A Trust Wallet user says he woke up to find $3,830 gone from his self-custody wallet — and no transaction approval ever appeared. On Nov. 3, Iaroslav Dubovoi (@noirvox_studio) posted on X that he opened Trust Wallet and discovered 3,830 USDT had been transferred out. Blockchain records, he added, show a completed transfer, but he says he never approved any transaction. His post — which drew more than 166,000 views in the shared screenshot — pressed Trust Wallet for answers and asked others to amplify the issue. Dubovoi later published the transaction hash for investigators to follow: 6e26ec6faf90f1c9f484e5f19d29a207da0c55918191c8dbf20625d9250ac25d. Dubovoi says he’s used the same wallet for roughly five years and has long taken precautions to protect his keys. Still, he insists there was no prompt or approval before the funds moved. The exact attack vector in this case has not been identified in his posts — and the recipient address and chain weren’t disclosed in the thread. This report arrives alongside other Trust Wallet complaints. Another user, Abdul (@HasbullahAbdulH), reported issues swapping tokens; Trust Wallet Support replied with troubleshooting guidance on Nov. 4. Separately, a user going by Mister Tee (@meeyatariq) said his wallet was drained after interacting with someone impersonating Trust Wallet support on the NEAR Protocol Discord, showing multiple outgoing transactions across ETH, BTC, BNB and NEAR (including a 3 NEAR transfer worth about $11.49). Why this matters: Trust Wallet is a self-custody wallet — users control the private keys required to sign transactions. Unauthorized transfers can occur without a platform hack if attackers gain control of private keys, trick users into signing malicious contract approvals, exploit permit signatures, or push malicious browser or app updates. The specific mechanism behind Dubovoi’s loss hasn’t been confirmed. Trust Wallet’s history includes high-profile security incidents. In December 2025, the team acknowledged that a compromised Chrome extension (v2.68) allowed attackers to drain funds from affected users without transaction approvals. Blockchain investigator ZachXBT flagged suspicious transfers, and Binance founder Changpeng Zhao said affected users would be compensated while the company investigated. That exploit ultimately accounted for roughly $7 million in losses, investigators said, after malicious code was distributed via a tampered Chrome Web Store release. More recently, Trust Wallet warned about phishing sites impersonating its crypto card service and about permit-signature attacks — an October investigation by Salus found malicious USDG permit signatures that let attackers reuse previously granted permissions to withdraw funds. Safety takeaways for wallet users: - Never share your recovery phrase or private keys. - Be cautious granting token approvals or signing permit messages; review and revoke unnecessary approvals (via reputable on-chain permission tools). - Confirm official support channels — do not trust unsolicited messages or people claiming to be support on Discord/Telegram. - Keep apps and extensions up to date from official sources, and be wary of browser extensions. Trust Wallet has previously advised users to use official support channels when investigating suspicious activity. For Dubovoi’s case, the posted transaction hash gives a starting point for blockchain sleuths and investigators to trace the outflow — but without more detail from the user or Trust Wallet, questions about how the loss occurred remain unresolved. Read more AI-generated news on: https://app.chaingpt.org/news