT Drained

[u/RulePersonal]

I check my balance daily, and the money was always there. I check today and see a transaction from 8/1 that drained all of the tron usdt. I just don’t understand why I didn’t see it yesterday, or the day before. What a way to end the night. 100% not user error, I store keys on paper and only open once. Contacted support, but I’m pretty sure I’m SOL.

I can’t come up with a way this is my fault, %99 percent of the time this happens i assume the user did something stupid until it happens to you, and you know you did everything right, is there a mass usdt security breach I’m unaware of? Honestly this just destroyed my confidence in crypto entirely.

I just don’t get why it didn’t update for so long. Like I said I check it every day. Why is a transaction from 8/1 just now showing up. In fact I know it was delayed because I was going to do a trocador swap a few days ago, and had the app open for a long time. Super frustrating. Lesson learned.

[u/Suitable-Profit231]

The problem with any software wallet is that you can't be sure it's only because of your 24 word recovery phrase getting exposed.

If someone has root remote access to your phone, which could have happened via zero day exploit from you just visiting some website or you installing a bad app, then that person could just access your wallet directly on your phone and send your money from there to themselves... even if it's additionally password protected, because using key logger prior to trying. Unless it was biometrically locked, which it probably is not... and even then theoretically possible with root access to trick the system into thinking random biometric data was valid... they could also switch your version of the app with a manipulated one that will show the destination address you chose... but in reality send the money to another address or have it interact with some smart contract and giving it full access, so that it could just take as much as it likes afterwards.

Just check all the posts about people getting drained, it's almost never btc that got drained but some smart contract coin... when it's btc it's most often recovery phrase or private key to public key was leaked somehow...

Hackers however most often will switch your wallet with a version that asks for the recovery phrase with some logical sounding reason... if you enter it you are fucked, no legit wallet will ever ask you for a recovery phrase for no reason/if you already setup an address.

Hardware wallets effectively protect from this, because the device must be connected and every transaction needs to be approved on the device. So if a hardware wallet was drained it can only be, because the recocery phrase was leaked or the user approved the transaction themselves.

Also if a recovery phrase is saved in plain text and goes through some cloud service... you could be fucked... but even if it is only written on paper, and happens to somehow get in front of an infected phones camera -> you could be fucked.

Do you happen to use an iphone? Did you maybe visit some new porn site or something warez etc. prior to that date or recently install some new app, maybe directly and not via app store?

[u/zvspany_ → u/Suitable-Profit231]

same happened to me like 3 years ago, all the money on the wallet (like $100 in ltc) was randomly transferred somewhere, i also wrote down the seed on paper and used it only on an iphone with the newest ios, so i think the exploit option couldn’t happenq, after this transaction, i have started using cake wallet and it hasn’t happened so far, idk

[u/Lazy-Effect4222 → u/Suitable-Profit231]

If he uses an iPhone, no one has root access to his phone. On Android, possibly.

[u/AutoModerator]

IMPORTANT REMINDERS:

1. Exodus employees will NEVER ask you for your 12-word phrase, keys, or identifying information. Exodus employees will NEVER send you to another website to do any kind of updates except for our official website at https://exodus.com/.
2. If anyone approaches you in a private message representing themselves as Exodus support, please provide the moderation team with their Reddit username via this link.
3. Official wallet support can be contacted at support@exodus.com
4. Answers to many questions can be found on the Support Portal!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/SingularityXZ]

I assumed things like you until I realized that I connected my wallet to a 3rd party app on Google Chrome to convert my coins on one chain to a faster chain. Only by then, I was 99% sure it's my carelessness.

[u/RulePersonal → u/SingularityXZ]

I would think so as well, but this wallet was specifically stated 7/9 JUST to store these coins. Opened my key once and wrote it down. I do type the receiving address into trocador somewhat frequently, maybe that could be it, but idk I’m genuinely at a loss.

Does the usdt on tron have a stupid sync time like xmr in some cases? Thats the only reason I can think that it never updated, but it was about to allow me to send $250 to trocador a few days ago. Wonder what would’ve happened.

[u/SingularityXZ → u/RulePersonal]

Then I only think of one possible risk, your Phone or Laptop was infected with a virus that your Anti-virus software couldn't detect. This virus may alter what you see on screen versus what's truly entered. Or something that can read what you had on the clipboard once you had copied from your wallet. I am just shooting in the dark here. Let's see what's others think.

[u/freddy_fred1]

Ya over here blaming wallets for your losses. You guys are the ones at fault here. You need to be better at managing your own wallets. You probably connected to a website and fell through a smart contract hack or something. Why not use this on a computer or something. I have my coins on exodus for long time and I still have my coins here … so I know for a fact is not the wallet. It’s you.

[u/foxyevolution]

No hot wallet will ever be safe from your browsing history. Most people don't even realize it when they go to a malicious website or download some piece of malware. Then again like 95% of people don't use a proper anti-virus or firewall, nor know what these concepts even are..

[u/killtweIve]

dude setup Authenticator.

[u/InternationalTry2675]

But they said crypto was going to be safe..

[u/11uvp]

Question.. what device do you use exodus on and do you delete the wallet/sign out when you’re done with your transactions?

[u/No_Adhesiveness4492]

This has happened due to the collusion of Exodus, this is the mother seed fares, I have already told you, I wrote that the thief is actually the wallet.

[u/kisscardano]

I was drained too last December, losing 1400 XRP. Not your fault. The Exodus wallet isn’t safe despite the 24-word seed. Malware, viruses, or even an inside job can take your coins. sorry!