How do hackers typically gain access to cold wallets/ hot wallets and transfer funds, and what can I do to protect myself?

Hello everyone,

I created a new crypto wallet after my previous wallet was hacked last weekend and funds were stolen. I’d like to better understand the most common ways someone can gain access to a crypto wallet and transfer funds out of it.

What are the most common attack methods or security mistakes I should be aware of, and what steps can I take to prevent this from happening again?

Any advice on securing a new wallet would be greatly appreciated. Thank you!

browser plugins, and malware software via black hat and pirated tools, and websites. If your funds have been stolen, your system has been comprised, you should wipe the system clean at OS level, and start afresh. Also don't register your wallet with a random 2 month old website.

Panther28 said:

browser plugins, and malware software via black hat and pirated tools, and websites. If your funds have been stolen, your system has been comprised, you should wipe the system clean at OS level, and start afresh. Also don't register your wallet with a random 2 month old website.

Click to expand...

Yeah that's what I done. I was surprised how they managed to steal my funds given that my wallet was stored on a ios device which I hardly use. Will be more observant in the future

it was not the phone you hardly use, it was the seed phrase. if it was ever typed, photographed or pasted anywhere, that is the copy they used. a hardware wallet, seed written on paper only, a separate cheap phone for crypto with nothing else installed, and never approve a contract you did not go looking for. boring, works

You should always have a cold wallet somewhere without internet, and never, EVER write the seed phrases anywhere connected to the internet. Once you create your could wallet, write the seed phrase on a paper (or many) and never take photos of it. Once you done that, have a hot wallet to deal with everyday use, but even so, always try to avoid connecting it anywhere.

hardware wallet + offline seed backup + careful transaction signing is a solid baseline.