Popular crypto wallet shut down due to fatal defect

[{"selector":"#anim-b1a2f13a-dbc7-4271-b0a5-89d61c0f7611","keyframes":[{"offset":0,"transform":"translate3d(0, -170.5267%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -47.952108040000006%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -16.302352520000003%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -6.121908530000001%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -2.66021652%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":0,"duration":1600,"fill":"both"}]

A popular cryptocurrency wallet has been discontinued due to a security flaw that allowed hackers to drain token from accounts.

[{"selector":"#anim-9aee099d-36c2-4a45-884c-f8848fc5b193","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-873accf3-e071-45fd-87c5-99d1f66ef216","keyframes":{"transform":["translate3d(-105.96206%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Check Point researchers uncovered a relatively simple issue in Everscale's blockchain wallet (aka Ever Surf) that allows criminals to steal private keys and seed phrases stored in local browser storage.

[{"selector":"#anim-d2a8f3fa-9990-4297-beaa-8a2b62205249","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6c766dab-c5ce-49ab-9f00-9f253faa97c2","keyframes":{"transform":["translate3d(-105.69106%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Implementing this requires first obtaining a set of encryption keys, which can be obtained via malicious browser extensions, data theft malware or plain old phishing.

[{"selector":"#anim-99ea0a47-f950-44c4-817f-c8f805e0a574","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a5da8368-80ad-4ad4-82c4-3b9c02be66b3","keyframes":{"transform":["translate3d(-105.69106%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

The attackers may have used a simple script to decode the keys after gaining them.

[{"selector":"#anim-33b050e8-6176-4232-b28d-53bd083224c1","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-76bf123f-779c-423b-adc0-0e9733f3a4c3","keyframes":{"transform":["translate3d(-105.69106%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Contact us for

[{"selector":"#anim-38b1561a-8789-45b5-bd1d-93bbb29dbcac","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-593fff26-15ea-47a9-ae95-98204fdc8b25","keyframes":{"transform":["translate3d(-106.54762%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c8769433-12a2-44bb-9227-f2143a93b28c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8486b5a2-92ac-4477-9872-a738d601f520","keyframes":{"transform":["translate3d(-118.86793%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-38e41b1f-58c2-4a36-b443-051730a9e2b3","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-d468e865-c9b1-4acf-9acd-d465b000fa29","keyframes":{"transform":["translate3d(-118.86793%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e7c19f38-3f3f-438f-a5b0-960b6ad93953","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-1a3cbb8f-3f8f-44f0-af74-cef785300213","keyframes":{"transform":["translate3d(-118.86793%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-44a04df6-2f1d-4b64-9d86-a4de65972621","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c0b02a34-da4f-48da-beae-0b17e9a9e9d9","keyframes":{"transform":["translate3d(-118.86793%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e1172ec6-249d-47fc-82e3-6a95eb20602d","keyframes":[{"transform":"scale(1)","offset":0},{"transform":"scale(1.5)","offset":0.33},{"transform":"scale(0.95)","offset":0.66},{"transform":"scale(1)","offset":1}],"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":10}]

Popular crypto wallet shut down due to fatal defect

Popular crypto wallet shut down due to fatal defect

A popular cryptocurrency wallet has been discontinued due to a security flaw that allowed hackers to drain token from accounts.

A popular cryptocurrency wallet has been discontinued due to a security flaw that allowed hackers to drain token from accounts.

Check Point researchers uncovered a relatively simple issue in Everscale's blockchain wallet (aka Ever Surf) that allows criminals to steal private keys and seed phrases stored in local browser storage.

Check Point researchers uncovered a relatively simple issue in Everscale's blockchain wallet (aka Ever Surf) that allows criminals to steal private keys and seed phrases stored in local browser storage.

Implementing this requires first obtaining a set of encryption keys, which can be obtained via malicious browser extensions, data theft malware or plain old phishing.

Implementing this requires first obtaining a set of encryption keys, which can be obtained via malicious browser extensions, data theft malware or plain old phishing.

The attackers may have used a simple script to decode the keys after gaining them.

The attackers may have used a simple script to decode the keys after gaining them.

Contact us for

Contact us for

Mobile application development Services

Mobile application development Services

Web development related services.

Web development related services.