# Seed Phrase的所有文章

Bitcoin Heist At Home: Wife Uses CCTV To Pocket $176 Million

A domestic dispute in the UK High Court involves a man, Ping Fai Yuen, accusing his estranged wife, Fun Yung Li, of stealing Bitcoin worth approximately $176 million. He claims she secretly recorded the 24-word recovery phrase to his hardware wallet and transferred the funds into 71 separate wallets to complicate tracing. CCTV and audio devices allegedly captured discussions about moving the money discreetly. Li was arrested and released on bail, but police have taken no further action without new evidence. The court sees a strong case and has moved to freeze related assets, noting the risk of cross-jurisdictional transfers. The case may set a legal precedent for applying traditional property laws to cryptocurrency theft.

bitcoinist03/17 17:02

Seized Crypto Stolen As South Korea’s Tax Authority Leaks Private Key

South Korea's National Tax Service (NTS) accidentally leaked a crypto wallet's private key in a press release last Thursday, leading to the theft of $4.8 million worth of tokens. The key, a handwritten mnemonic phrase, was fully visible in an image intended to showcase seized assets from tax evaders. Blockchain researchers confirmed that 4 million PRTG tokens were stolen from the exposed wallet. An expert noted that the actual financial loss may be lower due to the token's low liquidity. This incident follows another recent case in which South Korean police lost 22 Bitcoin from a seized cold wallet. The NTS has not yet publicly addressed the leak.

bitcoinist02/28 23:32

Spring Festival Asset Security Guide: How to Protect Your Tokens While Relaxing with Family and Friends?

Ahead of the Lunar New Year, this guide outlines key strategies to protect your digital assets during a period of increased activity and potential distraction. Key risks highlighted include sophisticated AI-powered scams, such as voice and deepfake video calls that can perfectly mimic acquaintances to request urgent token transfers. The article stresses that traditional verification methods are no longer foolproof and recommends establishing offline verification protocols with trusted contacts. It also warns against clicking any links, even those shared by friends, and advises always using official channels for transactions. The second major risk involves accumulated wallet authorizations (approvals) from past DeFi interactions. These can become hidden vulnerabilities if old, unused permissions are exploited. The guide recommends a pre-holiday "security check" to review and revoke unnecessary approvals, especially unlimited ones, using tools within wallets like imToken or external sites like revoke.cash. The core principle is to adhere to the minimum necessary permissions. Finally, the article cautions against security lapses during travel and social gatherings. This includes never storing seed phrases digitally, avoiding public discussion of holdings, and only downloading wallets from official sources. For transactions, it is critical to double-check the full address (not just the first and last characters), conduct test transfers to new addresses, and use address whitelisting to prevent falling victim to common phishing attacks. In conclusion, while Web3 cannot be risk-free, these proactive measures can create a manageable security environment, allowing users to enjoy the holiday with greater peace of mind.

marsbit02/17 06:39

Trezor and Ledger Users Targeted by Fraudulent Physical Mail Scams

TheNewsCrypto02/16 14:16

SlowMist Flags Snap Store Attack Targeting Crypto Seed Phrases

Blockchain security firm SlowMist has identified a new Linux-based threat targeting cryptocurrency users through the Snap Store. Attackers hijack trusted publisher accounts by exploiting expired domains, then push malicious updates to popular wallet apps like Exodus, Ledger Live, and Trust Wallet. These fake apps prompt users to enter their recovery phrases, which are then stolen, enabling attackers to drain funds. This supply-chain attack exploits user trust in official update channels, making it highly effective. SlowMist warns users to verify publishers and avoid entering seed phrases on unfamiliar platforms, highlighting a growing trend of infrastructure-focused attacks in crypto security.

TheNewsCrypto01/21 14:02

MetaMask Users Under Attack: Fake 2FA Scam Draining Wallets in Seconds

MetaMask users are being targeted by a sophisticated phishing scam that uses fake two-factor authentication (2FA) prompts to steal seed phrases and drain wallets within seconds. The attack begins with fraudulent emails or social media messages impersonating MetaMask support, urging users to enable "mandatory 2FA" under false urgency. Victims are directed to convincing phishing sites that mimic MetaMask’s interface, complete with countdown timers. Once users enter their seed phrase, attackers gain full control of their wallets and immediately transfer all assets. Security firm SlowMist first reported the scam on January 5. While specific loss figures are still emerging, similar recent phishing campaigns have already stolen over $107,000 from hundreds of wallets. MetaMask emphasizes that it never asks for seed phrases via email and advises users to ignore unsolicited security alerts, verify sender addresses, manually type URLs, and use hardware wallets for high-value assets. Enabling authenticator-based 2FA and regularly revoking token approvals are also recommended precautions.

