April

Elon Musk

Carry

Frontier

Apple

<p>It is Sunday evening in New York, and I am in the back of an Uber with a phone that is about to die.</p>
<p>I need this phone tonight. My work is on it. My messages are on it.</p>
<p>And I catch myself thinking something I would have laughed at a month ago.</p>
<p>Could charging my phone in this car steal my crypto wallet?</p>
<p>The point is that I had to think about it.</p>
<h2 id="the-week-that-put-the-thought-in-my-head">The week that put the thought in my head</h2>
<p>I have spent the past week covering what the FBI <a href="https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack" rel="noopener noreferrer nofollow">says</a>&nbsp;is a more than $6 billion theft from Binance, the largest hack crypto has ever seen. The bureau blames North Korea, the same state it <a href="https://www.fbi.gov/investigate/cyber/alerts/2025/north-korea-responsible-for-1-5-billion-bybit-hack" rel="noopener noreferrer nofollow">linked</a>&nbsp;to the $1.5 billion Bybit hack last year. Binance now says it has <a href="https://www.binance.com/en/support/announcement/detail/73911fb819b240f88b88256bdd318eda" rel="noopener noreferrer nofollow">covered</a>&nbsp;about 95 percent of the impact and that withdrawals are resuming in phases. When the outflows started, I <a href="https://www.thestreet.com/crypto/markets/im-with-elon-musk-on-binances-hack" rel="noopener noreferrer nofollow">wrote</a>&nbsp;that I was with Elon Musk. Every day, this industry runs on code somebody has not broken yet.</p>
<p>And it is not only Binance. The hacks keep coming, and the numbers keep getting harder to wave away.</p>
<p>When the biggest exchange on earth can lose billions in an evening, you start asking a question you cannot un-ask.</p>
<p>Is anything at all safe?</p>
<h2 id="this-is-what-a-hack-does-to-a-city">This is what a hack does to a city</h2>
<p>I cover crypto for a living, and the story still followed me into the back seat of a car. That is what a theft this size does, at least to me. It does not stay on the exchange. It follows you into the ordinary parts of a week, the coffee shop outlet, the airport kiosk, the Uber.</p>
<p>I do not think I am the only person in New York having thoughts like these right now.</p>
<h2 id="the-fear-has-a-name">The fear has a name</h2>
<p>It is called juice jacking, a term coined after a <a href="https://arstechnica.com/security/2025/04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/" rel="noopener noreferrer nofollow">demonstration</a>&nbsp;at the Defcon security conference back in 2011. The idea is simple. A tampered charger does not just send power. It opens a data connection and, depending on the attack and the device, can reach files, photos or passwords.</p>
<p>The FCC <a href="https://www.fcc.gov/juice-jacking-tips-to-avoid-it" rel="noopener noreferrer nofollow">warns</a>&nbsp;travelers about public USB charging stations. So has the FBI. The advice exists because the attack is real enough to build in a lab.</p>
<h2 id="the-part-that-should-calm-you-down">The part that should calm you down</h2>
<p>&nbsp;The FCC's consumer page says the agency is not aware of any confirmed instance of juice jacking. The Electronic Frontier Foundation <a href="https://www.eff.org/be-skeptical-fbi-warnings-about-phone-chargers" rel="noopener noreferrer nofollow">calls</a>&nbsp;the recurring warnings recycled scaremongering. And Ars Technica, <a href="https://arstechnica.com/security/2025/04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/" rel="noopener noreferrer nofollow">reporting</a>&nbsp;on the newest research in April 2025, noted there were still no documented cases of such attacks in the wild.</p>
<p>Your phone is not defenseless either. Since 2012, iPhones and Androids have <a href="https://support.apple.com/en-us/109054" rel="noopener noreferrer nofollow">asked</a>&nbsp;before sharing data over a USB connection. Google went further with Android 15 in late 2024, and Apple with iOS 18.4 in March 2025. On those versions, approving a data connection takes your PIN, password or fingerprint, not just a tap. When those defenses were reported in April 2025, the researchers said the new requirement worked on fully updated iPhones, iPads and Pixels, while many other Android phones, including Samsung models, did not yet enforce it.</p>
