Trust Wallet, a Wallet Provider, Raises Concerns over “iMessage” Security Vulnerability, Facing Industry Criticism: What Went Wrong?

Trust Wallet, a Wallet Provider, Raises Concerns over "iMessage" Security Vulnerability, Facing Industry Criticism: What Went Wrong?

Trust Wallet, a Wallet Provider, Raises Concerns over "iMessage" Security Vulnerability, Facing Industry Criticism: What Went Wrong?

Contents
Toggle
Trust Wallet calls attention to iMessage vulnerability
Industry professionals question the authenticity of the news
Cryptocurrency wallet provider Trust Wallet today posted on X, urging iOS users to immediately disable iMessage, stating that there is “credible information” indicating the existence of a zero-day vulnerability in the feature, which hackers could exploit to take control of users’ phones. (A “zero-day vulnerability” refers to a security flaw that software developers or hardware manufacturers are unaware of or have not yet fixed.)
The company emphasizes that this vulnerability can penetrate and control iPhone devices without clicking on any links, posing a significant threat to users’ cryptocurrency assets. Trust Wallet CEO Eowyn Chen shared a screenshot that he claimed was evidence of a potential zero-day vulnerability, showing that this vulnerability is being sold on the dark web for $2 million.
However, the vulnerability threat presented by Trust Wallet has been questioned by several industry professionals. One anonymous blockchain researcher named Beau responded to Eowyn Chen’s tweet, expressing skepticism:
Another skeptic is renowned developer foobar, whose post states that Trust Wallet’s claims are baseless and simply aimed at deceiving and misleading the public. Additionally, web3 security company Kerberus Sentinel3, after analyzing the code of the website where the supposed hackers sell vulnerabilities, found that the website’s code is written using ChatGPT, and stated that a high-end hacker capable of discovering iOS system vulnerabilities would not lack the ability to set up a website, strongly suggesting that this so-called vulnerability most likely does not exist.