Overview
- Multiple Trust Wallet users have reported unexplained withdrawals, including a claim that 3,830 USDT left a wallet without any visible approval and a shared transaction hash that gives investigators a starting point for tracing funds.
- The specific technical cause of the reported transfers remains unconfirmed, with on‑chain data available but no formal explanation from Trust Wallet about these individual incidents.
- Security research and a December 2025 extension exploit show how attackers can move funds without fresh approvals, either by abusing pre‑granted token permissions or using malicious permit signatures that grant spending rights.
- At least one user said his wallet was drained after interacting with a person impersonating support on a protocol Discord server, highlighting phishing and social engineering as likely attack routes.
- Affected users face immediate loss of funds and must rely on chain forensics and cooperation from Trust Wallet and researchers, and other users should avoid signing unfamiliar requests, never share seed phrases, and revoke unused token approvals.