Yesterday I received a notification on my S22 from Samsung Blockchain Keystore that I had successfully transferred crypto away. I had requested no such thing. Upon investigation, someone has drained my wallet which was used only with samsung blockchain keystore.
The physical phone is not compromised and has not been out of my possession. The phone and app are both protected with fingerprint and my samsung account has 2 factor OTC turned on. A check of all accounts, logs, passwords do not reveal any unexpected activities or changes.
As I see it there are 2 possible ways for the person to steal my crypto:
1 - the private keys were compromised on samsung servers. ie they had a breach
2 - samsung warranty service recently replaced the mainboard on my phone. Someone could have got ahold of that old mainboard and accessed the crypto wallet information.
Beware - the Samsung blockchain keystore app is not as secure as they promote it to be.
