Bitcoin

Read

Send

<div class="protos">
 <div>
  <div>
   <div>
    <p>Cybersecurity <a rel="noopener noreferrer nofollow" title="startup" href="https://thebittimes.com/tag/startup.html">startup</a> <a rel="noopener noreferrer nofollow" title="Unciphered" href="https://thebittimes.com/tag/unciphered.html">Unciphered</a> has unveiled a deep security flaw in crypto <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>s that it stumbled upon, that it says has the potential to <a rel="noopener noreferrer nofollow" title="steal" href="https://thebittimes.com/tag/steal.html">steal</a> at least $1 <a rel="noopener noreferrer nofollow" title="billion" href="https://thebittimes.com/tag/billion.html">billion</a> from traders and up to $2.1 <a rel="noopener noreferrer nofollow" title="billion" href="https://thebittimes.com/tag/billion.html">billion</a>.</p>
    <p>On Tuesday, Unciphered published information on what it calls Randstorm: a vulnerability in web browser-generated self-custody wallets made between 2011 and 2015. Wallets generated by BitcoinJS and derivative projects can be affected due to the popular JavaScript library borrowing vulnerable open-source software from a Stanford student over a decade ago.</p>
    <p>BitcoinJS was used by many projects in the early 2010s — some are still active, like BitAddress and Bitco. Several blockchains can also be affected, including Dogecoin, Litecoin, and Zcash, Unnciphered said.</p>
    <p><a rel="noopener noreferrer nofollow" title="Unciphered" href="https://thebittimes.com/tag/unciphered.html">Unciphered</a> has apparently alerted millions of affected users to the crypto <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a> flaw. It urges them to immediately transfer assets to a <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a> made after 2016.</p>
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos">
     <div class="wp-block-embed__wrapper">
      <blockquote class="wp-embedded-content" data-secret="4QPRNrgKDB">
       Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“Client selfies and data stolen from bankrupt Bitcoin ATM firm, hackers claim” — Protos" src="https://protos.com/client-selfies-and-data-stolen-from-bankrupt-bitcoin-atm-firm-hackers-claim/embed/#?secret=elOclyuTpo#?secret=4QPRNrgKDB" data-secret="4QPRNrgKDB" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe>
     </div>
    </figure>
    <p><em>Read more: Poloniex hacked — all my low liquidity coins gone</em></p>
    <p>“If you are an individual who has generated a self-custody wallet using a web browser before 2016, you should consider moving your funds to a more recently created wallet generated by trusted software,” Unciphered recommends.</p>
    <p>However, millions more crypto traders haven’t been notified of the risks because their <a rel="noopener noreferrer nofollow" title="wallet" href="https://thebittimes.com/tag/wallet.html">wallet</a>s were made at crypto firms that have since flopped.</p>
    <p>Details of the crypto wallet flaw remain unknown. Unciphered says that it has decided to keep that information close to its chest in an attempt to dissuade bad actors. However, the Washington Post says that it has seen the team’s process and conclusions.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-wallet-flaw-can-steal-billions-from-early-adopters-startup-claims-tbt70389.html">https://thebittimes.com/crypto-wallet-flaw-can-steal-billions-from-early-adopters-startup-claims-tbt70389.html</a></p>

Crypto wallet flaw can steal billions from early adopters, startup claims

TheBitTimes

Other articles published on Nov 15, 2023

USDC launches on Sei as Circle invests in layer 1 blockchain

Judge Rejects Binance and SEC’s Request for Privacy in Legal Battle, Prioritizing Transparency

Kevin O’Leary Says Crypto Exchange M2 Will Compete With Binance

Bitcoin ETF Approval: Analyst's Optimistic Forecast at 90% Before 2024

Microsoft Rebrands Bing Chat to Copilot to Take on ChatGPT

ELA Games to showcase industry-leading casino content at SiGMA Malta Europe 2023

Join our free newsletter for daily crypto updates!