Milk

April

Security

As concerns over the security of cryptocurrency assets continue to mount, the National Institute of Standards and Technology (NIST) has launched an extensive investigation into a <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-23660" target="_blank" rel="noopener nofollow">critical vulnerability</a> discovered in the iOS version of the Binance Trust Wallet. The central focus of the inquiry centers around the improper utilization of the trezor-crypto library, a key component responsible for generating mnemonic words crucial to securing users’ cryptocurrency funds. 
<h2 id="strong-over-6-500-wallet-mnemonics-could-be-at-risk-strong">Over 6,500 Wallet Mnemonics Could Be At Risk</h2> 
In an unusual move, Binance has chosen to remain silent on these security concerns. However, an independent investigation conducted by Milk Sad has uncovered <a href="https://milksad.info/posts/research-update-5/" target="_blank" rel="noopener nofollow">alarming risks.</a> Milk Sad’s findings have identified over 6,500 wallet mnemonics that may be at risk due to insecure functions within the trezor-crypto library. This revelation directly links to the methods observed in previous instances of cryptocurrency theft, underscoring the seriousness of the identified flaw. 
<img loading="lazy" decoding="async" class="aligncenter wp-image-281687 size-large" src="https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?resize=980%2C356" alt="" width="980" height="356" srcset="https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?w=1044 1044w, https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?w=640 640w, https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?w=768 768w, https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?w=980 980w, https://bitcoinist.com/wp-content/uploads/2024/02/a_dcbcaa.png?w=750 750w" sizes="(max-width: 980px) 100vw, 980px" data-recalc-dims="1"> 
Simultaneously, the CVE database, supported by the US Department of Homeland Security, has initiated an inquiry into the Trust Wallet through Secbit Labs. This investigation has identified a vulnerability in the iOS version of Trust Wallet dating back to 2018, with a direct correlation to significant thefts recorded on July 12, 2023. 
<blockquote>
 “An attacker can systematically generate mnemonics for each timestamp within an applicable timeframe, and link them to specific wallet addresses to steal funds from those wallets,” NIST wrote in its update. 
</blockquote> 
In an unrelated development, the sentencing for Binance’s founder, Changpeng Zhao, initially scheduled for Feb. 23, has been postponed to April 30, according to reports. The reasons for this delay remain undisclosed, and Zhao’s legal representatives have refrained from providing any comments. 
<img loading="lazy" decoding="async" class="aligncenter size-full" src="https://www.tradingview.com/x/IYfgzp4V/" width="2475" height="1163"> 
<h2 class="" data-sourcepos="1:1-1:83" id="strong-trust-wallet-issues-vulnerability-and-user-data-woes-plague-binance-strong">Trust Wallet Issues: Vulnerability And User Data Woes Plague Binance</h2> 
The Trust Wallet vulnerability is just one of the numerous challenges currently facing Binance. Rumors have surfaced regarding a potential system leak and allegations concerning the availability of Binance user data on GitHub. Despite these speculations, Binance has vehemently denied any breaches, reassuring its community about the integrity and safety of its accounts. 
NIST’s ongoing investigation is expected to conclude with the assignment of a base severity score, ranging from 0 to 10. This score is crucial in reflecting the potential risk the identified vulnerability poses to users and providing guidance on the seriousness of the security concern. 
As these investigations unfold and challenges persist, users are strongly encouraged to maintain a heightened level of vigilance. Staying informed about the evolving situation, following guidance from relevant authorities and security experts, and implementing recommended security measures are essential in safeguarding cryptocurrency assets within this dynamic landscape. 
Featured image from Freepik, chart from TradingView

Binance Security Alert: US Gov’t Investigates Potential Hack Risk In Trust Wallet App

Table of Contents

Bitcoinist

Other articles published on Feb 16, 2024

AXIOMA TOKEN - MARKETING PARTNERSHIP WITH DXSALE

Crypto – Ripple (XRP) starts a powerful bullish rally?

Crypto VC funding up for the first time since nearly 2022, PitchBook says

XRP News: Pro-XRP Lawyer Questions SEC’s Integrity In Hinman Conflict

DOGE Set for Massive Rally Despite Sideways Movement: Analyst

Coinbase Tokenizes Financial Earnings Record as NFT

Join our free newsletter for daily crypto updates!