Zero-click iOS exploits drain $4M USDT from active TRON wallets
Attackers exploited an iOS zero-click flaw to drain $4 million in USDT across 365 TRON network addresses.
Cybersecurity researchers have detected an advanced iOS zero-click TRON exploit that compromised non-custodial wallets, siphoning approximately $4 million in Tether (USDT). The sophisticated attack vector allowed unauthorized transactions without requiring user interaction or phishing confirmation.
According to CryptoSlate, on-chain tracking revealed that the illicit campaign affected a cluster of 365 addresses on the TRON network, including 89 wallets holding exclusively TRX tokens. Interestingly, forensic investigators noted that only one confirmed loss directly corresponded to a publicly documented account held by an iPhone owner.
Zero-click vulnerabilities represent one of the most perilous attack vectors in the digital asset landscape, as they bypass standard user-side precautions such as hardware verification prompts and seed phrase safeguarding. The precision with which these TRON-based assets were drained highlights growing technical sophistication among malicious actors targeting mobile operating systems.
Security specialists are advising mobile wallet holders to apply immediate operating system updates and consider migrating substantial reserves to air-gapped hardware devices. The wider ecosystem will be observing whether Apple or blockchain security auditors issue targeted patches to mitigate further exposure across mobile platforms.
Key takeaways
- Attackers utilized an iOS zero-click vector to drain roughly $4 million in USDT.
- On-chain data indicates 365 TRON addresses were impacted during the breach.
- Security teams advise immediate operating system updates and hardware storage use.