Ethereum

April

<p>Trust Wallet, a widely used crypto wallet, has identified and resolved a significant WebAssembly (WASM) vulnerability in its core wallet software library. The issue affected wallet addresses on Ethereum and other blockchains generated through the Trust Wallet browser extension between November 14 and November 23, 2022. The project confirmed the fix on Twitter and assured users that most at-risk funds were secured.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">1/10 Trust Wallet is built on security &amp; trust. So we&#39;re sharing a vulnerability affecting new addresses created Nov 14-23,22 using the Browser Extension.<br><br>The issue is fixed. Most at-risk funds are secured. Affected users should take actions outlined:<br>➡️<a href="https://t.co/X9AEfqWW87" rel="nofollow" target="_blank">https://t.co/X9AEfqWW87</a></p>&mdash; Trust Wallet (@TrustWallet) <a href="https://twitter.com/TrustWallet/status/1649699428733947906?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 22, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>WebAssembly, a computer code format that allows developers to use multiple programming languages to create web applications is employed in various crypto wallets. The discovered vulnerability was found in Trust Wallet&#8217;s core software library, which used the WASM format to enable users to create their crypto wallets within the browser extension.</p>



<h2 id="170-000-lost-due-to-vulnerability">$170,000 lost due to vulnerability</h2>



<p>Trust Wallet stated that upon discovering the issue, it addressed the problem. Nevertheless, two exploits were detected, resulting in an estimated loss of about $170,000 due to potential hacks exploiting the issue, as outlined in an official community <a href="https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786" rel="nofollow noopener" target="_blank">forum post</a>.</p>



<p>The crypto wallet emphasized that the vulnerability did not affect users who solely used the Trust Wallet mobile app, imported wallets into the browser extension using seed phrases from other wallet applications, or created new wallet addresses via the extension before November 14 or after November 23, 2022.</p>



<p>The team shared in the community <a href="https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786" rel="nofollow noopener" target="_blank">post</a> that it had strengthened its wallet product&#8217;s security by conducting more frequent security audits and involving external auditors to evaluate its security measures. The project reaffirmed its dedication to providing a secure wallet application for its users.</p>



<p>Trust Wallet announced plans to issue refunds and establish a reimbursement system to support impacted users, who will receive notifications via the browser extension.</p>



<p>The wallet provider also clarified that the issue was unrelated to a recent security incident highlighted by MyCrypto founder Taylor Monahan, in which she alleged that over 5,000 ETH (worth $10 million) had been mysteriously stolen from multiple user wallets.</p>

Trust Wallet resolves major vulnerability in Ethereum wallets, plans reimbursements

目次

Cryptopolitan_News

2023年4月22日公開の他の記事

Binance Launchpad to Kick off New Token: Open Campus (EDU)

Long dormant Bitcoin whales resurface and transfer millions

MEXC Listing

Nigerian Crypto Exchange Roqqu Approved for Operation in South Africa

Unleash Your Inner Hero: Join the OK Heroes Club on Zealy for an Unforgettable Web3 Adventure

Trust Wallet vulnerability led to $170,000 exploit

ニュースレターを購読して暗号資産の最新情報を毎日入手！