Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 68 posts

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#41

Post by gruez »

fadys wrote: post #12
menmob wrote: post #10

Has to be someone close to him who knew about both. I seriously doubt someone compromised ledger’s security and only stole $40k.

It's literally no one close to him. Please take that as a fact. The paper with the seed words was written a few years ago. It has been hidden since. I'm willing to bet we'll be hearing about more people getting their wallets wiped clean.

>The paper with the seed words was written a few years ago. It has been hidden since.

How good is the hiding place? Both in terms of security (eg. a rock outside your house vs a safe deposit box) and obscurity (eg. on your desk vs buried in a field in the middle of nowhere).

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#42

Post by gruez »

lazide wrote: post #11
fadys wrote: post #3

I want to make it clear that the Ledger passphrase, on paper, and hidden, was not ever accessed. And, even if it was, which it wasn't, his Trust Wallet on his iPhone was also compromised. How can someone guess both passphrases, from separate wallets, in separate locations with different words? It's literally impossible. Whatever technology is used to generate the passphrases in each of those wallets must be compromis…

Was his ledger manipulated or compromised in some way before using it? Was the seed already pregenerated? Was the paper actually compromised, or some other system got the data? There are plenty of other ways. You keep saying it is impossible the paper was accessed, but that doesn’t mean it wasn’t- or the information got compromised another way. Did he print it out from a common machine?

>Was his ledger manipulated or compromised in some way before using it? Was the seed already pregenerated?

The timing of that (ie. two separate wallets compromised at about the same time) makes that unlikely. What are the chances that the guy who shipped him a compromised ledger is also the same guy who hacked his iphone?

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#44

Post by gruez »

DougN7 wrote: post #43

Perhaps there was a keylogger installed all the way back when he created the keys/wallets.

keyloggers on iphones is unlikely, especially for a teenager. keyloggers on hardware wallets is impossible, unless he was being dumb and entered the recovery/seed phrase back into his computer.

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#46

Post by xiphias2 »

I don't know what happened, but I also lost significant amount of BTC a few times in the past and started obtaining from scratch.

My current advised setup is this: 3 different harware wallets from multiple vendors, generate 2-of-3 multisig. Send some money to the address, try to send back money with any 2 of the 3.

After the address is safe, put the 3 wallets in physical trezors stored with different banks. Also use the same, but very simple passphrase that you 100% don't forget (do

The cost of this setup maybe $500/year, but at $40k it's worth it.

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#47

Post by sigmaprimus »

fadys wrote: post #26
willj wrote: post #24

Can you give us more reason as to why you're 100% sure the paper was not accessed? You don't need to tell us where it is/was, but your extreme certainty in that fact seems greater than the certainty I have about almost anything in my life. Another possibility no one has mentioned yet: is it possible your nephew is lying? Perhaps he "stole" the cryptocurrency from himself, and went to his relative hoping they might gi…

I have the transfer-to addresses. The thief has done this multiple times...for 7.5 BTC too, in one instance. He's not lying and has never been known to lie. I'm sure in the same way you can be sure that if you were tasked with doing the same thing, you'll feel 100% confident that no one would be able to access that paper. And even if they did, they wouldn't know what they were looking at.

Why would a thief use the same address more than once? Especially one that is sophisticated enough to do what You have described? Is it possible that the address in question is a public address pointing to a gambling or tumbling service? Have You Googled it?

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#48

Post by gruez »

lacker wrote: post #33

It's possible that those wallets are compromised, but it's quite strange that both of them would be compromised at the same time. It's also strange that someone in possession of a compromise for one of these wallets would use it for merely $40,000. To me it seems more likely that your nephew is mistaken about some aspect of this story. Perhaps he used some malicious software and subsequently forgot about it. Either w…

>but it's quite strange that both of them would be compromised at the same time. It's also strange that someone in possession of a compromise for one of these wallets would use it for merely $40,000.

Which is why I think this is an inside job (ie. someone close to him, or as some suggested, himself). If this was a remote hacker, it would require quite a bit of effort: scouting him out as his target, hacking his computer/devices/accounts, discovering his holdings (as opposed to just grabbing the trust wallet and running), preparing the malware/ledger exploit. While it all might be worth it for $40k, there are probably better targets than some kid with only $40k in crypto. It's far more likely that someone he knows or is close to him got access to his icloud account (through his unlocked phone/computer), and found his stash where he stored his ledger recovery phrase.

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#49

Post by threatofrain »

gruez wrote: post #36
threatofrain wrote: post #23

Sounds like something that should be investigated by the relevant authorities, esp. if there are multiple people affected.

>the relevant authorities Who? The local PD? NSA/FBI?

I wouldn't presume the poster lives in the USA. There's no point in guessing what the relevant authorities are in someone's country of origin, and there's no point in playing HN detective when HN is being trickle-fed data from a barely-used account.

There's very little hard data to go on except for a bitcoin transaction.

Post reply on HN