Hello BitcoinTalk community,
I am facing a critical emergency and am seeking technical guidance. My TokenPocket multisig wallet has been taken over by an unauthorized person, and I am locked out. I believe the attacker has modified the smart contract’s parameters.
-
Blockchain Network:Tron
-
Multisig Wallet Address:
[TDTcR8wBLadFYRekvobSSswHaj351EDNRT](You can look this up on a block explorer like Etherscan, BscScan, etc.) -
Original Setup:
I originally set up a[2-of-3] multisig wallet. Meaning, it required [2] signatures out of [3] possible owner addresses. -
What Happened:
I can no longer approve transactions.When I check the “Manage” section of the multisig in TokenPocket (or by looking at the contract on a block explorer), I see that the list of owners or the required signature threshold has been changed without my consent. The attacker now controls enough keys to prevent me from signing. -
Current Status (PLEASE CHECK YOUR WALLET MANAGEMENT SCREEN FOR THIS):
· Current Signatures Required: [4 of 5]
· Current List of Owner Addresses: [TJdbVGiK2pDTnHDDSyoD4qh16e11f4VXYRTHe4XMGLLeks9icLzW6Y3F1sBuxMFoVHV9 and I don’t recognize the wallets]
- What I’ve Done So Far:
I have contacted TokenPocket official support and am awaiting a response.I have also secured all my other wallets and devices.
My Question to the Community:
Given that the attacker has seemingly altered the owner list or threshold of the multisig contract,is there any possible way to reverse this action? Are there any functions within the standard multisig contract that could be used by the remaining legitimate owners to veto or reverse such a change? Or is the wallet considered permanently compromised once these parameters are changed?
Any technical insight or direction on how to investigate this further would be immensely appreciated. Thank you for your time and help.
