Recently, we have received complaints from several users: During routine inspections of the authorization records in my TRX wallet, I discovered an unauthorized USDT transaction that I cannot revoke. Could this potentially compromise the safety of my wallet?
Image 1: A user's TRX wallet authorization record
The imToken Security Team cautions: If you find unauthorized USDT transactions in your authorization list, verify the authenticity of the USDT in question first.
In the blockchain world, the ultimate criterion for determining the authenticity of a token is checking its contract address. If you possess USDT tokens in your TRX wallet, you can view the USDT contract address by sequentially clicking on 'USDT' and then 'Token Info' to access the USDT details page. The official USDT contract address is TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t.
Image 2: How to view the contract address of a token
Alternatively, you can visit the USDT website to view the official contract addresses of USDT across various public chains.
By comparing the contract addresses in Image 1 and Image 2, it is evident that the user's wallet is authorized with a counterfeit USDT token. Why would a user have a fake USDT authorization that cannot be revoked, and could this potentially jeopardize token security?
These counterfeit tokens are created by scammers who, as the creators of the token contracts, can arbitrarily set initial authorization records. In other words, any address across the network can be fraudulently authorized by these scammers. Moreover, only the token holders can cancel or modify the token's authorization records. Since you do not hold this token in your wallet, you cannot revoke its authorization.
Furthermore, the authorization is specific to a token and does not affect the rest of your tokens. For instance, if you have authorized a fake USDT, scammers can transfer your wallet's fake USDT without your consent, but they cannot transfer your legitimate USDT, TRX, etc. Therefore, the existence of this authorization record will not affect your actual tokens; scammers cannot transfer any valuable tokens from your wallet through the authorization.
The imToken Security Team advises users to remain vigilant and regularly check their wallets’ authorization records, paying close attention to any unfamiliar authorizations. If you notice any abnormal authorization records, verify them carefully and take appropriate preventative measures. If you have any queries regarding the authorization records, please contact the official imToken customer service through support@token.im.
Let your voice be heard on our social media channels and be a catalyst for a secure and thriving blockchain space.
imToken Official Contacts
- Website: https://token.im
- Weibo: https://weibo.com/imToken
- Twitter: https://twitter.com/imTokenOfficial
- Discord: https://discord.com/invite/imToken