<p>The demonstration did not establish that a charger could drain a crypto wallet. The consequences would depend on what an attacker could access, including any exposed recovery phrase.</p>
<h2 id="the-part-that-should-not">The part that should not</h2>
<p>But it absolutely can happen, and this is where my week catches up with the theory.</p>
<p>Last year, researchers at Graz University of Technology presented <a href="https://www.usenix.org/conference/usenixsecurity25/presentation/draschbacher" rel="noopener noreferrer nofollow">ChoiceJacking</a>&nbsp;at the USENIX Security Symposium in August. Their malicious charger tricked phones into approving its own data connection in under a minute, on devices from eight vendors, including the biggest ones. Apple and Google shipped fixes in 2025 for updated iPhones and Pixels, while the researchers warned that many other Android phones remained exposed at the time.</p>
<p>To be precise about what that research showed. ChoiceJacking gave the researchers access to files on the phone. It did not steal a crypto wallet, and the researchers never claimed it did.</p>
<p>Still, file access is bad enough. Ask yourself what is in your files. If your wallet's recovery phrase is sitting in your photos or your notes app, a bad charger does not need to break anything. You have already left the key in the open.</p>
<p>Maybe there really are no confirmed cases in the wild. After the week I have had, that does not comfort me.</p>
<h2 id="so-what-do-you-do-about-it">So what do you do about it</h2>
<p>The boring stuff, done every time.</p>
<ul>
 <li>Carry your own cable and your own adapter, and use the car's power socket or a wall outlet. A pure power connection carries no data.</li>
 <li>Carry a small power bank. It is the cheapest way to never have this thought again.</li>
 <li>If you must use a strange USB port, use a charge-only cable or a USB data blocker, knowing they can slow your charge.</li>
 <li>Keep the phone locked while it charges. If a "trust" or "share data" prompt appears, unplug.</li>
 <li>Update your phone. The fixes exist, and they only work if you install them.</li>
 <li>Never keep your wallet's recovery phrase on the phone. Not in photos, not in notes, not in a cloud backup. Paper and a <a href="https://www.ledger.com/academy/hardwarewallet/best-ways-to-protect-your-recovery-phrase" rel="noopener noreferrer nofollow">hardware</a>&nbsp;wallet are boring, and boring is the point.</li>
</ul>
<h2 id="is-anything-at-all-safe">Is anything at all safe</h2>
<p>Honestly, no. It never was. Every system runs on code, and this fall has shown what happens when that code breaks.</p>
<p>But the answer is not to fear the wrong thing. Keeping coins on an exchange is a custody decision, and this week showed what that decision can cost. Keeping your phone safe from a bad charger is a different problem, and it has a cheap fix. Your own cable, a locked phone, an updated system and a recovery phrase on paper.</p>
<p>The frustration is real. I felt it in the back of that Uber, and I am not going to pretend otherwise. The trick is making it useful.</p>
<h3 id="popular-on-thestreet-roundtable">Popular on TheStreet Roundtable</h3>
<ul>
 <li><strong><a href="https://www.thestreet.com/crypto/markets/fbi-names-who-took-6b-from-binance" rel="noopener noreferrer nofollow">FBI names who took $6B+ from Binance</a></strong></li>
 <li><strong><a href="https://www.thestreet.com/crypto/markets/binance-sees-3-7-billion-in-outflows-after-hack" rel="noopener noreferrer nofollow">Binance sees $3.7 billion in outflows after hack</a></strong></li>
 <li><strong><a href="https://www.thestreet.com/crypto/markets/binance-says-90-of-hack-impact-now-covered" rel="noopener noreferrer nofollow">Binance says 90% of hack impact now covered</a></strong></li>
</ul>
<p><strong>Read More:&nbsp;<a href="https://www.thestreet.com/crypto/markets/binance-cites-1b-spacex-stake-after-elon-musk-mocks-hack" rel="noopener noreferrer nofollow">Binance cites $1B SpaceX stake after Elon Musk mocks hack</a></strong></p>
<p><em>This is an opinion piece by Mehab Qureshi, senior editor at The Street. The views expressed are his own and do not reflect the views of The Street.</em></p>

Binance's hack has me fearing phone chargers

Table of Contents

TheStreet Roundtable

Other articles published on Nov 2, 2026

Join our free newsletter for daily crypto updates!