1. Home
  2. cryptocurrency wallet

cryptocurrency wallet

Worldcoin Launches World App to Bolster Decentralized Identity and Finance for Mass Adoption

Worldcoin Launches World App to Bolster Decentralized Identity and Finance for Mass AdoptionWorldcoin, the project supported by Openai CEO Sam Altman, has launched the World App to complement the release of World ID. The application aims to democratize decentralized identities and finance by utilizing World ID to enable users to sign into different websites, crypto applications, and share personal data in a privacy-focused manner. Worldcoin Unveils World […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

BitGo patches critical vulnerability first discovered by Fireblocks

BitGo has patched a vulnerability that threatened to expose the private keys of retail and institutional users.

Cryptocurrency wallet BitGo has patched a critical vulnerability that could have exposed the private keys of retail and institutional users.

Cryptography research team Fireblocks identified the flaw and notified the BitGo team in December 2022. The vulnerability was related to BitGo Threshold Signature Scheme (TSS) wallets and had the potential to expose the private keys of exchanges, banks, businesses and users of the platform.

The Fireblocks team named the vulnerability the BitGo Zero Proof Vulnerability, which would allow potential attackers to extract a private key in under a minute using a small amount of JavaScript code. BitGo suspended the vulnerable service on Dec. 10 and released a patch in February 2023 that required client-side updates to the latest version by March 17.

The Fireblocks team outlined how it identified the exploit using a free BitGo account on mainnet. A missing part of mandatory zero-knowledge proofs in BitGo’s ECDSA TSS wallet protocol allowed the team to expose the private key through a simple attack.

Related: Euler Finance hacked for over $195M in a flash loan attack

Industry standard enterprise-grade cryptocurrency asset platforms make use of either multi-party-computation (MPC/TSS) or multi-signature technology to remove the possibility of a single point of attack. This is done by distributing a private key between multiple parties, to ensure security controls if one party is compromised.

Fireblocks was able to prove that internal or external attackers could gain access to a full private key through two possible means.

A compromised client-side user could initiate a transaction to acquire a portion of the private key held in BitGo’s system. BitGo would then perform the signing computation before sharing information that leaks the BitGo key shard.

“The attacker can now reconstruct the full private key, load it in an external wallet and withdraw the funds immediately or at a later stage.”

The second scenario considered an attack if BitGo was compromised. An attacker would wait for a customer to initiate a transaction, before replying with a malicious value. This is then used to sign the transaction with the customer’s key shard. The attacker can use the response to reveal the user’s key shard, before combining that with BitGo’s key shard to take control of the wallet.

Fireblocks notes that no attacks have been carried out by the identified vector, but warned users to consider creating new wallets and moving funds from ECDSA TSS BitGo wallets prior to the patch

Hacks of wallets have been commonplace across the cryptocurrency industry in recent years. In August 2022, over $8 million was drained from over 7000 Solana-based Slope wallets. Algorand network wallet service MyAlgo was also targeted by a wallet hack that saw over $9 million drained from various high-profile wallets.

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

FBI Warns About Cryptocurrency Theft Scams Using Play-to-Earn Games

FBI Warns About Cryptocurrency Theft Scams Using Play-to-Earn GamesThe FBI has issued a public service announcement (PSA) warning on the utilization of play-to-earn games as part of a scheme to defraud users of funds stored in the form of cryptocurrency. Criminals are introducing victims to this kind of game and then use malware to extract the funds from cryptocurrency wallets linked to the […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Unstoppable Domains and Crypto Browser Opera Widen Scope to Offer Accessible Web3 Identity System

Unstoppable Domains and Crypto Browser Opera Widen Scope to Offer Accessible Web3 Identity SystemOpera, the Web3 browser, and Unstoppable Domains, the non-fungible token (NFT) domain provider, have announced that users can now access all domain endings, including .x, .crypto, and .nft, across Opera’s browsers. Additionally, Opera and Unstoppable are offering a free .nft domain that matches an Opera user’s Twitter handle after account verification. Opera Expands Web3 Capabilities […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Bank of America, JPMorgan, Wells Fargo Collaborate to Launch Digital Wallet: Report

Bank of America, JPMorgan, Wells Fargo Collaborate to Launch Digital Wallet: ReportSeven major banks, including Bank of America, JPMorgan Chase, and Wells Fargo, have reportedly teamed up to launch a digital wallet that will compete with other third-party wallet providers such as Paypal and Apple Pay. Big Banks to Launch a Digital Wallet Bank of America, JPMorgan Chase, Wells Fargo, and four other financial institutions behind […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Ethereum Wallet Metamask Adds Bank-to-Crypto Transfers via Sardine

Ethereum Wallet Metamask Adds Bank-to-Crypto Transfers via SardineAccording to a Consensys blog post published on October 11, the Ethereum-based wallet Metamask has added instant bank-to-crypto transfers via the automated clearing house (ACH) settlement merchant Sardine. Metamask Users Can Swap Fiat for Over 30 Crypto Tokens On Tuesday, the crypto firm Consensys published an announcement that explains the ETH wallet Metamask has added […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Ukraine Blocks Crypto Wallet Used to Raise Funds for Russian Forces

Ukraine Blocks Crypto Wallet Used to Raise Funds for Russian ForcesThe law enforcement and counter-intelligence agency of Ukraine has managed to seize the funds in a cryptocurrency wallet used to finance the Russian military campaign in the country. Officials in Kyiv claim that money collected through the wallet has been spent on military equipment for the pro-Russian separatist forces in the east. Ukraine Seizes Crypto […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Report: Israel Defense Ministry Seized Crypto Wallets Holding Hamas-Destined Funds

Report: Israel Defense Ministry Seized Crypto Wallets Holding Hamas-Destined FundsIsrael’s Defense Ministry seized cryptocurrency wallets holding funds that were destined for Hamas, a report has said. The wallets belonged to businesses that are associated with Al’matchadun currency exchange, which itself is accused of helping to funnel funds to Hamas. Seizure Order Israel’s Defense Ministry recently seized cryptocurrency wallets belonging to businesses that are associated […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?

Metamask Surpasses 10 Million Monthly Active Users, Climbing 1,800% in 12 Months

Metamask Surpasses 10 Million Monthly Active Users, Climbing 1,800% in 12 MonthsOn Tuesday, the noncustodial digital currency wallet Metamask announced that the platform has surpassed 10 million monthly active users (MAUs). Year-to-date, Metamask has seen 19x growth since July 2020 as MAUs climbed 1,800% in 12 months. Metamask Hits Over 10 Million Monthly Active Users There’s no doubt that Metamask has been a popular Ethereum blockchain […]

Bitget Pumps Another 15.6%, $10 Incoming as Best Wallet Presale Raises $5.5M?