DiegoPapi6 TrustWallet Theft

Notice: This page is a new case study and some aspects have not been fully researched. Some sections may be incomplete or reflect inaccuracies present in initial sources. Please check the References at the bottom for further information and perform your own additional assessment. Please feel free to contribute by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: Some details of this case study are inconsistent with one another, and there is a lack of credible sources found to resolve the discrepancies. This could be because information has been reported inaccurately, details from multiple separate incidents have been incorrectly considered to be related, or there are additional facts not yet discovered which explain the discrepancies. Please check the References at the bottom for further information and perform your own assessment. If you have some time, please contribute back to our database by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Trust Wallet

DiegoPapi6 was tricked into signing a malicious smart contract which took their funds. While many details of their story don't line up perfectly, they've provided a blockchain address. They claim to have lost $8k in funds.

This is a global/international case not involving a specific country.

About DiegoPapi6

DiegoPapi6 is a Christian trucker from Arizona, primarily operating in Texas. He has been a user of Reddit since

He is a regular and enthusiastic investor in Shiba Inu and ZombieInu.

About TrustWallet

TrustWallet is a wallet available as a browser extension or mobile download for IOS or Android. The wallet was originally released in November 2017.

The most trusted & secure crypto wallet

Buy, store, collect NFTs, exchange & earn crypto. Join 25 million+ people using Trust Wallet.

TrustWallet was acquired by Binance on July 31, 2018. Wallets within TrustWallet are typically secured by a 12 word seed phrase.

Just like your bank account login or email credentials, your recovery phrase needs to be kept in a secure, hidden location. You need to write it on a piece of paper (or engrave it in metal) and ensure that the order of words is followed.

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

• When the service was actually started (if different than the "official story").
• Who actually ran a service and their own personal history.
• How the service was structured behind the scenes. (For example, there was no "trading bot".)
• Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.

DiegoPapi6 provided additional details via a follow up private message.

I believe it was a down load via text that appeared to come from T-mobile that got me. Because all I remembered was accepting the download and then a few hours later my wallet was getting drained in real time 😱 I was able to witness 2 sells 😳

Key Event Timeline - DiegoPapi6 TrustWallet Theft

Date	Event	Description
July 31st, 2021 9:28:29 PM MDT	Reddit Post	DiegoPapi6 posts on Reddit about their situation.
December 14th, 2021 2:47:32 PM MST	anonymizeme Reddit Response	DiegoPapi6 posts additional details on a Reddit thread by anonymizeme multiple months later.

Total Amount Lost

DiegoPapi6 did not mention the specific assets lost, but described the amount as "$7700" on December 14th, 2021. However, he also mentioned the stolen assets were "sold back in June for 14 BNB", which is factually inconsistent with a theft that was reported at the end of July.

The closing market price of BNB on July 31st, 2021 was $333.55 USD. Taking his numbers at face value, this would make the value of 14 BNB at that time $4,669.70, which would be an extremely high degree of slippage when liquidating his assets, however that may make sense given a token with less liquidity.

Immediate Reactions

How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

DiegoPapi6 posted on Reddit with some high level details of what happened.

"I really didn't want to post this here today but I have exhausted all avenues and can't seem to get anywhere. I have the address to where the [individual] who sold two of my Tokens for BNB and then sent them off to his or her wallet.

My question is.., Is there there anything I can do at this point? Or should I just move on, dust myself off and try again?

Anyone with knowledge or advice on what I can do please go ahead and shoot it straight. I can handle it"

One of the responses believed that he had bought a scam coin:

"You didn't get hacked and trust wallet is safe. You bought a scam coin that was a smart contract. You should always be careful when you sign a smart contract because it's literally a contract."

Ultimate Outcome

DiegoPapi6 later posted about the situation on Reddit in response to anonymizeme's similar theft situation.

"Been there done that... I completely feel your pain. I had $7700 siphoned out of my old TW which would have translated to over $200,000 in today's price in $BRISE which was sold back in June for 14 BNB.

Good luck in getting your funds back. It will be near impossible but good luck."

While not explicit, this post suggests that he was not able to recover any of his funds. It is unclear what investigation was done. DiegoPapi6 posted that he feels that scammers in the cryptocurrency space should be regulated.

Way too many scammers- That definitely need to be regulated

Total Amount Recovered

Based on the final comment from DiegoPapi6, there do not appear to have been any funds recovered in this case.

Ongoing Developments

From follow up discussion with DiegoPapi6 on Reddit, it would appear that DiegoPapi6 is not pursuing any further investigation.

It’s been a while and I don’t remember where I put this information. But no worries, I’ve made 50x that amount since then

General Prevention Policies

Store most funds offline, double check all transactions.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.