ccn.com01/05 07:52

Trust Wallet Hit by Malicious Update, $7M Stolen — What Happened and What Users Should Do Now

Trust Wallet's Chrome extension was compromised by a malicious update in version 2.68, leading to an estimated $7 million in stolen cryptocurrency. The breach occurred when users imported their seed phrases into the compromised extension, which secretly transmitted private keys to an attacker-controlled domain. This supply-chain attack went undetected as the malicious code was disguised as analytics software. Binance founder Changpeng Zhao confirmed that affected users would be fully reimbursed through the exchange's SAFU fund. Trust Wallet released a patched version (2.69) and advised users to disable the vulnerable extension immediately. Security experts recommend that impacted users transfer funds to new wallets, avoid reusing exposed seed phrases, and revoke existing approvals. The incident highlights the risks of browser-based wallets and underscores the importance of hardware wallets for larger holdings.

ccn.com12/26 08:47

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

Security concerns emerged around the Trust Wallet browser extension on December 25, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update. Reports suggest a supply-chain compromise may have been introduced in a December 24 update, where newly added code could silently exfiltrate sensitive wallet data—particularly during seed phrase imports—leading to immediate fund draining. Multiple users reported losses, with unverified estimates exceeding $2 million. The malicious code allegedly sent data to a recently registered external domain mimicking Trust Wallet infrastructure. The issue appears limited to the browser extension, with no evidence of mobile app compromise. Trust Wallet has not yet issued an official response or advisory. Researchers emphasize the situation remains under investigation, warning users to avoid importing seed phrases into the extension until clarified. If confirmed, this would represent a significant supply-chain attack.

ambcrypto12/25 21:57

Five Great Crypto Gifts for the Holiday Season

Five Crypto-Friendly Gifts for the Holiday Season Instead of traditional gift cards, consider these five practical and thoughtful cryptocurrency-themed gifts for friends interested in crypto. Each is easy to give, straightforward to use, and designed to last through multiple market cycles. 1. **AskSurf.ai** – Offers AI-powered crypto research, on-chain insights, and sentiment analysis. Various pricing plans are available. It’s a year-long information advantage for traders and creators. 2. **Ledger Nano S Plus** – Priced at $59, this hardware wallet supports over 5,500 assets and is ideal for beginners entering self-custody. A perfect gift to show you care about their crypto security. 3. **Fireproof Metal Seed Phrase Backup Plate** – Ranging from $6.99 to $8,000 (for a gold version), this essential tool protects recovery phrases from fire, water, and accidents. Often overlooked, it makes for a highly considerate gift. 4. **Gold Bar Bourbon Limited Edition (750ml)** – A $109.99 bourbon blended from 5- to 14-year-old whiskies, limited to 21,000 bottles. Each includes a metal Bitcoin commemorative coin, nodding to Bitcoin’s 21 million supply cap. Must be gifted to those 21+. 5. **One Shot Miner PRO (2025 Edition)** – At $59.99, this plug-and-play miner offers a fun, low-power way to participate in Bitcoin. It runs 24/7 and gives users a chance to earn Bitcoin rewards every ten minutes.

深潮12/24 07:11

Death Is the Largest 'Buyer' of Cryptocurrency

Death is the largest "buyer" of cryptocurrency, permanently removing coins from circulation when holders pass away without sharing access to their wallets. With an estimated 500 million global crypto holders—mostly young—and an annual mortality rate of 0.2%, around 1 million holders die each year. If just 10% of these leave wallets recoverable, approximately 100,000 wallets holding an average of $20,000 each become inaccessible annually, effectively burning $2 billion in crypto. This issue grows as the holder population ages. To address inheritance without reintroducing intermediaries, a self-custody solution is proposed: create a long-hosted personal website with an obscure domain; encrypt seed phrases by converting each word into a numeric code based on its location in a specific book (page, line, word position); and publish only the code sequence on the site. This method balances security, accessibility, and avoids reliance on third parties, ensuring assets remain both secure and inheritable.

深潮12/16 14:59