UPDATE: Crypto.com acknowledge the bug and refunded the full amount, at the time of writing this update the crypto.com team confirmed that they are working on fixing the bug and the defi wallet will hopefully be fixed ASAP. Lesson learned; test every transaction even with wallet and address that you know are safe and already used in the past.
When scanning the QR code of a taproot address with the DefiWallet of crypto.com the app will correctly show the taproot address, not give any warning of unsupported format or other error message (screenshot from my second attempt to recreate the bug with different taproot address https://i.stack.imgur.com/yl95C.jpg), it will give a first confirmation with a reference transaction ID that the bitcoin transaction was broadcasted to the network with the correct recipient address, but in reality it will automatically convert the taproot address to a segwit address and send the bitcoin to this random generated address making the coin lost forever.
taproot address generated from ledger - https://i.stack.imgur.com/KiwBE.jpg
first confirmation showing the correct taproot address scanned in the previous step with a reference transaction ID https://i.stack.imgur.com/MuVMa.jpg transaction ID: https://blockchair.com/bitcoin/transaction/c834fb3bc1e849b1e708b15728e55796adb7d44bf1b83b2b35dcaba4eb87b54b?from=crypto.com
After the transaction has been broadcasted to the network and it receives the first confirmation the defiwallet updates the home-screen showing the converted segwit address where it actually sent the bitcoin with the same transaction ID as reference, proving that the first confirmation screen is the result of a bug. https://i.stack.imgur.com/D4sLa.jpg - https://i.stack.imgur.com/NreRT.jpg
Video on my second attempt to recreate the bug and using a second bitcoin software wallet (trustwallet) to show that the problem is not my phone or some malicious software installed on the phone but the actual crypto.com defiwallet - https://streamable.com/91ksgg
since my first chat with them the defiwallet has been under "maintenance for bitcoin transaction" - https://i.stack.imgur.com/osqWF.jpg
I understand something similar has already happened Is it possible to convert a taproot address into a native segwit address? I have contacted the crypto.com support chat, I have sent them the same information and for the last 12 days they have been "investigating" the issue. I'm aware the coin are lost forever but the lack of response from crypto.com team is awful and I have no idea how many people have already lost and will lose their bitcoin because of crypto.com.
my segwit address bc1q3exlju6gr6cwu3s3hxnjssjpxnmafnxtlms6cm
