random

April

Read

/send

<div class="protos"> 
 <div> 
  <div> 
   <div> 
    <p>Hackers have reportedly exploited a weakness in popular crypto wallet tool Libbitcoin Explorer that has allowed them to steal funds from multiple blockchains.</p> 
    <p>According to software security expert Distrust, which led the investigation, the ‘Milk Sad’ issue (so named because those were the first two words in the seed phrase of the broken key generation process), suffers from a “flawed seed subcommand for the generation of new wallet private key entropy.” As a result, it produces insecure output.</p> 
    <p>“Think of this as securing your online bank account with a password manager that creates a long random password, but it often creates the same passwords for every user. Malicious people have figured this out and drained funds on any account they can find,” investigators say.</p> 
    <p>Distrust warns that the <strong>effective security is reduced to a point where a powerful gaming PC can brute-force the seeds in less than one day</strong>.</p> 
    <p>Researchers didn’t confirm exactly which <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>s had been affected by the Libbitcoin issue or how much <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> may have been stolen but it’s believed that the exploit took place “in the wild” in June and July this year.</p> 
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos"> 
     <div class="wp-block-embed__wrapper"> 
      <blockquote class="wp-embedded-content" data-secret="PcxGZoGXxL">
        Arcadia Finance says exploiter contacted after $450K hack 
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“Arcadia Finance says exploiter contacted after $450K hack” — Protos" src="https://protos.com/arcadia-finance-says-exploiter-contacted-after-450k-hack/embed/#?secret=lxhtxrg6eN#?secret=PcxGZoGXxL" data-secret="PcxGZoGXxL" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe> 
     </div> 
    </figure> 
    <p><em>Read more: Curve exploit shows DeFi still far from decentralized in 2023</em></p> 
    <h2 class="wp-block-heading" id="h-trust-wallet-suffered-a-similar-exploit">Trust Wallet suffered a similar exploit</h2> 
    <p>Popular crypto wallet Trust Wallet lost nearly $170,000 in user funds when it suffered a similar exploit late last year.</p> 
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
     <div class="wp-block-embed__wrapper"> 
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
       <p lang="en" dir="ltr">1/10 <a rel="noopener noreferrer nofollow" title="Trust Wallet" href="https://thebittimes.com/tag/trust-wallet.html">Trust Wallet</a> is built on <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> &amp; trust. So we're sharing a vulnerability affecting new addresses created Nov 14-23,22 using the Browser Extension.<br><br>The issue is fixed. Most at-risk funds are secured. Affected users should take actions outlined:<br>️https://t.co/X9AEfqWW87</p>— Trust Wallet (@TrustWallet) April 22, 2023 
      </blockquote> 
     </div> 
    </figure> 
    <p><em>Read more: This MetaMask exploit has stolen $10M ether from OG <a rel="noopener noreferrer nofollow" title="Crypto" href="https://thebittimes.com/tag/crypto.html">Crypto</a> users</em></p> 
    <p>The issue, which was discovered via a bug bounty, <strong>affected the <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>’s open-source library Wallet Core</strong>. It specifically targeted new addresses between November 14 and 23 by browser extension.</p> 
    <p>Back in April, the company told affected customers to create new wallets and move funds.</p> 
    <p><em>Got a tip? Send us an&nbsp;</em><em>email</em><em>&nbsp;or&nbsp;</em><em>ProtonMail</em><em>.&nbsp;For more informed news, follow us on&nbsp;</em><em>Twitter</em><em>,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>,&nbsp;or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p> 
   </div> 
  </div> 
 </div> 
</div>

Crypto wallet seeds crackable with gaming PC via this security flaw

Table of Contents

TheBitTimes

Other articles published on Aug 10, 2023

Binance Labs Invests $5M in CRV and Supports Curve Deployment to BNB Chain

Chainlink (LINK) And Polygon (MATIC) Take Development Steps As Tradecurve Promises 50x Presale Re...

Pepe Coin Becomes the Top Discussed Crypto Beating Bitcoin & Ethereum

Shiba Inu Developer Unveils 3 New Partnerships: Price Spikes 19%

V Stock Price Prediction: Can Profit Booking Reverse The Trend?

Miner Producing Bitcoin for $ 0.13 Sold After 14 Years: Here's His Profit!

Join our free newsletter for daily crypto updates!