Given the number of users we have we would expect thousands of users to come forward with the same issue after this update if that was the case. We are more than happy to respond to any official request to review our source code by reputable companies. We are also reviewing our decision to be closed source with the preffered outcome to be open source again.

This comment is complete FUD. There was an incident in 2019 with our initial DESKTOP beta release only (so irrelevant to this case) which was fixed and there is a report to confirm this as not a cause for any user to have lost funds: https:/[Suspicious link removed]/VZQAotXNrJ

We are reviewing our decision to be closed source and hope we can move to an opensource model in the near future. That being said opensource does not mean 'safe' it just means the code can be verified and compiled from source. We are open to any official request to review and verify our source code by reputable code reviewers.

Hi there, As we and other have explained here each and every transaction from the app requires confirmation of your password before being sent (your private keys are kept encrypted at all times with the password, so even if the app wanted, it would not be able to decrypt the keys without the password).

Unauthorized transactions can only be made by a) someone who has access to your seed phrase, or b) someone with access to your device and knows your password. There is no other way. We occasionally receive news of users having their email accounts hacked, giving attackers access to their seed backup files kept on their email or other cloud service. Please review your seed backup security, try to remember if you ever entered your seed on any other wallet, website, form, notes tool, etc; or check if anyone could have accessed the app on your device and knows your password.

One thing which concerns us the most is the use of the VPN on a device you claim is "connected to the network once a month to update" and is only used for coinomi. This does not ring true with the evidence you posted here, it shows you have 300+ applications on your device which would suggest some daily use on this device. With this many apps it is becoming increasingly likely that one or more of those apps are possibly stealing data from your device or logging some of your activity. This coupled with the age of your device OS is a huge cause for concern.

We highly recommend you file a report with your local police/cyber crime unit so they can begin the task of reaching out to exchanges and centralised services in the hopes of blacklisting the funds for you whilst investigation takes place.

Kind regards.

Hi there, thank you for posting. We have already taken action to report the malicious site and have it taken down, unfortunately sometimes hosting/domain registrars take a little longer to respond than we like. Please also report the email address which was used to send the email to your inbox. Users should always only ever download Coinomi from Coinomi.com/downloads (manually typing the link to avoid clicking a 'spoofed' link)

Thank you again.

Hi, We're having a refresh problem with ETH, so new transactions aren't appearing at the moment. Once resolved, every transaction will appear automatically in the app and balances will update. Apologies for the inconvenience. If you must send your coins immediately, you can link your address to MyEtherWallet and make the transaction from there. Instructions can be found here: https://coinomi.freshdesk.com/support/solutions/articles/29000016910-linking-to-myetherwallet-mew-


To elaborate on your reply above, we now have solid evidence that AW money being referred to was stolen by a group of hackers who were active before we even published the first version of the desktop software with the problematic code you mentioned. The detailed report can be found here: https://medium.com/@cipherblade/how-not-to-react-when-your-cryptocurrency-is-stolen-92f7c72616af. Further to that, and unlike what was written on media, nothing was transmitted in plain text and no user ever lost money by this bug or by using Coinomi since its inception back in 2014. We strongly advise you to double-check the facts behind a story before reproducing it because all we've ever done all these years was to support the crypto community and help spread the message around the globe and now we need your support. To contribute to your original reply, there are several "proper open-source wallets" that were hacked or had serious bugs that resulted in permanent loss of funds, something that never happened with Coinomi.

Hi vycl87, the "critical" vulnerability you quoted never resulted on any loss of funds, you can read the detailed forensic study here showing how the event was an attempt to extort Coinomi in the first place: https://twitter.com/kimionis/status/1131945228506738688
As for the second link, the user never got to open a support ticket, so all we have is a report from a random person on the internet and no way to verify any of the claims. There are other reports, which have all been traced back to the user mishandling their recovery phrases. It's very unfortunate how often we see users saving their phrases as a screenshot (which promptly gets backed up on the cloud), sharing their phrases with others, or even sending them directly to scammers. We do the best we can to educate and warn users, but due to the huge size of our userbase, you will find such examples online. More details about all the security features employed by Coinomi can be found here

Hi Sumbi99, This 'vulnerability' was an attempt to extort Coinomi. You can read more about that here: https://twitter.com/kimionis/status/1131945228506738688?s=20

Hi PlaguedDeath, The 'vulnerability' you mentioned was a pathetic attempt to extort funds from Coinomi. You can read more about this here: https://twitter.com/kimionis/status/1131945228506738688?s=20

Hi Libert19, The only reason any user has ever 'lost' funds is because they failed to correctly backup their wallets or shared phrases with a scammer. As long as you backup correctly and never share your phrase with anyone then you have nothing to worry about. You can read about Coinomi's security features here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248

Hi Kong, Our team respond to every issue which is brought to our attention. If you are aware of something we have missed or if you have an issue yourself which you would like us to address then please, open a ticket at support.coinomi.com explaining those in detail so we can take a look and help with any concerns. Thank you

