Ga naar de inhoud

Blockchain News Feed

All the latest news on Blockchain & Cryptocurrencies

Menu
  • Home
  • News
  • Exchanges
  • Market Analysis
  • YouTube
  • Brave Browser
Menu

Bitcoin [BTC], Ethereum [ETH] & altcoin wallet, Coinomi addresses seed phrase vulnerability; says highly unlikely to result in loss of funds

Geplaatst op februari 28, 2019 door Blockchain News

Earlier this week, Coinomi, cryptocurrency wallet that enables users to trade, secure and manage their Bitcoin [BTC] and other cryptocurrencies, was recently under the scrutiny of the cryptocurrency space as an alleged vulnerability in the wallet was bought to light on Reddit by Warith Al Maawali. However, Coinomi has now addressed this issue on its official web page.

The user of the platform has claimed to have lost about $60,000 – $70,000 worth of cryptocurrency because of this vulnerability. According to the post, the wallet’s “poor implementation” has, in turn, resulted in users plain-text passphrase being shared to a third-party server. Here, the third-party under the limelight is Google servers. The user said on Reddit:

“Please note that this security issue cannot be exploited by anyone except by the people who created it or have control over the backend. To everyone who is using or used Coinomi wallet, make sure to remove your funds from the wallet and change your passphrase by creating a new wallet using another application otherwise your funds might get stolen sooner or later.”

This was followed by the user stating that the wallet’s seeds, otherwise known as a passphrase, are spell checked by Google servers in “clear plain text”, thereby enabling remote access to Google. He went on to say:

“So essentially the textbox which you enter your passphrase in, is basically an HTML file ran by Chromium browser component and once you type or paste anything in that textbox it will immediately and discreetly send it remotely to googleapis.com for spelling check (how awesome is that!)”

When this news broke-out in the cryptocurrency space, several other users of the wallet-provider also came forth stating that they had also lost their funds on the platform recently. Nonetheless, the platform also spoke about this issue. In a blog post, the platform said:

“The report said that seed phrases were being sent over to Google in plain text due to a built-in spell-check functionality in Desktop wallets and that there was a wallet hacked due to this vulnerability. Our engineers confirmed that spell-check functionality was indeed enabled for the Desktop wallets only — the mobile apps were not affected by this.”

Coinomi official statement | Source: Coinomi Medium Blog

Coinomi official statement | Source: Coinomi Medium Blog

This was followed by the platform stating that the problem was not in its source code, but was, in fact, a “bad configuration option in a plug-in used in Desktop wallets only”, allowing the spell-check functionality to be a default. Nonetheless, this problem has now been fixed by the developer team and desktop users are required upgrade to the version and create a new wallet.

The post also read:

“Given the facts above, it’s extremely unlikely that this issue would ever result in loss of funds, however under no circumstances a seed phrase should go online even if this is in encrypted mode and for this we sincerely apologize. “

Luhe, another Redditor said:

“Which is more than likely true. I’ve never used this wallet, but their reasoning makes sense from a computer science perspective of view. Nobody else should have had even the theoretical possibility to see the content (I can see some possible attack scenarios, but they most likely wouldn’t be possible unless Coinomi really f***** up).”

Localether, a Reddit user said:

“Your coins are safu… as long as you trust that google employees are not grepping for pass phrases and then testing them against blockchain addresses.”

The post Bitcoin [BTC], Ethereum [ETH] & altcoin wallet, Coinomi addresses seed phrase vulnerability; says highly unlikely to result in loss of funds appeared first on AMBCrypto.


Source: AMBcrypto
Original Post: Bitcoin [BTC], Ethereum [ETH] & altcoin wallet, Coinomi addresses seed phrase vulnerability; says highly unlikely to result in loss of funds

Ledger Nano X - The secure hardware wallet

Recente berichten

  • Crypto funds post $3.7B inflows as Bitcoin soars to new highs
  • Czech central bank adds Coinbase to portfolio, boosts Palantir holdings
  • BlockFi bankruptcy administrator and DOJ agree to dismiss $35M lawsuit
  • Thou shalt not shill: Fake ‘Vatican Chamber’ token presale exposed
  • NFT sales hit $2.8B in first half of 2025 as trading volumes tank

Categorieën

  • Altcoin Buzz
  • Altcoin Buzz News
  • AMBcrypto
  • Bitcoin.com
  • Bitcoinist
  • BTC Manager
  • CCN
  • Coin Mastery
  • Coindesk
  • Coinpower News
  • Cointelegraph
  • CryproSlate
  • Crypto Daily
  • Crypto News (.net)
  • Cryptocoin News
  • Cryptocurrency News
  • CryptoDaily.co.uk
  • CryptoPotato
  • CryptosRUs
  • Daily HODL
  • DataDash
  • Ethereum Worldnews
  • Exchanges
  • ICO's
  • Invest in Blockchain
  • Market Analysis
  • News
  • News BTC
  • Newsbit
  • Portfolio
  • Pricecheck
  • Ready Set Crypto
  • The Modern Investor
  • ToshiTimes
  • Use The Bitcoin

Archieven

  • juli 2025
  • juni 2025
  • mei 2025
  • april 2025
  • maart 2025
  • februari 2025
  • januari 2025
  • december 2024
  • november 2024
  • oktober 2024
  • september 2024
  • augustus 2024
  • juli 2024
  • juni 2024
  • mei 2024
  • april 2024
  • maart 2024
  • februari 2024
  • januari 2024
  • december 2023
  • november 2023
  • oktober 2023
  • september 2023
  • augustus 2023
  • juli 2023
  • juni 2023
  • mei 2023
  • april 2023
  • maart 2023
  • februari 2023
  • januari 2023
  • december 2022
  • november 2022
  • oktober 2022
  • september 2022
  • augustus 2022
  • juli 2022
  • juni 2022
  • mei 2022
  • april 2022
  • maart 2022
  • februari 2022
  • januari 2022
  • december 2021
  • november 2021
  • oktober 2021
  • september 2021
  • augustus 2021
  • juli 2021
  • juni 2021
  • mei 2021
  • april 2021
  • maart 2021
  • februari 2021
  • januari 2021
  • december 2020
  • november 2020
  • oktober 2020
  • september 2020
  • augustus 2020
  • juli 2020
  • juni 2020
  • mei 2020
  • april 2020
  • maart 2020
  • februari 2020
  • januari 2020
  • december 2019
  • november 2019
  • oktober 2019
  • september 2019
  • augustus 2019
  • juli 2019
  • juni 2019
  • mei 2019
  • april 2019
  • maart 2019
  • februari 2019
  • januari 2019
  • december 2018
  • november 2018
  • oktober 2018
  • september 2018
  • augustus 2018
  • juli 2018
  • juni 2018
  • mei 2018
  • april 2018
  • maart 2018
  • februari 2018
  • januari 2018
  • december 2017
  • november 2017
  • oktober 2017
  • september 2017
  • maart 2017
  • juni 2016
  • juli 2014
  • september 2013
  • augustus 2013
©J Blockchain News Feed | Ontwerp: Krant WordPress thema