A seed phrase — usually 12 or 24 words — is not a password that unlocks a wallet held somewhere else. It is the wallet. A deterministic algorithm turns those words into the master private key that every address the wallet has ever generated is derived from, according to Bitcoin.com News’ Aug. 2, 2026 explainer. Anyone holding the words holds the funds; anyone who loses all copies of them loses the funds, permanently, with no customer support line to call.
That single fact produces two entirely different ways people lose access: someone else obtains the phrase (theft), or the owner can no longer produce it (loss). Both are final. Neither has a technical fix.
How the words become a key
The standard behind most modern wallets, BIP39, draws each word from a fixed list of 2,048 possible entries, so every word encodes 11 bits of entropy (2,048 is 2 to the 11th power), per Bitcoin.com News. A full 12-word phrase carries roughly 128 bits of entropy once a built-in checksum is accounted for; a 24-word phrase carries about 256 bits. Bitcoin.com News reports that even guessing at a billion attempts per second, working through every possible combination of a full 12-word phrase would take roughly 10^22 years — far longer than the age of the universe, which the outlet puts at about 13.8 billion years. Guessing an intact, unknown phrase is not a realistic risk.
The exposure cliff: why partial leaks are not partially safe
The real danger, per Bitcoin.com News’ reporting, is exposure of even a few of the words — through a photo, a cloud backup, or a scammer posing as support. Security does not fall in a straight line as words leak; it collapses. The outlet’s figures show the pattern clearly: knowing 6 of the 12 words still leaves an estimated 1,169 years of guessing at that same rate. Knowing 7 words cuts that to under a year. Knowing 8 words brings it down to a few hours, and by 10 or 11 known words, cracking the remainder takes milliseconds. The practical lesson Bitcoin.com News draws is that handing over “just the first six words” is not a meaningfully smaller risk than handing over the whole phrase, because an attacker only needs to close the remaining gap.
Theft: two documented cases
Kaspersky’s official blog described a May 16, 2022 phishing campaign that offered recipients a share of a supposed $800 million cryptocurrency giveaway. Victims who clicked through were asked to select their wallet type — Kaspersky lists Blockchain.com, Trust Wallet, MetaMask, Coinbase, Binance, Crypto.com and Exodus among the options offered — and then enter their seed phrase to “claim” funds. Kaspersky found the site accepted any string of characters as valid and always reported a successful transfer, meaning the phishing page’s only real function was harvesting whatever phrase a victim typed in.
Bitcoin.com News’ Aug. 2, 2026 report describes a more recent and much larger case: on Jan. 10, 2026, a bitcoin and litecoin holder handed a 12-word phrase to someone impersonating Trezor’s support team, and lost about $282 million, split roughly $139 million in bitcoin and $153 million in litecoin, according to the outlet’s account of tracing work by blockchain-forensics firm ZeroShadow. Bitcoin.com News reports that ZeroShadow, the blockchain-forensics firm that helped trace the stolen funds, described the theft as resulting “from social engineering rather than any compromise of wallet software or private-key infrastructure.” The outlet reports the stolen funds were moved through THORChain bridges, instant-exchange services and monero within minutes, and that ZeroShadow’s monitoring managed to flag and freeze roughly $700,000 of it inside 20 minutes — a partial recovery the outlet describes as rare.
Loss: the quieter, bigger category
Bitcoin.com News cites Chainalysis’s estimate that up to 23% of all bitcoin ever mined — several million BTC, out of roughly 19.8 million mined so far — is now permanently unreachable, mostly through forgotten phrases, destroyed backups, and deaths with no inheritance plan in place for the words. No hacker or exploit is involved in this category; the coins simply sit behind a phrase nobody can produce anymore.
What the checksum actually protects against
BIP39 includes a checksum in the final word of a phrase, but per Bitcoin.com News its purpose is mundane: catching transcription errors, not attackers. A few bits of that last word are calculated from the rest of the phrase, so a wallet can usually detect a mis-copied word the moment someone tries to restore from it, rather than silently generating a different, empty wallet. It fails safely for typos. It does nothing to stop a phrase that has been correctly copied and then stolen or lost outright.
What this page does not tell you
This page draws on two secondary news accounts, not on primary documents. Kaspersky’s 2022 post does not say whether that specific phishing site or e-mail template is still active. Bitcoin.com News’ account of the January 2026 theft rests on ZeroShadow’s tracing and characterization of the incident; no independent outlet, court filing or on-chain dataset in the evidence available to this page corroborates the $282 million figure or its $139 million/$153 million split. The Chainalysis 23% lost-bitcoin estimate is cited only secondhand, through Bitcoin.com News, and the article does not date the underlying Chainalysis report — so it is not possible to say from this evidence how current that figure is. Neither source offers a comparative dataset showing whether theft or forgetting accounts for more lost value in aggregate; both are illustrated here only through individual cases. This page also covers only the mechanics of a seed phrase itself — it does not address multisig setups, hardware-wallet firmware failures, or shared-custody inheritance tools, which carry their own separate loss mechanisms outside what these two sources describe.
Sources
Every fact above is attributed to one of these reports. Where they disagree, the article says so.
Read More
All News
August 16, 2026
SafePal Breach: Was There an Official Disclosure?
August 16, 2026
