{"id":55364,"date":"2025-11-21T11:16:23","date_gmt":"2025-11-21T04:16:23","guid":{"rendered":"https:\/\/hbbgroup.net\/trumps-wlfi-moves-to-contain-wallet-breach-while-federal-inquiry-looms\/"},"modified":"2025-11-21T11:16:23","modified_gmt":"2025-11-21T04:16:23","slug":"trumps-wlfi-moves-to-contain-wallet-breach-while-federal-inquiry-looms","status":"publish","type":"post","link":"https:\/\/hbbgroup.net\/vi\/trumps-wlfi-moves-to-contain-wallet-breach-while-federal-inquiry-looms\/","title":{"rendered":"Trump\u2019s WLFI Moves To Contain Wallet Breach While Federal Inquiry Looms"},"content":{"rendered":"<div id=\"ftwp-postcontent\">\n<p>World Liberty Financial (WLFI) said it is reallocating funds and confirming user identities after several wallets were compromised ahead of its platform launch.<\/p>\n<p>According to WLFI\u2019s post on X, the company <a href=\"https:\/\/worldlibertyfinancial.com\/\" target=\"_blank\" rel=\"nofollow\">froze<\/a> the affected addresses in September and has been verifying ownership before moving assets back to users who pass the checks.<\/p>\n<h2 id=\"ftoc-heading-1\">Wallet Breaches And Response<\/h2>\n<p>Reports have disclosed that the breaches came from either phishing attacks or exposed seed phrases, not from WLFI\u2019s own platform or smart contracts, the company said.<\/p>\n<p>WLFI described the problem as linked to third-party security failures and said only a \u201csmall subset\u201d of users were hit \u2014 though it did not give exact figures on how many accounts or how much crypto was involved.<\/p>\n<blockquote>\n<p dir=\"ltr\" lang=\"en\">1\/ Prior to WLFI\u2019s launch, a relatively small subset of user wallets were compromised via phishing attacks or exposed seed phrases.<\/p>\n<p>Since then, we\u2019ve tested new smart contract logic to safely reallocate user funds and verified users\u2019 identity via KYC checks.<\/p>\n<p>Shortly, users who\u2026<\/p>\n<p>\u2014 WLFI (@worldlibertyfi) <a href=\"https:\/\/twitter.com\/worldlibertyfi\/status\/1991243561715519933?ref_src=twsrc%5Etfw\" rel=\"nofollow\">November 19, 2025<\/a><\/p>\n<\/blockquote>\n<p>On-chain data cited by analyst Emmett Gallic of Arkham shows <a href=\"https:\/\/www.coingecko.com\/en\/coins\/world-liberty-financial\" target=\"_blank\" rel=\"nofollow\">WLFI<\/a> executed an emergency action that burned 166.67 million WLFI tokens, a move valued at $22.14 million from a compromised address, and then shifted tokens to a recovery address.<\/p>\n<p>That firewall step appears intended to limit further loss while the company sorts ownership questions.<\/p>\n<blockquote>\n<p dir=\"ltr\" lang=\"en\">World Liberty Fi executed an emergency function burning 166.667M <a href=\"https:\/\/twitter.com\/search?q=%24WLFI&#038;src=ctag&#038;ref_src=twsrc%5Etfw\" rel=\"nofollow\">$WLFI<\/a> ($22.14M) from compromised address, reallocating to a recovery address.<\/p>\n<p>Function designed for two scenarios:<br \/> An investor loses wallet access before vesting OR malicious account acquires WLFI via exploit <a href=\"https:\/\/t.co\/VSUDWhDPCR\" rel=\"nofollow\">pic.twitter.com\/VSUDWhDPCR<\/a><\/p>\n<p>\u2014 Emmett Gallic (@emmettgallic) <a href=\"https:\/\/twitter.com\/emmettgallic\/status\/1991254434207146018?ref_src=twsrc%5Etfw\" rel=\"nofollow\">November 19, 2025<\/a><\/p>\n<\/blockquote>\n<p><img loading=\"lazy\" data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/www.newsbtc.com\/wp-content\/uploads\/2025\/11\/A_dfad2c.png?resize=1024%2C527\" alt width =\"1024\" height=\"527\"  ><\/p>\n<h2 id=\"ftoc-heading-2\">Regulatory Spotlight Grows<\/h2>\n<p>The timing of the security disclosure has drawn extra attention. Based on reports, Senators Elizabeth Warren and Jack Reed asked the DOJ and Treasury to review <a href=\"https:\/\/financefeeds.com\/trumps-crypto-firm-freezes-accounts-after-security-lapses-as-senators-seek-probe\/#\" target=\"_blank\" rel=\"nofollow\">alleged WLFI token sales<\/a> tied to sanctioned parties.