Beware of TRON malicious permission change scams

Recently, some community users have reported that the TRON wallet has been inexplicably multi-signed, resulting in the inability of Token to operate. In response to such problems, we have sorted out t

TRON Multi-Signature Scenario

Based on communication with users and verification of relevant data, the following scenarios that may lead to multi-signature are obtained.

1. If you have set up multi-signature yourself, you need to manage the address and execute the signature yourself;

2. Using a fake wallet leads to the leakage of the private key mnemonic, which is then used to set up multi-signature after being obtained by the other party;

3. Import the private key mnemonics obtained from the Internet into the wallet. The address has been multi-signed;

4. A third-party malicious link was executed, and the signature completed the permission change operation.

After the TRON wallet address is created, it is set to single weight by default and can perform any on-chain operations. If the address is multi-signed, it must be due to the leakage of the private key or mnemonic phrase or the execution of a malicious link that caused a change in permissions.

Introduction to TRON Multi-Signature

TRON's multi-signature mechanism is a security measure that limits specific operations by setting thresholds and weights, and can only be executed with the joint confirmation of multiple signatories.

In the TRON multi-signature mechanism, the threshold refers to how many signatories need to confirm before a specific operation can be performed. For example, if the threshold is 2, then when performing a specific operation, at least the signatory weight must be greater than or equal to the threshold for confirmation. The threshold can be set in the multi-signature contract and adjusted according to specific needs.

Weight refers to the weight of each signatory, which determines the proportion of each signatory in the multi-signature operation. For example, if the threshold is set to 2 and the weight of two signatories is 1, then when performing a specific operation, the confirmation of two signatories with a weight of 1 is required for it to take effect. The weight setting needs to be set in the contract, and the sum of the weights of all signatories must be greater than or equal to the total weight.

By setting thresholds and weights, the TRON multi-signature mechanism can improve the security of contracts and prevent them from being tampered with by unauthorized operations or being used by attackers for malicious operations.

TRON Multi-Signature Scam

There is a difference between TRON’s change permissions and Approve (authorization). Authorization only affects the authorized Token; while changing permissions will result in changes to TRON address permissions, thereby losing management rights over the address.

Malicious changes in permissions by TRON often occur during TRC20 recharges, such as buying gas cards and gift cards at very low prices, or using verification code platforms to recharge. Basically, they take advantage of people's desire for cheapness. When users use the links they provide to recharge, the malicious permission-changing code will be called. When users confirm and enter the password to sign, the permissions of the address will be changed.