“This impact is only for those that self-custody those assets, and it is the users’ responsibility to take it seriously, upgrade the wallets to the patched version listed on the wallet developer’s websites, and to rotate their mnemonic phrase if they think it may be at risk,” Walbroehl said. “Exchanges like Coinbase or Binance usually hold custody of those keys on the behalf of their customers,” Steven Walbroehl, Halborn’s chief security officer and co-founder, told Blockworks.
Users who have used the “show secret recovery phrase” checkbox to view their secret recovery phrase on-screen during the import processĬryptocurrency wallets like the ones impacted by this vulnerability, such as Metamask, are a self-custody wallet - meaning users alone are responsible for safeguarding their private keys. 
Users who have previously imported their secret recovery phrase into a web extension on a device that is in the possession of someone else or have had their computer compromised. Users who meet the following conditions may be at risk: All told, billions of dollars of digital assets are stored in software wallets.Īffected wallet providers were contacted and the vulnerability was kept under wraps until the security issues were remediated. The conditions can expose a crypto wallet user’s secret recovery phrase (a series of words generated that gives the owner access to their crypto), which can then be used to change their private key. Affected wallet providers were contacted, and the vulnerability was kept confidential until the security issues were remediatedĪ number of popular browser-based crypto wallets are vulnerable to hacking under certain conditions, according to new research.īlockchain security firm Halborn found several instances where wallets including Brave, MetaMask and Phantom can be compromised under specific computer conditions - adding yet another wrinkle to traders still reeling from recent high-profile decentralized finance (DeFi) hacks. 
The discovered vulnerability exposes browser wallet users’ secret recovery phrases.
0 kommentar(er)
