Ukrainian user Artur Romanchuk reported that 68 327 USDT was withdrawn from his Trust Wallet, allegedly after an iPhone compromise.

Incident details

Romanchuk stated that attackers accessed his wallet through vulnerabilities present in an outdated iOS build and that the theft totaled 68 327 USDT.

The claim connects the intrusion to a toolkit known as DarkSword, although independent verification of that connection is not yet available.

About DarkSword and infection vectors

DarkSword is described as a set of tools used to compromise iPhones; in some reported cases, simply opening a manipulated website was sufficient to trigger exploitation.

Apple has already patched the vulnerabilities used in several of these attacks with subsequent iOS updates, according to public security advisories.

Security recommendations

Users are advised to keep their devices updated and avoid storing seed phrases in notes, photos or screenshots, as such practices increase exposure to theft.

• Keep iOS updated to the latest release to ensure known vulnerabilities remain patched.
• Do not store seed phrases in cloud-synced notes, image galleries or other easily accessible files.
• Consider cold-storage options, such as hardware wallets or an isolated device, but do not rely on a single wallet installation alone.

Further guidance

A step-by-step setup guide outlines how to configure an isolated smartphone for offline storage and contrasts this approach with hardware solutions such as Ledger and Trezor.