United

Multichain

Milk

Monero

Read

The National Institute of Standards and Technology (NIST), an entity within the United States Department of Commerce, is currently scrutinizing a specific vulnerability in the iOS version of the Binance Trust Wallet application.&nbsp; 
This <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-23660" target="_blank" rel="noopener">examination</a> centers on a security flaw that, if exploited, could potentially enable attackers to illicitly access and divert funds from users’ cryptocurrency wallets. The focus of the investigation is on how the application improperly utilizes the trezor-crypto library for generating mnemonic words, crucial for securing user funds, which ought to be authenticated at the entropy source exclusively. 
This issue bears similarity to a precedent in July 2023, where exploitation of a similar vulnerability led to financial detriments. NIST’s current efforts aim to meticulously assess the possibility of manipulating mnemonic generation to fraudulently link them to specific wallet addresses, thereby facilitating unauthorized fund withdrawals. This critical analysis, disclosed publicly on Feb. 8, seeks to ascertain the practical implications and the extent of the vulnerability’s impact. 
Simultaneously, the CVE database, backed by the <a href="https://crypto.news/u-s-dept-homeland-security-funds-blockchain-startups/">U.S. Department of Homeland Security</a>, initiated an inquiry into the Trust Wallet through Secbit Labs following a spate of unauthorized accesses to Ether wallets. The probe identified a vulnerability in the iOS platform’s version of <a href="https://crypto.news/trust-wallet-discloses-jan-17-third-party-breach/">Trust Wallet</a> dating back to 2018, directly correlating it with substantial thefts recorded on July 12, 2023. 
 You might also like: <a href="https://crypto.news/binance-labs-announces-first-batch-of-sixth-season-incubation-projects/"> Binance Labs announces first batch of sixth-season incubation projects </a> 
Despite Binance’s silence regarding these security concerns, an independent <a href="https://milksad.info/posts/research-update-5/" target="_blank" rel="noopener">investigation</a> by Milk Sad has brought to light a significant risk. The review identified over 6,500 wallet mnemonics at potential risk, pinpointing their vulnerability to the use of insecure functions within the trezor-crypto library. This exposure is directly linked to the methods leveraged in the <a href="https://crypto.news/libbitcoin-vulnerability-leads-to-900k-theft-from-bitcoin-wallets/">Milk Sad theft incidents</a>, underscoring the critical nature of the flaw. 
The conclusion of NIST’s investigation will culminate in the assignment of a base severity score to the app’s vulnerability, ranging from 0 to 10, reflecting the potential risk it poses to users. This step is pivotal in guiding users on the gravity of the security flaw. 
The recent events concerning the Trust Wallet vulnerability are not the only challenges Binance has encountered. The cryptocurrency exchange has also been <a href="https://crypto.news/github-repository-exposed-binances-internal-passwords-and-code/">addressing rumors</a> of a system leak following allegations on X regarding the availability of Binance user data on GitHub. In a firm rebuttal of these claims, Binance has reassured its community about the integrity and safety of its accounts, categorically denying any breaches. 
Meanwhile, the <a href="https://crypto.news/changpeng-zhaos-criminal-sentencing-postponed-to-late-april/">sentencing</a> for Binance’s founder, Changpeng Zhao, has been postponed to April 30 from the original Feb. 23 date, as reported by CNBC. The reasons for this delay have not been disclosed, and Zhao’s lawyer has declined to comment. 
 Read more: <a href="https://crypto.news/monero-and-multichain-collapse-amid-binances-recent-announcement-to-delist/"> Monero and Multichain collapse amid Binance’s recent announcement to delist </a>

NIST investigates security flaw in Binance trust wallet’s iOS app

crypto.news

Other articles published on Feb 15, 2024

CBN bans cash dollar payments for Personal and Business Travel Allowance, orders banks to process...

Tron (TRX) & Polygon (MATIC) holders join DeeStream (DST) presale for 30X gains

Bitcoin Surges to $52,000, Altcoins Record Significant Gains

BTC price due $55.4K next amid warnings over end of Bitcoin ‘euphoria’

TRON Launches Groundbreaking Bitcoin Layer-2 Solution to Boost Interoperability

Jupiter Price Surges! Is JUP Token Worth Buying?

Join our free newsletter for daily crypto updates!