World Liberty Financial (WLFI), the high-profile DeFi project strongly linked to former President Donald Trump and his family, is once again in the spotlight after revealing that several user wallets were compromised before the platform officially launched. The company says the breach stemmed from external phishing attacks and third-party security failures not flaws in WLFI’s own smart-contract system.
The disclosure comes at a time when WLFI is already facing intense scrutiny over its governance structure, rapid token sales, and growing political attention.
How the breach occurred
According to WLFI, attackers gained access to a subset of user wallets by exploiting leaked seed phrases and phishing schemes carried out through external channels. The company emphasized that the incident was not caused by vulnerabilities within its smart contracts or platform infrastructure.
After identifying the compromised wallets, WLFI froze all affected accounts and required users to re-complete Know Your Customer (KYC) verification to confirm ownership. Only after verifying identities did the team begin preparing new secure wallet addresses for reallocation.
To support the recovery effort, engineers built and tested new smart-contract logic capable of securely handling bulk token transfers. WLFI noted that the process took longer than expected but said it prioritized accuracy to avoid returning funds to the wrong individuals.
Users who have completed the verification process are expected to receive their reallocated funds soon, while those who haven’t will remain frozen until they begin the official recovery workflow through WLFI’s help center.
A firm already surrounded by controversy
The breach adds to a growing list of controversies around WLFI. The firm, which Trump Jr. has framed as “the governance backbone of a real ecosystem changing how money moves,” has been under a political and regulatory microscope throughout 2025.
WLFI has played a notable role in major crypto deals, including Binance’s $2 billion arrangement with an Emirati fund after which Binance founder Changpeng Zhao received a presidential pardon for his four-month prison sentence.
Just this week, Senator Elizabeth Warren called for a federal investigation into WLFI, alleging that the company may have sold governance tokens to wallets connected to sanctioned entities in Russia, Iran, North Korea, and the Tornado Cash ecosystem. WLFI has not yet responded to these allegations.
With regulatory pressure rising and technical concerns now in the mix, WLFI faces significant questions about transparency, user safety, and long-term governance as it continues expanding its product line including its USD1 stablecoin and WLFI governance token launched in 2024 and 2025.
