Trinity Wallet
Last changed 2026-11-03 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 28 to 12. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4mL4E8…s3dhSummary
Trinity Wallet was the official desktop and mobile software wallet for the IOTA cryptocurrency, developed and maintained by the IOTA Foundation. In February 2020, a supply chain attack exploiting a compromised MoonPay SDK delivered via CDN resulted in the theft of approximately 8.55 Ti (teraIOTA) worth roughly $2 million from 50 user seeds, forcing the IOTA Foundation to shut down the entire IOTA network for 27 days. Trinity was subsequently deprecated in April 2021 following the Chrysalis protocol upgrade, with the Firefly wallet introduced as its replacement.
Connected Entities
2 entities · 60 linked investigations- Trinity Wallet→mentioned with→ZachXBT(65%)
Connected Through
1 shared actor · 410 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganization
Timeline(14 events)
July 2019
Trinity Wallet officially released by the IOTA Foundation as the project's primary desktop and mobile wallet.
IOTA Foundation Blog27 November 2019
Attacker executes DNS-interception proof of concept by leveraging a Cloudflare API key linked to MoonPay's infrastructure, beginning reconnaissance against MoonPay's CDN endpoints.
IOTA Foundation — Trinity Attack Incident Part 117 December 2019
IOTA Foundation later determines this date as the start of the window during which Trinity users were at risk of seed theft.
IOTA Foundation — Trinity Attack Incident Part 122 December 2019
Attacker evaluates a longer-running proof of concept refining malicious code and exfiltration techniques via MoonPay CDN.
IOTA Foundation — Trinity Attack Incident Part 125 January 2020
Active attack on Trinity users commences; malicious MoonPay SDK begins being served to Trinity Wallet instances via CDN, capturing user seeds and passwords.
IOTA Foundation — Trinity Attack Incident Part 111 February 2020
Attacker executes transactions using hijacked seeds, draining approximately 8.55 Ti (roughly $2 million) from 50 user accounts.
IOTA Foundation — Trinity Attack Incident Part 112 February 2020
IOTA Foundation halts the Coordinator, suspending the entire IOTA network to stop further theft. All transaction confirmations cease.
CoinDesk15 February 2020
IOTA Foundation receives Cloudflare logs from MoonPay confirming unsanctioned API access dating to November 2019.
IOTA Foundation — Trinity Attack Incident Part 117 February 2020
IOTA Foundation establishes end of the at-risk window for Trinity users.
IOTA Foundation — Trinity Attack Incident Part 129 February 2020
Seed migration period opens; IOTA Foundation releases dedicated migration tool for Trinity users to transfer funds to new seeds.
IOTA Foundation — Trinity Attack Incident Part 26 March 2020
IOTA co-founder David Sonstebo announces via Discord he will personally reimburse all theft victims from his own IOTA holdings to protect Foundation reserves.
Decrypt10 March 2020
IOTA Foundation restarts the Coordinator after 27 days of network suspension; IOTA network returns to normal operation.
CoinTelegraph28 April 2021
Trinity Wallet officially deprecated with the Chrysalis protocol upgrade. Firefly wallet released as the replacement; users directed to migrate.
GitHub — iotaledger/trinity-walletDecision Log
- slot 465081203 · hash 7m8fUPmP7UwWeqQL4gxEU1huaNckyjMxDcLW7M5vazsf
- slot 465081198 · hash xK4maDug4HLyUgbFG7QeNvDdaK1kbyNe8c2eGZRBRCS
- slot 422777478 · hash 3NtR9BEacnv6KmzMbyGrS6KwMPUjwjbuKGNwkZDcbRaV
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 12 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:55:01 AM
last updated: 11/3/2026, 11:19:53 PM
9 viewsavoid.net — verified advice for a post-truth world