Cryptoknowmics
2022-06-16 10:50:50

MetaMask and Phantom Fix Browser Extension Vulnerability

According to research released on Wednesday by cybersecurity firm Holborn, popular crypto wallets such as MetaMask and Phantom have been plagued by a severe vulnerability in their browser extension software for months. Hackers were able to obtain wallet recovery seed phrases saved on computer discs, putting users’ assets in danger. The vulnerability, which dates back to September 2021 and has already been addressed, puts users’ funds at risk. However, no exploits linked to the issue have been reported as of yet. Security researchers at @HalbornSecurity have disclosed a wallet vulnerability that affects a small segment of users across many browser-based wallets, including MetaMask.https://t.co/2tBl8BfISA 1/ 🧵 — MetaMask 🦊💙 (@MetaMask) June 15, 2022 The seed phrases supplied by wallet providers were retained in plain text on customers’ PCs as part of the “Restore Session” feature, according to Halborn’s researchers. This means that bad actors may use software or physical access to get access. According to Halborn, they worked with wallet providers to patch their wallets against the vulnerability. 5/ We are also ecstatic to welcome @amriunix, who originally discovered the threat last year as part of @HalbornSecurity, to our team as a security engineer. For more on how we handle security or to report a security finding, please reach out to security@phantom.app. — Phantom (@phantom) June 15, 2022 Security Flaw Affected Small Fra...

获取加密通讯
阅读免责声明 : 此处提供的所有内容我们的网站,超链接网站,相关应用程序,论坛,博客,社交媒体帐户和其他平台(“网站”)仅供您提供一般信息,从第三方采购。 我们不对与我们的内容有任何形式的保证,包括但不限于准确性和更新性。 我们提供的内容中没有任何内容构成财务建议,法律建议或任何其他形式的建议,以满足您对任何目的的特定依赖。 任何使用或依赖我们的内容完全由您自行承担风险和自由裁量权。 在依赖它们之前,您应该进行自己的研究,审查,分析和验证我们的内容。 交易是一项高风险的活动,可能导致重大损失,因此请在做出任何决定之前咨询您的财务顾问。 我们网站上的任何内容均不构成招揽或要约