Litecoin

Bitcoin

Dogecoin

Zcash

Scope

<p>A critical vulnerability, dubbed “Randstorm,” has been identified by <a href="https://www.cryptopolitan.com/slowmist-exposes-fake-skype-app/" rel="noopener noreferrer nofollow">cybersecurity</a> firm Unciphered, posing a significant threat to millions of cryptocurrency wallets. This vulnerability impacts wallets created using web browsers from 2011 to 2015, potentially affecting around $2.1 billion in crypto assets.</p>
<h2 class="wp-block-heading" id="the-discovery-and-impact-of-randstorm">The discovery and impact of Randstorm</h2>
<p>While attempting to retrieve a Bitcoin wallet, Unciphered discovered the flaw, which originates from BitcoinJS and its derivative projects. This vulnerability could compromise millions of wallets, including those holding Bitcoin (BTC), Dogecoin (DOGE), Litecoin (LTC), and Zcash (ZEC). The firm’s analysis suggests that the issue is not confined to a single blockchain but could span across multiple projects.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Today we release our work on Randstorm: a vulnerability affecting a significant number of browser generated cryptocurrency wallets <a href="https://t.co/CebdytNaC6" rel="noopener noreferrer nofollow" target="_blank">https://t.co/CebdytNaC6</a> <br><br>Reporting <a href="https://twitter.com/washingtonpost?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@washingtonpost</a> <a href="https://t.co/OzYDq2tH4W" rel="noopener noreferrer nofollow" target="_blank">https://t.co/OzYDq2tH4W</a><br><br>Technical write-up: <a href="https://t.co/HPqjtaX1CA" rel="noopener noreferrer nofollow" target="_blank">https://t.co/HPqjtaX1CA</a> <a href="https://twitter.com/hashtag/Bitcoin?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#Bitcoin</a> <a href="https://twitter.com/hashtag/blockchain?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#blockchain</a> <a href="https://t.co/aN7CZh9sv4" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/aN7CZh9sv4</a></p>— Unciphered LLC (@uncipheredLLC) <a href="https://twitter.com/uncipheredLLC/status/1724434280183455919?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">November 14, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>Unciphered has urged individuals with wallets generated within the specified timeframe to transfer their assets to newer wallets, created with trusted software post-2016. The company has alerted millions of users about this threat. While the vulnerability’s exploitation details remain undisclosed to prevent aiding malicious actors, the firm confirms that the risk is actionable.</p>
<p>In the wake of the $100 million Poloniex hack, the crypto community faces another significant cybersecurity challenge with the discovery of the “Randstorm” vulnerability. This threat, identified by cybersecurity experts at Unciphered, affects millions of cryptocurrency wallets generated using web browsers between 2011 and 2015.</p>
<h2 class="wp-block-heading" id="scope-and-severity-of-randstorm">Scope and severity of Randstorm</h2>
<p>During efforts to retrieve a Bitcoin wallet, Unciphered stumbled upon a potential widespread issue rooted in BitcoinJS and similar projects. This vulnerability is <a href="https://www.unciphered.com/blog/randstorm-you-cant-patch-a-house-of-cards" rel="noopener noreferrer nofollow" target="_blank">estimated</a> to impact approximately $2.1 billion in crypto assets. Cryptocurrencies like Bitcoin, Dogecoin, Litecoin, and Zcash, which were stored in wallets created during the specified period, are potentially at risk.</p>
<p>Unciphered’s discovery has led to an immediate response, advising individuals who used web browsers to generate self-custody wallets before 2016 to move their funds to newer wallets. This precautionary step is crucial, considering the vulnerability’s exploitability. However, the company has refrained from detailing the exploitation methods to prevent providing a roadmap for cybercriminals.</p>

Major crypto wallet vulnerability uncovered: Billions at risk

Table of Contents

Cryptopolitan_News

Other articles published on Nov 15, 2023

OKX partners with Komainu, CoinShares for institutional crypto trading

Bakkt Pivots Toward Custodial Solutions, Embraces DOGE, SHIB, and More in Expanded Coin Support

Avalanche (AVAX) Targets $22; XRP and InQubeta Show Signs of Continued Uptrend

XRP Price Prediction – Breaking This Resistance Could Spark Fresh Rally

Mong Coin (MONG): All About the Meme-Inspired Cryptocurrency

Ethereum Price Prediction As Double-Top Pattern Threatens ETH Rally, How To Stay Profitable

Join our free newsletter for daily crypto updates!