Phishing Scams and Software Flaws Put Bitcoin Users' Funds at Risk
A recent phishing scam targeting Trezor wallet users has resulted in the loss of millions of dollars. The attack, which was promoted through a Google-sponsored ad, tricked victims into entering their recovery seeds on a counterfeit website. David, who lost his life savings to the scam, shared his experience on X (Twitter), warning others about the fake page hosted on Google Sites.
The phishing site, which appeared above the official Trezor website in search results, was able to drain 24.04 BTC from wallets across 80 transactions, totaling approximately $1.6 million at Bitcoin's current price near $65,172. However, nearly all of it has moved on, leaving about 0.04 BTC behind.
Trezor has since escalated the case internally and reported the page for takedown. The company urged users to always verify that they are using the official website and never enter their wallet backup into a website or form.
Meanwhile, BTCPay Server, open-source software that lets merchants accept Bitcoin payments directly, issued its own warning about a critical vulnerability being actively exploited. The team advised operators to update to version 2.4.2 immediately or power servers down until they can.