Tag: wallet security
13 articles
Binance Warns iOS Flaw Exposes Crypto Wallet Secrets
A serious iOS security flaw is putting your crypto wallet secrets at risk, allowing malicious apps to access sensitive info like seed phrases and private keys. To stay safe, delete suspicious apps, update your iOS and other apps ASAP, and consider transferring funds to a new wallet if you suspect compromise.
Web3Auth Flaw Enables Keplr Crypto Theft, Provider Proactively Secures At-Risk Wallets
A security flaw in Web3Auth has led to a significant theft of Keplr crypto, with at least $6.01 million moved from over 44,000 wallets, but fortunately, the provider has proactively secured at-risk wallets. Users who created Keplr wallets with Google or Apple sign-in were particularly vulnerable to the attack.
LNbits Scrambles to Contain Attacks on Bitcoin Lightning Wallet Servers
LNbits has issued an urgent shutdown notice for all its servers due to a wave of active attacks, with developers racing against the clock to release a patch within 24-48 hours. The team has advised operators to immediately shut down their LNbits servers to prevent further damage.
MetaMask Discloses Security Incident Details, Assures Wallet Infrastructure Intact
MetaMask has confirmed that a recent security incident did not compromise customers' staked principal or withdrawal keys, and has since secured the affected systems. The non-custodial crypto wallet provider has assured users that its infrastructure remains intact and secure.
BTCPay Server Vulnerability Exploited to Drain Cryptocurrency Wallets
BTCPay Server users running outdated software versions 2.4.1 or earlier are urged to upgrade immediately after a vulnerability was exploited to drain cryptocurrency wallets, with attackers using a new method to bypass earlier security fixes. To protect your assets, move to a fresh server with a new wallet, even if you haven't noticed any suspicious activity.
Ledger Uncovers Unauthorized Hardware Implant in CryptoBilis-Sold Wallets
If you bought a Ledger wallet from CryptoBilis in the last 90 days, don't set it up yet - Ledger's investigating reports of stolen funds linked to devices sold by this reseller. Consider moving your assets to a new Ledger device if you've already set one up.
Malicious Firefox Extensions Target Crypto Wallets, Exfiltrate Recovery Phrases
Beware of malicious Firefox extensions that masquerade as helpful tools but secretly steal your crypto wallet secrets, including recovery phrases and private keys, by intercepting them during wallet import flows. These sneaky add-ons can even fake legitimate wallet interfaces to trick you into handing over sensitive info.
MetaMask Infrastructure Hit by Security Incident
MetaMask recently disclosed a security incident affecting some of its infrastructure, but assured users that there's no immediate threat to their wallets. The company is taking swift action to address the issue with the help of external partners and security advisors.
MetaMask Exits Validators Amid Ongoing Security Incident
MetaMask is taking swift action to address an ongoing security incident that's affected part of its infrastructure, working closely with external partners and security experts to resolve the issue. The company has assured users that there's no immediate threat to MetaMask wallets, and is exiting affected validators as a precautionary measure.
Bitget Reveals Third-Party Product Flaw Exploited in $388M Heist
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
North Korean Hackers Steal $351.6M from Bitget in Backend Compromise
In a shocking security breach, North Korean hackers made off with a whopping $351.6 million from cryptocurrency exchange Bitget, compromising a limited number of hot wallets. Fortunately, customer account balances remain intact and trading operations are still running smoothly, with withdrawals temporarily paused while the company conducts a thorough security review.
SafePal Data Breach Exposes 40,000 Customer Records
Good news: your SafePal wallet credentials and financial info are safe - the recent data breach exposed non-sensitive customer records, including names, email addresses, and purchase details, of around 39,798 customers.
Weak RNG in CryptoJS Library Enables $5.7 Million in Crypto Wallet Drains
A weakness in the CryptoJS library's random number generator has led to a staggering $5.7 million in cryptocurrency wallet drains, highlighting a critical vulnerability that has been lurking since 2014. This flaw has been exploited in multiple wallet apps, putting countless users at risk of financial loss.