<\/p>\n<figure><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.tradingview.com\/x\/VAMMcspt\/\" alt width =\"2048\" height=\"985\"><figcaption>BTCUSD trading at $92,208 on the 24-hour chart: <a href=\"https:\/\/www.tradingview.com\/chart\/ajrdy9Lf\/\">TradingView<\/a><\/figcaption><\/figure>\n<p>Their letter referenced a watchdog report from Accountable.US that linked transactions to the Lazarus Group \u2014 a North Korea-linked actor on sanctions lists \u2014 and to an Iranian crypto exchange. It remains unclear whether the wallet compromises are related to the transactions lawmakers flagged.<\/p>\n<h3 id=\"ftoc-heading-3\">Experts Question On-Chain Findings<\/h3>\n<p>Security researchers have pushed back on some of the watchdog\u2019s claims. Taylor Moynahan of MetaMask and Nick Bax of Ump.eth said the Accountable.US analysis misread certain on-chain activity.<\/p>\n<blockquote>\n<p dir=\"ltr\" lang=\"en\">Another day in crypto with wild allegations. Today, it\u2019s that a North Korea-linked address invested in WLFI.<\/p>\n<p>I do a some DPRK crypto research myself, so I decided to take a look at their findings.<\/p>\n<p>They\u2019re bad and an innocent user is out $100k because of it\ud83e\uddf5 <a href=\"https:\/\/t.co\/yJKEH04nup\" rel=\"nofollow\">pic.twitter.com\/yJKEH04nup<\/a><\/p>\n<p>\u2014 Nick Bax.eth (@bax1337) <a href=\"https:\/\/twitter.com\/bax1337\/status\/1990894509647962500?ref_src=twsrc%5Etfw\" rel=\"nofollow\">November 18, 2025<\/a><\/p>\n<\/blockquote>\n<p>Bax argued that the report mistakenly connected a wallet tied to an individual known as \u201cShryder\u201d with DPRK-linked activity, which led to the freezing of roughly $95,000 in WLFI tokens.<\/p>\n<p>WLFI has responded by emphasizing user protection and compliance. The company said it prioritized freezing vulnerable wallets and verifying rightful owners before any transfers. It also announced tests of revised smart contract logic meant to reduce the chance of similar breaches in future rollouts.<\/p>\n<p><em>Featured image from Gemini, chart from TradingView<\/em><\/p>\n<\/p><\/div>","protected":false},"excerpt":{"rendered":"<p>World Liberty Financial (WLFI) said it is reallocating funds and confirming user identities after several wallets were compromised ahead of [&hellip;]<\/p>","protected":false},"author":5,"featured_media":55365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[220],"tags":[],"class_list":["post-55364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tien-dien-tu"],"acf":[],"_links":{"self":[{"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/posts\/55364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/comments?post=55364"}],"version-history":[{"count":0,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/posts\/55364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/media\/55365"}],"wp:attachment":[{"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/media?parent=55364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/categories?post=55364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hbbgroup.net\/vi\/wp-json\/wp\/v2\/tags?post=55364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}