#钱包安全事件 Seeing this $15 billion Bitcoin private key incident, I have to say—this is exactly why wallet security should always come first in crypto.

The core of the issue is actually quite painful: between 2019 and 2020, Lubian Pool and Trust Wallet both used a "faulty random number generator," which meant that the private keys for over 53,500 Bitcoins could actually be brute-forced. Once hackers figured out the pattern, on December 28, 2020, they transferred out 136,951 Bitcoins, worth about $3.7 billion at the time. It took five years for the truth to come to light, only surfacing after the US Department of Justice filed charges against the Taizi Group.

Here are some tips for everyone involved in crypto:

**First, never be cheap when choosing a wallet.** Use wallets recommended by the official sources, or hardware wallets like Ledger or Trezor. Avoid using wallets provided by obscure projects.

**Second, don’t leave airdrops from new projects sitting idle.** The best practice is to transfer them to mainstream exchanges or your own secure wallet—don’t rely on the project’s custodial addresses.

**Third, if you’re using a browser wallet for interactions, withdraw immediately after use.** Complete your interactions and transfer assets out right away to reduce exposure time.

Ultimately, the logic of crypto trading is: complete interactions with minimal cost, and exit immediately after receiving airdrops. This incident is a reminder that security isn’t about luck; it’s about process.