Security

<p>In response to a series of <a href="https://www.cryptopolitan.com/friendtech-users-sim-swap-attack/" rel="noopener noreferrer nofollow">SIM-swap attacks</a> targeting its users, the team behind the decentralized social media platform Friend.tech has implemented a crucial security feature. As of October 9th, users are now able to add a Two-Factor Authentication (2FA) password to their Friend.tech accounts, offering an additional layer of protection in case their cell carrier or email service becomes compromised.</p>
<h2 class="wp-block-heading" id="friend-tech-2fa-password-for-enhanced-security">Friend.tech 2FA password for enhanced security</h2>
<p>The 2FA password feature prompts Friend.tech users to add an <a href="https://twitter.com/friendtech/status/1711520971033903575" rel="noopener noreferrer nofollow" target="_blank">extra password</a> when signing in on new devices, significantly bolstering the platform’s security measures. Importantly, neither the Friend.tech nor Privy teams possess the capability to reset these passwords, placing the responsibility squarely on the users. This new safeguard comes after a spate of SIM-swap attacks on Friend.tech users that began in September.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">You can now add a 2FA password to your <a href="https://t.co/YOHabcBL3H" rel="noopener noreferrer nofollow" target="_blank">https://t.co/YOHabcBL3H</a> account for additional protection if your cell carrier or email service becomes compromised.<br><br>Neither the friendtech nor Privy teams can reset these passwords, so please use care when using this feature <a href="https://t.co/g0m2E4att2" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/g0m2E4att2</a></p>— friend.tech (@friendtech) <a href="https://twitter.com/friendtech/status/1711520971033903575?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">October 9, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The first SIM-swap <a href="https://twitter.com/brypto_/status/1708055944360255600" rel="noopener noreferrer nofollow" target="_blank">attack victim</a>, identified as froggie.eth, sounded the alarm on September 30th, urging fellow users to remain vigilant. Subsequently, more Friend.tech users came forward with similar stories, leading to the theft of an estimated 109 Ether (ETH), equivalent to approximately $172,000, from four users within just one week. Further exacerbating the situation, another four users were targeted in a 24-hour period a few days later, resulting in the theft of an additional $385,000 worth of Ether.</p>
<p>To mitigate the risk of SIM-swap exploits, Friend.tech had already taken security measures on October 4th, allowing users to add or remove various login methods. However, some users expressed disappointment that these measures were not implemented sooner.</p>
<p>Upon hearing about the introduction of 2FA, some users were relieved, while others expressed frustration at the perceived delay. One user remarked, “Finally,” while another commented, “took you long enough.” In contrast, prominent Friend.tech creator 0xCaptainLevi expressed optimism, emphasizing the significance of 2FA and its potential to elevate the social media platform to new heights.</p>
<h2 class="wp-block-heading" id="unveiling-the-sim-swap-attack-method">Unveiling the SIM-swap attack method</h2>
<p>Jason Yanowitz, the founder of Blockworks, shed light on one method through which SIM-swap attacks are orchestrated. This nefarious process typically begins with a text message asking the user for a number change request. Users can respond with either “YES” to approve the change or “NO” to decline it.&nbsp;</p>
<p>If the user responds with “NO,” they are then sent a legitimate verification code from Friend.tech and prompted to send the code to the scammer’s number. Yanowitz warned that failure to respond within two hours results in the change proceeding as requested, leading to a wiped account.</p>
<p>The total value locked on Friend.tech currently stands at $43.9 million, reflecting a 15.5% decrease from it’s all-time high of $52 million on October 2nd, according to DefiLlama. This decline may be attributed, at least in part, to the recent SIM-swap attacks, which have understandably shaken user confidence in the platform.</p>

Friend.tech Enhances Security with 2FA Feature Amid SIM-Swap Attacks

Table of Contents

Cryptopolitan_News

Other articles published on Oct 10, 2023

Redefining Crypto with VeChain, Quant, and Bitcoin Spark

How Hamas and terrorist groups use crypto donations

ChatGPT Mobile Business Achieves Record Revenue Amid GenAI Challenges

How Much of Binance's $1 Billion Recovery Fund Was Used? Bloomberg Announced!

Binance CEO’s $1 Billion IRI Project Fails to Raise Estimated Fund

To assist displaced individuals, a local Web3 community establishes “Crypto Aid Israel.”

Join our free newsletter for daily crypto updates!