In November, when FTX went bankrupt, Binance CEO CZ’s hot wallet solution Trust Wallet (TWT) was revealed to contain serious security vulnerabilities!
Security vulnerabilities detected in Binance-backed Trust Wallet!
What happened: Binance announced in June of last year that it has partnered with Trust Wallet. The integration between Binance Connect and Trust Wallet was intended for users to seamlessly access their Web3 assets.
Binance CEO CZ touted the hot wallet solution backed by its exchange as a “trusted decentralized storage vehicle” back in November when FTX went bankrupt. cryptocoin.com As we reported, the TWT price gained triple digits, accompanied by CZ’s tweets. The newly discovered vulnerability, which the Trust Wallet team has officially confirmed, raises the issue of ‘trust’ again.
Trust Wallet team approves security disclosures
Trust Wallet team reported that security vulnerabilities were detected on Twitter and a new version was released in the past hours. According to official statements, only new addresses created using the Browser Extension between 14-23 November 2023 are in danger.
For your security, you can follow the instructions approved by the Trust Wallet team.
Who was affected?
If your wallet addresses are vulnerable, you will see a notification in the Browser Extension. Please open your TW Browser Extension and see if you get such a warning notification.
Who was not affected?
You are not vulnerable to this vulnerability if your wallet addresses are in the following scenarios:
- Only if you use the Trust Wallet mobile apps.
- If you have only imported wallet addresses into the Browser Extension.
- If you only used the Browser Extension to create a new wallet before 14 November 2023 or after 23 November 2022.
What should I do now?
- If you do not see the warning notification, it is safe to use your wallet addresses and this vulnerability does not affect you.
- If you see the notification, you should create a new wallet address and move your assets immediately and stop using vulnerable addresses. Please refrain from using wallet addresses that you did not create yourself to avoid being used by scammers.
- For users who saw abnormal funds movement in late December 2022 and late March 2023, you may be one of the few victims suffering from the two exploits. Please read the refund process carefully to understand the next steps. 25. We do our best to verify ownership of the affected addresses and will refund the funds to each victim. We have a complete list of all affected wallets.
$170,000 stolen from Trust Wallet vulnerability!
In November 2022, a security researcher reported a WebAssembly (WASM) vulnerability in the open source library Wallet Core through Trust Wallet’s bug bounty program. The Trust Wallet Browser Extension uses WASM in Wallet Core, and new addresses created by the Browser Extension between 14-23 November 2022 contain this vulnerability.
According to the announcement, the vulnerability was quickly fixed and all addresses created after these dates are reported to be safe. The attack resulted in a total loss of approximately $170,000. “Affected users are requested to move the remaining ~$88,000 balance to all vulnerable addresses as soon as possible.”
How has the TWT price reacted?
TWT, which is ranked 87th by market value, has not yet given a big reaction to the hack news. At the time of writing, it is trading at $1.21, down 1.5% on the day.
Contact us to be instantly informed about the last minute developments. twitter‘in, Facebookin and InstagramFollow and Telegram And YouTube join our channel!
Risk Disclosure: The articles and articles on Kriptokoin.com do not constitute investment advice. Bitcoin and cryptocurrencies are high-risk assets, and you should do your due diligence and do your own research before investing in these currencies. You can lose some or all of your money by investing in Bitcoin and cryptocurrencies. Remember that your transfers and transactions are at your own risk and any losses that may occur are your responsibility. Cryptokoin.com does not recommend buying or selling any cryptocurrencies or digital assets, nor is Kriptokoin.com an investment advisor. For this reason, Kriptokoin.com and the authors of the articles on the site cannot be held responsible for your investment decisions. Readers should do their own research before taking any action regarding the company, assets or services in this article.
Disclaimer: Advertisements on Kriptokoin.com are carried out through third-party advertising channels. In addition, Kriptokoin.com also includes sponsored articles and press releases on its site. For this reason, advertising links directed from Kriptokoin.com are on the site completely independent of Kriptokoin.com’s approval, and visits and pop-ups directed by advertising links are the responsibility of the user. The advertisements on Kriptokoin.com and the pages directed by the links in the sponsored articles do not bind Kriptokoin.com in any way.
Warning: Citing the news content of Kriptokoin.com and quoting by giving a link is subject to the permission of Kriptokoin.com. No content on the site can be copied, reproduced or published on any platform without permission. Legal action will be taken against those who use the code, design, text, graphics and all other content of Kriptokoin.com in violation of intellectual property law and relevant legislation.