Hi Samayuki, Thank you for replying here. As with all wallets, there will be some negative reviews or reports of lost funds. Coinomi is the largest and oldest multicoin wallet and has an enormous userbase. It will expectedly have its share of reports, as much as we try to educate our users about their security. You can read about the ways we protect users funds here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248-how-safe-are-my-funds-how-are-my-private-keys-stored-. Regarding the "vulnerability" posted by mocacinno, Which affected the desktop wallet only, you can read the in-depth report about the entire disclosure and events here: https://twitter.com/kimionis/status/1131945228506738688 

Hi Zero, There was no 'issue' with NRG, We (Coinomi and the NRG team) could not reach an agreement to continue our partnership, although we did try, so we could not support the GEN3 migration. Coinomi did not try 'cheatin' the NRG team. You can read our reasons for not supporting NRG gen3 here: https://twitter.com/kimionis/status/1235657505361063937?s=20

Hi Mocacinno, The 'vulnerability' only affected desktops for a short time and was only for those restoring their wallet. We addressed this in detail and fixed the issue as soon as it was fully disclosed to us. Coinomi is not an 'unreliable' wallet at all. We have a large, happy userbase. You can read more about the 'google spellcheck' issue here (although it already sounds like you have): https://twitter.com/kimionis/status/1131945228506738688?s=19

Hi Rathaha10, this is very incorrect. Coinomi being closed source does NOT mean we have access to our users' wallets, Coinomi is a non-custodial wallet with ZERO access to your funds at any time. You can read more about our security features here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248

Hi FurryBall, The only way any Coinomi user has ever lost funds is due to not keeping their recovery phrase secure or if a user does not save their recovery phrase. You can read about how Coinomi secures your private keys in this article: https://coinomi.freshdesk.com/support/solutions/articles/29000016248

As you said, you have already been using Coinomi and have had no problems.

If you ever encounter an issue and require support feel free to reach out at support.coinomi.com 


Hi EthereumHunter, There is no 'vulnerability' in Coinomi. You can read more about the previous issue which others seem to be speaking of here: https://twitter.com/kimionis/status/1131945228506738688?s=19


Hi Chuky92, There is no backdoor in Coinomi, We take user security very seriously, You can read about Coinomi's security here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248


Hi Rodskee, The only way user's have ever lost funds when being user's of Coinomi is by (1) not saving their recovery phrase or (2) not keeping their phrase secure/sharing it with others. Coinomi has established a good reputation for over 6 years and has a large loyal user-base. You can read about Coinomi's security here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248


Hi Fireballex, The only way any user loses funds when using Coinomi is if they either (1) Do not save there recovery phrase or (2) someone else has access to their phrase due to saving it insecurely or sharing it with someone. Please read about Coinomi's security here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248

Hi Ken, Thank you for your support in refuting the claims of a 'backdoor' by us.

Hi Greatchu, We have seen many people here referring to the incident last year. Please take a look at our response to this here - https://twitter.com/kimionis/status/1131945228506738688?s=19

Coinomi went closed source a few years ago due to many clone wallets being created and scamming our users out of their funds.

You can read more about how your private keys are secured when using Coinomi here: https://coinomi.freshdesk.com/support/solutions/articles/29000016248

Feel free to open a ticket at support.coinomi.com should you have any further questions or concerns.

Hi Kusanagi01,
It seems you may be adjusting your Ethereum fees too low for the transaction to go through. You can consult this article for help setting correct ETH fees in Coinomi: https://coinomi.freshdesk.com/support/solutions/articles/29000021802 (that is if you decided to access your wallet in Coinomi to send)

If you require further help then please could you open a ticket at support.coinomi.com so we can take a closer look and offer support.

Thank you

You can read our official statement and independent review of this issue from this thread: https://twitter.com/kimionis/status/1131945228506738688?s=19

With regards to being open source, We decided to close our source code as many new users in the space were being tricked into thinking that various cloned apps were official releases of Coinomi which lead to them losing funds. Whilst we agree open-source provides the ability to audit code, you can never 100% verify that the code from GitHub is the same as that which is pushed to the app stores which is the same for every single open-source application.

You may also choose Coinomi for the wealth of features which many other wallets may not have including;
- Full native segwit support for all segwit supported assets.
- Web3 Dapp browser
- Collectible Support
- 118 blockchains supported and ALL ETH/BEP2/NEM/TRC10/OMNI tokens supported
- Multiseed support
- Enhanced privacy features: https://coinomi.freshdesk.com/support/solutions/articles/29000030207-what-are-coinomi-s-privacy-features-

No user has ever lost funds due to Coinomi and all such cases have been pinpointed to user error which includes;
- Saving the recovery phrase in an incorrect order
- Sharing their phrase with others
- Saving their phrase in an email account or cloud storage
- not saving their phrase at all and then losing their device or uninstalling the app
The list could continue....