If your seed phrase is stolen.
Move everything to a new wallet now. Then read the rest. A seed phrase cannot be changed or revoked, so the wallet it opens is open to whoever has it, on every chain, for good.
Right now
- Create a new wallet with a new seed phrase, on a device you trust. Write the new phrase down offline.
- Move the digital assets from the old wallet to the new one, highest value first. Each transfer costs gas; that is the price of keeping it. Move the native coin, ETH on Ethereum, last: you need it to pay for every other transfer.
- Revoke token approvals on the old addresses so a contract you once allowed cannot drain what is left. Revoke.cash does this for most chains.
- Stop using the old wallet. Don't send anything to it again, and don't type the old phrase anywhere.
- Check how it happened once the funds are safe: a fake site, a support chat, a photo in the cloud, a phrase saved in notes.
Why it can't be undone
A seed phrase is not a password. It is the key, and the blockchain pays out anything the key signs. There is nobody to ask for a reset. Hardware wallets don't change that: the phrase on the card recreates the wallet on any device, and the makers say so.
You are not alone in this. Chainalysis counted about 158,000 personal-wallet theft incidents in 2025, about 80,000 victims, and about USD 713 million taken from individuals (Chainalysis, December 2025, as reported by The Block, 18 Dec 2025). Those are incidents, not people.
Next time: the same leak, with a Vault
Picture the same day with a GeoSafe Vault under your wallet. Your phrase leaks. Someone opens your wallet and finds what you left there. They ask the Vault for a withdrawal. Your phone buzzes: a request you didn't make. You tap Deny. Nothing moved. What you put in the Vault is still yours, and they still have only a wallet that can ask.
That is what a Vault is: a smart-contract account you own, under the wallet you already have, that needs your wallet and your phone to sign. Only what you move into it is protected, and it only ever pays out to the wallet you linked. Inside a Safe Zone you chose, your Approve goes through now; anywhere else it waits for the away wait you set and asks you again.
If the linked wallet's seed phrase leaks, your Vault stays where it is. Don't withdraw to that wallet; re-link the Vault to a fresh one from your phone. Like every protection change, that isn't instant, so a phone in someone else's hand can't redirect your Vault in one go. GeoSafe connects to the wallet you already have through WalletConnect and is open to wallet partnerships. A hardware wallet keeps protecting your key; the Vault protects what you move into it. Use both.
GeoSafe is an invite-only iOS app. Leave your email and we send your invite as places open. Request my invite
Questions
Can I change my seed phrase?
Is everything in the wallet at risk?
Can the funds be recovered once they have moved?
Would a hardware wallet have stopped this?
Does GeoSafe work with my wallet?
What if I lose the phone the Vault is on?
Read next: 2FA for self-custody, explained · How it works · Compare approaches