How do hackers typically gain access to cold wallets/ hot wallets and transfer funds, and what can I do to protect myself?

[Caspa223]

Hello everyone,

I created a new crypto wallet after my previous wallet was hacked last weekend and funds were stolen. I’d like to better understand the most common ways someone can gain access to a crypto wallet and transfer funds out of it.

What are the most common attack methods or security mistakes I should be aware of, and what steps can I take to prevent this from happening again?

Any advice on securing a new wallet would be greatly appreciated. Thank you!

 

[Panther28]

browser plugins, and malware software via black hat and pirated tools, and websites. If your funds have been stolen, your system has been comprised, you should wipe the system clean at OS level, and start afresh. Also don't register your wallet with a random 2 month old website.

 

[Caspa223]

browser plugins, and malware software via black hat and pirated tools, and websites. If your funds have been stolen, your system has been comprised, you should wipe the system clean at OS level, and start afresh. Also don't register your wallet with a random 2 month old website.

Yeah that's what I done. I was surprised how they managed to steal my funds given that my wallet was stored on a ios device which I hardly use. Will be more observant in the future

 

[Fubar1]

it was not the phone you hardly use, it was the seed phrase. if it was ever typed, photographed or pasted anywhere, that is the copy they used. a hardware wallet, seed written on paper only, a separate cheap phone for crypto with nothing else installed, and never approve a contract you did not go looking for. boring, works

 

[itsworth]

You should always have a cold wallet somewhere without internet, and never, EVER write the seed phrases anywhere connected to the internet. Once you create your could wallet, write the seed phrase on a paper (or many) and never take photos of it. Once you done that, have a hot wallet to deal with everyday use, but even so, always try to avoid connecting it anywhere.

 

[linda held]

hardware wallet + offline seed backup + careful transaction signing is a solid baseline.

 

[gaejinn]

Dont do stupid things and you will be okay.

 

[Dani_S]

No seed phrase on any connected device, ever. Treat every transaction signature like a blank check—read what you're approving, keep bookmarks for all dApps, and revoke old approvals periodically.

 

[Nikolaos]

Hello everyone,

I created a new crypto wallet after my previous wallet was hacked last weekend and funds were stolen. I’d like to better understand the most common ways someone can gain access to a crypto wallet and transfer funds out of it.

What are the most common attack methods or security mistakes I should be aware of, and what steps can I take to prevent this from happening again?

Any advice on securing a new wallet would be greatly appreciated. Thank you!

Many pretend they are "support staff" from discord and they try to send you viruses, that when you open them steal your private keys. My advice is to maximize security, to get a hardware wallet and store your crypto there.

 

[tcod3r]

good topic, many useful advises, thank you

 

[Somers]

Convenience often comes at the expense of security. The main attack vector is the user.

Almost all of these attacks are classic "spray and pray," banking on user incompetence. That’s why basic digital hygiene rules apply:
- don’t use PC as an admin. User account only.
- avoid warez. If you absolutely have to, use serial keys on official, untouched installers only, never run modified executables or patched binaries, or app with patched libs. Need to run keygen? - VM.
- run anything questionable in a VM.
- keep browser extensions to a bare minimum, and never install anything with questionable ratings or low download counts.

A near-bulletproof solution(my personal choice for 20+ years): a dedicated, cheap Linux machine used exclusively for signing transactions on cold wallets holding significant funds.
It's not just for crypto. The same goes for any accounts tied to money - only access them from that box.
It's not expensive.

As for hot wallets - never keep more in them than you're willing to lose.

Yeah, it’s not always convenient, but it is what it is.

PS: Don't run AI agents in I-can-do-anything-I-want mode.

 

[RavenMuse]

Goes without saying, never share your see phrase

 

[carlthecrawl]

As long as you don't save your seed on any digital device + you don't approve smart contracts , you are 99% safe

 

[bumbolina ferk]

i tried copying a phishing shortcut that mimicked Ledger Live onto a USB, opened it on a fresh Windows 10 VM, and the malicious .exe stole my 0.45 ETH before I could notice, so now i always verify the installer hash (e.g., SHA256 = 3f2c...) and keep my device's firmware at the latest 2.1.0 release