Trinity Wallet

avoid.net/trinity-wallet→28/100·82% conf.

[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

28/100

[WARNING]82% conf.[Provisional]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

Trinity Wallet was the official desktop and mobile software wallet for the IOTA cryptocurrency, developed and maintained by the IOTA Foundation. In February 2020, a supply chain attack exploiting a compromised MoonPay SDK delivered via CDN resulted in the theft of approximately 8.55 Ti (teraIOTA) worth roughly $2 million from 50 user seeds, forcing the IOTA Foundation to shut down the entire IOTA network for 27 days. Trinity was subsequently deprecated in April 2021 following the Chrysalis protocol upgrade, with the Firefly wallet introduced as its replacement.

Connected Entities

1 entities

Organizations

□Trinity Wallet

Relationships

+ 4 more

Have evidence about Trinity Wallet?

Timeline(14 events)

July 2019

Trinity Wallet officially released by the IOTA Foundation as the project's primary desktop and mobile wallet.

IOTA Foundation Blog

27 November 2019

Attacker executes DNS-interception proof of concept by leveraging a Cloudflare API key linked to MoonPay's infrastructure, beginning reconnaissance against MoonPay's CDN endpoints.

IOTA Foundation — Trinity Attack Incident Part 1

17 December 2019

IOTA Foundation later determines this date as the start of the window during which Trinity users were at risk of seed theft.

IOTA Foundation — Trinity Attack Incident Part 1

22 December 2019

Attacker evaluates a longer-running proof of concept refining malicious code and exfiltration techniques via MoonPay CDN.

IOTA Foundation — Trinity Attack Incident Part 1

25 January 2020

Active attack on Trinity users commences; malicious MoonPay SDK begins being served to Trinity Wallet instances via CDN, capturing user seeds and passwords.

IOTA Foundation — Trinity Attack Incident Part 1

11 February 2020

Attacker executes transactions using hijacked seeds, draining approximately 8.55 Ti (roughly $2 million) from 50 user accounts.

IOTA Foundation — Trinity Attack Incident Part 1

12 February 2020

IOTA Foundation halts the Coordinator, suspending the entire IOTA network to stop further theft. All transaction confirmations cease.

CoinDesk

15 February 2020

IOTA Foundation receives Cloudflare logs from MoonPay confirming unsanctioned API access dating to November 2019.

IOTA Foundation — Trinity Attack Incident Part 1

17 February 2020

IOTA Foundation establishes end of the at-risk window for Trinity users.

IOTA Foundation — Trinity Attack Incident Part 1

29 February 2020

Seed migration period opens; IOTA Foundation releases dedicated migration tool for Trinity users to transfer funds to new seeds.

IOTA Foundation — Trinity Attack Incident Part 2

6 March 2020

IOTA co-founder David Sonstebo announces via Discord he will personally reimburse all theft victims from his own IOTA holdings to protect Foundation reserves.

Decrypt

7 March 2020

Seed migration period closes.

IOTA Foundation — Trinity Attack Incident Part 2

10 March 2020

IOTA Foundation restarts the Coordinator after 27 days of network suspension; IOTA network returns to normal operation.

CoinTelegraph

28 April 2021

Trinity Wallet officially deprecated with the Chrysalis protocol upgrade. Firefly wallet released as the replacement; users directed to migrate.

GitHub — iotaledger/trinity-wallet

Provenance & Audit Trail

Anchored on Solana Verify on-chain12 Wayback Archivessrc:defillama