Bitcoin

Read

/send

<div class="protos">
 <div>
  <div>
   <div>
    <p>Cybersecurity <a rel="noopener noreferrer nofollow" title="startup" href="https://thebittimes.com/tag/startup.html">startup</a> <a rel="noopener noreferrer nofollow" title="Unciphered" href="https://thebittimes.com/tag/unciphered.html">Unciphered</a> has unveiled a deep security flaw in crypto <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>s that it stumbled upon, that it says has the potential to <a rel="noopener noreferrer nofollow" title="steal" href="https://thebittimes.com/tag/steal.html">steal</a> at least $1 <a rel="noopener noreferrer nofollow" title="billion" href="https://thebittimes.com/tag/billion.html">billion</a> from traders and up to $2.1 <a rel="noopener noreferrer nofollow" title="billion" href="https://thebittimes.com/tag/billion.html">billion</a>.</p>
    <p>On Tuesday, Unciphered published information on what it calls Randstorm: a vulnerability in web browser-generated self-custody wallets made between 2011 and 2015. Wallets generated by BitcoinJS and derivative projects can be affected due to the popular JavaScript library borrowing vulnerable open-source software from a Stanford student over a decade ago.</p>
    <p>BitcoinJS was used by many projects in the early 2010s — some are still active, like BitAddress and Bitco. Several blockchains can also be affected, including Dogecoin, Litecoin, and Zcash, Unnciphered said.</p>
    <p><a rel="noopener noreferrer nofollow" title="Unciphered" href="https://thebittimes.com/tag/unciphered.html">Unciphered</a> has apparently alerted millions of affected users to the crypto <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a> flaw. It urges them to immediately transfer assets to a <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a> made after 2016.</p>
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos">
     <div class="wp-block-embed__wrapper">
      <blockquote class="wp-embedded-content" data-secret="4QPRNrgKDB">
       Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim” — Protos" src="https://protos.com/client-selfies-and-data-stolen-from-bankrupt-bitcoin-atm-firm-hackers-claim/embed/#?secret=elOclyuTpo#?secret=4QPRNrgKDB" data-secret="4QPRNrgKDB" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe>
     </div>
    </figure>
    <p><em>Read more: Poloniex hacked — all my low liquidity coins gone</em></p>
    <p>“If you are an individual who has generated a self-custody wallet using a web browser before 2016, you should consider moving your funds to a more recently created wallet generated by trusted software,” Unciphered recommends.</p>
    <p>However, millions more crypto traders haven’t been notified of the risks because their <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>s were made at crypto firms that have since flopped.</p>
    <p>Details of the crypto wallet flaw remain unknown. Unciphered says that it has decided to keep that information close to its chest in an attempt to dissuade bad actors. However, the Washington Post says that it has seen the team’s process and conclusions.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-wallet-flaw-can-steal-billions-from-early-adopters-startup-claims-tbt70389.html">https://thebittimes.com/crypto-wallet-flaw-can-steal-billions-from-early-adopters-startup-claims-tbt70389.html</a></p>

Crypto wallet flaw can steal billions from early adopters, startup claims

TheBitTimes

Other articles published on Nov 15, 2023

SEC Filed a $5 Billion Lawsuit in 2023! Here are the institutions that were sued and the reasons!

Bitcoin Slows Down After a Rapid Rise: Will the BTC Price Drop Further?

Uniswap and XT Will List This New Bitcoin Fork, While Rumors of ByBit and KuCoin Listings Substan...

Bitcoin ETF Approval: Analyst's Optimistic Forecast at 90% Before 2024

Volcanic Threat to Icelandic Crypto Mining Operations

“Singapore’s National AI Programme in the Real World” – Opening Speech by Mr Tan Kiat How, Senior...

Join our free newsletter for daily crypto updates!