Ethereum

April

<p>Trust Wallet, a widely used crypto wallet, has identified and resolved a significant WebAssembly (WASM) vulnerability in its core wallet software library. The issue affected wallet addresses on Ethereum and other blockchains generated through the Trust Wallet browser extension between November 14 and November 23, 2022. The project confirmed the fix on Twitter and assured users that most at-risk funds were secured.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">1/10 Trust Wallet is built on security &amp; trust. So we&#39;re sharing a vulnerability affecting new addresses created Nov 14-23,22 using the Browser Extension.<br><br>The issue is fixed. Most at-risk funds are secured. Affected users should take actions outlined:<br>➡️<a href="https://t.co/X9AEfqWW87" rel="nofollow" target="_blank">https://t.co/X9AEfqWW87</a></p>&mdash; Trust Wallet (@TrustWallet) <a href="https://twitter.com/TrustWallet/status/1649699428733947906?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 22, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>WebAssembly, a computer code format that allows developers to use multiple programming languages to create web applications is employed in various crypto wallets. The discovered vulnerability was found in Trust Wallet&#8217;s core software library, which used the WASM format to enable users to create their crypto wallets within the browser extension.</p>



<h2 id="170-000-lost-due-to-vulnerability">$170,000 lost due to vulnerability</h2>



<p>Trust Wallet stated that upon discovering the issue, it addressed the problem. Nevertheless, two exploits were detected, resulting in an estimated loss of about $170,000 due to potential hacks exploiting the issue, as outlined in an official community <a href="https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786" rel="nofollow noopener" target="_blank">forum post</a>.</p>



<p>The crypto wallet emphasized that the vulnerability did not affect users who solely used the Trust Wallet mobile app, imported wallets into the browser extension using seed phrases from other wallet applications, or created new wallet addresses via the extension before November 14 or after November 23, 2022.</p>



<p>The team shared in the community <a href="https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786" rel="nofollow noopener" target="_blank">post</a> that it had strengthened its wallet product&#8217;s security by conducting more frequent security audits and involving external auditors to evaluate its security measures. The project reaffirmed its dedication to providing a secure wallet application for its users.</p>



<p>Trust Wallet announced plans to issue refunds and establish a reimbursement system to support impacted users, who will receive notifications via the browser extension.</p>



<p>The wallet provider also clarified that the issue was unrelated to a recent security incident highlighted by MyCrypto founder Taylor Monahan, in which she alleged that over 5,000 ETH (worth $10 million) had been mysteriously stolen from multiple user wallets.</p>

Trust Wallet resolves major vulnerability in Ethereum wallets, plans reimbursements

目錄

Cryptopolitan_News

在 2023年4月22日發表的其他文章

Planting Trees: A Simple Step towards Saving the World

Former SEC Chair Jay Clayton suggests cryptocurrencies may not always be securities

Coinbase CEO urges Congress to intervene in SEC’s crypto regulation approach

BitBoy Crypto Referred to FBI After Failed Court Appearance

Scottish Woman to Sell Her House After Losing Almost $200K in Crypto Scam

Uniswap price analysis: UNI/USD dips to lows of $5.50 as a firm bearish momentum builds

訂閱免費電子報，每天收取加密貨幣最新動態！