While mainstream wallets such as Bitpie have for years shown a pop-up warning when an address’s permissions are about to be hijacked (to prevent further deposits), we’ve discovered that certain fake-wallet operators use a more covert method. After you install the fake wallet, it won’t immediately alter your address’s permissions—instead, it allows small deposits and transfers to proceed normally. Only once your address balance reaches 1000 USDT-TRC20 will it, within seconds, swiftly seize control. Please stay extra vigilant.

How can I avoid being maliciously multi-signed?

1. Keep your mnemonic phrase and private key securely secret, ensuring they are not leaked.

2. Do not disclose your mnemonic phrase or private key to anyone or any website to prevent phishing attacks.

3. Download wallet software only from official websites; do not use search engines like Baidu or Google to find downloads, to avoid fake wallets.

What should I do if my permissions have been changed?

Once an address has been maliciously multi-signed, you can no longer transfer assets from that address; the best you can do is to limit further losses.

1. Transfer assets from other addresses associated with your mnemonic phrase that have not been compromised to a secure address. Verify that the wallet app for the secure address is downloaded from the official source to ensure it's genuine.

2. Stop using the address and account with changed permissions to receive any assets.

3. Promptly report to the police; truthfully provide the method and URL used to download the wallet, and detail how you stored your mnemonic phrase and your entire usage history.

Bitpie Team

October 20, 2025