# crypto wallet phishing — X 热门讨论 (2026-10-01 00:36 UTC)
## @xrpl_adam (xrpl_Adam) · 09-30 22:33 · ♥20 ↻3 💬2 People worry about crypto wallet hacks, but few understand how the last two actually happened.
D'CENT had a signing flaw in a custom implementation. Any crypto in that wallet that signed a transaction and sent it to a network was exposed, not just XRP.
Coldcard had low entropy when generating wallets.
What does that mean for the XRPL? A wallet that uses xrpl.js to generate wallets and sign transactions wouldn't fall for either attack. A basic audit of entropy, key storage and signing would have flagged both of these wallets.
The biggest attack surface in crypto isn't flaws like these. It's scams and phishing. 99.99% of all losses come from people typing their mnemonic words, private keys or seeds into fake sites and software, accepting an offer for a fake/scam NFT, or signing transactions they didn't check or understand. No wallet can stop that. It's on the user to be careful. https://x.com/xrpl_adam/status/2105425823906017528